@phnx-labs/agents-cli 1.22.77 → 1.22.78

package/CHANGELOG.md

@@ -1,6 +1,8 @@
 # Changelog
 
-## 1.22.77
+## 1.22.78
+
+- **The launch env carries the human's Phoenix ID profile picture.** A resolved human actor now gets `AGENTS_ACTOR_AVATAR` (https URL) when the Phoenix ID session signed in on the device belongs to the same email, so tools an agent runs — `artifacts render`, shares — can show the person instead of initials. A shared box signed in as someone else lends nothing to whoever SSH-ed in, and a child spawn inherits the value like the rest of `AGENTS_ACTOR*`. `agents auth whoami` now also refreshes the persisted picture from `/api/v1/auth/me`, which Phoenix ID returns as of phnx-labs/phoenix-id#7. Source: `cli/src/lib/actor.ts`, `cli/src/commands/auth.ts`.
 
 - **`agents repo pull` / `agents sync` no longer wedge on a CLI-regenerated `~/.agents/agents.yaml` (PHNX-3968).** The shared central config was rewritten by config commands without being committed, so between the daemon's publish ticks the tree sat dirty on `agents.yaml`; an incoming peer commit that also touched it made the pull refuse with *"incoming changes touch uncommitted paths: agents.yaml"*, forcing manual autostash gymnastics on the fleet. Central config edits are now committed synchronously by the command that makes them (after the meta lock releases, skipped for the daemon whose own publish tick owns its commits), so the tree is clean at rest and the trip cannot occur. A genuinely dirty-and-differing central file now *refuses* the pull (data-safe, self-heals on the next commit) rather than silently taking the remote copy. The user-repo `CHANGELOG.md` (a duplicate of the shipped one) is de-tracked via `.git/info/exclude` so it stops churning the tree. Source: `cli/src/lib/state.ts`, `cli/src/lib/git.ts`, `cli/src/lib/browser/registry.ts`, `cli/src/lib/project-resources.ts`.
 

package/dist/commands/auth.js

@@ -1,5 +1,5 @@
 import chalk from 'chalk';
-import { PhoenixApiError, clearSession, createSpace, createSpaceInvite, fetchWhoAmI, listSpaceMembers, listSpaces, pollDeviceToken, readSession, removeSpaceMember, resolveMemberFromList, resolveSpaceFromList, slugify, startDeviceAuthorization, updateSpaceMemberRole, writeSession, } from '../lib/identity/index.js';
+import { PhoenixApiError, clearSession, createSpace, createSpaceInvite, fetchWhoAmI, listSpaceMembers, listSpaces, pollDeviceToken, readSession, refreshSessionAvatar, removeSpaceMember, resolveMemberFromList, resolveSpaceFromList, slugify, startDeviceAuthorization, updateSpaceMemberRole, writeSession, } from '../lib/identity/index.js';
 import { setHelpSections } from '../lib/help.js';
 import { runOrDie } from '../lib/format.js';
 import { registerMintCommand } from './auth-mint.js';
@@ -60,6 +60,9 @@ async function whoami(json) {
     }
     try {
         const me = await fetchWhoAmI();
+        // Keep the persisted profile picture current: the actor env and share
+        // attribution read it from the session file, never from the network.
+        await refreshSessionAvatar(me);
         if (json) {
             console.log(JSON.stringify({ signedIn: true, ...me }, null, 2));
             return;

package/dist/lib/actor.d.ts

@@ -1,3 +1,4 @@
+import { type PhoenixSession } from './identity/client.js';
 import type { ActorConfig } from './types.js';
 export type ActorKind = 'human' | 'agent';
 export interface ResolvedActor {
@@ -20,6 +21,13 @@ export interface ResolvedActor {
      * happens to be signed into tailscale with.
      */
     phoenixId?: string;
+    /**
+     * The human's hosted profile picture (https URL) from the Phoenix ID session
+     * signed in on this device, attached only when that session belongs to the
+     * same email as the resolved actor. Rides the env as `AGENTS_ACTOR_AVATAR` so
+     * tools the agent runs (artifacts, shares) can show the person, not initials.
+     */
+    avatarUrl?: string;
 }
 /** Result of `tailscale whois --json <ip>` we care about. */
 export interface WhoisIdentity {
@@ -34,6 +42,13 @@ export interface WhoisIdentity {
  * from the tailnet DisplayName + login email.
  */
 export declare function actorFromIdentity(who: WhoisIdentity | undefined, host: string, actors: Record<string, ActorConfig>): ResolvedActor;
+/**
+ * The Phoenix ID profile picture for a resolved human, when the session signed
+ * in on this device is that same person (matched on email, case-insensitive).
+ * A shared box signed in as someone else must not lend its picture to whoever
+ * SSH-ed in, so a mismatch yields nothing. Pure: the session is injected.
+ */
+export declare function actorAvatar(actor: ResolvedActor, session: PhoenixSession | null): string | undefined;
 /**
  * Injectable tailscale resolvers, so tests can drive the SSH-whois and
  * local-self branches deterministically without a real tailscale on the box
@@ -43,6 +58,8 @@ export declare function actorFromIdentity(who: WhoisIdentity | undefined, host:
 export interface ActorResolvers {
     whois: (ip: string) => WhoisIdentity | undefined;
     self: () => WhoisIdentity | undefined;
+    /** The Phoenix ID session on this device (a local file read, no network). */
+    session: () => PhoenixSession | null;
 }
 /**
  * Compute the actor for a given environment. The only impurity is the tailscale

package/dist/lib/actor.js

@@ -25,6 +25,7 @@
 import { spawnSync } from 'child_process';
 import { machineId } from './machine-id.js';
 import { parseSshConnection } from './session/provenance.js';
+import { readSession } from './identity/client.js';
 import { readMeta } from './state.js';
 /** Hard cap on the whois shell-out — it runs on the spawn hot path. */
 const WHOIS_TIMEOUT_MS = 2000;
@@ -145,9 +146,28 @@ function inheritedActor(env) {
         email: env.AGENTS_ACTOR_EMAIL || undefined,
         github: env.AGENTS_ACTOR_GITHUB || undefined,
         phoenixId: env.AGENTS_ACTOR_PHOENIX_ID || undefined,
+        avatarUrl: httpsUrl(env.AGENTS_ACTOR_AVATAR),
     };
 }
-const defaultResolvers = { whois: tailscaleWhois, self: tailscaleSelf };
+/** An avatar is only ever an https URL; anything else is not an avatar. */
+function httpsUrl(value) {
+    const trimmed = value?.trim();
+    return trimmed && /^https:\/\/\S+$/i.test(trimmed) ? trimmed : undefined;
+}
+/**
+ * The Phoenix ID profile picture for a resolved human, when the session signed
+ * in on this device is that same person (matched on email, case-insensitive).
+ * A shared box signed in as someone else must not lend its picture to whoever
+ * SSH-ed in, so a mismatch yields nothing. Pure: the session is injected.
+ */
+export function actorAvatar(actor, session) {
+    if (actor.kind !== 'human' || !actor.email || !session?.email)
+        return undefined;
+    if (actor.email.trim().toLowerCase() !== session.email.trim().toLowerCase())
+        return undefined;
+    return httpsUrl(session.avatarUrl);
+}
+const defaultResolvers = { whois: tailscaleWhois, self: tailscaleSelf, session: readSession };
 /**
  * Compute the actor for a given environment. The only impurity is the tailscale
  * shell-out (injectable via `resolvers`), so tests drive every branch explicitly.
@@ -171,7 +191,9 @@ export function computeActor(env = process.env, resolvers = defaultResolvers) {
     // UNRESOLVED rather than being misattributed to the box's owner.
     if (!who && !sshRaw)
         who = resolvers.self();
-    return actorFromIdentity(who, machineId(), readActors());
+    const actor = actorFromIdentity(who, machineId(), readActors());
+    const avatarUrl = actorAvatar(actor, resolvers.session());
+    return avatarUrl ? { ...actor, avatarUrl } : actor;
 }
 let cached;
 let resolverOverride;
@@ -220,6 +242,8 @@ export function actorEnv(actor) {
         env.AGENTS_ACTOR_GITHUB = actor.github;
     if (actor.phoenixId)
         env.AGENTS_ACTOR_PHOENIX_ID = actor.phoenixId;
+    if (actor.avatarUrl)
+        env.AGENTS_ACTOR_AVATAR = actor.avatarUrl;
     if (actor.kind === 'human' && actor.name && actor.email) {
         env.GIT_AUTHOR_NAME = actor.name;
         env.GIT_AUTHOR_EMAIL = actor.email;

package/dist/lib/identity/index.d.ts

@@ -48,15 +48,17 @@ export declare function startDeviceAuthorization(): Promise<DeviceAuthorization>
 export declare function pollDeviceToken(deviceCode: string): Promise<DevicePoll>;
 export declare function fetchWhoAmI(token?: string): Promise<WhoAmI>;
 /**
- * Best-effort fill of the session's hosted avatar (PHNX-3547): sessions written
- * before the CLI tracked avatars have none, so ask `/api/v1/auth/me` and merge
- * a hosted `avatar_url` into the persisted session — future publishes then
- * stamp the OAuth profile image instead of only a Gravatar hash. A no-op when
- * signed out, when an avatar is already stored, or when the server exposes
- * none; network/server failures are swallowed (the share attribution falls
- * back to Gravatar/initials either way).
+ * Keep the session's hosted avatar current (PHNX-3547): merge the `avatar_url`
+ * Phoenix ID reports on `/api/v1/auth/me` into the persisted session, so the
+ * actor env and share attribution can stamp the profile image instead of only
+ * a Gravatar hash. Pass `known` when the caller already fetched `/auth/me`
+ * (whoami) — then a changed picture is written too. Without it, a session that
+ * already carries a picture is left alone rather than spending a network round
+ * trip to re-check it (the share publish path). A no-op when signed out or when
+ * the server exposes none; network/server failures are swallowed (the Gravatar
+ * fallback covers attribution either way).
  */
-export declare function refreshSessionAvatar(): Promise<void>;
+export declare function refreshSessionAvatar(known?: WhoAmI): Promise<void>;
 export interface SpaceSummary {
     id: string;
     slug: string;

package/dist/lib/identity/index.js

@@ -39,22 +39,26 @@ export function fetchWhoAmI(token) {
     return phoenixRequest('GET', '/api/v1/auth/me', { token });
 }
 /**
- * Best-effort fill of the session's hosted avatar (PHNX-3547): sessions written
- * before the CLI tracked avatars have none, so ask `/api/v1/auth/me` and merge
- * a hosted `avatar_url` into the persisted session — future publishes then
- * stamp the OAuth profile image instead of only a Gravatar hash. A no-op when
- * signed out, when an avatar is already stored, or when the server exposes
- * none; network/server failures are swallowed (the share attribution falls
- * back to Gravatar/initials either way).
+ * Keep the session's hosted avatar current (PHNX-3547): merge the `avatar_url`
+ * Phoenix ID reports on `/api/v1/auth/me` into the persisted session, so the
+ * actor env and share attribution can stamp the profile image instead of only
+ * a Gravatar hash. Pass `known` when the caller already fetched `/auth/me`
+ * (whoami) — then a changed picture is written too. Without it, a session that
+ * already carries a picture is left alone rather than spending a network round
+ * trip to re-check it (the share publish path). A no-op when signed out or when
+ * the server exposes none; network/server failures are swallowed (the Gravatar
+ * fallback covers attribution either way).
  */
-export async function refreshSessionAvatar() {
+export async function refreshSessionAvatar(known) {
     const session = readSession();
-    if (!session || session.avatarUrl)
+    if (!session)
+        return;
+    if (!known && session.avatarUrl)
         return;
     try {
-        const me = await fetchWhoAmI();
+        const me = known ?? (await fetchWhoAmI());
         const hosted = me.avatar_url?.trim();
-        if (hosted && /^https:\/\//i.test(hosted)) {
+        if (hosted && /^https:\/\//i.test(hosted) && hosted !== session.avatarUrl) {
             writeSession({ ...session, avatarUrl: hosted });
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phnx-labs/agents-cli",
-  "version": "1.22.77",
+  "version": "1.22.78",
   "description": "One CLI for all your AI coding agents - versions, config, cloud dispatch, sessions, and teams (now with first-class Grok Build CLI support)",
   "type": "module",
   "main": "dist/index.js",