agent-yes 1.117.0 → 1.118.1

package/dist/SUPPORTED_CLIS-Bx3xCmVR.js

@@ -0,0 +1,8 @@
+import "./ts-DSvAXKGk.js";
+import "./logger-B9h0djqx.js";
+import "./versionChecker-C40LF9-T.js";
+import "./pidStore-B5vBu8Px.js";
+import "./globalPidIndex-gZuTvTBs.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-FpD7Ea6s.js";
+
+export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-DQYx5cvl.js → SUPPORTED_CLIS-FpD7Ea6s.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-B4lhxCQx.js";
+import { t as CLIS_CONFIG } from "./ts-DSvAXKGk.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-DQYx5cvl.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-FpD7Ea6s.js.map

package/dist/{agent-yes.config-1LMoK18R.js → agent-yes.config-kmtJKJHk.js}

@@ -288,4 +288,4 @@ async function getDefaultConfig() {
 
 //#endregion
 export { agent_yes_config_default as default };
-//# sourceMappingURL=agent-yes.config-1LMoK18R.js.map
+//# sourceMappingURL=agent-yes.config-kmtJKJHk.js.map

package/dist/agentYesHome-BvaUOzCV.js

@@ -0,0 +1,25 @@
+import { homedir } from "os";
+import path from "path";
+
+//#region ts/agentYesHome.ts
+/**
+* Root directory for cross-runtime, machine-global agent-yes state:
+* the pid index (`pids.jsonl`), FIFO/named-pipe IPC endpoints (`fifo/`),
+* winsize signals, notes, and the serve token.
+*
+* Durable per-session *logs* deliberately do NOT live here — they go under
+* `<cwd>/.agent-yes/` so they stay colocated with the project that produced
+* them (see `PidStore`). Only ephemeral IPC + the discovery index are global,
+* which keeps FIFOs on the local home filesystem (reliable `mkfifo`) and lets
+* `ay ls`/`ay attach` find every agent regardless of the caller's cwd.
+*
+* Resolved at call time (not module load) so tests and callers can override
+* via `$AGENT_YES_HOME` without juggling the module cache.
+*/
+function agentYesHome() {
+	return process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
+}
+
+//#endregion
+export { agentYesHome as t };
+//# sourceMappingURL=agentYesHome-BvaUOzCV.js.map

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 import { n as logger } from "./logger-B9h0djqx.js";
-import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-CS7qsffQ.js";
+import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-C40LF9-T.js";
 import { argv } from "process";
 import { execFileSync, spawn } from "child_process";
 import ms from "ms";
@@ -482,7 +482,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 {
 	const rawArg = process.argv[2];
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-BuLieGot.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-Ca1GYIB2.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		cmdHelp();
 		process.exit(0);
@@ -496,12 +496,12 @@ await checkAndAutoUpdate();
 logger.info(versionString());
 const config = parseCliArgs(process.argv);
 if (config.tray) {
-	const { startTray } = await import("./tray-CWQe9DMY.js");
+	const { startTray } = await import("./tray-B8_rx1iu.js");
 	await startTray();
 	await new Promise(() => {});
 }
 {
-	const { ensureTray } = await import("./tray-CWQe9DMY.js");
+	const { ensureTray } = await import("./tray-B8_rx1iu.js");
 	ensureTray();
 }
 if (config.useRust) {
@@ -515,7 +515,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DK9PO6Y6.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-Bx3xCmVR.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);
@@ -545,7 +545,7 @@ if (config.showVersion) {
 	process.exit(0);
 }
 if (config.appendPrompt) {
-	const { PidStore } = await import("./pidStore-9b3YTuf4.js");
+	const { PidStore } = await import("./pidStore-7y1cTcAE.js");
 	const ipcPath = await PidStore.findActiveFifo(process.cwd());
 	if (!ipcPath) {
 		console.error("No active agent with IPC found in current directory.");

package/dist/{globalPidIndex-yVd3mbsV.js → globalPidIndex-gZuTvTBs.js}

@@ -189,4 +189,4 @@ async function pruneOldLogs(maxAgeMs = retentionMs()) {
 
 //#endregion
 export { updateGlobalPidStatus as a, readGlobalPids as i, maybeCompactGlobalPids as n, pruneOldLogs as r, appendGlobalPid as t };
-//# sourceMappingURL=globalPidIndex-yVd3mbsV.js.map
+//# sourceMappingURL=globalPidIndex-gZuTvTBs.js.map

package/dist/index.js

@@ -1,7 +1,7 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-B4lhxCQx.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-DSvAXKGk.js";
 import "./logger-B9h0djqx.js";
-import "./versionChecker-CS7qsffQ.js";
-import "./pidStore-DBjlqzo8.js";
-import "./globalPidIndex-yVd3mbsV.js";
+import "./versionChecker-C40LF9-T.js";
+import "./pidStore-B5vBu8Px.js";
+import "./globalPidIndex-gZuTvTBs.js";
 
 export { AgentContext, CLIS_CONFIG, config, agentYes as default, removeControlCharacters };

package/dist/pidStore-7y1cTcAE.js

@@ -0,0 +1,5 @@
+import "./logger-B9h0djqx.js";
+import { t as PidStore } from "./pidStore-B5vBu8Px.js";
+import "./globalPidIndex-gZuTvTBs.js";
+
+export { PidStore };

package/dist/{pidStore-DBjlqzo8.js → pidStore-B5vBu8Px.js}

@@ -1,31 +1,11 @@
 import { n as logger } from "./logger-B9h0djqx.js";
-import { a as updateGlobalPidStatus, n as maybeCompactGlobalPids, r as pruneOldLogs, t as appendGlobalPid } from "./globalPidIndex-yVd3mbsV.js";
+import { t as agentYesHome } from "./agentYesHome-BvaUOzCV.js";
+import { a as updateGlobalPidStatus, n as maybeCompactGlobalPids, r as pruneOldLogs, t as appendGlobalPid } from "./globalPidIndex-gZuTvTBs.js";
 import { closeSync, existsSync, fsyncSync, openSync } from "fs";
 import { appendFile, mkdir, readFile, rename, writeFile } from "fs/promises";
-import { homedir } from "os";
 import path from "path";
 import { lock } from "proper-lockfile";
 
-//#region ts/agentYesHome.ts
-/**
-* Root directory for cross-runtime, machine-global agent-yes state:
-* the pid index (`pids.jsonl`), FIFO/named-pipe IPC endpoints (`fifo/`),
-* winsize signals, notes, and the serve token.
-*
-* Durable per-session *logs* deliberately do NOT live here — they go under
-* `<cwd>/.agent-yes/` so they stay colocated with the project that produced
-* them (see `PidStore`). Only ephemeral IPC + the discovery index are global,
-* which keeps FIFOs on the local home filesystem (reliable `mkfifo`) and lets
-* `ay ls`/`ay attach` find every agent regardless of the caller's cwd.
-*
-* Resolved at call time (not module load) so tests and callers can override
-* via `$AGENT_YES_HOME` without juggling the module cache.
-*/
-function agentYesHome() {
-	return process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
-}
-
-//#endregion
 //#region ts/JsonlStore.ts
 /**
 * A lightweight NeDB-style JSONL persistence layer.
@@ -223,7 +203,7 @@ var PidStore = class PidStore {
 			logger.warn("[pidStore] Failed to initialize:", error);
 		}
 	}
-	async registerProcess({ pid, cli, args, prompt, cwd }) {
+	async registerProcess({ pid, cli, args, prompt, cwd, wrapperPid }) {
 		const now = Date.now();
 		const argsJson = JSON.stringify(args);
 		const logFile = this.getRawLogPath(pid);
@@ -260,7 +240,8 @@ var PidStore = class PidStore {
 			status: "active",
 			exit_code: null,
 			exit_reason: null,
-			started_at: now
+			started_at: now,
+			wrapper_pid: wrapperPid ?? null
 		}).then(() => maybeCompactGlobalPids()).catch(() => null);
 		return result;
 	}
@@ -380,5 +361,5 @@ pid-db/
 };
 
 //#endregion
-export { agentYesHome as n, PidStore as t };
-//# sourceMappingURL=pidStore-DBjlqzo8.js.map
+export { PidStore as t };
+//# sourceMappingURL=pidStore-B5vBu8Px.js.map

package/dist/{remotes-C3xPRtfg.js → remotes-BufkGk0e.js}

@@ -147,4 +147,4 @@ async function cmdRemote(rest) {
 
 //#endregion
 export { resolveRemoteSpec as a, readRemotes as i, deleteRemoteAlias as n, writeRemoteAlias as o, parseDirectRemoteSpec as r, cmdRemote as t };
-//# sourceMappingURL=remotes-C3xPRtfg.js.map
+//# sourceMappingURL=remotes-BufkGk0e.js.map

package/dist/{remotes-C9WMt5PY.js → remotes-DavR4Hca.js}

@@ -1,3 +1,3 @@
-import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-C3xPRtfg.js";
+import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-BufkGk0e.js";
 
 export { cmdRemote };

package/dist/{serve-DJthZQAN.js → serve-CBvx2LeV.js}

@@ -1,11 +1,11 @@
-import "./ts-B4lhxCQx.js";
+import "./ts-DSvAXKGk.js";
 import "./logger-B9h0djqx.js";
-import { r as getInstalledPackage } from "./versionChecker-CS7qsffQ.js";
-import "./pidStore-DBjlqzo8.js";
-import "./globalPidIndex-yVd3mbsV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DQYx5cvl.js";
-import "./remotes-C3xPRtfg.js";
-import { c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, m as snapshotStatus, r as controlCodeFromName, u as readNotes } from "./subcommands-B_JJRHkV.js";
+import { r as getInstalledPackage } from "./versionChecker-C40LF9-T.js";
+import "./pidStore-B5vBu8Px.js";
+import "./globalPidIndex-gZuTvTBs.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-FpD7Ea6s.js";
+import "./remotes-BufkGk0e.js";
+import { c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, m as snapshotStatus, r as controlCodeFromName, u as readNotes } from "./subcommands-3oALzYZW.js";
 import yargs from "yargs";
 import { mkdir, open, readFile, writeFile } from "fs/promises";
 import { homedir, hostname, userInfo } from "os";
@@ -758,7 +758,7 @@ Options:
 		const webrtcVal = argv.webrtc ?? argv.share;
 		const explicitUrl = typeof webrtcVal === "string" && webrtcVal.startsWith("webrtc://") ? webrtcVal : void 0;
 		try {
-			const { startShare, loadOrCreateShareRoom } = await import("./share-DwzKXEsJ.js");
+			const { startShare, loadOrCreateShareRoom } = await import("./share-BM-H85FE.js");
 			const { link, close } = await startShare({
 				url: explicitUrl ?? await loadOrCreateShareRoom(),
 				localFetch: apiFetch,
@@ -789,4 +789,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-DJthZQAN.js.map
+//# sourceMappingURL=serve-CBvx2LeV.js.map

package/dist/setup-C7BNSEaG.js

@@ -0,0 +1,82 @@
+import { t as agentYesHome } from "./agentYesHome-BvaUOzCV.js";
+import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import path from "path";
+import { existsSync as existsSync$1 } from "node:fs";
+import { stdin, stdout } from "node:process";
+import { createInterface } from "node:readline/promises";
+
+//#region ts/workspaceConfig.ts
+function configPath() {
+	return path.join(agentYesHome(), "config.json");
+}
+function readConfig() {
+	try {
+		return JSON.parse(readFileSync(configPath(), "utf-8"));
+	} catch {
+		return {};
+	}
+}
+/** Expand a leading `~` (`~` or `~/x`) to an absolute home-based path. */
+function expandTilde(p) {
+	const s = p.trim();
+	if (s === "~") return homedir();
+	if (s.startsWith("~/") || s.startsWith("~\\")) return path.join(homedir(), s.slice(2));
+	return s;
+}
+/** The configured workspace root (absolute), or the home dir if unset. */
+function getWorkspaceRoot() {
+	const w = readConfig().workspace;
+	return w && w.trim() ? w : homedir();
+}
+/** Persist the workspace root, tilde-expanded and resolved to an absolute path. */
+function setWorkspaceRoot(dir) {
+	const abs = path.resolve(expandTilde(dir));
+	const cfg = readConfig();
+	cfg.workspace = abs;
+	mkdirSync(agentYesHome(), { recursive: true });
+	writeFileSync(configPath(), JSON.stringify(cfg, null, 2));
+	return abs;
+}
+
+//#endregion
+//#region ts/setup.ts
+async function cmdSetup(rest) {
+	if (rest.includes("-h") || rest.includes("--help")) {
+		process.stdout.write("Usage: ay setup [workspace-dir] [--no-share] [--port N]\n\nGuided setup:\n  1. pick the workspace root new agents spawn into (default: your home dir)\n  2. share this machine to the agent-yes.com console (a restart-on-boot daemon)\n\nOptions:\n  workspace-dir   default directory for new agents (skips the prompt)\n  --no-share      set the workspace only; don't install the share daemon\n  --port N        HTTP API port for the share daemon (default: 7432)\n");
+		return 0;
+	}
+	const noShare = rest.includes("--no-share");
+	const portIdx = rest.indexOf("--port");
+	const port = portIdx >= 0 ? rest[portIdx + 1] : void 0;
+	let ws = rest.filter((a, i) => !a.startsWith("-") && i !== portIdx + 1)[0];
+	if (!ws) {
+		const current = getWorkspaceRoot();
+		if (stdin.isTTY && stdout.isTTY) {
+			const rl = createInterface({
+				input: stdin,
+				output: stdout
+			});
+			try {
+				ws = (await rl.question(`Workspace root for new agents [${current}]: `)).trim() || current;
+			} finally {
+				rl.close();
+			}
+		} else ws = current;
+	}
+	const abs = setWorkspaceRoot(ws);
+	process.stdout.write(`workspace root: ${abs}\n`);
+	if (!existsSync$1(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
+	if (noShare) return 0;
+	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
+	const { cmdServe } = await import("./serve-CBvx2LeV.js");
+	return cmdServe([
+		"install",
+		"--share",
+		...port ? ["--port", port] : []
+	]);
+}
+
+//#endregion
+export { cmdSetup };
+//# sourceMappingURL=setup-C7BNSEaG.js.map

package/dist/{share-DwzKXEsJ.js → share-BM-H85FE.js}

@@ -215,4 +215,4 @@ async function startShare(opts) {
 
 //#endregion
 export { loadOrCreateShareRoom, startShare };
-//# sourceMappingURL=share-DwzKXEsJ.js.map
+//# sourceMappingURL=share-BM-H85FE.js.map

package/dist/{subcommands-B_JJRHkV.js → subcommands-3oALzYZW.js}

@@ -1,5 +1,5 @@
-import { i as readGlobalPids } from "./globalPidIndex-yVd3mbsV.js";
-import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-C3xPRtfg.js";
+import { i as readGlobalPids } from "./globalPidIndex-gZuTvTBs.js";
+import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-BufkGk0e.js";
 import ms from "ms";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, stat, writeFile } from "fs/promises";
@@ -60,6 +60,74 @@ async function compactNotes() {
 	})).join("\n");
 	await writeFile(notesPath(), lines ? lines + "\n" : "");
 }
+const READ_WINDOW_MS = 6e4;
+const READS_KEY_SEP = "\0";
+function readsPath() {
+	const dir = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
+	return path.join(dir, "reads.jsonl");
+}
+async function readReads() {
+	let raw;
+	try {
+		raw = await readFile(readsPath(), "utf-8");
+	} catch {
+		return /* @__PURE__ */ new Map();
+	}
+	const map = /* @__PURE__ */ new Map();
+	for (const line of raw.split("\n")) {
+		const t = line.trim();
+		if (!t) continue;
+		try {
+			const { by, target, at } = JSON.parse(t);
+			if (typeof by === "string" && typeof target === "number" && typeof at === "number") map.set(`${by}${READS_KEY_SEP}${target}`, at);
+		} catch {}
+	}
+	return map;
+}
+async function recordRead(by, target) {
+	const p = readsPath();
+	try {
+		await mkdir(path.dirname(p), { recursive: true });
+		await appendFile(p, JSON.stringify({
+			by,
+			target,
+			at: Date.now()
+		}) + "\n");
+		if ((await readFile(p, "utf-8").catch(() => "")).split("\n").length > 200) {
+			const lines = [...(await readReads()).entries()].map(([k, at]) => {
+				const i = k.indexOf(READS_KEY_SEP);
+				return JSON.stringify({
+					by: k.slice(0, i),
+					target: Number(k.slice(i + 1)),
+					at
+				});
+			}).join("\n");
+			await writeFile(p, lines ? lines + "\n" : "");
+		}
+	} catch {}
+}
+async function lastReadAt(by, target) {
+	return (await readReads()).get(`${by}${READS_KEY_SEP}${target}`) ?? null;
+}
+async function resolveSender() {
+	const envPid = process.env.AGENT_YES_PID ? Number(process.env.AGENT_YES_PID) : null;
+	if (!envPid || Number.isNaN(envPid)) return null;
+	const recs = await listRecords(void 0, {
+		all: true,
+		active: false,
+		json: false,
+		latest: false,
+		cwdScope: null
+	});
+	return recs.find((r) => r.wrapper_pid === envPid) ?? recs.find((r) => r.pid === envPid) ?? null;
+}
+async function senderContext() {
+	const agent = await resolveSender();
+	return {
+		key: agent ? `agent:${agent.pid}` : "human",
+		agent
+	};
+}
 /**
 * Read the per-cwd TS PidStore JSONL and convert to the global record shape,
 * so pre-existing TS agents that were spawned before the global-index mirror
@@ -163,15 +231,15 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-DJthZQAN.js");
+				const { cmdServe } = await import("./serve-CBvx2LeV.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup.ts");
+				const { cmdSetup } = await import("./setup-C7BNSEaG.js");
 				return cmdSetup(rest);
 			}
 			case "remote": {
-				const { cmdRemote } = await import("./remotes-C9WMt5PY.js");
+				const { cmdRemote } = await import("./remotes-DavR4Hca.js");
 				return cmdRemote(rest);
 			}
 			case "help": return cmdHelp();
@@ -762,6 +830,8 @@ async function cmdRead(rest, { mode }) {
 	const record = await resolveOne(keyword, opts);
 	const logPath = record.log_file;
 	if (!logPath) throw new Error(`pid ${record.pid}: no log_file recorded`);
+	const reader = await senderContext();
+	await recordRead(reader.key, record.pid);
 	let stats;
 	try {
 		stats = await stat(logPath);
@@ -779,7 +849,10 @@ async function cmdRead(rest, { mode }) {
 	process.stderr.write(header + "\n");
 	process.stdout.write(rendered);
 	if (!rendered.endsWith("\n")) process.stdout.write("\n");
-	if (follow) return plain ? followPlainLocal(logPath, buf) : followRawLocal(logPath, buf);
+	if (follow) {
+		setInterval(() => void recordRead(reader.key, record.pid), 3e4).unref?.();
+		return plain ? followPlainLocal(logPath, buf) : followRawLocal(logPath, buf);
+	}
 	process.stderr.write(`
   ay ls                                 # list all agents
   ay tail -f ${record.pid}              # follow live output\n  ay send ${record.pid} "next: ..."      # send a prompt\n  ay send ${record.pid} "" --code=ctrl-c # interrupt\n`);
@@ -1067,6 +1140,10 @@ async function cmdSend(rest) {
 	}).option("cwd", {
 		type: "string",
 		description: "Restrict to agents under this dir"
+	}).option("force", {
+		type: "boolean",
+		default: false,
+		description: "Skip the 'tailed recently' safety check (also: AGENT_YES_FORCE_SEND=1)"
 	}).help(false).version(false).exitProcess(false).parseAsync();
 	const opts = {
 		all: argv.all,
@@ -1093,9 +1170,17 @@ async function cmdSend(rest) {
 		for await (const chunk of process.stdin) chunks.push(chunk);
 		body = Buffer.concat(chunks).toString("utf-8").trimEnd();
 	} else body = rawMessage;
-	const sourcePid = process.env.AGENT_YES_PID ? Number(process.env.AGENT_YES_PID) : null;
-	const talkBack = sourcePid ? `\n(from AGENT_YES_PID=${sourcePid} — reply: ay send ${sourcePid} "...")` : "";
-	const fullBody = body + talkBack;
+	const sender = await senderContext();
+	const force = Boolean(argv.force) || process.env.AGENT_YES_FORCE_SEND === "1";
+	if (sender.agent && sender.agent.pid === record.pid && !force) throw new Error(`refusing to send to yourself (pid ${record.pid}) — pass --force if you really mean it.`);
+	const last = await lastReadAt(sender.key, record.pid);
+	if (!(last !== null && Date.now() - last <= READ_WINDOW_MS) && !force) {
+		const ago = last === null ? "never read" : `last read ${Math.round((Date.now() - last) / 1e3)}s ago`;
+		const what = `pid ${record.pid} (${record.cli}, ${shortenPath(record.cwd)}) — ${ago}, not within ${READ_WINDOW_MS / 1e3}s`;
+		if (sender.agent) throw new Error(`${what}.\n  Confirm it's the right agent first:  ay tail ${record.pid}\n  then resend, or pass --force to override.`);
+		process.stderr.write(`warning: ${what} — make sure this is the agent you meant (ay tail ${record.pid}).\n`);
+	}
+	const fullBody = (sender.agent ? `[from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${sender.agent.pid} "..."]\n` : "") + body;
 	if (fullBody && trailing) {
 		await writeToIpc(fifoPath, fullBody);
 		await new Promise((r) => setTimeout(r, 200));
@@ -1103,7 +1188,7 @@ async function cmdSend(rest) {
 	} else await writeToIpc(fifoPath, fullBody + trailing);
 	const payload = body + trailing;
 	process.stdout.write(`sent to pid ${record.pid} (${record.cli}): ${truncate(payload, 80)}\n`);
-	const replyHint = sourcePid ? `  ay send ${sourcePid} "..."              # reply to sender\n` : "";
+	const replyHint = sender.agent ? `  ay send ${sender.agent.pid} "..."              # reply to sender\n` : "";
 	process.stderr.write(`\n` + replyHint + `  ay tail ${record.pid}                  # watch output\n  ay ls                                  # list all agents\n`);
 	if (codeName === "ctrl-c" || codeName === "ctrlc") {
 		const tip = stopTipForCli(record.cli, record.pid);
@@ -1595,4 +1680,4 @@ async function cmdStatus(rest) {
 
 //#endregion
 export { finalizedLines as a, listRecords as c, renderRawLog as d, resolveOne as f, writeToIpc as g, stopTipForCli as h, cursorAbs as i, matchKeyword as l, snapshotStatus as m, cmdHelp as n, isPidAlive as o, runSubcommand as p, controlCodeFromName as r, isSubcommand as s, GRACEFUL_EXIT_COMMANDS as t, readNotes as u };
-//# sourceMappingURL=subcommands-B_JJRHkV.js.map
+//# sourceMappingURL=subcommands-3oALzYZW.js.map

package/dist/{subcommands-BuLieGot.js → subcommands-Ca1GYIB2.js}

@@ -1,6 +1,6 @@
 import "./logger-B9h0djqx.js";
-import "./globalPidIndex-yVd3mbsV.js";
-import "./remotes-C3xPRtfg.js";
-import { a as finalizedLines, c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, h as stopTipForCli, i as cursorAbs, l as matchKeyword, m as snapshotStatus, n as cmdHelp, o as isPidAlive, p as runSubcommand, r as controlCodeFromName, s as isSubcommand, t as GRACEFUL_EXIT_COMMANDS, u as readNotes } from "./subcommands-B_JJRHkV.js";
+import "./globalPidIndex-gZuTvTBs.js";
+import "./remotes-BufkGk0e.js";
+import { a as finalizedLines, c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, h as stopTipForCli, i as cursorAbs, l as matchKeyword, m as snapshotStatus, n as cmdHelp, o as isPidAlive, p as runSubcommand, r as controlCodeFromName, s as isSubcommand, t as GRACEFUL_EXIT_COMMANDS, u as readNotes } from "./subcommands-3oALzYZW.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{tray-CWQe9DMY.js → tray-B8_rx1iu.js}

@@ -175,4 +175,4 @@ async function startTray() {
 
 //#endregion
 export { ensureTray, startTray };
-//# sourceMappingURL=tray-CWQe9DMY.js.map
+//# sourceMappingURL=tray-B8_rx1iu.js.map

package/dist/{ts-B4lhxCQx.js → ts-DSvAXKGk.js}

@@ -1,8 +1,9 @@
 import { n as logger, t as addTransport } from "./logger-B9h0djqx.js";
-import { r as getInstalledPackage } from "./versionChecker-CS7qsffQ.js";
-import { n as agentYesHome, t as PidStore } from "./pidStore-DBjlqzo8.js";
+import { r as getInstalledPackage } from "./versionChecker-C40LF9-T.js";
+import { t as agentYesHome } from "./agentYesHome-BvaUOzCV.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CJxsoGdb.js";
-import { i as readGlobalPids } from "./globalPidIndex-yVd3mbsV.js";
+import { t as PidStore } from "./pidStore-B5vBu8Px.js";
+import { i as readGlobalPids } from "./globalPidIndex-gZuTvTBs.js";
 import { arch, platform } from "process";
 import { execSync } from "child_process";
 import { closeSync, constants, createReadStream, existsSync, mkdirSync, openSync } from "fs";
@@ -1039,7 +1040,7 @@ async function notifyWebhook(status, details, cwd = process.cwd()) {
 
 //#endregion
 //#region ts/index.ts
-const config = await import("./agent-yes.config-1LMoK18R.js").then((mod) => mod.default || mod);
+const config = await import("./agent-yes.config-kmtJKJHk.js").then((mod) => mod.default || mod);
 const CLIS_CONFIG = config.clis;
 /**
 * Main function to run agent-cli with automatic yes/no responses
@@ -1218,7 +1219,8 @@ async function agentYes({ cli, cliArgs = [], prompt, robust = true, cwd, env, ex
 			cli,
 			args: cliArgs,
 			prompt,
-			cwd: workingDir
+			cwd: workingDir,
+			wrapperPid: process.pid
 		});
 	} catch (error) {
 		logger.warn(`[pidStore] Failed to register process ${shell.pid}:`, error);
@@ -1713,4 +1715,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-B4lhxCQx.js.map
+//# sourceMappingURL=ts-DSvAXKGk.js.map

package/dist/{versionChecker-CS7qsffQ.js → versionChecker-C40LF9-T.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.117.0";
+var version = "1.118.1";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -221,4 +221,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-CS7qsffQ.js.map
+//# sourceMappingURL=versionChecker-C40LF9-T.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.117.0",
+  "version": "1.118.1",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/globalPidIndex.ts

@@ -36,6 +36,11 @@ export interface GlobalPidRecord {
   exit_code: number | null;
   exit_reason: string | null;
   started_at: number;
+  // The `ay` wrapper process pid that spawned this agent. The wrapper injects
+  // its own pid as AGENT_YES_PID into the agent's env (the agent's OWN pid isn't
+  // known until after spawn), so this maps that env value back to the agent's
+  // canonical record — see resolveSender() in subcommands.ts.
+  wrapper_pid?: number | null;
 }
 
 /**

package/ts/index.ts

@@ -374,7 +374,16 @@ export default async function agentYes({
 
   // Register process in pidStore (non-blocking - failures should not prevent agent from running)
   try {
-    await pidStore.registerProcess({ pid: shell.pid, cli, args: cliArgs, prompt, cwd: workingDir });
+    await pidStore.registerProcess({
+      pid: shell.pid,
+      cli,
+      args: cliArgs,
+      prompt,
+      cwd: workingDir,
+      // We inject our own pid as AGENT_YES_PID into the agent's env above; record
+      // it so a child `ay send` can map that env value back to this agent.
+      wrapperPid: process.pid,
+    });
   } catch (error) {
     logger.warn(`[pidStore] Failed to register process ${shell.pid}:`, error);
   }

package/ts/pidStore.ts

@@ -54,12 +54,14 @@ export class PidStore {
     args,
     prompt,
     cwd,
+    wrapperPid,
   }: {
     pid: number;
     cli: string;
     args: string[];
     prompt?: string;
     cwd: string;
+    wrapperPid?: number;
   }): Promise<PidRecord> {
     const now = Date.now();
     const argsJson = JSON.stringify(args);
@@ -113,6 +115,7 @@ export class PidStore {
       exit_code: null,
       exit_reason: null,
       started_at: now,
+      wrapper_pid: wrapperPid ?? null,
     })
       .then(() => maybeCompactGlobalPids())
       .catch(() => null);

package/ts/setup.spec.ts

@@ -0,0 +1,42 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { mkdtempSync, rmSync } from "fs";
+import { tmpdir } from "os";
+import path from "path";
+import { cmdSetup } from "./setup.ts";
+import { getWorkspaceRoot } from "./workspaceConfig.ts";
+
+// Guards against the regression where `ay setup` was registered + documented but
+// its module was missing ("Cannot find module './setup.ts'"). Exercises the
+// --no-share path only, so no daemon is installed.
+describe("cmdSetup", () => {
+  let original: string | undefined;
+  let tmp: string;
+  beforeEach(() => {
+    original = process.env.AGENT_YES_HOME;
+    tmp = mkdtempSync(path.join(tmpdir(), "ay-setup-"));
+    process.env.AGENT_YES_HOME = tmp;
+  });
+  afterEach(() => {
+    if (original === undefined) delete process.env.AGENT_YES_HOME;
+    else process.env.AGENT_YES_HOME = original;
+    rmSync(tmp, { recursive: true, force: true });
+  });
+
+  it("--help returns 0 without touching config", async () => {
+    expect(await cmdSetup(["--help"])).toBe(0);
+  });
+
+  it("--no-share sets the workspace root and skips the daemon", async () => {
+    const dir = path.join(tmp, "myspace");
+    const code = await cmdSetup(["--no-share", dir]);
+    expect(code).toBe(0);
+    expect(getWorkspaceRoot()).toBe(path.resolve(dir));
+  });
+
+  it("--no-share with a --port flag still treats the path as the workspace", async () => {
+    const dir = path.join(tmp, "ws");
+    const code = await cmdSetup(["--no-share", "--port", "7440", dir]);
+    expect(code).toBe(0);
+    expect(getWorkspaceRoot()).toBe(path.resolve(dir));
+  });
+});

package/ts/setup.ts

@@ -0,0 +1,67 @@
+import { existsSync } from "node:fs";
+import { stdin, stdout } from "node:process";
+import { createInterface } from "node:readline/promises";
+import { getWorkspaceRoot, setWorkspaceRoot } from "./workspaceConfig.ts";
+
+// `ay setup` — guided onboarding. Two steps:
+//   1. choose the workspace root (the default cwd new agents spawn into when the
+//      console doesn't pass one — see workspaceConfig), and
+//   2. share this machine to the agent-yes.com console over WebRTC, installed as a
+//      restart-on-boot daemon (delegates to `ay serve install --share`).
+//
+// Designed to degrade gracefully: with a TTY it prompts (defaulting to the
+// current/home workspace); piped or in a script it takes the first positional as
+// the workspace and otherwise keeps the current one — never blocking on input.
+export async function cmdSetup(rest: string[]): Promise<number> {
+  if (rest.includes("-h") || rest.includes("--help")) {
+    process.stdout.write(
+      `Usage: ay setup [workspace-dir] [--no-share] [--port N]\n\n` +
+        `Guided setup:\n` +
+        `  1. pick the workspace root new agents spawn into (default: your home dir)\n` +
+        `  2. share this machine to the agent-yes.com console (a restart-on-boot daemon)\n\n` +
+        `Options:\n` +
+        `  workspace-dir   default directory for new agents (skips the prompt)\n` +
+        `  --no-share      set the workspace only; don't install the share daemon\n` +
+        `  --port N        HTTP API port for the share daemon (default: 7432)\n`,
+    );
+    return 0;
+  }
+
+  const noShare = rest.includes("--no-share");
+  const portIdx = rest.indexOf("--port");
+  const port = portIdx >= 0 ? rest[portIdx + 1] : undefined;
+  // The workspace is the first non-flag token (and not the value of --port).
+  const positional = rest.filter((a, i) => !a.startsWith("-") && i !== portIdx + 1);
+
+  // 1. Workspace root.
+  let ws = positional[0];
+  if (!ws) {
+    const current = getWorkspaceRoot();
+    if (stdin.isTTY && stdout.isTTY) {
+      const rl = createInterface({ input: stdin, output: stdout });
+      try {
+        const ans = (await rl.question(`Workspace root for new agents [${current}]: `)).trim();
+        ws = ans || current;
+      } finally {
+        rl.close();
+      }
+    } else {
+      ws = current; // non-interactive: keep whatever's configured (home by default)
+    }
+  }
+  const abs = setWorkspaceRoot(ws);
+  process.stdout.write(`workspace root: ${abs}\n`);
+  if (!existsSync(abs)) {
+    process.stderr.write(
+      `  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`,
+    );
+  }
+
+  if (noShare) return 0;
+
+  // 2. Share to agent-yes.com as a boot-persistent daemon. `ay serve install`
+  //    handles oxmgr registration, version roll-forward, and printing the link.
+  process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
+  const { cmdServe } = await import("./serve.ts");
+  return cmdServe(["install", "--share", ...(port ? ["--port", port] : [])]);
+}

package/ts/subcommands.spec.ts

@@ -537,6 +537,13 @@ describe("subcommands.cmdSend writes bytes to FIFO", () => {
         stdout.push(String(s));
         return true;
       };
+      // Isolate from the send-safety guard: if the suite itself runs inside an
+      // ay-managed agent, AGENT_YES_PID would make cmdSend treat this as an agent
+      // sender (adding a "from …" prefix / blocking). Force-send to test pure
+      // byte delivery. --force keeps the agent prefix off only when no agent
+      // context resolves, so also clear AGENT_YES_PID for determinism.
+      const savedAyPid = process.env.AGENT_YES_PID;
+      delete process.env.AGENT_YES_PID;
       try {
         const code = await runSubcommand([
           "bun",
@@ -544,11 +551,13 @@ describe("subcommands.cmdSend writes bytes to FIFO", () => {
           "send",
           String(process.pid),
           "hello-fifo",
+          "--force",
         ]);
         expect(code).toBe(0);
         expect(stdout.join("")).toMatch(/sent to pid/);
       } finally {
         process.stdout.write = orig;
+        if (savedAyPid !== undefined) process.env.AGENT_YES_PID = savedAyPid;
       }
 
       // Now read the bytes back from our RDWR fd.
@@ -568,6 +577,47 @@ describe("subcommands.cmdSend writes bytes to FIFO", () => {
   });
 });
 
+describe("subcommands.cmdSend safety guards", () => {
+  it("maps AGENT_YES_PID→wrapper_pid and blocks an agent from sending to itself", async () => {
+    const { runSubcommand } = await loadModule();
+    const { appendGlobalPid } = await import("./globalPidIndex.ts");
+    // We register an agent whose wrapper_pid is a known value, then run `ay send`
+    // with AGENT_YES_PID set to that wrapper — so resolveSender maps it back to
+    // this same agent, and sending to its own pid trips the self-send guard.
+    const wrapperPid = 424242;
+    await appendGlobalPid({
+      pid: process.pid,
+      cli: "claude",
+      prompt: null,
+      cwd: process.cwd(),
+      log_file: null,
+      fifo_file: "/tmp/ay-guard-test.fifo",
+      status: "active",
+      exit_code: null,
+      exit_reason: null,
+      started_at: Date.now(),
+      wrapper_pid: wrapperPid,
+    });
+    const stderr: string[] = [];
+    const orig = process.stderr.write.bind(process.stderr);
+    (process.stderr as any).write = (s: any) => {
+      stderr.push(String(s));
+      return true;
+    };
+    const savedAyPid = process.env.AGENT_YES_PID;
+    process.env.AGENT_YES_PID = String(wrapperPid);
+    try {
+      const code = await runSubcommand(["bun", "cli.js", "send", String(process.pid), "loop?"]);
+      expect(code).toBe(1);
+      expect(stderr.join("")).toMatch(/refusing to send to yourself/);
+    } finally {
+      process.stderr.write = orig;
+      if (savedAyPid === undefined) delete process.env.AGENT_YES_PID;
+      else process.env.AGENT_YES_PID = savedAyPid;
+    }
+  });
+});
+
 // ---------------------------------------------------------------------------
 // cmdLs additional arg coverage
 // ---------------------------------------------------------------------------

package/dist/SUPPORTED_CLIS-DK9PO6Y6.js

@@ -1,8 +0,0 @@
-import "./ts-B4lhxCQx.js";
-import "./logger-B9h0djqx.js";
-import "./versionChecker-CS7qsffQ.js";
-import "./pidStore-DBjlqzo8.js";
-import "./globalPidIndex-yVd3mbsV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DQYx5cvl.js";
-
-export { SUPPORTED_CLIS };

package/dist/pidStore-9b3YTuf4.js

@@ -1,5 +0,0 @@
-import "./logger-B9h0djqx.js";
-import { t as PidStore } from "./pidStore-DBjlqzo8.js";
-import "./globalPidIndex-yVd3mbsV.js";
-
-export { PidStore };