agent-yes 1.116.0 → 1.117.0

package/dist/SUPPORTED_CLIS-DK9PO6Y6.js

@@ -0,0 +1,8 @@
+import "./ts-B4lhxCQx.js";
+import "./logger-B9h0djqx.js";
+import "./versionChecker-CS7qsffQ.js";
+import "./pidStore-DBjlqzo8.js";
+import "./globalPidIndex-yVd3mbsV.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DQYx5cvl.js";
+
+export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-DuCEAzP9.js → SUPPORTED_CLIS-DQYx5cvl.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-DvnOmOAf.js";
+import { t as CLIS_CONFIG } from "./ts-B4lhxCQx.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-DuCEAzP9.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-DQYx5cvl.js.map

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 import { n as logger } from "./logger-B9h0djqx.js";
-import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-DeXuTfJ0.js";
+import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-CS7qsffQ.js";
 import { argv } from "process";
 import { execFileSync, spawn } from "child_process";
 import ms from "ms";
@@ -482,7 +482,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 {
 	const rawArg = process.argv[2];
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-CxHjPXEH.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-BuLieGot.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		cmdHelp();
 		process.exit(0);
@@ -515,7 +515,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-vFwB3bnK.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DK9PO6Y6.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-DvnOmOAf.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-B4lhxCQx.js";
 import "./logger-B9h0djqx.js";
-import "./versionChecker-DeXuTfJ0.js";
+import "./versionChecker-CS7qsffQ.js";
 import "./pidStore-DBjlqzo8.js";
 import "./globalPidIndex-yVd3mbsV.js";
 

package/dist/{serve-CSupgu7Q.js → serve-DJthZQAN.js}

@@ -1,11 +1,11 @@
-import "./ts-DvnOmOAf.js";
+import "./ts-B4lhxCQx.js";
 import "./logger-B9h0djqx.js";
-import { r as getInstalledPackage } from "./versionChecker-DeXuTfJ0.js";
+import { r as getInstalledPackage } from "./versionChecker-CS7qsffQ.js";
 import "./pidStore-DBjlqzo8.js";
 import "./globalPidIndex-yVd3mbsV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DuCEAzP9.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DQYx5cvl.js";
 import "./remotes-C3xPRtfg.js";
-import { c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, m as snapshotStatus, r as controlCodeFromName, u as readNotes } from "./subcommands-DLJqD_Yj.js";
+import { c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, m as snapshotStatus, r as controlCodeFromName, u as readNotes } from "./subcommands-B_JJRHkV.js";
 import yargs from "yargs";
 import { mkdir, open, readFile, writeFile } from "fs/promises";
 import { homedir, hostname, userInfo } from "os";
@@ -51,6 +51,21 @@ const defaultOpts = (overrides = {}) => ({
 	cwdScope: null,
 	...overrides
 });
+const SESSION_PIN_ENV = new Set([
+	"CLAUDECODE",
+	"CLAUDE_CODE_SSE_PORT",
+	"CLAUDE_CODE_SESSION_ID",
+	"CLAUDE_CODE_CHILD_SESSION",
+	"CLAUDE_CODE_ENTRYPOINT"
+]);
+function freshAgentEnv() {
+	const env = {};
+	for (const [k, v] of Object.entries(process.env)) {
+		if (v === void 0 || SESSION_PIN_ENV.has(k)) continue;
+		env[k] = v;
+	}
+	return env;
+}
 const DAEMON_NAME = "agent-yes";
 async function ensureBootAutostart(oxmgrBin) {
 	try {
@@ -669,6 +684,7 @@ Options:
 					...prompt ? ["--", prompt] : []
 				], {
 					cwd,
+					env: freshAgentEnv(),
 					stdin: "ignore",
 					stdout: "ignore",
 					stderr: "ignore"
@@ -773,4 +789,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-CSupgu7Q.js.map
+//# sourceMappingURL=serve-DJthZQAN.js.map

package/dist/{subcommands-DLJqD_Yj.js → subcommands-B_JJRHkV.js}

@@ -163,7 +163,7 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-CSupgu7Q.js");
+				const { cmdServe } = await import("./serve-DJthZQAN.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
@@ -1595,4 +1595,4 @@ async function cmdStatus(rest) {
 
 //#endregion
 export { finalizedLines as a, listRecords as c, renderRawLog as d, resolveOne as f, writeToIpc as g, stopTipForCli as h, cursorAbs as i, matchKeyword as l, snapshotStatus as m, cmdHelp as n, isPidAlive as o, runSubcommand as p, controlCodeFromName as r, isSubcommand as s, GRACEFUL_EXIT_COMMANDS as t, readNotes as u };
-//# sourceMappingURL=subcommands-DLJqD_Yj.js.map
+//# sourceMappingURL=subcommands-B_JJRHkV.js.map

package/dist/{subcommands-CxHjPXEH.js → subcommands-BuLieGot.js}

@@ -1,6 +1,6 @@
 import "./logger-B9h0djqx.js";
 import "./globalPidIndex-yVd3mbsV.js";
 import "./remotes-C3xPRtfg.js";
-import { a as finalizedLines, c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, h as stopTipForCli, i as cursorAbs, l as matchKeyword, m as snapshotStatus, n as cmdHelp, o as isPidAlive, p as runSubcommand, r as controlCodeFromName, s as isSubcommand, t as GRACEFUL_EXIT_COMMANDS, u as readNotes } from "./subcommands-DLJqD_Yj.js";
+import { a as finalizedLines, c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, h as stopTipForCli, i as cursorAbs, l as matchKeyword, m as snapshotStatus, n as cmdHelp, o as isPidAlive, p as runSubcommand, r as controlCodeFromName, s as isSubcommand, t as GRACEFUL_EXIT_COMMANDS, u as readNotes } from "./subcommands-B_JJRHkV.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{ts-DvnOmOAf.js → ts-B4lhxCQx.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-B9h0djqx.js";
-import { r as getInstalledPackage } from "./versionChecker-DeXuTfJ0.js";
+import { r as getInstalledPackage } from "./versionChecker-CS7qsffQ.js";
 import { n as agentYesHome, t as PidStore } from "./pidStore-DBjlqzo8.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CJxsoGdb.js";
 import { i as readGlobalPids } from "./globalPidIndex-yVd3mbsV.js";
@@ -1713,4 +1713,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-DvnOmOAf.js.map
+//# sourceMappingURL=ts-B4lhxCQx.js.map

package/dist/{versionChecker-DeXuTfJ0.js → versionChecker-CS7qsffQ.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.116.0";
+var version = "1.117.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -221,4 +221,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-DeXuTfJ0.js.map
+//# sourceMappingURL=versionChecker-CS7qsffQ.js.map

package/lab/ui/index.html

@@ -1545,6 +1545,15 @@
         try {
           localStorage.setItem("ay.sel", sel);
         } catch {}
+        // Reflect it in the URL hash as #room:pid. The fragment is never sent in
+        // any request, so — unlike the old ?pid= query that landed in the server's
+        // access logs — the agent id stays client-side, while still surviving a
+        // refresh and being copy-pasteable as a deep link.
+        try {
+          const want = "#" + e._room + ":" + e.pid;
+          if (location.hash !== want)
+            history.replaceState(null, document.title, location.pathname + want);
+        } catch {}
         // pid + tx are how we talk to the agent's own host; sel (composite) is
         // only for UI identity/highlight, since pids can collide across rooms.
         const pid = e.pid;
@@ -2256,7 +2265,23 @@
         }
         const full = pending ? null : /^([A-Za-z0-9_-]+):([^@]+)(?:@(.+))?$/.exec(h);
         const bare = /^([A-Za-z0-9_-]+)$/.exec(h);
-        if (full) {
+        // Treat the colon form as #room:agentId only when there's no @host, the id
+        // is a bare pid (digits), AND we can actually reconnect that room (it's
+        // cached or local). Otherwise the second part must be the token we need to
+        // connect — so a fresh browser still honours #room:token even when the token
+        // is custom and happens to be all digits.
+        // …and bounded to a plausible pid width (≤7 digits) so a long numeric
+        // custom token can't be mistaken for an agent id. A returning user's room
+        // token is persisted, so even a short numeric token reconnects fine from
+        // cache; only the share-link form needs the token, which stays uneaten.
+        const aidLike =
+          full &&
+          !full[3] &&
+          /^\d{1,7}$/.test(full[2]) &&
+          (full[1] === LOCAL || !!loadRooms()[full[1]]);
+        if (full && !aidLike) {
+          // #room:token — a share link. Connect, then eat the token so only #room
+          // lingers.
           const [, room, token, host] = full;
           // SECURITY: strip the token from the URL immediately so it never lingers in
           // the omnibox, history, or a screenshot. Keep only the room mnemonic.
@@ -2266,6 +2291,16 @@
             location.pathname + location.search + "#" + room,
           );
           pending = { room, token, host };
+        } else if (full) {
+          // #room:agentId — a deep link to one agent in a (cached) room. The id is
+          // not a secret, so it stays in the hash; reconnect the room from its
+          // cached token and select the agent once it streams in. autoPid uses the
+          // composite key so it picks the right host when pids collide across rooms.
+          const [, room, aid] = full;
+          autoPid = room + "#" + aid;
+          autoPidExplicit = true;
+          const r = loadRooms()[room];
+          if (r) pending = { room, token: r.token, host: r.host };
         } else if (bare && loadRooms()[bare[1]]) {
           const r = loadRooms()[bare[1]];
           pending = { room: bare[1], token: r.token, host: r.host };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.116.0",
+  "version": "1.117.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.ts

@@ -65,6 +65,33 @@ const defaultOpts = (overrides: Partial<CommonOpts> = {}): CommonOpts => ({
   ...overrides,
 });
 
+// The vars that pin a process to a PARENT Claude Code session — NOT the many
+// other CLAUDE_CODE_* settings that configure provider/auth/limits (USE_BEDROCK,
+// USE_VERTEX, MAX_OUTPUT_TOKENS, …), which must pass through untouched.
+const SESSION_PIN_ENV = new Set([
+  "CLAUDECODE",
+  "CLAUDE_CODE_SSE_PORT",
+  "CLAUDE_CODE_SESSION_ID",
+  "CLAUDE_CODE_CHILD_SESSION",
+  "CLAUDE_CODE_ENTRYPOINT",
+]);
+
+// Env for a console-spawned agent, minus only the session-pinning vars above. If
+// `ay serve` was launched from inside Claude Code (or any shell carrying these),
+// it would otherwise leak the parent's SSE port / session id into every spawned
+// agent — so the new `claude` thinks it's a nested child and tries to attach to a
+// stale port, surfacing as "fail to connect". Dropping them makes each agent a
+// clean top-level session; all config/provider env (CLAUDE_EFFORT, CLAUDE_CODE_*
+// settings) is preserved.
+function freshAgentEnv(): Record<string, string> {
+  const env: Record<string, string> = {};
+  for (const [k, v] of Object.entries(process.env)) {
+    if (v === undefined || SESSION_PIN_ENV.has(k)) continue;
+    env[k] = v;
+  }
+  return env;
+}
+
 // ---------------------------------------------------------------------------
 // ay serve install / uninstall / logs  (oxmgr daemon management)
 // ---------------------------------------------------------------------------
@@ -860,6 +887,7 @@ export async function cmdServe(rest: string[]): Promise<number> {
       try {
         const child = Bun.spawn(["ay", cli, ...(prompt ? ["--", prompt] : [])], {
           cwd,
+          env: freshAgentEnv(), // don't leak our Claude Code session into the agent
           stdin: "ignore",
           stdout: "ignore",
           stderr: "ignore",

package/dist/SUPPORTED_CLIS-vFwB3bnK.js

@@ -1,8 +0,0 @@
-import "./ts-DvnOmOAf.js";
-import "./logger-B9h0djqx.js";
-import "./versionChecker-DeXuTfJ0.js";
-import "./pidStore-DBjlqzo8.js";
-import "./globalPidIndex-yVd3mbsV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DuCEAzP9.js";
-
-export { SUPPORTED_CLIS };