@phnx-labs/agents-cli 1.22.6 → 1.22.8

package/dist/lib/activity.js

@@ -300,7 +300,7 @@ export function readActivityAsEventRecords(opts = {}) {
     return readRecentActivity(opts).map(activityEventToRecord);
 }
 // ---------------------------------------------------------------------------
-// Rendering (shared by `agents activity` and `agents feed`)
+// Rendering (shared by the feed activity lane and `agents feed --filter updates`)
 // ---------------------------------------------------------------------------
 /** Glyph + color + human label per event, so the lane reads at a glance. */
 export const EVENT_STYLE = {
@@ -669,7 +669,7 @@ export function formatActivityGroupMeta(group, opts = {}) {
  * a logging hiccup never blocks a tool call.
  */
 export const ACTIVITY_LOG_HOOK_SCRIPT = String.raw `#!/usr/bin/env python3
-"""Append agent-activity events for 'agents feed' / 'agents activity'.
+"""Append agent-activity events for 'agents feed'.
 
 Bound to PreToolUse (ExitPlanMode, Task) and PostToolUse (Bash, Write, Edit,
 MultiEdit, TodoWrite, update_plan, TaskUpdate, todo_write, TaskCreate). One

package/dist/lib/agents.js

@@ -215,7 +215,7 @@ export const AGENTS = {
         // Claude Code has no headless Anthropic-hosted dispatch CLI (only
         // --remote-control, which bridges a *local* session). Its cloud is Rush.
         cloudProvider: 'rush',
-        capabilities: { hooks: true, mcp: true, mcpHttp: true, mcpHeaders: true, allowlist: true, skills: true, commands: true, plugins: true, subagents: true, rules: { file: 'CLAUDE.md' }, workflows: true, memory: true, modes: ['plan', 'edit', 'auto', 'skip'], rulesImports: true },
+        capabilities: { hooks: true, mcp: true, mcpHttp: true, mcpHeaders: true, allowlist: true, skills: true, commands: true, plugins: true, subagents: true, rules: { file: 'CLAUDE.md' }, workflows: true, memory: true, modes: ['plan', 'edit', 'auto', 'skip'], rulesImports: true, interactiveRepl: true },
     },
     // codex hooks: gated to >= 0.116.0 (introduced [features] codex_hooks flag).
     codex: {
@@ -237,7 +237,7 @@ export const AGENTS = {
         cloudProvider: 'codex',
         // Subagents: multi-agent plumbing since 0.117.0; custom agents as
         // ~/.codex/agents/*.toml (name, description, developer_instructions).
-        capabilities: { hooks: { since: '0.116.0' }, mcp: true, mcpHttp: true, mcpHeaders: false, allowlist: { since: '0.138.0' }, skills: true, commands: { until: '0.117.0' }, plugins: { since: '0.128.0' }, subagents: { since: '0.117.0' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: true, modes: ['plan', 'edit', 'skip'] },
+        capabilities: { hooks: { since: '0.116.0' }, mcp: true, mcpHttp: true, mcpHeaders: false, allowlist: { since: '0.138.0' }, skills: true, commands: { until: '0.117.0' }, plugins: { since: '0.128.0' }, subagents: { since: '0.117.0' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: true, modes: ['plan', 'edit', 'skip'], interactiveRepl: true },
     },
     gemini: {
         id: 'gemini',
@@ -269,7 +269,7 @@ export const AGENTS = {
         },
         // gemini hooks: shipped in v0.26.0 (Jan 2026); older binaries silently ignore the `hooks` key.
         // extensions: gemini-extension.json bundles shipped in v0.8.0; custom subagents in v0.36.0.
-        capabilities: { hooks: { since: '0.26.0' }, mcp: true, mcpHttp: true, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: { since: '0.8.0' }, subagents: { since: '0.36.0' }, rules: { file: 'GEMINI.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'skip'], rulesImports: true },
+        capabilities: { hooks: { since: '0.26.0' }, mcp: true, mcpHttp: true, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: { since: '0.8.0' }, subagents: { since: '0.36.0' }, rules: { file: 'GEMINI.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'skip'], rulesImports: true, interactiveRepl: false },
     },
     cursor: {
         id: 'cursor',
@@ -302,7 +302,9 @@ export const AGENTS = {
         // + warns for pre-2.4 installs); the direct `subagents add --agents cursor` path
         // writes unconditionally, same as the other since-gated agents.
         // See transformSubagentForCursor / https://cursor.com/docs/subagents.
-        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '2026.1.22' }, rules: { file: '.cursorrules' }, workflows: false, memory: false, modes: ['edit', 'skip'] }, // allowlist: ~/.cursor/cli-config.json
+        // interactiveRepl: false — cursor-agent exits immediately with no argv. It requires a
+        // prompt to do anything useful; a bare invocation is not a REPL (RUSH-2185, EXEC-23a).
+        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '2026.1.22' }, rules: { file: '.cursorrules' }, workflows: false, memory: false, modes: ['edit', 'skip'], interactiveRepl: false }, // allowlist: ~/.cursor/cli-config.json
     },
     opencode: {
         id: 'opencode',
@@ -324,7 +326,45 @@ export const AGENTS = {
         format: 'markdown',
         variableSyntax: '$ARGUMENTS',
         supportsHooks: true,
-        capabilities: { hooks: { since: '0.3.130' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: { since: '1.1.1' }, skills: true, commands: true, plugins: true, subagents: true, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit'] },
+        capabilities: { hooks: { since: '0.3.130' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: { since: '1.1.1' }, skills: true, commands: true, plugins: true, subagents: true, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit'], interactiveRepl: true },
+    },
+    // Oh My Pi (`omp`, omp.sh) — a Bun-based, terminal-first coding agent that runs
+    // against many model providers (OpenRouter, OpenAI, Anthropic, xAI, DeepSeek,
+    // Ollama, LM Studio, …). It is Claude-compatible: it natively discovers
+    // `.claude/commands`, `.mcp.json`, and Claude-shaped subagents, and keeps its
+    // own native resources under `~/.omp/agent/` (config dir reported by
+    // `omp config path`). configDir points AT the agent dir (not `~/.omp`) so the
+    // rules file lands at `~/.omp/agent/AGENTS.md`, the user context file omp reads.
+    pi: {
+        id: 'pi',
+        name: 'Pi',
+        color: 'magenta',
+        cliCommand: 'omp',
+        npmPackage: '@oh-my-pi/pi-coding-agent',
+        configDir: path.join(HOME, '.omp', 'agent'),
+        commandsDir: path.join(HOME, '.omp', 'agent', 'commands'),
+        commandsSubdir: 'commands',
+        skillsDir: path.join(HOME, '.omp', 'agent', 'skills'),
+        hooksDir: 'hooks',
+        instructionsFile: 'AGENTS.md',
+        format: 'markdown',
+        variableSyntax: '$ARGUMENTS',
+        // omp hooks are per-tool JS/TS extension modules discovered from
+        // `~/.omp/agent/hooks/{pre,post}/<tool>.<ext>` (loaded as HookFactory code),
+        // NOT the event->shell-command registrations agents-cli's hook sync writes.
+        // The two models don't map, so hooks stay off (capabilities.hooks:false).
+        supportsHooks: false,
+        // MCP: omp reads `.mcp.json` with the Claude `{ "mcpServers": {...} }` schema
+        // at user scope (`~/.omp/agent/.mcp.json`) and project scope (`<root>/.mcp.json`),
+        // stdio + http + sse with headers. skills (`~/.omp/agent/skills/<name>/SKILL.md`),
+        // commands (`~/.omp/agent/commands/*.md`), and subagents (`~/.omp/agent/agents/*.md`,
+        // Claude-shaped) are all native. allowlist is OFF: omp gates approval per-TOOL
+        // only (`tools.approval` record: allow|prompt|deny) with no command/path/domain
+        // patterns, so agents-cli's granular permission format has nothing to map to.
+        // plugins are npm packages / TS modules, not the Claude marketplace manifest.
+        // interactiveRepl: true — bare `omp` runs the TUI; `omp -p` is the one-shot
+        // form that answers a prompt and exits (upstream README, "Four entry points").
+        capabilities: { hooks: false, mcp: true, mcpHttp: true, mcpHeaders: true, allowlist: false, skills: true, commands: true, plugins: false, subagents: true, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'skip'], interactiveRepl: true },
     },
     openclaw: {
         id: 'openclaw',
@@ -348,7 +388,7 @@ export const AGENTS = {
         // OpenClaw is self-updating (no pinned since), so `true` is correct.
         // Workflows sync as Lobster `.lobster` files under `.openclaw/workflows/`;
         // the Lobster tool runs them by receiving the file path as `pipeline`.
-        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: false, plugins: true, subagents: true, rules: { file: 'workspace/AGENTS.md' }, workflows: true, memory: true, modes: ['plan', 'edit', 'skip'] },
+        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: false, plugins: true, subagents: true, rules: { file: 'workspace/AGENTS.md' }, workflows: true, memory: true, modes: ['plan', 'edit', 'skip'], interactiveRepl: true },
     },
     copilot: {
         id: 'copilot',
@@ -373,7 +413,9 @@ export const AGENTS = {
         format: 'markdown',
         variableSyntax: '$ARGUMENTS',
         supportsHooks: true,
-        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '0.0.353' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'auto', 'skip'] },
+        // interactiveRepl: false — copilot requires a prompt for meaningful work; bare invocation
+        // opens a welcome screen but not a persistent coding REPL suitable for agents focus.
+        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '0.0.353' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit', 'auto', 'skip'], interactiveRepl: false },
     },
     amp: {
         id: 'amp',
@@ -390,7 +432,8 @@ export const AGENTS = {
         format: 'markdown',
         variableSyntax: '$ARGUMENTS',
         supportsHooks: false,
-        capabilities: { hooks: false, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: false, skills: true, commands: true, plugins: false, subagents: false, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit'] },
+        // interactiveRepl: false — amp requires a prompt; bare invocation exits immediately.
+        capabilities: { hooks: false, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: false, skills: true, commands: true, plugins: false, subagents: false, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['plan', 'edit'], interactiveRepl: false },
     },
     kiro: {
         id: 'kiro',
@@ -413,7 +456,9 @@ export const AGENTS = {
         format: 'markdown',
         variableSyntax: '$ARGUMENTS',
         supportsHooks: true,
-        capabilities: { hooks: { since: '0.10.0' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: { since: '2.8.0' }, skills: true, commands: true, plugins: false, subagents: { since: '1.23.0' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['edit'] },
+        // interactiveRepl: false — kiro-cli requires a prompt for coding sessions; bare
+        // invocation does not open a persistent REPL.
+        capabilities: { hooks: { since: '0.10.0' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: { since: '2.8.0' }, skills: true, commands: true, plugins: false, subagents: { since: '1.23.0' }, rules: { file: 'AGENTS.md' }, workflows: false, memory: false, modes: ['edit'], interactiveRepl: false },
     },
     goose: {
         id: 'goose',
@@ -445,7 +490,7 @@ export const AGENTS = {
         // under `slash_commands: [{ command, recipe_path }]` (see goose-commands.ts).
         // Subagents: recipe YAML named agents under ~/.config/goose/agents/<name>.yaml
         // (goose auto-discovers and delegates to them by name in autonomous mode).
-        capabilities: { hooks: { since: '1.34.0' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: { since: '1.25.0' }, commands: true, plugins: true, subagents: true, rules: { file: 'AGENTS.md' }, workflows: true, memory: false, modes: ['edit'] },
+        capabilities: { hooks: { since: '1.34.0' }, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: { since: '1.25.0' }, commands: true, plugins: true, subagents: true, rules: { file: 'AGENTS.md' }, workflows: true, memory: false, modes: ['edit'], interactiveRepl: true },
     },
     // Google Antigravity CLI (`agy`) — official replacement for Gemini CLI as of IO 2026.
     // configDir nests inside `~/.gemini/` since agy shares the parent dir with the Gemini
@@ -474,7 +519,7 @@ export const AGENTS = {
         variableSyntax: '{{args}}',
         supportsHooks: true,
         cloudProvider: 'antigravity',
-        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '1.0.16' }, rules: { file: 'AGENTS.md' }, workflows: { since: '1.0.6' }, memory: false, modes: ['edit', 'skip'], rulesImports: false }, // workflows: markdown files in the shared, HOME-global ~/.gemini/config/global_workflows/ (agy scans it at startup; not version-isolated — see workflows.ts), invoked as /<name> slash commands
+        capabilities: { hooks: true, mcp: true, mcpHttp: false, mcpHeaders: false, allowlist: true, skills: true, commands: true, plugins: true, subagents: { since: '1.0.16' }, rules: { file: 'AGENTS.md' }, workflows: { since: '1.0.6' }, memory: false, modes: ['edit', 'skip'], rulesImports: false, interactiveRepl: true }, // workflows: markdown files in the shared, HOME-global ~/.gemini/config/global_workflows/ (agy scans it at startup; not version-isolated — see workflows.ts), invoked as /<name> slash commands
     },
     // xAI Grok Build CLI (`grok`) — early beta, SuperGrok Heavy. Auth via OAuth on
     // first launch, or XAI_API_KEY env var for headless. MCP servers configured inline
@@ -525,6 +570,7 @@ export const AGENTS = {
             // to auto (→ edit via resolveMode). Interactive plan is unaffected.
             headlessPlan: false,
             rulesImports: true,
+            interactiveRepl: true,
         },
     },
     // Kimi Code CLI (`kimi`) — Moonshot AI coding agent.
@@ -568,6 +614,7 @@ export const AGENTS = {
             // auto-runs). Interactive plan is unaffected.
             headlessPlan: false,
             rulesImports: false,
+            interactiveRepl: true,
         },
     },
     // Factory AI Droid CLI (`droid`) — agentic coding CLI from factory.ai.
@@ -649,6 +696,7 @@ export const AGENTS = {
             memory: false,
             modes: ['plan', 'edit', 'auto', 'skip'],
             rulesImports: false,
+            interactiveRepl: true,
         },
     },
     // Nous Hermes Agent. Config lives under ~/.hermes/config.yaml; MCP servers
@@ -698,6 +746,7 @@ export const AGENTS = {
             memory: true,
             modes: ['edit'],
             rulesImports: false,
+            interactiveRepl: true,
         },
     },
 };
@@ -2350,6 +2399,9 @@ export function getUserMcpConfigPath(agentId) {
             return path.join(agent.configDir, 'mcp.json');
         case 'hermes':
             return path.join(agent.configDir, 'config.yaml');
+        case 'pi':
+            // omp reads user-scope MCP from ~/.omp/agent/.mcp.json (Claude schema).
+            return path.join(agent.configDir, '.mcp.json');
         default:
             // Gemini and others use settings.json
             return path.join(agent.configDir, 'settings.json');
@@ -2386,6 +2438,8 @@ export function getMcpConfigPathForHome(agentId, home) {
             return path.join(home, '.factory', 'mcp.json');
         case 'hermes':
             return path.join(home, '.hermes', 'config.yaml');
+        case 'pi':
+            return path.join(home, '.omp', 'agent', '.mcp.json');
         default:
             return path.join(home, agentConfigDirName(agentId), 'settings.json');
     }
@@ -2425,6 +2479,9 @@ export function getProjectMcpConfigPath(agentId, cwd = process.cwd()) {
             return path.join(cwd, '.factory', 'mcp.json');
         case 'hermes':
             return path.join(cwd, '.hermes', 'config.yaml');
+        case 'pi':
+            // omp reads project MCP from <root>/.mcp.json (Claude-compatible).
+            return path.join(cwd, '.mcp.json');
         default:
             return path.join(cwd, `.${agentId}`, 'settings.json');
     }

package/dist/lib/analytics/recipes.js

@@ -92,13 +92,19 @@ export function recipeToolsPerSession(win) {
     if (!db)
         return { id, title, store: 'sessions', rows: [], empty: true };
     try {
-        const cols = db.prepare(`PRAGMA table_info(sessions)`).all();
-        if (!cols.some((c) => c.name === 'tool_call_count')) {
+        // Counts come from tool_scan_ledger — one row per session the tool indexer
+        // has scanned, carrying that session's true call_count (0 included). The
+        // sessions.tool_call_count column is NOT the source: only the teams
+        // summarizer ever writes it (lib/teams/summarizer.ts), so reading it scored
+        // every non-teams session as 0 and pinned p50 at 0 fleet-wide.
+        const tables = db.prepare(`SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'tool_scan_ledger'`).all();
+        if (tables.length === 0) {
             return { id, title, store: 'sessions', rows: [], empty: true };
         }
-        const byAgent = db.prepare(`SELECT agent, tool_call_count AS n
-         FROM sessions
-        WHERE timestamp >= ? AND tool_call_count IS NOT NULL`).all(win.sinceIso);
+        const byAgent = db.prepare(`SELECT s.agent AS agent, l.call_count AS n
+         FROM tool_scan_ledger l
+         JOIN sessions s ON s.id = l.session_id
+        WHERE s.timestamp >= ?`).all(win.sinceIso);
         if (byAgent.length === 0)
             return { id, title, store: 'sessions', rows: [], empty: true };
         const groups = new Map();

package/dist/lib/browser/ipc.js

@@ -178,6 +178,8 @@ export class BrowserIPCServer {
                     url: request.url,
                     endpointName: request.endpoint,
                     skipDomainSkill: request.skipDomainSkill,
+                    actor: request.actor,
+                    launchId: request.launchId,
                 });
                 return {
                     ok: true,

package/dist/lib/browser/profiles.d.ts

@@ -30,13 +30,21 @@ export declare function getProfile(name: string): Promise<BrowserProfile | null>
  * Resolve the profile `agents browser start` uses when no `--profile` is given.
  *
  * Order: (1) the device-local configured default (`agents browser profiles
- * set-default <name>`) when it names an existing profile; (2) an existing
- * `default` profile as-is; (3) auto-pick the first installed Chromium-family
- * browser per the platform priority list in chrome.ts (macOS: chrome > brave >
- * edge > chromium > comet; Linux: chrome > chromium > brave > edge; Windows:
- * edge > chrome > brave > comet) and pin a new `default` profile to it. Throws an
- * actionable error if none of those binaries are installed. A configured default
- * that no longer exists warns and falls through to (2)/(3) — never a hard fail.
+ * set-default <name>`) when it names an existing profile that can launch here;
+ * (2) an existing `default` profile that can launch here; (3) auto-pick the
+ * first installed Chromium-family browser per the platform priority list in
+ * chrome.ts (macOS: chrome > brave > edge > chromium > comet; Linux: chrome >
+ * chromium > brave > edge; Windows: edge > chrome > brave > comet) and pin a
+ * `default` profile to it. Throws an actionable error if none of those binaries
+ * are installed.
+ *
+ * "Can launch here" matters because `agents.yaml` syncs across the fleet: a
+ * `default` auto-created on macOS carries a `/Applications/...` binary path that
+ * doesn't exist on a Linux box. Rather than hand that broken profile back (the
+ * top browser roadblock — "Custom binary not found"), we re-detect and
+ * regenerate the `default` for this machine. A configured or existing default
+ * that no longer exists, or can't launch here, warns and falls through — never a
+ * hard fail.
  */
 export declare function ensureDefaultBrowserProfile(): Promise<BrowserProfile>;
 /**

package/dist/lib/browser/profiles.js

@@ -95,29 +95,63 @@ export async function getProfile(name) {
         return null;
     return configToProfile(name, config);
 }
+/**
+ * True when `profile` can actually launch or attach on THIS machine.
+ *
+ * A remote (`ssh://`) profile runs its browser on the far host, so a local
+ * binary check doesn't apply — assume launchable. A local profile must have its
+ * configured browser/binary present on disk here; a `default` profile
+ * auto-created on a different OS (e.g. a macOS Chrome path reused on Linux — the
+ * "Custom binary not found" failure) fails this check so the caller re-detects
+ * for the current machine.
+ */
+function isProfileLaunchableHere(profile) {
+    const remote = Object.values(getEndpointPresets(profile)).some((preset) => preset.target.startsWith('ssh://'));
+    if (remote)
+        return true;
+    try {
+        findBrowserPath(profile.browser, profile.binary);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Resolve the profile `agents browser start` uses when no `--profile` is given.
  *
  * Order: (1) the device-local configured default (`agents browser profiles
- * set-default <name>`) when it names an existing profile; (2) an existing
- * `default` profile as-is; (3) auto-pick the first installed Chromium-family
- * browser per the platform priority list in chrome.ts (macOS: chrome > brave >
- * edge > chromium > comet; Linux: chrome > chromium > brave > edge; Windows:
- * edge > chrome > brave > comet) and pin a new `default` profile to it. Throws an
- * actionable error if none of those binaries are installed. A configured default
- * that no longer exists warns and falls through to (2)/(3) — never a hard fail.
+ * set-default <name>`) when it names an existing profile that can launch here;
+ * (2) an existing `default` profile that can launch here; (3) auto-pick the
+ * first installed Chromium-family browser per the platform priority list in
+ * chrome.ts (macOS: chrome > brave > edge > chromium > comet; Linux: chrome >
+ * chromium > brave > edge; Windows: edge > chrome > brave > comet) and pin a
+ * `default` profile to it. Throws an actionable error if none of those binaries
+ * are installed.
+ *
+ * "Can launch here" matters because `agents.yaml` syncs across the fleet: a
+ * `default` auto-created on macOS carries a `/Applications/...` binary path that
+ * doesn't exist on a Linux box. Rather than hand that broken profile back (the
+ * top browser roadblock — "Custom binary not found"), we re-detect and
+ * regenerate the `default` for this machine. A configured or existing default
+ * that no longer exists, or can't launch here, warns and falls through — never a
+ * hard fail.
  */
 export async function ensureDefaultBrowserProfile() {
     const configured = getConfiguredDefaultProfileName();
     if (configured) {
         const chosen = await getProfile(configured);
-        if (chosen)
+        if (chosen && isProfileLaunchableHere(chosen))
             return chosen;
-        console.warn(`warning: configured default browser profile "${configured}" no longer exists; ` +
-            `falling back to auto-detect. Fix with: agents browser profiles set-default <name>  (or --unset)`);
+        console.warn(chosen
+            ? `warning: configured default browser profile "${configured}" can't launch on this ` +
+                `machine (its browser/binary isn't installed here); falling back to auto-detect. ` +
+                `Fix with: agents browser profiles set-default <name>  (or --unset)`
+            : `warning: configured default browser profile "${configured}" no longer exists; ` +
+                `falling back to auto-detect. Fix with: agents browser profiles set-default <name>  (or --unset)`);
     }
     const existing = await getProfile(DEFAULT_BROWSER_PROFILE_NAME);
-    if (existing)
+    if (existing && isProfileLaunchableHere(existing))
         return existing;
     const detected = findFirstInstalledBrowser();
     if (!detected) {
@@ -139,7 +173,14 @@ export async function ensureDefaultBrowserProfile() {
             height: DEFAULT_VIEWPORT.height,
         },
     };
-    await createProfile(profile);
+    // A stale `default` (auto-created on another OS, unlaunchable here) is
+    // regenerated in place; otherwise this is the first-run create.
+    if (existing) {
+        await updateProfile(profile);
+    }
+    else {
+        await createProfile(profile);
+    }
     return profile;
 }
 /**

package/dist/lib/browser/remote-control.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Consent gate for driving THIS machine's browser from another fleet machine.
+ *
+ * `browser --host <device>` routes a browser command to `<device>` over SSH (the
+ * fleet passthrough) and runs `agents browser ...` there. Every such remote
+ * invocation carries the {@link FLEET_REMOTE_ENV} marker, set once at the fleet
+ * dispatch site (`maybeRunOnHost`). A machine only accepts being driven when its
+ * owner has opted in via `agents browser remote-control on` (the device-scope
+ * `browser.remote-control` config key, never synced).
+ *
+ * Local invocations (no marker) are never gated — this only governs cross-machine
+ * drives. Read-only queries are not gated here; the gate sits at the drive entry
+ * point (`browser start`), the one command that opens/attaches a browser.
+ */
+/** Env marker set on every remote `agents` invocation by `buildRemoteAgentsInvocation`. */
+export declare const FLEET_REMOTE_ENV = "AGENTS_FLEET_REMOTE";
+/** True when this process was dispatched to this machine by a fleet `--host` run. */
+export declare function isFleetRemoteInvocation(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Whether this machine allows other fleet machines to drive its browser. Reads
+ * the device-scope `browser.remote-control` config key. Unset = off (deny).
+ */
+export declare function remoteControlEnabled(): boolean;
+/**
+ * Guard the browser-drive entry point. A fleet-remote invocation may only drive
+ * this machine's browser when the owner opted in; otherwise throw a clear,
+ * actionable error. A local invocation is never gated.
+ *
+ * `env` and `enabled` are injectable so the decision is unit-testable without a
+ * real remote hop or a real config store.
+ */
+export declare function assertRemoteControlAllowed(opts?: {
+    env?: NodeJS.ProcessEnv;
+    enabled?: boolean;
+}): void;

package/dist/lib/browser/remote-control.js

@@ -0,0 +1,48 @@
+/**
+ * Consent gate for driving THIS machine's browser from another fleet machine.
+ *
+ * `browser --host <device>` routes a browser command to `<device>` over SSH (the
+ * fleet passthrough) and runs `agents browser ...` there. Every such remote
+ * invocation carries the {@link FLEET_REMOTE_ENV} marker, set once at the fleet
+ * dispatch site (`maybeRunOnHost`). A machine only accepts being driven when its
+ * owner has opted in via `agents browser remote-control on` (the device-scope
+ * `browser.remote-control` config key, never synced).
+ *
+ * Local invocations (no marker) are never gated — this only governs cross-machine
+ * drives. Read-only queries are not gated here; the gate sits at the drive entry
+ * point (`browser start`), the one command that opens/attaches a browser.
+ */
+import { getConfigValue } from '../device-config.js';
+/** Env marker set on every remote `agents` invocation by `buildRemoteAgentsInvocation`. */
+export const FLEET_REMOTE_ENV = 'AGENTS_FLEET_REMOTE';
+/** True when this process was dispatched to this machine by a fleet `--host` run. */
+export function isFleetRemoteInvocation(env = process.env) {
+    return env[FLEET_REMOTE_ENV] === '1';
+}
+/**
+ * Whether this machine allows other fleet machines to drive its browser. Reads
+ * the device-scope `browser.remote-control` config key. Unset = off (deny).
+ */
+export function remoteControlEnabled() {
+    return getConfigValue('browser.remote-control').value === true;
+}
+/**
+ * Guard the browser-drive entry point. A fleet-remote invocation may only drive
+ * this machine's browser when the owner opted in; otherwise throw a clear,
+ * actionable error. A local invocation is never gated.
+ *
+ * `env` and `enabled` are injectable so the decision is unit-testable without a
+ * real remote hop or a real config store.
+ */
+export function assertRemoteControlAllowed(opts) {
+    const env = opts?.env ?? process.env;
+    if (!isFleetRemoteInvocation(env))
+        return;
+    const enabled = opts?.enabled ?? remoteControlEnabled();
+    if (enabled)
+        return;
+    const who = env.AGENTS_ACTOR_HOST || env.AGENTS_ACTOR || 'A fleet machine';
+    throw new Error(`${who} tried to drive this machine's browser over \`browser --host\`, but remote ` +
+        `browser control is off here. To allow it, run on THIS machine:\n` +
+        `  agents browser remote-control on`);
+}

package/dist/lib/browser/service.d.ts

@@ -50,6 +50,22 @@ export interface HealInfo {
     role: string;
     name: string;
 }
+/**
+ * Resolve the identity stamped on a task at start: WHO (`owner`) and WHICH run
+ * (`launchId`). The forwarded values come from the caller's own CLI process and
+ * are authoritative — the browser daemon is shared and long-lived, so resolving
+ * the actor daemon-side (the RUSH-2020 bug) mis-attributes every task to the
+ * daemon's owner. `resolveLocalActor` is consulted ONLY when no actor was
+ * forwarded (a CLI that predates the field, mid-rollout) — never to override a
+ * forwarded one.
+ */
+export declare function resolveTaskIdentity(forwarded: {
+    actor?: string;
+    launchId?: string;
+}, resolveLocalActor: () => string): {
+    owner: string;
+    launchId?: string;
+};
 export declare class BrowserService {
     private static readonly SOURCE_PREFIX;
     private connections;
@@ -64,6 +80,9 @@ export declare class BrowserService {
         url?: string;
         endpointName?: string;
         skipDomainSkill?: boolean;
+        /** Caller identity, forwarded from the CLI (see IPCRequest.actor/launchId). */
+        actor?: string;
+        launchId?: string;
     }): Promise<{
         task: string;
         name: string;

package/dist/lib/browser/service.js

@@ -222,6 +222,21 @@ async function isConnHealthy(conn, timeoutMs = 1000) {
         return false;
     }
 }
+/**
+ * Resolve the identity stamped on a task at start: WHO (`owner`) and WHICH run
+ * (`launchId`). The forwarded values come from the caller's own CLI process and
+ * are authoritative — the browser daemon is shared and long-lived, so resolving
+ * the actor daemon-side (the RUSH-2020 bug) mis-attributes every task to the
+ * daemon's owner. `resolveLocalActor` is consulted ONLY when no actor was
+ * forwarded (a CLI that predates the field, mid-rollout) — never to override a
+ * forwarded one.
+ */
+export function resolveTaskIdentity(forwarded, resolveLocalActor) {
+    return {
+        owner: forwarded.actor ?? resolveLocalActor(),
+        launchId: forwarded.launchId,
+    };
+}
 export class BrowserService {
     static SOURCE_PREFIX = {
         'rush-app': 'rush-app-',
@@ -332,7 +347,10 @@ export class BrowserService {
             currentTabId: undefined,
             createdAt: Date.now(),
             pid: conn.pid,
-            owner: resolveActor().id, // who launched this browser task (RUSH-2020)
+            // Identity is forwarded from the caller (see resolveTaskIdentity): WHO
+            // (owner) and WHICH run (launchId). Resolving daemon-side would attribute
+            // every task to the shared daemon's actor (the RUSH-2020 bug).
+            ...resolveTaskIdentity({ actor: opts.actor, launchId: opts.launchId }, () => resolveActor().id),
         };
         // For Electron, get the existing window as the tab
         if (conn.electron) {

package/dist/lib/browser/types.d.ts

@@ -79,10 +79,20 @@ export interface Task {
     createdAt: number;
     pid: number;
     /**
-     * Resolved actor id (`resolveActor().id`) stamped at task start — who launched
-     * this browser task. Optional: tasks persisted before RUSH-2020 carry none.
+     * Resolved actor id (`resolveActor().id`) stamped at task start — WHO launched
+     * this browser task (a person/agent identity, stable across runs). Forwarded
+     * from the caller over IPC — the daemon is shared, so it cannot resolve the
+     * caller's actor itself. Optional: tasks persisted before RUSH-2020 carry none.
      */
     owner?: string;
+    /**
+     * The caller's per-run launch id (`$AGENT_LAUNCH_ID`, minted by exec.ts for
+     * every harness) stamped at task start — WHICH run created this task. Distinct
+     * from `owner`: two runs by the same actor get different launchIds, which is
+     * the scope the current-task default and `status --mine` filter on. Forwarded
+     * from the caller over IPC. Optional: tasks from before this shipped carry none.
+     */
+    launchId?: string;
     /**
      * Per-tab snapshot of the last ref listing captured for that tab
      * (shortId -> {descriptors, opts}). Persisted to tasks.json so a later
@@ -184,6 +194,8 @@ export interface IPCRequest {
     until?: string;
     appLevel?: string;
     skipDomainSkill?: boolean;
+    actor?: string;
+    launchId?: string;
 }
 /** Subset of IPCResponse describing a recording start result. */
 export interface RecordStartFields {

package/dist/lib/byok-usage.d.ts

@@ -0,0 +1,38 @@
+/**
+ * BYOK (Bring Your Own Key) budget fetcher.
+ *
+ * For custom harnesses that use a provider's API key stored in the keychain
+ * (e.g. OpenRouter), this module fetches the account's credit/usage data so
+ * `agents view` can show a budget bar alongside the harness detail row — the
+ * same bar style the native usage system uses, just sourced from the provider
+ * API rather than the CLI's own usage tracking.
+ */
+import type { Profile } from './profiles.js';
+export interface ByokBudgetInfo {
+    limitUsd: number | null;
+    remainingUsd: number | null;
+    usedUsd: number;
+    usedPercent: number | null;
+    fetchedAt: Date;
+}
+export interface ByokUsageResult {
+    budget: ByokBudgetInfo | null;
+    error: string | null;
+}
+export declare function setByokFetchForTest(fn: typeof globalThis.fetch): void;
+export declare function resetByokCacheForTest(): void;
+export declare function hasByokProvider(provider: string): boolean;
+export declare function renderByokBar(result: ByokUsageResult): string;
+/**
+ * Fetch the BYOK budget for a harness.
+ *
+ * Returns `null` when the harness has no registered BYOK provider or no auth.
+ * Returns a `ByokUsageResult` with `budget: null` when the token is absent
+ * from the keychain (so the caller can skip rendering a bar without error).
+ *
+ * Results are SWR-cached per `keychainItem` so harnesses sharing one API key
+ * deduplicate to a single network request.
+ */
+export declare function getByokUsageForHarness(profile: Profile, opts?: {
+    forceRefresh?: boolean;
+}): Promise<ByokUsageResult | null>;