agent-relay-server 0.28.0 → 0.29.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay-server",
-  "version": "0.28.0",
+  "version": "0.29.0",
   "description": "Lightweight HTTP message relay for inter-agent communication across machines",
   "module": "src/index.ts",
   "type": "module",
@@ -33,7 +33,7 @@
     "CONTRIBUTING.md"
   ],
   "dependencies": {
-    "agent-relay-sdk": "0.2.17"
+    "agent-relay-sdk": "0.2.18"
   },
   "scripts": {
     "prepack": "bun run build:dashboard:bundle >&2",

package/public/index.html

@@ -128066,8 +128066,42 @@ function BusyIndicator({ blockedLabel, onInterrupt }) {
 		})
 	});
 }
+var HIDE_TOOLS_KEY = "agent-relay:chat-hide-tools";
+var hideToolsStore = (() => {
+	const listeners = /* @__PURE__ */ new Set();
+	let value = (() => {
+		try {
+			return window.localStorage.getItem(HIDE_TOOLS_KEY) === "on";
+		} catch {
+			return false;
+		}
+	})();
+	const emit = () => listeners.forEach((l) => l());
+	if (typeof window !== "undefined") window.addEventListener("storage", (e) => {
+		if (e.key !== HIDE_TOOLS_KEY) return;
+		value = e.newValue === "on";
+		emit();
+	});
+	return {
+		subscribe(cb) {
+			listeners.add(cb);
+			return () => listeners.delete(cb);
+		},
+		get: () => value,
+		toggle() {
+			value = !value;
+			try {
+				window.localStorage.setItem(HIDE_TOOLS_KEY, value ? "on" : "off");
+			} catch {}
+			emit();
+		}
+	};
+})();
+function useHideTools() {
+	return [(0, import_react.useSyncExternalStore)(hideToolsStore.subscribe, hideToolsStore.get, () => false), hideToolsStore.toggle];
+}
 function ActivityTrace({ steps, showReasoning }) {
-	const [hideTools, setHideTools] = (0, import_react.useState)(false);
+	const [hideTools, toggleHideTools] = useHideTools();
 	const visible = showReasoning ? steps : steps.filter((s) => s.kind !== "reasoning");
 	if (!visible.length) return null;
 	const toolCount = visible.filter((s) => s.kind === "tool").length;
@@ -128102,7 +128136,7 @@ function ActivityTrace({ steps, showReasoning }) {
 					})]
 				}, step.id);
 			}), toolCount > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("button", {
-				onClick: () => setHideTools((v) => !v),
+				onClick: toggleHideTools,
 				className: "flex items-center gap-1 text-[11px] text-muted-foreground/50 hover:text-muted-foreground transition-colors text-left",
 				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(ChevronRight, { className: cn$2("w-3 h-3 shrink-0 transition-transform", !hideTools && "rotate-90") }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: hideTools ? `show ${toolCount} tool step${toolCount === 1 ? "" : "s"}` : "hide tool steps" })]
 			})]

package/src/agent-ref.ts

@@ -14,14 +14,14 @@
 import { STALE_TTL_MS } from "./config";
 import type { AgentCard } from "./types";
 
-export interface ResolveOptions {
+interface ResolveOptions {
   /** Exclude this agent id from matches (e.g. the requester, when pairing). */
   excludeId?: string;
   /** Clock injection for tests. */
   now?: number;
 }
 
-export type ResolveResult =
+type ResolveResult =
   | { status: "resolved"; agent: AgentCard }
   | { status: "ambiguous"; candidates: AgentCard[] }
   | { status: "not_found"; offlineMatches: AgentCard[] };
@@ -136,7 +136,7 @@ export interface DeliveryReceipt {
   reason?: string;
 }
 
-export type SendPlan =
+type SendPlan =
   // resolved/fan-out/passthrough carry the (possibly rewritten) canonical `to`
   | { kind: "direct" | "fanout" | "passthrough"; to: string; receipt: DeliveryReceipt }
   | { kind: "not_found"; message: string }

package/src/cli.ts

@@ -44,7 +44,7 @@ import {
 } from "./upgrade";
 import { formatMemoryBrokerSmokeResult, runMemoryBrokerSmoke } from "./memory-broker-smoke";
 import { MAX_BODY_BYTES, VERSION } from "./config";
-import { DEFAULT_CONTEXT_PROBE_STATE_DIR, runContextProbe } from "agent-relay-sdk/context-probe";
+import { runContextProbe } from "agent-relay-sdk/context-probe";
 import { shellQuote } from "agent-relay-sdk/shell-utils";
 import { errMessage, RELAY_TOKEN_HEADER } from "agent-relay-sdk";
 import type { WorkspaceDepsRefreshResult } from "agent-relay-sdk";
@@ -686,7 +686,7 @@ async function handleContextProbeCommand(args: string[]): Promise<void> {
   let wrapCommand: string | undefined;
   let wrapRequested = false;
   let agentId: string | undefined;
-  let stateDir = DEFAULT_CONTEXT_PROBE_STATE_DIR;
+  let stateDir: string | undefined;
   let standalone = false;
 
   for (let i = 0; i < inputArgs.length; i++) {
@@ -718,7 +718,7 @@ async function handleContextProbeCommand(args: string[]): Promise<void> {
       "context-probe",
       ...(wrapRequested ? ["--wrap", ...(wrapCommand ? [shellQuote(wrapCommand)] : [])] : ["--standalone"]),
       ...(agentId ? ["--agent-id", shellQuote(agentId)] : []),
-      ...(stateDir !== DEFAULT_CONTEXT_PROBE_STATE_DIR ? ["--state-dir", shellQuote(stateDir)] : []),
+      ...(stateDir ? ["--state-dir", shellQuote(stateDir)] : []),
     ].join(" ");
     console.log(command);
     return;

package/src/contracts.ts

@@ -21,7 +21,7 @@ export interface RuntimePackageMetadata {
   version: string;
 }
 
-export interface ContractRequirement {
+interface ContractRequirement {
   min: number;
   maxExclusive: number;
 }

package/src/db.ts

@@ -1,6 +1,6 @@
 import { Database } from "bun:sqlite";
 import { randomUUID } from "node:crypto";
-import { isRecord, stringValue } from "agent-relay-sdk";
+import { isRecord, stringValue, isMechanicalMessageKind } from "agent-relay-sdk";
 import { ORCHESTRATOR_PROTOCOL_VERSION, VERSION } from "./config.ts";
 import { parseJson } from "./utils";
 import {
@@ -4331,7 +4331,7 @@ function messageRequiresReply(message: Message): boolean {
   // Server-owned notification flag (#283) wins over every kind/sender heuristic below: an
   // explicit replyExpected:false is a fire-and-forget message that must never become an obligation.
   if (message.replyExpected === false) return false;
-  if (message.kind === "system" || message.kind === "control" || message.kind === "session") return false;
+  if (isMechanicalMessageKind(message.kind)) return false;
   if (message.from === "user") return true;
   if (message.kind === "task" || message.kind === "channel.event") return true;
   return Boolean(message.payload?.source);
@@ -4793,7 +4793,7 @@ export type AnalyticsPeriod = keyof typeof ANALYTICS_PERIODS;
 // Message → category, the ONE place this mapping lives (server-side SQL). Order is
 // significant: a claimable/system/pair/channel message is classified as such even
 // when it is also a reply; only an otherwise-plain reply counts as "Replies".
-export const ANALYTICS_CATEGORIES = ["Messages", "Replies", "Work items", "System", "Pair", "Channel"] as const;
+const ANALYTICS_CATEGORIES = ["Messages", "Replies", "Work items", "System", "Pair", "Channel"] as const;
 export type AnalyticsCategory = (typeof ANALYTICS_CATEGORIES)[number];
 const ANALYTICS_CATEGORY_SQL = `
   CASE
@@ -5453,7 +5453,7 @@ export function setWorkspaceBranch(id: string, branch: string, baseSha?: string)
 // of these is a candidate steward; the repo is worth coordinating.
 const STEWARD_LIVE_STATUSES = "'active', 'ready', 'conflict', 'review_requested', 'merge_planned'";
 
-export interface RepoStewardRecord {
+interface RepoStewardRecord {
   repoRoot: string;
   stewardAgentId?: string;
   lastStewardAgentId?: string;
@@ -5570,7 +5570,7 @@ function electWorkspaceStewardsForAgent(agentId: string): void {
 
 // --- Per-repo merge serialization lease (issue #157) -----------------------
 
-export interface MergeLeaseRecord {
+interface MergeLeaseRecord {
   repoRoot: string;
   workspaceId: string;
   commandId?: string;

package/src/http-body.ts

@@ -1,5 +1,5 @@
 /** Concatenate body chunks into a single contiguous Uint8Array. */
-export function concatBytes(chunks: Uint8Array[]): Uint8Array {
+function concatBytes(chunks: Uint8Array[]): Uint8Array {
   const total = chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);
   const output = new Uint8Array(total);
   let offset = 0;

package/src/insights-db.ts

@@ -46,7 +46,7 @@ function rowToObservation(row: ObservationRow): InsightObservation {
   };
 }
 
-export interface RecordObservationInput {
+interface RecordObservationInput {
   sessionId: string;
   agentId?: string;
   project?: string;
@@ -99,7 +99,7 @@ export function getObservation(id: number): InsightObservation | null {
   return row ? rowToObservation(row) : null;
 }
 
-export interface ListObservationsQuery {
+interface ListObservationsQuery {
   project?: string;
   signal?: string;
   sessionId?: string;

package/src/lifecycle-manager.ts

@@ -8,6 +8,7 @@ import {
   upsertManagedAgentState,
 } from "./config-store";
 import { emitRelayEvent } from "./events";
+import { emitMessageDeliveryUpdated } from "./sse";
 import { emitCommandEvent } from "./command-events";
 import { buildManagedSpawnParams } from "./managed-policy";
 import { generateSpawnRequestId } from "./spawn-command";
@@ -95,6 +96,9 @@ export class LifecycleManager {
         subject: `policy:${meta.policyName}`,
         data: { policyName: meta.policyName, agentId, messageIds: available.map((message) => message.id), count: available.length },
       });
+      // queued → pending changed delivery_status; refresh the dashboard delivery
+      // badge now rather than letting it sit stale until the next poll (#265).
+      for (const message of available) emitMessageDeliveryUpdated(message);
     }
   }
 

package/src/managed-policy.ts

@@ -20,7 +20,7 @@ export function effectiveManagedPolicyWorkspaceMode(policy: SpawnPolicy): Worksp
   return policy.binding?.type === "channel" ? "shared" : "inherit";
 }
 
-export interface ManagedSpawnContext {
+interface ManagedSpawnContext {
   createdBy: string;
   requestedAt?: number;
 }

package/src/notify.ts

@@ -2,7 +2,7 @@ import { sendMessage } from "./db";
 import { emitNewMessage } from "./sse";
 import type { Message, MessageKind } from "./types";
 
-export interface SystemNotifyOptions {
+interface SystemNotifyOptions {
   subject?: string;
   body: string;
   payload?: Record<string, unknown>;

package/src/orchestrator-lookup.ts

@@ -1,6 +1,6 @@
 import { listOrchestrators } from "./db";
 
-export interface ManagedAgentMatch {
+interface ManagedAgentMatch {
   agentId?: string;
   sessionName?: string;
   tmuxSession?: string;

package/src/routes.ts

@@ -163,7 +163,7 @@ import { planSend } from "./agent-ref";
 import { defaultProviderConfig, loadProviderConfig, providerConfigPublic, writeProviderConfig } from "../runner/src/config";
 import type { ProviderConfig } from "../runner/src/adapter";
 import { type ProviderEffort } from "agent-relay-sdk/provider-catalog";
-import { errMessage, isRecord, SPAWN_PROVIDERS, VALID_WORKSPACE_MODES, VALID_EFFORTS, APPROVAL_MODES, RELAY_TOKEN_HEADER } from "agent-relay-sdk";
+import { errMessage, isRecord, SPAWN_PROVIDERS, VALID_WORKSPACE_MODES, VALID_EFFORTS, APPROVAL_MODES, RELAY_TOKEN_HEADER, isMechanicalMessageKind, isReservedAgentId } from "agent-relay-sdk";
 import { effectiveProviderCatalogList } from "./provider-catalog-store";
 import { buildManagedSpawnParams, effectiveManagedPolicyWorkspaceMode } from "./managed-policy";
 import { buildSpawnCommand, generateSpawnRequestId, resolveSpawnModelParams, type SpawnModelParams } from "./spawn-command";
@@ -1282,7 +1282,13 @@ const postAgent: Handler = async (req) => {
         const available = resolveQueuedPolicyMessages(policyName, agent.id);
         if (available.length) {
           emitMessageAvailable(policyName, agent.id, available);
-          for (const message of available) emitNewMessage(message);
+          for (const message of available) {
+            emitNewMessage(message);
+            // queued → pending flips delivery_status; the dashboard dedups message.new
+            // by id (the message already shows as "queued"), so without an explicit
+            // delivery_updated the badge stays stale until the next poll (#265).
+            emitMessageDeliveryUpdated(message);
+          }
         }
       }
     }
@@ -5181,9 +5187,20 @@ const postMessage: Handler = async (req) => {
     }
     applyReplyRouting(input);
     if (!input.to) return error("to is required (or provide replyTo to auto-route)");
+    // Mechanical lifecycle/observability posts (system/control/session) addressed to a
+    // reserved sink ("user"/"system") are the relay's own lane, not agent-directed
+    // messaging. A managed token's recipient constraints (targets/policies/agents) gate
+    // which *agents* it may message — they must NOT gate a session-mirror capture to the
+    // reserved sink, or constrained tokens (telegram policy, codex steward) 403 → the
+    // runner's outbox retries 12× and poisons the record → the dashboard silently loses
+    // the turn (#284, same outbox-poison failure mode as #184). The message:send scope
+    // and any channel constraint still apply; we only drop the target/agentId predicate.
+    const reservedSinkPost = isMechanicalMessageKind(input.kind) && isReservedAgentId(input.to);
     const denied = authorizeRoute(req, {
       scope: "message:send",
-      resource: { target: input.to, channel: input.channel, agentId: input.from },
+      resource: reservedSinkPost
+        ? { channel: input.channel }
+        : { target: input.to, channel: input.channel, agentId: input.from },
     });
     if (denied) return denied;
     // Resolve the target through the shared planner — the SAME matcher the MCP send tool
@@ -5198,8 +5215,7 @@ const postMessage: Handler = async (req) => {
     // "session" = observed assistant turn (Phase 1 live-session lane). It is captured
     // from the provider transcript and stored for the dashboard chat; it must persist
     // regardless of target liveness and never be re-delivered into a session.
-    const bypassKinds = ["system", "control", "session"];
-    if (!bypassKinds.includes(input.kind ?? "")) {
+    if (!isMechanicalMessageKind(input.kind)) {
       const plan = planSend(input.to, listAgents());
       if (plan.kind === "ambiguous") return error(plan.message, 409);
       if (plan.kind !== "not_found") input.to = plan.to;
@@ -5249,7 +5265,7 @@ const postMessage: Handler = async (req) => {
 };
 
 function automaticMemoryTarget(message: { to: string; resolvedToAgent?: string; kind: string }): string | null {
-  if (message.kind === "system" || message.kind === "control" || message.kind === "session") return null;
+  if (isMechanicalMessageKind(message.kind)) return null;
   const target = message.resolvedToAgent ?? message.to;
   if (!isDirectTarget(target)) return null;
   const agent = getAgent(target);

package/src/runtime-tokens.ts

@@ -118,7 +118,7 @@ export function issueRunnerRuntimeToken(input: {
   });
 }
 
-export function issueChildRunnerRuntimeToken(input: {
+function issueChildRunnerRuntimeToken(input: {
   parentAgentId: string;
   orchestratorId: string;
   cwd: string;
@@ -239,7 +239,7 @@ export function runnerRuntimeTokenEnv(input: {
   };
 }
 
-export function childRunnerRuntimeTokenEnv(input: {
+function childRunnerRuntimeTokenEnv(input: {
   parentAgentId: string;
   orchestratorId: string;
   cwd: string;

package/src/security.ts

@@ -200,6 +200,9 @@ export function requiredScopeFor(method: string, pathname: string): string | nul
   if (pathname.startsWith("/api/maintenance")) return "system:admin";
   if (pathname.startsWith("/api/tasks")) return method === "GET" ? "task:read" : "task:write";
   if (pathname.startsWith("/api/pairs")) return method === "GET" ? "pairs:read" : "pairs:write";
+  // Insights config (the feature toggle) stays admin-only via the default; only the
+  // mechanical observation feed is writable by lower-privilege callers.
+  if (pathname === "/api/insights/observations") return method === "GET" ? "insights:read" : "insights:write";
   if (pathname.startsWith("/api/system/")) return "system:admin";
   return null;
 }
@@ -268,6 +271,11 @@ export function requiredComponentScopeFor(method: string, pathname: string): str
   if (pathname.startsWith("/api/agent-profiles")) return method === "GET" ? "agent:read" : "agent:write";
   if (pathname.startsWith("/api/tasks")) return method === "GET" ? "task:read" : "task:write";
   if (pathname.startsWith("/api/orchestrators")) return method === "GET" ? "agent:read" : "command:write";
+  // The Runner posts the #184 context-gathering signal here (source:"server") via its
+  // provider token. Without this case the path fell through to the system:admin default
+  // below and every observation was 403-dropped — the whole Insights feed stayed empty.
+  // Config (the feature toggle) intentionally keeps falling through to system:admin.
+  if (pathname === "/api/insights/observations") return method === "GET" ? "insights:read" : "insights:write";
   if (pathname.startsWith("/api/system/")) return "system:admin";
   return "system:admin";
 }

package/src/spawn-command.ts

@@ -17,7 +17,7 @@ export function generateSpawnRequestId(): string {
   return `sp_${randomUUID()}`;
 }
 
-export interface ResolveSpawnModelParamsOptions {
+interface ResolveSpawnModelParamsOptions {
   /**
    * What to do when provider-catalog resolution throws (e.g. unknown model, or
    * effort without a model):
@@ -69,7 +69,7 @@ export function resolveSpawnModelParams(
  * Every field that can appear in a spawn command-bus payload.
  * Optional fields are omitted from the result when undefined.
  */
-export interface BuildSpawnCommandOptions {
+interface BuildSpawnCommandOptions {
   provider: SpawnProvider | string;
   cwd: string;
   /** Correlation id; omitted from the payload when absent (e.g. automation spawns use automationRunId instead). */

package/src/token-db.ts

@@ -57,7 +57,7 @@ const BUILT_IN_PROFILES: Array<Omit<TokenProfile, "createdAt" | "updatedAt">> =
     name: "Provider Agent",
     description: "Coding-agent runtime access for messages, commands, tasks, and scoped memory reads.",
     role: "provider",
-    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use"],
+    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "insights:write"],
     ttlSeconds: 24 * 60 * 60,
     builtIn: true,
     createdBy: "system",
@@ -67,7 +67,7 @@ const BUILT_IN_PROFILES: Array<Omit<TokenProfile, "createdAt" | "updatedAt">> =
     name: "Provider Child Agent",
     description: "Delegated child-agent runtime access, constrained to its parent and spawn request.",
     role: "provider",
-    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use"],
+    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "insights:write"],
     constraints: { canDelegate: false },
     ttlSeconds: 2 * 60 * 60,
     builtIn: true,
@@ -78,7 +78,7 @@ const BUILT_IN_PROFILES: Array<Omit<TokenProfile, "createdAt" | "updatedAt">> =
     name: "Provider Interactive Agent",
     description: "User-launched provider runtime access constrained to its own agent and cwd for long interactive sessions.",
     role: "provider",
-    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use"],
+    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "insights:write"],
     constraints: { terminalAttach: false, logsRead: false, canDelegate: false },
     ttlSeconds: 30 * 24 * 60 * 60,
     builtIn: true,

package/src/upgrade.ts

@@ -249,7 +249,7 @@ export function createUpgradePlan(snapshot: UpgradeSnapshot, options: UpgradeOpt
   };
 }
 
-export type ExecuteUpgradeOptions = {
+type ExecuteUpgradeOptions = {
   dryRun?: boolean;
   runner?: Runner;
   /** Re-register grace window for post-restart version checks (default 30s). */

package/src/workspace-actions.ts

@@ -41,7 +41,7 @@ export const WORKSPACE_ACTIONS = [
 ] as const;
 export type WorkspaceAction = (typeof WORKSPACE_ACTIONS)[number];
 
-export interface ApplyWorkspaceActionInput {
+interface ApplyWorkspaceActionInput {
   action: WorkspaceAction;
   agentId?: string;
   detail?: string;
@@ -62,7 +62,7 @@ export interface ApplyWorkspaceActionInput {
   auditMetadata?: Record<string, unknown>;
 }
 
-export type WorkspaceActionResult =
+type WorkspaceActionResult =
   | {
       ok: true;
       httpStatus: number;
@@ -320,10 +320,10 @@ export function buildWorkspaceDepsRefreshCommand(
   return { ok: true, command };
 }
 
-export const DEFAULT_WORKSPACE_WAIT_MS = 300_000;
-export const MAX_WORKSPACE_WAIT_MS = 600_000;
+const DEFAULT_WORKSPACE_WAIT_MS = 300_000;
+const MAX_WORKSPACE_WAIT_MS = 600_000;
 
-export interface WaitForWorkspaceResult {
+interface WaitForWorkspaceResult {
   workspace: WorkspaceRecord | null;
   /** The status when the wait began. */
   fromStatus?: WorkspaceStatus;

package/src/workspace-claim.ts

@@ -4,9 +4,9 @@ import type { WorkspaceRecord } from "./types";
 // auto-merge (Layer 0) doesn't race it (#208 / steward report §1). The claim is a
 // TTL'd lease stored in row metadata, so a dead steward can't block the workspace
 // forever — it expires and auto-merge resumes. Renew by re-claiming.
-export const STEWARD_CLAIM_TTL_MS = Number(process.env.AGENT_RELAY_WORKSPACE_CLAIM_TTL_MS) || 15 * 60_000;
+const STEWARD_CLAIM_TTL_MS = Number(process.env.AGENT_RELAY_WORKSPACE_CLAIM_TTL_MS) || 15 * 60_000;
 
-export interface WorkspaceClaim {
+interface WorkspaceClaim {
   by?: string;
   purpose?: string;
   claimedAt?: number;

package/src/workspace-merge.ts

@@ -10,7 +10,7 @@ import {
 import type { Command, WorkspaceMergeStrategy, WorkspaceRecord } from "./types";
 import { isPathWithinBase } from "./utils";
 
-export interface RequestWorkspaceMergeOptions {
+interface RequestWorkspaceMergeOptions {
   /** Who asked for the merge (lease holder + audit). e.g. an agent id, "dashboard", "auto-merge". */
   requestedBy: string;
   /** Merge strategy; "auto" lets the host pick pr-vs-rebase-ff. Defaults to "auto". */
@@ -26,7 +26,7 @@ export interface RequestWorkspaceMergeOptions {
   metadata?: Record<string, unknown>;
 }
 
-export type RequestWorkspaceMergeResult =
+type RequestWorkspaceMergeResult =
   | { ok: true; command: Command; workspace: WorkspaceRecord }
   | { ok: false; status: number; error: string };
 

package/src/workspace-orphans.ts

@@ -141,7 +141,7 @@ function knownRepoRoots(workspaces: WorkspaceRecord[]): string[] {
   return [...new Set(workspaces.map((ws) => ws.repoRoot).filter(Boolean))];
 }
 
-export interface CollectOrphansResult {
+interface CollectOrphansResult {
   orphans: WorkspaceOrphan[];
   /** Live isolated rows whose worktree is missing on disk (DB→disk drift). */
   missingWorktrees: Array<{

package/src/workspace-phase.ts

@@ -71,7 +71,7 @@ export function worktreeReapable(state: WorktreeReapState | null | undefined): b
 // instead of the old behavior where it looked healthy for 90 minutes.
 export const LAND_PENDING_STALL_MS = 15 * 60 * 1000;
 
-export type WorkspacePhase =
+type WorkspacePhase =
   | "working" // active — your turn: commit, then mark ready
   | "land-pending" // ready | review_requested — handed off; auto-merge will land it
   | "landing" // merge_planned — merge dispatched, in progress
@@ -79,7 +79,7 @@ export type WorkspacePhase =
   | "landed" // merged — on the base; a fresh rebased branch is coming
   | "closed"; // abandoned | cleanup_requested | cleaned — torn down
 
-export interface WorkspaceNextAction {
+interface WorkspaceNextAction {
   /** MCP tool to call (when the agent is on the MCP surface). */
   tool?: string;
   /** Equivalent CLI invocation (when the agent is on the shell surface). */