@phnx-labs/agents-cli 1.22.75 → 1.22.77

package/dist/lib/session/db.js

@@ -405,6 +405,21 @@ CREATE TABLE IF NOT EXISTS session_preview_cache (
   preview_json TEXT NOT NULL
 );
 
+-- Daemon-computed per-session summary (goal / checkpoints / checklist), PHNX-3939.
+-- Modeled exactly on session_preview_cache: a lazy, stamp-validated cache keyed on
+-- (session_id, file_mtime_ms, file_size) so a row is reused verbatim until the
+-- transcript bytes change. Written ONLY by the background SessionSummarizerService
+-- (or consumed from a peer's fleet mirror); the display/merge path reads it, never
+-- computes. Independent of SCHEMA_VERSION, like the other lazy caches above.
+CREATE TABLE IF NOT EXISTS session_summaries (
+  session_id TEXT PRIMARY KEY,
+  file_mtime_ms INTEGER,
+  file_size INTEGER,
+  extractor_version INTEGER NOT NULL,
+  computed_at INTEGER NOT NULL,
+  summary_json TEXT NOT NULL
+);
+
 -- Durable metadata for one browser task (RUSH-2549). The browser daemon's
 -- tasks.json is LIVE state: saveTaskState writes the in-memory task map, so
 -- stopping a task drops its entry and a daemon restart empties the file. That is
@@ -484,6 +499,8 @@ export const SESSION_TOPIC_EXTRACTOR_VERSION = 2;
 const PREVIEW_EXTRACTOR_VERSION = 2;
 /** Bump when classifyPhenotype's output changes so cached phenotypes recompute (PHNX-3327 v1). */
 export const SESSION_PHENOTYPE_EXTRACTOR_VERSION = 1;
+/** Bump when the summarizer output shape changes so cached summaries recompute (PHNX-3939 v1). */
+export const SESSION_SUMMARY_EXTRACTOR_VERSION = 1;
 let dbInstance = null;
 /**
  * Apply schema migrations from `fromVersion` → SCHEMA_VERSION. The new
@@ -3340,6 +3357,66 @@ export function readArchivedSessionPreview(id) {
         return undefined;
     }
 }
+/**
+ * Read one summary only when it matches the transcript bytes on disk (the
+ * reuse-or-recompute stamp the SessionSummarizerService gates on). Mirrors
+ * {@link readSessionPreviewCache}.
+ */
+export function readSessionSummary(id, sourceStamp) {
+    const row = getDB().prepare(`
+    SELECT summary_json AS summaryJson
+    FROM session_summaries
+    WHERE session_id = ?
+      AND extractor_version = ?
+      AND file_mtime_ms IS ?
+      AND file_size IS ?
+  `).get(id, SESSION_SUMMARY_EXTRACTOR_VERSION, sourceStamp.fileMtimeMs, sourceStamp.fileSize);
+    if (!row)
+        return undefined;
+    try {
+        return JSON.parse(row.summaryJson);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Read the latest stored summary by session id, regardless of the transcript
+ * stamp — the low-cost merge read used by the display path (a live row through
+ * {@link applyImmutableMemo} or a history/mirror row) to surface the
+ * last-computed summary without a model call. A slightly-stale summary is the
+ * best available until the service recomputes; the SERVICE uses the stamped
+ * {@link readSessionSummary} to decide whether to recompute.
+ */
+export function readSessionSummaryAny(id) {
+    const row = getDB().prepare(`
+    SELECT summary_json AS summaryJson
+    FROM session_summaries
+    WHERE session_id = ? AND extractor_version = ?
+  `).get(id, SESSION_SUMMARY_EXTRACTOR_VERSION);
+    if (!row)
+        return undefined;
+    try {
+        return JSON.parse(row.summaryJson);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Persist a computed summary against the exact transcript bytes it was derived from. */
+export function writeSessionSummary(entry) {
+    getDB().prepare(`
+    INSERT INTO session_summaries
+      (session_id, file_mtime_ms, file_size, extractor_version, computed_at, summary_json)
+    VALUES (?, ?, ?, ?, ?, ?)
+    ON CONFLICT(session_id) DO UPDATE SET
+      file_mtime_ms = excluded.file_mtime_ms,
+      file_size = excluded.file_size,
+      extractor_version = excluded.extractor_version,
+      computed_at = excluded.computed_at,
+      summary_json = excluded.summary_json
+  `).run(entry.id, entry.fileMtimeMs, entry.fileSize, SESSION_SUMMARY_EXTRACTOR_VERSION, Date.now(), JSON.stringify(entry.summary));
+}
 /**
  * The most-recently-active sessions whose transcript is genuinely local to this
  * box — a real `file_path`, not a peer mirror — for publishing to the fleet
@@ -3364,6 +3441,9 @@ export function queryLocalOriginSessionsForMirror(self, limit) {
         id: r.id, shortId: r.short_id, agent: r.agent, version: r.version, machine: r.machine,
         cwd: r.cwd, topic: r.topic, firstUserMessage: r.first_user_message, label: r.label,
         lastActivity: r.last_activity, timestamp: r.timestamp, ticketId: r.ticket_id, prUrl: r.pr_url,
+        // Ride the daemon-computed summary alongside the digest so a peer renders it
+        // without a transcript (PHNX-3939); only a summarized session carries one.
+        summary: readSessionSummaryAny(r.id) ?? null,
     }));
 }
 /**
@@ -3437,6 +3517,14 @@ export function upsertMirrorSession(row, source, syncedAt) {
     INSERT INTO session_text (session_id, label, topic, project, content, assistant)
     VALUES (?, ?, ?, '', ?, '')
   `).run(row.id, row.label ?? '', row.topic ?? '', row.firstUser ?? '');
+    // Carry the peer's daemon-computed summary into the same session_summaries
+    // cache the local merge reads (PHNX-3939), so a peer session renders its
+    // goal/checkpoints/checklist inline with no transcript. Stamp is null: the
+    // display merge reads by id (readSessionSummaryAny), and this box's own
+    // summarizer service only ever recomputes LOCAL live sessions, never a peer's.
+    if (row.summary) {
+        writeSessionSummary({ id: row.id, fileMtimeMs: null, fileSize: null, summary: row.summary });
+    }
     return true;
 }
 /**
@@ -3453,11 +3541,13 @@ export function pruneMirrorSessions(cutoffMs) {
     const delRow = db.prepare(`DELETE FROM sessions WHERE id = ?`);
     const delText = db.prepare(`DELETE FROM session_text WHERE session_id = ?`);
     const delPreview = db.prepare(`DELETE FROM session_preview_cache WHERE session_id = ?`);
+    const delSummary = db.prepare(`DELETE FROM session_summaries WHERE session_id = ?`);
     const txn = db.transaction(() => {
         for (const { id } of stale) {
             delRow.run(id);
             delText.run(id);
             delPreview.run(id);
+            delSummary.run(id);
         }
     });
     txn();
@@ -3526,9 +3616,10 @@ export function queryAffinityRollup(options) {
 }
 /**
  * Aggregate cost / duration / tokens across sessions, grouped by agent,
- * project, or calendar day. Honors the same filter shape as querySessions
- * (agent, since/until, team-origin) so `agents insights cost --since 7d --by day`
- * lines up with what `agents sessions` would list. Ordered by cost desc.
+ * project, shortened model id, account, or calendar day. Honors the same
+ * filter shape as querySessions (agent, since/until, team-origin) so
+ * `agents insights cost --since 7d --by day` lines up with what
+ * `agents sessions` would list. Ordered by cost desc.
  */
 export function queryUsageRollup(options) {
     const db = getDB();
@@ -3537,15 +3628,26 @@ export function queryUsageRollup(options) {
         ? 'agent'
         : options.groupBy === 'project'
             ? `IFNULL(NULLIF(project, ''), '(no project)')`
-            : options.groupBy === 'account'
-                // A NULL account_key means this harness has no account attribution yet —
-                // the mechanism is Claude-only today (see lib/session/claude-accounts.ts).
-                // Bucket per agent so the rows are named honestly instead of being called
-                // "not indexed", which they are not, and instead of joining a real account.
-                ? `IFNULL(NULLIF(account_key, ''), 'unattributed:' || agent)`
-                // ISO timestamps are lexicographically date-sortable; the date is the
-                // first 10 chars (YYYY-MM-DD).
-                : `substr(timestamp, 1, 10)`;
+            : options.groupBy === 'model'
+                // Match shortenModel(): remove Claude's redundant harness prefix and
+                // an optional eight-digit release-date suffix before grouping.
+                ? `IFNULL(NULLIF(CASE
+              WHEN substr(CASE WHEN model LIKE 'claude-%' THEN substr(model, 8) ELSE model END, -9, 1) = '-'
+                AND length(substr(CASE WHEN model LIKE 'claude-%' THEN substr(model, 8) ELSE model END, -8)) = 8
+                AND substr(CASE WHEN model LIKE 'claude-%' THEN substr(model, 8) ELSE model END, -8) NOT GLOB '*[^0-9]*'
+              THEN substr(CASE WHEN model LIKE 'claude-%' THEN substr(model, 8) ELSE model END, 1,
+                          length(CASE WHEN model LIKE 'claude-%' THEN substr(model, 8) ELSE model END) - 9)
+              ELSE CASE WHEN model LIKE 'claude-%' THEN substr(model, 8) ELSE model END
+            END, ''), '(unknown)')`
+                : options.groupBy === 'account'
+                    // A NULL account_key means this harness has no account attribution yet —
+                    // the mechanism is Claude-only today (see lib/session/claude-accounts.ts).
+                    // Bucket per agent so the rows are named honestly instead of being called
+                    // "not indexed", which they are not, and instead of joining a real account.
+                    ? `IFNULL(NULLIF(account_key, ''), 'unattributed:' || agent)`
+                    // ISO timestamps are lexicographically date-sortable; the date is the
+                    // first 10 chars (YYYY-MM-DD).
+                    : `substr(timestamp, 1, 10)`;
     const sql = `
     SELECT
       ${keyExpr} AS key,

package/dist/lib/session/mirror.js

@@ -62,6 +62,27 @@ export async function publishSessionMirrorToSharedStore(options = {}) {
         timestamp: s.timestamp,
         ...(s.ticketId ? { ticketId: s.ticketId } : {}),
         ...(s.prUrl ? { prUrl: s.prUrl } : {}),
+        // Ride the daemon-computed summary (PHNX-3939) so a peer renders the goal /
+        // checkpoints / checklist inline — still no transcript, keeping the mirror light.
+        ...(s.summary?.goal ? { goal: snippet(s.summary.goal, 400) } : {}),
+        // Bound on publish exactly as toMirrorSummary bounds on consume (50/100 items,
+        // 400-char text, 40-char `at`) so this box's own model output can't ride raw
+        // into the git-synced fleet state file — matching the snippet() cap on goal above.
+        ...(s.summary?.checkpoints
+            ? {
+                checkpoints: s.summary.checkpoints
+                    .slice(0, 50)
+                    .map((c) => ({ text: String(c.text).slice(0, 400), at: String(c.at).slice(0, 40) })),
+            }
+            : {}),
+        ...(s.summary?.summaryChecklist
+            ? {
+                summaryChecklist: s.summary.summaryChecklist
+                    .slice(0, 100)
+                    .map((c) => ({ text: String(c.text).slice(0, 400), done: Boolean(c.done) })),
+            }
+            : {}),
+        ...(s.summary?.summaryState ? { summaryState: s.summary.summaryState } : {}),
         capturedAt,
     }));
     try {
@@ -111,6 +132,43 @@ function toUpsert(raw) {
         timestamp,
         ticketId: cap(r.ticketId, 64),
         prUrl: cap(r.prUrl, 512),
+        summary: toMirrorSummary(r),
+    };
+}
+/** One published summary state, validated back into the union or undefined. */
+function toSummaryState(v) {
+    return v === 'pending' || v === 'ready' || v === 'skipped' ? v : undefined;
+}
+/**
+ * Validate an untrusted peer's published summary fields into a bounded
+ * {@link SessionSummaryEntry} (PHNX-3939), or undefined when it carries none.
+ * Bounds mirror the publish side so a hostile/oversized peer can't bloat the
+ * local cache. Only a row with a resolvable `summaryState` is kept.
+ */
+function toMirrorSummary(r) {
+    const summaryState = toSummaryState(r.summaryState);
+    if (!summaryState)
+        return undefined;
+    const goal = isString(r.goal) ? r.goal.slice(0, 400) : undefined;
+    const checkpoints = Array.isArray(r.checkpoints)
+        ? r.checkpoints
+            .filter((c) => Boolean(c) && typeof c === 'object' && !Array.isArray(c))
+            .filter((c) => isString(c.text) && isString(c.at))
+            .slice(0, 50)
+            .map((c) => ({ text: String(c.text).slice(0, 400), at: String(c.at).slice(0, 40) }))
+        : undefined;
+    const summaryChecklist = Array.isArray(r.summaryChecklist)
+        ? r.summaryChecklist
+            .filter((c) => Boolean(c) && typeof c === 'object' && !Array.isArray(c))
+            .filter((c) => isString(c.text))
+            .slice(0, 100)
+            .map((c) => ({ text: String(c.text).slice(0, 400), done: Boolean(c.done) }))
+        : undefined;
+    return {
+        summaryState,
+        ...(goal ? { goal } : {}),
+        ...(checkpoints && checkpoints.length ? { checkpoints } : {}),
+        ...(summaryChecklist && summaryChecklist.length ? { summaryChecklist } : {}),
     };
 }
 /**

package/dist/lib/session/remote/watch.js

@@ -9,10 +9,10 @@ import { machineId, normalizeHost } from '../../machine-id.js';
 import { SSH_OPTS, controlOpts, shellQuote } from '../../ssh-exec.js';
 import { buildWindowsAgentsCommand, remoteShellFor } from '../../hosts/remote-cmd.js';
 import { isReapableOrphan } from '../active.js';
-import { querySessions } from '../db.js';
+import { querySessions, readSessionSummaryAny } from '../db.js';
 import { linearIssueUrl } from '../linear.js';
 import { sessionAgentSupportsResume } from '../recovery.js';
-import { activeSessionsJournalPath, activeSessionJournalIdentity, readActiveSessionsCache, noteActiveSessionsJournalReader, } from '../session-cache.js';
+import { activeSessionsJournalPath, activeSessionJournalIdentity, readActiveSessionsCache, noteActiveSessionsJournalReader, resolveStreamSummaryState, } from '../session-cache.js';
 export const SESSION_WATCH_VERSION = 1;
 export const SESSION_WATCH_HEARTBEAT_MS = 15_000;
 export const SESSION_WATCH_PREVIOUS_LIMIT = 50;
@@ -36,6 +36,10 @@ export function toSessionWatchRow(scope, row) {
         : null;
     return {
         ...row,
+        // The summarizer's per-row state is delivered on the stream: a live row with
+        // no computed summary reads `pending` when the summarizer is on, `skipped`
+        // when it is off (PHNX-3939). goal/checkpoints/summaryChecklist rode `...row`.
+        summaryState: resolveStreamSummaryState(row.summaryState),
         rowKey,
         sourceDevice: scope,
         previous,
@@ -67,6 +71,18 @@ export function toPreviousSessionWatchRow(scope, session) {
     const worktree = session.worktreeSlug && session.cwd
         ? { slug: session.worktreeSlug, path: session.cwd, ...(session.gitBranch ? { branch: session.gitBranch } : {}) }
         : undefined;
+    // Project the daemon-computed summary (PHNX-3939) onto the history row from the
+    // transcript-keyed cache — the same store the live merge reads, so a closed or
+    // fleet-mirrored session carries its goal/checkpoints/checklist with no
+    // transcript re-parse and no model call. Prefer a value already on the meta row.
+    const summary = session.goal !== undefined || session.summaryState !== undefined
+        ? {
+            goal: session.goal,
+            checkpoints: session.checkpoints,
+            summaryChecklist: session.summaryChecklist,
+            summaryState: session.summaryState,
+        }
+        : readSessionSummaryAny(session.id);
     return {
         context: 'recent',
         kind: session.agent,
@@ -88,6 +104,10 @@ export function toPreviousSessionWatchRow(scope, session) {
         ...(session.tokenCount != null ? { tokenCount: session.tokenCount } : {}),
         ...(session.durationMs != null ? { durationMs: session.durationMs } : {}),
         ...(session.subAgentCount != null ? { subAgentCount: session.subAgentCount } : {}),
+        ...(summary?.goal ? { goal: summary.goal } : {}),
+        ...(summary?.checkpoints ? { checkpoints: summary.checkpoints } : {}),
+        ...(summary?.summaryChecklist ? { summaryChecklist: summary.summaryChecklist } : {}),
+        summaryState: resolveStreamSummaryState(summary?.summaryState),
         startedAtMs,
         lastActivityMs,
         status: 'closed',

package/dist/lib/session/session-cache.d.ts

@@ -171,6 +171,25 @@ export declare function updateImmutableMemos(sessions: ReadonlyArray<ActiveSessi
  * mtime matches. Never overwrites a field the live gather already set, and
  * never copies live-status keys.
  */
+/**
+ * Merge the daemon-computed session summary (PHNX-3939) onto a live row from the
+ * transcript-keyed `session_summaries` cache. This is the low-cost display merge:
+ * one indexed by-id read, NEVER a model call — the background
+ * SessionSummarizerService is the only producer. It fills only what the cache
+ * holds; the `pending`/`skipped` default for a row with no summary yet is applied
+ * at the watch-stream boundary ({@link resolveStreamSummaryState}), so a
+ * non-stream ActiveSession consumer is unaffected. Best-effort: a DB error leaves
+ * the row untouched.
+ */
+export declare function mergeSessionSummary(s: ActiveSession): ActiveSession;
+/**
+ * The `summaryState` a watch-stream row carries when the merge left it unset:
+ * `pending` while the summarizer is READY (enabled AND has an endpoint, so a
+ * summary is genuinely coming), `skipped` when it is off OR enabled-but-
+ * unconfigured (nothing will ever populate the cache). This is the only place
+ * the readiness flag is read on the read path, and it is memoized (PHNX-3939).
+ */
+export declare function resolveStreamSummaryState(current: import('./types.js').SummaryState | undefined, nowMs?: number): import('./types.js').SummaryState;
 export declare function applyImmutableMemo(s: ActiveSession): ActiveSession;
 export interface LoadLocalActiveSessionsOptions {
     /** Skip the cache and re-gather (the force-refresh path). */

package/dist/lib/session/session-cache.js

@@ -28,6 +28,8 @@ import * as path from 'path';
 import { createMemoryCache } from '../memory-cache.js';
 import { getCacheDir } from '../state.js';
 import { backfillActiveRowsFromIndex, sessionProcessIsLocal } from './active.js';
+import { readSessionSummaryAny } from './db.js';
+import { isSummarizerReady } from '../summarizer/config.js';
 /** Snapshot file under `getCacheDir()` (regenerable, gitignored). */
 const SNAPSHOT_FILE = '.active-sessions.json';
 /** Immutable-field memo file (keyed by sessionId + transcript mtime). */
@@ -423,9 +425,53 @@ export function updateImmutableMemos(sessions, nowMs = Date.now()) {
  * mtime matches. Never overwrites a field the live gather already set, and
  * never copies live-status keys.
  */
+/**
+ * Merge the daemon-computed session summary (PHNX-3939) onto a live row from the
+ * transcript-keyed `session_summaries` cache. This is the low-cost display merge:
+ * one indexed by-id read, NEVER a model call — the background
+ * SessionSummarizerService is the only producer. It fills only what the cache
+ * holds; the `pending`/`skipped` default for a row with no summary yet is applied
+ * at the watch-stream boundary ({@link resolveStreamSummaryState}), so a
+ * non-stream ActiveSession consumer is unaffected. Best-effort: a DB error leaves
+ * the row untouched.
+ */
+export function mergeSessionSummary(s) {
+    if (!s.sessionId)
+        return s;
+    try {
+        const stored = readSessionSummaryAny(s.sessionId);
+        if (!stored)
+            return s;
+        if (s.goal === undefined && stored.goal !== undefined)
+            s.goal = stored.goal;
+        if (s.checkpoints === undefined && stored.checkpoints !== undefined)
+            s.checkpoints = stored.checkpoints;
+        if (s.summaryChecklist === undefined && stored.summaryChecklist !== undefined)
+            s.summaryChecklist = stored.summaryChecklist;
+        if (s.summaryState === undefined)
+            s.summaryState = stored.summaryState;
+    }
+    catch {
+        // best-effort: never let the summary merge break the gather path.
+    }
+    return s;
+}
+/**
+ * The `summaryState` a watch-stream row carries when the merge left it unset:
+ * `pending` while the summarizer is READY (enabled AND has an endpoint, so a
+ * summary is genuinely coming), `skipped` when it is off OR enabled-but-
+ * unconfigured (nothing will ever populate the cache). This is the only place
+ * the readiness flag is read on the read path, and it is memoized (PHNX-3939).
+ */
+export function resolveStreamSummaryState(current, nowMs = Date.now()) {
+    if (current)
+        return current;
+    return isSummarizerReady(nowMs) ? 'pending' : 'skipped';
+}
 export function applyImmutableMemo(s) {
     if (!s.sessionId)
         return s;
+    mergeSessionSummary(s);
     const mtime = transcriptMtimeMs(s);
     if (mtime === null)
         return s;

package/dist/lib/session/types.d.ts

@@ -126,6 +126,28 @@ export interface TodoProgress {
     /** The in-progress item's activeForm (falls back to its content). The live step. */
     activeForm?: string;
 }
+/**
+ * One progress checkpoint in a daemon-computed session summary (PHNX-3939):
+ * a short line of what happened, stamped with an ISO time. Newest last.
+ */
+export interface SessionCheckpoint {
+    text: string;
+    /** ISO timestamp for this checkpoint. */
+    at: string;
+}
+/** One item in a daemon-computed session summary checklist (PHNX-3939). */
+export interface SessionChecklistItem {
+    text: string;
+    done: boolean;
+}
+/**
+ * Lifecycle of a session's daemon-computed summary (PHNX-3939):
+ *   - `pending` — the summarizer is enabled and this session has no summary yet.
+ *   - `ready`   — a summary was computed and merged onto the row.
+ *   - `skipped` — the summarizer is disabled/unconfigured, or a compute error
+ *                 left no summary; the row deliberately carries no goal/checkpoints.
+ */
+export type SummaryState = 'pending' | 'ready' | 'skipped';
 /** Metadata attached when a session was spawned by `agents teams`. */
 export interface TeamOrigin {
     /** Teammate name if set, otherwise first 8 chars of the agent UUID. */
@@ -400,6 +422,18 @@ export interface SessionMeta {
     archived?: boolean;
     /** Epoch ms the transcript file was first confirmed gone (pairs with {@link archived}). */
     archivedAt?: number;
+    /**
+     * Daemon-computed 1–2 line goal extracted from the session's first user turn
+     * (PHNX-3939). Never on the request path — produced by the background
+     * `SessionSummarizerService` and merged from the `session_summaries` cache.
+     */
+    goal?: string;
+    /** Daemon-computed progress checkpoints, newest last (PHNX-3939). */
+    checkpoints?: SessionCheckpoint[];
+    /** Daemon-computed detailed checklist for the session (PHNX-3939). */
+    summaryChecklist?: SessionChecklistItem[];
+    /** Lifecycle of the daemon-computed summary; `skipped` when disabled (PHNX-3939). */
+    summaryState?: SummaryState;
     /** Terms that matched the current search query */
     _matchedTerms?: string[];
     /** BM25 relevance score from the most recent content-index search */

package/dist/lib/share/backend.d.ts

@@ -4,7 +4,7 @@
  * Two legitimate principals, picked once at publish time:
  *   - **managed**: the caller is signed in to Phoenix (`readSession()`), no
  *     explicit BYO override. Token is the Phoenix access_token; endpoint is
- *     the already-live `share.agents-cli.sh`. Zero Cloudflare setup.
+ *     the already-live `share.getrush.ai`. Zero Cloudflare setup.
  *   - **byo**: the existing static WRITE_TOKEN path (`readShareConfig()` +
  *     `readWriteToken()`). Unchanged for power users / custom domains / fleet
  *     injection of `SHARE_WRITE_TOKEN`.
@@ -68,9 +68,11 @@ export declare function handleFromEmail(email: string | undefined): string;
 export declare function managedShareHandle(session: Pick<PhoenixSession, 'email' | 'userId'>): string;
 export declare function managedShareBaseUrl(): string;
 /**
- * True when this config is the platform managed endpoint (`share.agents-cli.sh`).
- * The deploy path uses this — not "the caller is signed in" — to decide whether
- * to bind `PHOENIX_ID_BASE` on the Worker.
+ * True when this config is the platform managed endpoint (`share.getrush.ai`, or a
+ * legacy alias — `share.agents-cli.sh` / `artifacts.prix.dev` — still bound to the
+ * same Worker). The
+ * deploy path uses this — not "the caller is signed in" — to decide whether to
+ * bind `PHOENIX_ID_BASE` on the Worker.
  */
 export declare function isManagedShareEndpoint(cfg: {
     baseUrl?: string;

package/dist/lib/share/backend.js

@@ -4,7 +4,7 @@
  * Two legitimate principals, picked once at publish time:
  *   - **managed**: the caller is signed in to Phoenix (`readSession()`), no
  *     explicit BYO override. Token is the Phoenix access_token; endpoint is
- *     the already-live `share.agents-cli.sh`. Zero Cloudflare setup.
+ *     the already-live `share.getrush.ai`. Zero Cloudflare setup.
  *   - **byo**: the existing static WRITE_TOKEN path (`readShareConfig()` +
  *     `readWriteToken()`). Unchanged for power users / custom domains / fleet
  *     injection of `SHARE_WRITE_TOKEN`.
@@ -19,7 +19,7 @@
  */
 import { PHOENIX_ID_BASE, readSession } from '../identity/client.js';
 import { selectStorageBackendKind } from '../storage/selection.js';
-import { DEFAULT_SHARE_DOMAIN, readShareConfig, readWriteToken, readWriteTokenEnv, } from './config.js';
+import { DEFAULT_SHARE_DOMAIN, LEGACY_MANAGED_SHARE_DOMAINS, readShareConfig, readWriteToken, readWriteTokenEnv, } from './config.js';
 /** Env var that forces the BYO path. Value must be exactly `byo`. */
 export const SHARE_BACKEND_ENV = 'AGENTS_SHARE_BACKEND';
 /** URL-safe namespace: lowercase `[a-z0-9-]+`. Matches the Worker's sanitize.
@@ -55,15 +55,17 @@ function shareEndpointHost(value) {
     return value.replace(/^https?:\/\//i, '').replace(/\/+$/, '').toLowerCase();
 }
 /**
- * True when this config is the platform managed endpoint (`share.agents-cli.sh`).
- * The deploy path uses this — not "the caller is signed in" — to decide whether
- * to bind `PHOENIX_ID_BASE` on the Worker.
+ * True when this config is the platform managed endpoint (`share.getrush.ai`, or a
+ * legacy alias — `share.agents-cli.sh` / `artifacts.prix.dev` — still bound to the
+ * same Worker). The
+ * deploy path uses this — not "the caller is signed in" — to decide whether to
+ * bind `PHOENIX_ID_BASE` on the Worker.
  */
 export function isManagedShareEndpoint(cfg) {
-    const managedHost = DEFAULT_SHARE_DOMAIN.toLowerCase();
-    if (cfg.domain && shareEndpointHost(cfg.domain) === managedHost)
+    const managedHosts = new Set([DEFAULT_SHARE_DOMAIN, ...LEGACY_MANAGED_SHARE_DOMAINS].map((h) => h.toLowerCase()));
+    if (cfg.domain && managedHosts.has(shareEndpointHost(cfg.domain)))
         return true;
-    if (cfg.baseUrl && shareEndpointHost(cfg.baseUrl) === managedHost)
+    if (cfg.baseUrl && managedHosts.has(shareEndpointHost(cfg.baseUrl)))
         return true;
     return false;
 }

package/dist/lib/share/config.d.ts

@@ -1,10 +1,10 @@
 export interface ShareConfig {
-    /** Public base, e.g. `https://share.agents-cli.sh` or `https://agent-share.<acct>.workers.dev`. */
+    /** Public base, e.g. `https://share.getrush.ai` or `https://agent-share.<acct>.workers.dev`. */
     baseUrl: string;
     accountId: string;
     workerName: string;
     bucketName: string;
-    /** Custom domain when mapped (e.g. `share.agents-cli.sh`). */
+    /** Custom domain when mapped (e.g. `share.getrush.ai`). */
     domain?: string;
     /** Cloudflare Web Analytics token injected into published HTML pages. */
     analyticsToken?: string;
@@ -19,7 +19,8 @@ export declare const SHARE_TOKEN_ENV_KEY = "SHARE_WRITE_TOKEN";
 export declare const DEFAULT_CF_BUNDLE = "cloudflare";
 export declare const DEFAULT_WORKER_NAME = "agents-share";
 export declare const DEFAULT_BUCKET_NAME = "agents-share";
-export declare const DEFAULT_SHARE_DOMAIN = "share.agents-cli.sh";
+export declare const DEFAULT_SHARE_DOMAIN = "share.getrush.ai";
+export declare const LEGACY_MANAGED_SHARE_DOMAINS: readonly ["share.agents-cli.sh", "artifacts.prix.dev"];
 /** The write token may be injected ephemerally into fleet/cloud agents. */
 export declare function readWriteTokenEnv(env?: NodeJS.ProcessEnv): string | null;
 /**

package/dist/lib/share/config.js

@@ -17,7 +17,16 @@ export const SHARE_TOKEN_ENV_KEY = 'SHARE_WRITE_TOKEN';
 export const DEFAULT_CF_BUNDLE = 'cloudflare';
 export const DEFAULT_WORKER_NAME = 'agents-share';
 export const DEFAULT_BUCKET_NAME = 'agents-share';
-export const DEFAULT_SHARE_DOMAIN = 'share.agents-cli.sh';
+// The Rush product share endpoint (PHNX-3960): share.getrush.ai on the product
+// domain. Publishing prints this host; bound to the `agents-share` Worker in the
+// Phoenix CF account. share.agents-cli.sh + artifacts.prix.dev stay bound as legacy aliases.
+export const DEFAULT_SHARE_DOMAIN = 'share.getrush.ai';
+// Managed hosts still recognized as "the platform endpoint" for backward
+// compatibility. `share.agents-cli.sh` is the pre-PHNX-3960 default: it stays
+// attached to the same Worker, so every link already shared on it keeps
+// resolving, and a persisted config pointing at it is still treated as managed
+// (e.g. for deploy-time PHOENIX_ID_BASE binding). Compared lowercased.
+export const LEGACY_MANAGED_SHARE_DOMAINS = ['share.agents-cli.sh', 'artifacts.prix.dev'];
 /** The write token may be injected ephemerally into fleet/cloud agents. */
 export function readWriteTokenEnv(env = process.env) {
     const token = env[SHARE_TOKEN_ENV_KEY]?.trim();

package/dist/lib/share/delete.d.ts

@@ -31,7 +31,7 @@ export interface ResolvedShareTarget {
 /**
  * Normalize any of the three accepted target forms to the R2 key that publish
  * would have written:
- *   - a full share URL: `https://share.agents-cli.sh/<user>/<slug>`
+ *   - a full share URL: `https://share.getrush.ai/<user>/<slug>`
  *   - `<user>/<slug>`
  *   - a bare `<slug>` — resolved against the caller's own namespace exactly as
  *     `publishToEndpoint` resolves it at publish time (resolveShareUsername +

package/dist/lib/share/delete.js

@@ -13,7 +13,7 @@ import { extractShareHttpError, formatShareHttpErrorDetail } from './http-error.
 /**
  * Normalize any of the three accepted target forms to the R2 key that publish
  * would have written:
- *   - a full share URL: `https://share.agents-cli.sh/<user>/<slug>`
+ *   - a full share URL: `https://share.getrush.ai/<user>/<slug>`
  *   - `<user>/<slug>`
  *   - a bare `<slug>` — resolved against the caller's own namespace exactly as
  *     `publishToEndpoint` resolves it at publish time (resolveShareUsername +

package/dist/lib/share/html.d.ts

@@ -1,5 +1,5 @@
 /**
- * Make an HTML page self-contained enough to view on share.agents-cli.sh.
+ * Make an HTML page self-contained enough to view on share.getrush.ai.
  *
  * Chrome "Save as" (and some renderers) leave `file:///…html#section` TOC
  * links and sibling image paths. Those work on disk and 404 on the share

package/dist/lib/share/html.js

@@ -1,5 +1,5 @@
 /**
- * Make an HTML page self-contained enough to view on share.agents-cli.sh.
+ * Make an HTML page self-contained enough to view on share.getrush.ai.
  *
  * Chrome "Save as" (and some renderers) leave `file:///…html#section` TOC
  * links and sibling image paths. Those work on disk and 404 on the share

package/dist/lib/share/provision.d.ts

@@ -110,6 +110,6 @@ export declare function setWorkerSecret(apiToken: string, accountId: string, wor
 export declare function enableWorkersDev(apiToken: string, accountId: string, workerName: string, opts?: ProvisionOptions): Promise<string>;
 /** Resolve a zone id for a domain the token can see, or null if not owned/visible. */
 export declare function findZoneId(apiToken: string, domain: string, opts?: ProvisionOptions): Promise<string | null>;
-/** Map a custom hostname (e.g. `share.agents-cli.sh`) to the Worker via Workers Custom Domains. */
+/** Map a custom hostname (e.g. `share.getrush.ai`) to the Worker via Workers Custom Domains. */
 export declare function addCustomDomain(apiToken: string, accountId: string, workerName: string, zoneId: string, hostname: string, opts?: ProvisionOptions): Promise<void>;
 export {};

package/dist/lib/share/provision.js

@@ -219,7 +219,7 @@ export async function enableWorkersDev(apiToken, accountId, workerName, opts = {
 /** Resolve a zone id for a domain the token can see, or null if not owned/visible. */
 export async function findZoneId(apiToken, domain, opts = {}) {
     const request = opts.request ?? defaultCloudflareRequester;
-    // Try the exact name, then the registrable parent (share.agents-cli.sh -> agents-cli.sh).
+    // Try the exact name, then the registrable parent (share.getrush.ai -> getrush.ai).
     const candidates = [domain, domain.split('.').slice(-2).join('.')];
     for (const name of candidates) {
         const zones = await request({
@@ -232,7 +232,7 @@ export async function findZoneId(apiToken, domain, opts = {}) {
     }
     return null;
 }
-/** Map a custom hostname (e.g. `share.agents-cli.sh`) to the Worker via Workers Custom Domains. */
+/** Map a custom hostname (e.g. `share.getrush.ai`) to the Worker via Workers Custom Domains. */
 export async function addCustomDomain(apiToken, accountId, workerName, zoneId, hostname, opts = {}) {
     const request = opts.request ?? defaultCloudflareRequester;
     try {