@phnx-labs/agents-cli 1.22.60 → 1.22.62

package/dist/lib/channels/send.js

@@ -1,6 +1,7 @@
 import { getOwnerNotifyFromHumans } from '../humans.js';
 import { registerBuiltinProviders } from './providers/index.js';
 import { resolveTransport } from './resolve.js';
+import { sendToOwner } from '../notify.js';
 const OWNER_ALIAS = 'owner';
 /** True when the destination token means “the configured owner”. */
 export function isOwnerAlias(to) {
@@ -112,6 +113,17 @@ export async function sendMessage(input, meta) {
     const resolved = resolveSendEnvelope(input, meta);
     if (!resolved.ok)
         return { error: resolved.error };
-    const result = await deliverEnvelope(resolved.envelope, meta);
+    const ownerPolicyRequest = resolved.envelope.ownerScoped === true
+        && !input.channel?.trim()
+        && (!input.to?.trim() || isOwnerAlias(input.to));
+    const result = ownerPolicyRequest
+        ? await sendToOwner(resolved.envelope.text, {
+            meta,
+            dryRun: resolved.envelope.dryRun,
+            thread: resolved.envelope.thread,
+            attachments: resolved.envelope.attachments,
+            from: resolved.envelope.from,
+        })
+        : await deliverEnvelope(resolved.envelope, meta);
     return { result, envelope: resolved.envelope };
 }

package/dist/lib/claude-statusline.d.ts

@@ -9,6 +9,7 @@ export declare const CLAUDE_STATUSLINE_COMMAND = "agents __claude-statusline";
 export declare function isStatusLineSelfReference(command: string): boolean;
 interface ClaudeStatusLinePayload {
     cwd?: string;
+    session_id?: string;
     workspace?: {
         current_dir?: string;
     };
@@ -29,7 +30,19 @@ interface ClaudeStatusLinePayload {
 }
 export declare function ingestClaudeStatusLineUsage(payload: ClaudeStatusLinePayload, versionHome: string): boolean;
 export declare function renderDelegate(payload: string, versionHome: string): string;
-export declare function renderClaudeStatusLine(payload: ClaudeStatusLinePayload, host?: string, delegated?: string): string;
+/**
+ * Format a reminder as a dimmed statusline part (empty string when none). The
+ * ◆ marker distinguishes it from the host/model/usage parts, and the ANSI dim
+ * keeps it quiet next to the live figures.
+ */
+export declare function formatReminderPart(short: string | undefined): string;
+export declare function renderClaudeStatusLine(payload: ClaudeStatusLinePayload, host?: string, delegated?: string, reminder?: string): string;
+/**
+ * Resolve the per-session reminder for the statusline, or '' when none is
+ * configured. A malformed reminders file is swallowed here on purpose — a broken
+ * prompt is worse than a missing reminder — while `agents reminders` surfaces it.
+ */
+export declare function resolveReminderPart(sessionId?: string): string;
 export declare function runClaudeStatusLine(): Promise<number>;
 export declare function installClaudeStatusLine(versionHome: string): {
     changed: boolean;

package/dist/lib/claude-statusline.js

@@ -5,6 +5,7 @@ import { spawnSync } from 'child_process';
 import { readClaudeHomeConfig } from './agent-spec/agents.js';
 import { atomicWriteFileSync } from './fs-atomic.js';
 import { mergeClaudeUsageCacheWindows } from './accounting/usage.js';
+import { loadReminders, pickReminderForSession } from './reminders.js';
 export const CLAUDE_STATUSLINE_COMMAND = 'agents __claude-statusline';
 const DELEGATE_FILE = path.join('.agents', 'claude-statusline-delegate');
 // The private subcommand this feature runs. It is only ever invoked internally,
@@ -103,7 +104,16 @@ export function renderDelegate(payload, versionHome) {
     });
     return result.status === 0 ? result.stdout.trim() : '';
 }
-export function renderClaudeStatusLine(payload, host = os.hostname().split('.')[0] || os.hostname(), delegated = '') {
+/**
+ * Format a reminder as a dimmed statusline part (empty string when none). The
+ * ◆ marker distinguishes it from the host/model/usage parts, and the ANSI dim
+ * keeps it quiet next to the live figures.
+ */
+export function formatReminderPart(short) {
+    const text = short?.trim();
+    return text ? `\x1b[2m◆ ${text}\x1b[22m` : '';
+}
+export function renderClaudeStatusLine(payload, host = os.hostname().split('.')[0] || os.hostname(), delegated = '', reminder = '') {
     const model = payload.model?.display_name?.trim() || payload.model?.id?.trim() || 'model pending';
     const parts = [host, model];
     if (delegated)
@@ -114,8 +124,23 @@ export function renderClaudeStatusLine(payload, host = os.hostname().split('.')[
         parts.push(`5h ${Math.round(fiveHour)}%`);
     if (Number.isFinite(sevenDay))
         parts.push(`7d ${Math.round(sevenDay)}%`);
+    if (reminder)
+        parts.push(reminder);
     return parts.join(' · ');
 }
+/**
+ * Resolve the per-session reminder for the statusline, or '' when none is
+ * configured. A malformed reminders file is swallowed here on purpose — a broken
+ * prompt is worse than a missing reminder — while `agents reminders` surfaces it.
+ */
+export function resolveReminderPart(sessionId) {
+    try {
+        return formatReminderPart(pickReminderForSession(loadReminders(), sessionId)?.short);
+    }
+    catch {
+        return '';
+    }
+}
 export async function runClaudeStatusLine() {
     const raw = await new Promise((resolve, reject) => {
         let input = '';
@@ -135,7 +160,7 @@ export async function runClaudeStatusLine() {
     const versionHome = versionHomeFromEnv(process.env);
     if (versionHome)
         ingestClaudeStatusLineUsage(payload, versionHome);
-    process.stdout.write(renderClaudeStatusLine(payload, undefined, versionHome ? renderDelegate(raw, versionHome) : ''));
+    process.stdout.write(renderClaudeStatusLine(payload, undefined, versionHome ? renderDelegate(raw, versionHome) : '', resolveReminderPart(payload.session_id)));
     return 0;
 }
 export function installClaudeStatusLine(versionHome) {

package/dist/lib/daemon/runner.js

@@ -36,7 +36,7 @@ import { ensureLockTarget } from '../fs-atomic.js';
 import { walkForFiles } from '../fs-walk.js';
 import { getBinaryPath, isVersionInstalled, resolveVersion, getVersionHomePath } from '../installations/versions.js';
 import { resolveClaudeSetupToken } from '../claude-account-token.js';
-import { getConfiguredRunStrategy, resolveRunVersion, resolveAccountVersion, rotationFailoverChain, readinessFromCandidate, formatNoHealthyAccountError, } from '../accounting/rotate.js';
+import { getConfiguredRunStrategy, resolveRunVersion, resolveAccountVersion, rotationFailoverChain, readinessFromCandidate, formatNoHealthyAccountError, formatNoVerifiedUsageError, } from '../accounting/rotate.js';
 import { isHeadedDeviceRole, selfConfiguredDeviceRole } from '../device-config.js';
 import { isSelfUpdatingAgent, ROUTINE_AGENT_IDS, isAgentHardDeprecated, hardDeprecationError } from '../agents.js';
 import { isCustomHarnessName, readProfile } from '../profiles.js';
@@ -959,12 +959,21 @@ export async function resolveRoutineLaunch(config, cwd = process.cwd(), deps = {
     let version;
     let rotation = null;
     let exhausted;
+    let noVerifiedUsage = false;
     try {
         const resolved = await (deps.resolveRunVersion ?? resolveRunVersion)(agent, strategy, cwd);
         version = resolved.version ?? undefined;
         rotation = resolved.rotation;
         exhausted = resolved.exhausted;
-        if (rotation) {
+        noVerifiedUsage = resolved.noVerifiedUsage ?? false;
+        if (noVerifiedUsage) {
+            // Entirely stale usage (PHNX-2526): a routine is unattended, so there is
+            // no picker to divert to — it fails loud below rather than launch on a
+            // stale number. Do NOT log `rotation.picked` as a pick; it is the refused
+            // stale candidate, kept only for the failover chain.
+            process.stderr.write(`[agents] routine ${config.name}: ${strategy} found no ${agent} account with fresh usage — refusing to route on stale data\n`);
+        }
+        else if (rotation) {
             const label = rotation.picked.email
                 ? `${rotation.picked.email} · ${agent}@${rotation.picked.version}`
                 : `${agent}@${rotation.picked.version}`;
@@ -996,6 +1005,12 @@ export async function resolveRoutineLaunch(config, cwd = process.cwd(), deps = {
     if (exhausted) {
         throw new Error(formatNoHealthyAccountError(agent, strategy, exhausted));
     }
+    // Entirely stale usage is also NOT a "fall back to the default pin" case — the
+    // default is exactly the account whose stale number can't be trusted. Fail the
+    // run loud (NO_VERIFIED_USAGE) rather than hammer it every tick (PHNX-2526).
+    if (noVerifiedUsage) {
+        throw new Error(formatNoVerifiedUsageError(agent, strategy, rotation?.healthy ?? []));
+    }
     if (!version) {
         version = resolveVersion(agent, cwd) ?? undefined;
     }

package/dist/lib/devices/doctor-findings.d.ts

@@ -6,7 +6,7 @@ import type { OwnerSinkStatus } from '../channels/owner-sink.js';
 import { type WindowsSshEnrollmentAudit } from './windows-ssh-enrollment.js';
 import type { SyncStatusRow, OrphanRow } from '../drift.js';
 import type { FetchStatusMarker } from '../auto-pull.js';
-import type { VersionResourceReport } from '../doctor-diff.js';
+import { type VersionResourceReport } from '../doctor-diff.js';
 import type { FleetDivergence, FleetHookRuntimeState, FleetVersionSignIn } from './fleet-divergence.js';
 export type FindingSeverity = 'critical' | 'warning';
 /** A machine-stable class for a finding — drives {@link remediationFor} and lets

package/dist/lib/devices/doctor-findings.js

@@ -44,6 +44,24 @@ import { loginHint } from '../signin-badge.js';
 import { CONFIG_ENV_ISOLATED_AGENTS } from '../installations/shims.js';
 import { padToWidth, stringWidth } from '../text/width.js';
 import { windowsSshEnrollmentProblem } from './windows-ssh-enrollment.js';
+import { DOCTOR_ALL_KINDS } from '../doctor-diff.js';
+/**
+ * Singular noun per resource kind for finding messages. A naive `kind.replace(/s$/,'')`
+ * mangles `memory` → `memor` and `mcp` → `mcp` inconsistently, so the mapping is
+ * explicit. Keyed by `DoctorKind` so a new kind fails the type check until named.
+ */
+const KIND_SINGULAR = {
+    commands: 'command',
+    skills: 'skill',
+    hooks: 'hook',
+    rules: 'rule',
+    mcp: 'mcp',
+    permissions: 'permission',
+    subagents: 'subagent',
+    plugins: 'plugin',
+    workflows: 'workflow',
+    memory: 'memory',
+};
 const AGENT_NAMES = Object.fromEntries(ALL_AGENT_IDS.map((id) => [id, AGENTS[id].name]));
 /** Agents with NO per-version credential isolation: their login is shared across
  *  every installed version, so a "log into THIS version" remediation would be a
@@ -87,8 +105,8 @@ export const ALL_FINDING_KINDS = [
     'hook-runtime-broken', // a wired hook's generated shim wrapper is missing/unusable
     'hook-runtime-visibility-unavailable', // remote CLI cannot report generated wrapper health
     'cli-missing', // a managed agent whose binary won't resolve
-    'missing-resource', // a missing command/skill/rule/mcp/permission/subagent
-    'content-drift', // a resource diverged from source
+    'missing-resource', // a missing command/skill/rule/mcp/permission/subagent/workflow/memory
+    'content-drift', // a resource (any synced kind) diverged from source
     'never-synced', // installed but never synced
     'stale', // sources changed since last sync
     'repo-behind', // a config repo behind origin
@@ -392,8 +410,8 @@ export function buildLocalFindings(input) {
         const missingPlugins = [];
         const missingOther = [];
         const drifted = [];
-        for (const kind of ['commands', 'skills', 'hooks', 'rules', 'mcp', 'permissions', 'subagents', 'plugins', 'promptcuts']) {
-            const singular = kind.replace(/s$/, '');
+        for (const kind of DOCTOR_ALL_KINDS) {
+            const singular = KIND_SINGULAR[kind];
             for (const r of report.kinds[kind] ?? []) {
                 if (r.status === 'missing') {
                     if (kind === 'hooks')

package/dist/lib/doctor-diff.d.ts

@@ -9,21 +9,37 @@
  *   - missing  — resolved source exists, not present in home
  *   - extra    — present in home, no source in any layer
  *
- * Coverage:
+ * Coverage — every kind `syncResourcesToVersion` writes is content-aware, so a
+ * byte change under an unchanged name is `diff`, never a false `ok` (PHNX-3504):
  *   commands, skills, hooks, rules — full content compare with source layer.
- *   mcp, permissions, subagents, plugins, promptcuts — presence-only.
+ *   mcp        — structural compare of the home server def vs resolved source.
+ *   subagents  — re-render source through the registry transform, byte-compare.
+ *   workflows  — layout-aware per-harness content compare (dir tree or file).
+ *   memory     — knowledge facts (~/.agents/memory/*.md), per-fact byte-compare.
+ *   plugins    — per-item content compare of the marketplace mirror.
+ *   permissions — per-rule compare in the harness's native vocabulary for the
+ *     representable harnesses (claude/opencode/cursor/droid/openclaw); the lossy
+ *     TOML/flag harnesses stay presence-only with an honest `detail`, never a
+ *     faked `ok`.
+ * A completeness test binds `DOCTOR_ALL_KINDS` to the writer set so a future
+ * synced kind cannot silently become a blind spot. `promptcuts` is NOT a kind —
+ * it is not version-scoped, so there is nothing per-home to diff.
  *
  * Intentional asymmetries (must mirror sync):
  *   - hooks ignore the project layer (`syncResourcesToVersion` skips
  *     project/.agents/hooks/ for safety).
- *   - rules/AGENTS.md on agents without native @-import support is compared
- *     against the compiled artifact, not the raw source file.
+ *   - rules/AGENTS.md is compared against the preset composition the rules writer
+ *     emits (`composeRulesFromState`), re-rendered from the current `subrules/`
+ *     fragments — so a fragment edit is caught even though `rules/AGENTS.md`
+ *     never changed. A non-@-import home compiled by `agents refresh-rules`
+ *     carries a leading `COMPILED_HEADER`, which is stripped before comparing so
+ *     a header-compiled home still reconciles (the header is not source content).
  */
 import type { AgentId } from './types.js';
 import type { DiscoveredPlugin } from './types.js';
 import { type HookWiringReport } from './hooks/install.js';
 import { type ResourceInventory } from './resource-inventory.js';
-export type DoctorKind = 'commands' | 'skills' | 'hooks' | 'rules' | 'mcp' | 'permissions' | 'subagents' | 'plugins' | 'promptcuts';
+export type DoctorKind = 'commands' | 'skills' | 'hooks' | 'rules' | 'mcp' | 'permissions' | 'subagents' | 'plugins' | 'workflows' | 'memory';
 export type DiffStatus = 'ok' | 'diff' | 'missing' | 'extra';
 export type SourceLayer = 'project' | 'user' | 'system' | 'extra';
 export interface ResourceDiff {