agent-yes 1.122.0 → 1.122.1

package/dist/SUPPORTED_CLIS-DcWAr8NI.js

@@ -0,0 +1,8 @@
+import "./ts-DyDU_Dae.js";
+import "./logger-B9h0djqx.js";
+import "./versionChecker-DmCadDPY.js";
+import "./pidStore-B5vBu8Px.js";
+import "./globalPidIndex-gZuTvTBs.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-f50t1rrA.js";
+
+export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-DFYbm2uk.js → SUPPORTED_CLIS-f50t1rrA.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-7kSDmCpQ.js";
+import { t as CLIS_CONFIG } from "./ts-DyDU_Dae.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-DFYbm2uk.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-f50t1rrA.js.map

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 import { n as logger } from "./logger-B9h0djqx.js";
-import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-B5vxV_hH.js";
+import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-DmCadDPY.js";
 import { argv } from "process";
 import { execFileSync, spawn } from "child_process";
 import ms from "ms";
@@ -482,7 +482,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 {
 	const rawArg = process.argv[2];
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-CzZ4uBIa.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-BkR-nSAB.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		cmdHelp();
 		process.exit(0);
@@ -515,7 +515,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BVqe3k7F.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DcWAr8NI.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-7kSDmCpQ.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-DyDU_Dae.js";
 import "./logger-B9h0djqx.js";
-import "./versionChecker-B5vxV_hH.js";
+import "./versionChecker-DmCadDPY.js";
 import "./pidStore-B5vBu8Px.js";
 import "./globalPidIndex-gZuTvTBs.js";
 

package/dist/{schedule-CJaNc82S.js → schedule-OJeQo0Da.js}

@@ -1,9 +1,9 @@
-import "./ts-7kSDmCpQ.js";
+import "./ts-DyDU_Dae.js";
 import "./logger-B9h0djqx.js";
-import "./versionChecker-B5vxV_hH.js";
+import "./versionChecker-DmCadDPY.js";
 import "./pidStore-B5vBu8Px.js";
 import "./globalPidIndex-gZuTvTBs.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DFYbm2uk.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-f50t1rrA.js";
 import { n as resolveSpawnCwd } from "./workspaceConfig-XP2NEWmV.js";
 import { createHash } from "node:crypto";
 
@@ -141,4 +141,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-CJaNc82S.js.map
+//# sourceMappingURL=schedule-OJeQo0Da.js.map

package/dist/{serve-VczpuYDk.js → serve-O3e2YFfp.js}

@@ -1,11 +1,11 @@
-import "./ts-7kSDmCpQ.js";
+import "./ts-DyDU_Dae.js";
 import "./logger-B9h0djqx.js";
-import { r as getInstalledPackage } from "./versionChecker-B5vxV_hH.js";
+import { r as getInstalledPackage } from "./versionChecker-DmCadDPY.js";
 import "./pidStore-B5vBu8Px.js";
 import "./globalPidIndex-gZuTvTBs.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DFYbm2uk.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-f50t1rrA.js";
 import "./remotes-D2fqaRU8.js";
-import { c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, m as snapshotStatus, r as controlCodeFromName, u as readNotes } from "./subcommands-CmNGbbIA.js";
+import { c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, m as snapshotStatus, r as controlCodeFromName, u as readNotes } from "./subcommands-CT1z9Jl4.js";
 import yargs from "yargs";
 import { mkdir, open, readFile, writeFile } from "fs/promises";
 import { homedir, hostname, userInfo } from "os";
@@ -918,22 +918,28 @@ Options:
 		const webrtcVal = argv.webrtc ?? argv.share;
 		const explicitUrl = typeof webrtcVal === "string" && webrtcVal.startsWith("webrtc://") ? webrtcVal : void 0;
 		try {
-			const { startShare, loadOrCreateShareRoom } = await import("./share-ClsUSd_0.js");
+			const { startShare, loadOrCreateShareRoom } = await import("./share-CksllWW-.js");
+			const linkFile = path.join(process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"), ".share-link");
+			const announce = async (room, link, rotated) => {
+				const lead = rotated ? "the room was rejected by signaling (stale generation) — rotated to a fresh link" : "shared over WebRTC — open this link (the token is eaten from the URL on open)";
+				if (process.stdout.isTTY) {
+					const persistNote = explicitUrl ? "\n" : `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n\n`;
+					process.stdout.write(`${wantHttp ? "\n" : ""}${lead}:\n  ${link}\n` + persistNote);
+				} else {
+					try {
+						await writeFile(linkFile, link + "\n", { mode: 384 });
+					} catch {}
+					process.stdout.write(`${wantHttp ? "\n" : ""}${rotated ? "rotated WebRTC room" : "shared over WebRTC"} · room ${room} — the link carries a secret, so it is NOT logged.\n  read it from ${linkFile} (mode 0600); delete ~/.agent-yes/.share-room to rotate\n\n`);
+				}
+			};
 			const { room, link, close } = await startShare({
 				url: explicitUrl ?? await loadOrCreateShareRoom(),
 				localFetch: apiFetch,
-				apiToken: token
+				apiToken: token,
+				onRotate: explicitUrl ? void 0 : (info) => announce(info.room, info.link, true)
 			});
 			closeShare = close;
-			const persistNote = explicitUrl ? "\n" : `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n\n`;
-			if (process.stdout.isTTY) process.stdout.write(`${wantHttp ? "\n" : ""}shared over WebRTC — open this link (the token is eaten from the URL on open):\n  ${link}\n` + persistNote);
-			else {
-				const linkFile = path.join(process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"), ".share-link");
-				try {
-					await writeFile(linkFile, link + "\n", { mode: 384 });
-				} catch {}
-				process.stdout.write(`${wantHttp ? "\n" : ""}shared over WebRTC · room ${room} — the link carries a secret, so it is NOT logged.\n  read it from ${linkFile} (mode 0600); delete ~/.agent-yes/.share-room to rotate\n\n`);
-			}
+			await announce(room, link, false);
 		} catch (e) {
 			process.stderr.write(`ay serve --webrtc failed: ${e.message}\n`);
 			if (!wantHttp) return 1;
@@ -957,4 +963,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-VczpuYDk.js.map
+//# sourceMappingURL=serve-O3e2YFfp.js.map

package/dist/{setup-DveWqmSR.js → setup-yKMfadhq.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-VczpuYDk.js");
+	const { cmdServe } = await import("./serve-O3e2YFfp.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-DveWqmSR.js.map
+//# sourceMappingURL=setup-yKMfadhq.js.map

package/dist/{share-ClsUSd_0.js → share-CksllWW-.js}

@@ -180,6 +180,7 @@ function randomHex(n) {
 const SUB = "ay-signal-1";
 const DEFAULT_SIGHOST = "s.agent-yes.com";
 const HOST_HEARTBEAT_MS = 2e4;
+const SIG_REFRESH_MS = 4 * 6e4;
 const STUN = [{ urls: "stun:stun.l.google.com:19302" }];
 let iceCache = null;
 async function getIceServers() {
@@ -300,17 +301,44 @@ async function importRTC() {
 async function startShare(opts) {
 	opts.url;
 	const sighost = opts.sighost ?? DEFAULT_SIGHOST;
-	const { room, token, host } = opts.url ? parseShareUrl(opts.url) : {
+	const initial = opts.url ? parseShareUrl(opts.url) : {
 		room: "r" + randomBytes(3).toString("hex"),
 		token: `${MARKER}${randomBytes(32).toString("hex")}`,
 		host: sighost
 	};
-	const { s: S, v2 } = parseSecret(token);
+	const host = initial.host;
+	let room = initial.room;
+	let token = initial.token;
+	const { s: firstS, v2 } = parseSecret(token);
 	if (!v2) throw new Error("refusing to host an unencrypted room — delete ~/.agent-yes/.share-room to rotate to an encrypted link");
-	const authToken = await deriveAuthToken(S, room, host);
-	const RTCPeerConnection = await importRTC();
+	let S = firstS;
 	const wsScheme = host.startsWith("localhost") || host.startsWith("127.") ? "ws" : "wss";
-	const link = `${host === "s.agent-yes.com" ? "https://agent-yes.com" : "http://localhost:7778"}/#${room}:${MARKER}${S}${host === "s.agent-yes.com" ? "" : "@" + host}`;
+	const ui = host === "s.agent-yes.com" ? "https://agent-yes.com" : "http://localhost:7778";
+	const suffix = host === "s.agent-yes.com" ? "" : "@" + host;
+	const mkLink = () => `${ui}/#${room}:${MARKER}${S}${suffix}`;
+	let authToken = await deriveAuthToken(S, room, host);
+	let link = mkLink();
+	const RTCPeerConnection = await importRTC();
+	let rotateCount = 0;
+	const rotate = async () => {
+		if (!opts.onRotate || closed || rotateCount >= 5) return false;
+		rotateCount++;
+		room = "r" + randomBytes(3).toString("hex");
+		token = `${MARKER}${randomBytes(32).toString("hex")}`;
+		S = parseSecret(token).s;
+		authToken = await deriveAuthToken(S, room, host);
+		link = mkLink();
+		if (closed) return false;
+		try {
+			await mkdir(path.dirname(shareRoomPath()), { recursive: true });
+			await writeFile(shareRoomPath(), `webrtc://${room}:${token}@${host}`, { mode: 384 });
+		} catch {}
+		await opts.onRotate({
+			room,
+			link
+		});
+		return true;
+	};
 	const peers = /* @__PURE__ */ new Map();
 	let closed = false;
 	let currentWs;
@@ -321,11 +349,16 @@ async function startShare(opts) {
 		let ready = false;
 		let lastRecv = Date.now();
 		let hb;
+		let refresh;
 		const stopHb = () => {
 			if (hb) {
 				clearInterval(hb);
 				hb = void 0;
 			}
+			if (refresh) {
+				clearTimeout(refresh);
+				refresh = void 0;
+			}
 		};
 		ws.onopen = () => {
 			ws.send(JSON.stringify({
@@ -349,6 +382,11 @@ async function startShare(opts) {
 					ws.send(JSON.stringify({ type: "ping" }));
 				} catch {}
 			}, HOST_HEARTBEAT_MS);
+			refresh = setTimeout(() => {
+				try {
+					ws.close();
+				} catch {}
+			}, SIG_REFRESH_MS);
 			onReady();
 		};
 		ws.onmessage = async (ev) => {
@@ -380,8 +418,16 @@ async function startShare(opts) {
 			stopHb();
 			if (closed) return;
 			if (ev?.code === 1008) {
-				closed = true;
-				process.stderr.write("[share] room rejected by signaling server — delete ~/.agent-yes/.share-room to rotate the room\n");
+				rotate().then((rotated) => {
+					if (rotated) connectSignaling(() => {});
+					else {
+						closed = true;
+						process.stderr.write("[share] room rejected by signaling server — delete ~/.agent-yes/.share-room to rotate the room\n");
+					}
+				}).catch(() => {
+					closed = true;
+					process.stderr.write("[share] room rejected and rotation failed — delete ~/.agent-yes/.share-room to rotate manually\n");
+				});
 				return;
 			}
 			setTimeout(() => connectSignaling(() => {}), ready ? 1e3 : 2e3);
@@ -579,4 +625,4 @@ async function startShare(opts) {
 
 //#endregion
 export { loadOrCreateShareRoom, startShare };
-//# sourceMappingURL=share-ClsUSd_0.js.map
+//# sourceMappingURL=share-CksllWW-.js.map

package/dist/{subcommands-CzZ4uBIa.js → subcommands-BkR-nSAB.js}

@@ -1,6 +1,6 @@
 import "./logger-B9h0djqx.js";
 import "./globalPidIndex-gZuTvTBs.js";
 import "./remotes-D2fqaRU8.js";
-import { a as finalizedLines, c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, h as stopTipForCli, i as cursorAbs, l as matchKeyword, m as snapshotStatus, n as cmdHelp, o as isPidAlive, p as runSubcommand, r as controlCodeFromName, s as isSubcommand, t as GRACEFUL_EXIT_COMMANDS, u as readNotes } from "./subcommands-CmNGbbIA.js";
+import { a as finalizedLines, c as listRecords, d as renderRawLog, f as resolveOne, g as writeToIpc, h as stopTipForCli, i as cursorAbs, l as matchKeyword, m as snapshotStatus, n as cmdHelp, o as isPidAlive, p as runSubcommand, r as controlCodeFromName, s as isSubcommand, t as GRACEFUL_EXIT_COMMANDS, u as readNotes } from "./subcommands-CT1z9Jl4.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{subcommands-CmNGbbIA.js → subcommands-CT1z9Jl4.js}

@@ -233,15 +233,15 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-VczpuYDk.js");
+				const { cmdServe } = await import("./serve-O3e2YFfp.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-DveWqmSR.js");
+				const { cmdSetup } = await import("./setup-yKMfadhq.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-CJaNc82S.js");
+				const { cmdSchedule } = await import("./schedule-OJeQo0Da.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1689,4 +1689,4 @@ async function cmdStatus(rest) {
 
 //#endregion
 export { finalizedLines as a, listRecords as c, renderRawLog as d, resolveOne as f, writeToIpc as g, stopTipForCli as h, cursorAbs as i, matchKeyword as l, snapshotStatus as m, cmdHelp as n, isPidAlive as o, runSubcommand as p, controlCodeFromName as r, isSubcommand as s, GRACEFUL_EXIT_COMMANDS as t, readNotes as u };
-//# sourceMappingURL=subcommands-CmNGbbIA.js.map
+//# sourceMappingURL=subcommands-CT1z9Jl4.js.map

package/dist/{ts-7kSDmCpQ.js → ts-DyDU_Dae.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-B9h0djqx.js";
-import { r as getInstalledPackage } from "./versionChecker-B5vxV_hH.js";
+import { r as getInstalledPackage } from "./versionChecker-DmCadDPY.js";
 import { t as agentYesHome } from "./agentYesHome-BvaUOzCV.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CJxsoGdb.js";
 import { t as PidStore } from "./pidStore-B5vBu8Px.js";
@@ -1784,4 +1784,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-7kSDmCpQ.js.map
+//# sourceMappingURL=ts-DyDU_Dae.js.map

package/dist/{versionChecker-B5vxV_hH.js → versionChecker-DmCadDPY.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.122.0";
+var version = "1.122.1";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-B5vxV_hH.js.map
+//# sourceMappingURL=versionChecker-DmCadDPY.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.122.0",
+  "version": "1.122.1",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.ts

@@ -1219,39 +1219,47 @@ export async function cmdServe(rest: string[]): Promise<number> {
       typeof webrtcVal === "string" && webrtcVal.startsWith("webrtc://") ? webrtcVal : undefined;
     try {
       const { startShare, loadOrCreateShareRoom } = await import("./share.ts");
+      const linkFile = path.join(
+        process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"),
+        ".share-link",
+      );
+      // Announce the link — reused for the initial share and for any auto-rotation
+      // (when the signaling server rejects a stale persisted room).
+      const announce = async (room: string, link: string, rotated: boolean) => {
+        const lead = rotated
+          ? "the room was rejected by signaling (stale generation) — rotated to a fresh link"
+          : "shared over WebRTC — open this link (the token is eaten from the URL on open)";
+        if (process.stdout.isTTY) {
+          const persistNote = explicitUrl
+            ? "\n"
+            : `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n\n`;
+          process.stdout.write(`${wantHttp ? "\n" : ""}${lead}:\n  ${link}\n` + persistNote);
+        } else {
+          // Non-TTY (daemon/journal/CI): the link embeds the room secret S, so never
+          // write it to a log stream. Stash it in a 0600 file and point there instead.
+          try {
+            await writeFile(linkFile, link + "\n", { mode: 0o600 });
+          } catch {
+            /* best effort */
+          }
+          process.stdout.write(
+            `${wantHttp ? "\n" : ""}${rotated ? "rotated WebRTC room" : "shared over WebRTC"} · room ${room} — the link carries a secret, so it is NOT logged.\n` +
+              `  read it from ${linkFile} (mode 0600); delete ~/.agent-yes/.share-room to rotate\n\n`,
+          );
+        }
+      };
       // No explicit webrtc:// URL → reuse the persisted room (minted once and
       // saved like the serve token), so the link is stable across restarts.
+      // Only the persisted path may auto-rotate (onRotate set); an explicit URL
+      // is the operator's choice and must not be silently changed.
       const { room, link, close } = await startShare({
         url: explicitUrl ?? (await loadOrCreateShareRoom()),
         localFetch: apiFetch,
         apiToken: token,
+        onRotate: explicitUrl ? undefined : (info) => announce(info.room, info.link, true),
       });
       closeShare = close;
-      const persistNote = explicitUrl
-        ? "\n"
-        : `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n\n`;
-      if (process.stdout.isTTY) {
-        process.stdout.write(
-          `${wantHttp ? "\n" : ""}shared over WebRTC — open this link (the token is eaten from the URL on open):\n  ${link}\n` +
-            persistNote,
-        );
-      } else {
-        // Non-TTY (daemon/journal/CI): the link embeds the room secret S, so never
-        // write it to a log stream. Stash it in a 0600 file and point there instead.
-        const linkFile = path.join(
-          process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"),
-          ".share-link",
-        );
-        try {
-          await writeFile(linkFile, link + "\n", { mode: 0o600 });
-        } catch {
-          /* best effort */
-        }
-        process.stdout.write(
-          `${wantHttp ? "\n" : ""}shared over WebRTC · room ${room} — the link carries a secret, so it is NOT logged.\n` +
-            `  read it from ${linkFile} (mode 0600); delete ~/.agent-yes/.share-room to rotate\n\n`,
-        );
-      }
+      await announce(room, link, false);
     } catch (e) {
       process.stderr.write(`ay serve --webrtc failed: ${(e as Error).message}\n`);
       if (!wantHttp) return 1; // nothing else is running

package/ts/share.ts

@@ -28,6 +28,15 @@ const SUB = "ay-signal-1";
 // MAX_CHUNK is imported from e2e.js; ICE is replaced by STUN + getIceServers (TURN) below.
 const DEFAULT_SIGHOST = "s.agent-yes.com";
 const HOST_HEARTBEAT_MS = 20000; // keepalive ping to the rendezvous + silent-drop detection
+// Proactively recycle the signaling connection on this interval. The 20s ping is
+// answered at the Cloudflare edge (setWebSocketAutoResponse, see cf/worker.ts) so
+// it can't wake a hibernated DO — but that also means an auto-answered ping only
+// proves the *edge socket* is alive, NOT that the DO still routes peer-joins to
+// us. A DO that hibernated/evicted can leave us a "zombie" host: socket
+// ESTABLISHED, pings auto-ponged, yet new browsers can't reach us and the
+// heartbeat never trips. Re-running the hello on a timer forces the DO to
+// re-register us, self-healing that state. Cheap: one reconnect per few minutes.
+const SIG_REFRESH_MS = 4 * 60_000;
 
 type IceServer = { urls: string | string[]; username?: string; credential?: string };
 const STUN: IceServer[] = [{ urls: "stun:stun.l.google.com:19302" }];
@@ -77,6 +86,12 @@ export interface ShareOpts {
   localFetch: (req: Request) => Promise<Response>;
   /** bearer token for the local ay-serve API */
   apiToken: string;
+  /** When set, a persisted/auto-minted room may auto-rotate: if the signaling
+   *  server rejects the room (close 1008 — pinned to a different protocol
+   *  generation/token), startShare mints a fresh room, persists it, and calls
+   *  this so the caller can refresh its stored link. Leave unset for explicit
+   *  webrtc:// URLs, which must NOT be silently rotated. */
+  onRotate?: (info: { room: string; link: string }) => void | Promise<void>;
 }
 
 // The room+token persist like the serve token, so the share link (and any
@@ -202,31 +217,66 @@ export async function startShare(
 ): Promise<{ room: string; link: string; close: () => void }> {
   const minted = !opts.url;
   const sighost = opts.sighost ?? DEFAULT_SIGHOST;
-  const { room, token, host } = opts.url
+  const initial = opts.url
     ? parseShareUrl(opts.url)
     : {
         room: "r" + randomBytes(3).toString("hex"),
         token: `${MARKER}${randomBytes(32).toString("hex")}`,
         host: sighost,
       };
+  const host = initial.host;
+  // Mutable: auto-rotation (below) re-mints room/token/S/authToken/link in place
+  // when the signaling server rejects the room as pinned to another generation.
+  let room = initial.room;
+  let token = initial.token;
 
   // E2E: the URL secret S splits into authToken (the only value the server sees,
   // for room matching) and per-connection AES keys the server never sees. We
   // refuse to host a legacy plaintext room — old rooms are auto-rotated to v2 by
   // loadOrCreateShareRoom (delete ~/.agent-yes/.share-room to force a rotation).
-  const { s: S, v2 } = parseSecret(token);
+  const { s: firstS, v2 } = parseSecret(token);
   if (!v2) {
     throw new Error(
       "refusing to host an unencrypted room — delete ~/.agent-yes/.share-room to rotate to an encrypted link",
     );
   }
-  const authToken = await deriveAuthToken(S, room, host);
+  let S = firstS;
 
-  const RTCPeerConnection = await importRTC();
   const wsScheme = host.startsWith("localhost") || host.startsWith("127.") ? "ws" : "wss";
   const ui = host === "s.agent-yes.com" ? "https://agent-yes.com" : "http://localhost:7778";
   const suffix = host === "s.agent-yes.com" ? "" : "@" + host;
-  const link = `${ui}/#${room}:${MARKER}${S}${suffix}`;
+  const mkLink = () => `${ui}/#${room}:${MARKER}${S}${suffix}`;
+  let authToken = await deriveAuthToken(S, room, host);
+  let link = mkLink();
+
+  const RTCPeerConnection = await importRTC();
+
+  // Auto-rotate a rejected persisted room to a fresh one. A signaling 1008 means
+  // the room is pinned to a different generation/token (e.g. a pre-E2E room), so
+  // re-using it can never succeed; mint+persist a new room and let the caller
+  // refresh its stored link. Gated on opts.onRotate (only the persisted-room
+  // caller sets it) and a small cap so a persistent reject can't spin forever.
+  let rotateCount = 0;
+  const rotate = async (): Promise<boolean> => {
+    if (!opts.onRotate || closed || rotateCount >= 5) return false;
+    rotateCount++;
+    room = "r" + randomBytes(3).toString("hex");
+    token = `${MARKER}${randomBytes(32).toString("hex")}`;
+    S = parseSecret(token).s;
+    authToken = await deriveAuthToken(S, room, host);
+    link = mkLink();
+    // close() may have run during the await above — don't persist/announce or let
+    // the caller reconnect a room for a share that's shutting down.
+    if (closed) return false;
+    try {
+      await mkdir(path.dirname(shareRoomPath()), { recursive: true });
+      await writeFile(shareRoomPath(), `webrtc://${room}:${token}@${host}`, { mode: 0o600 });
+    } catch {
+      /* best effort — in-memory rotation still lets new browsers join */
+    }
+    await opts.onRotate({ room, link });
+    return true;
+  };
 
   type Peer = {
     pc: any;
@@ -257,11 +307,16 @@ export async function startShare(
     let ready = false;
     let lastRecv = Date.now();
     let hb: ReturnType<typeof setInterval> | undefined;
+    let refresh: ReturnType<typeof setTimeout> | undefined;
     const stopHb = () => {
       if (hb) {
         clearInterval(hb);
         hb = undefined;
       }
+      if (refresh) {
+        clearTimeout(refresh);
+        refresh = undefined;
+      }
     };
     ws.onopen = () => {
       ws.send(JSON.stringify({ type: "hello", role: "host", v: 2, token: authToken }));
@@ -284,6 +339,15 @@ export async function startShare(
           ws.send(JSON.stringify({ type: "ping" }));
         } catch {}
       }, HOST_HEARTBEAT_MS);
+      // Proactive re-registration (see SIG_REFRESH_MS): the edge-answered ping
+      // above can't detect a DO that hibernated/evicted our routing while the
+      // socket stays up, so periodically recycle the connection to force a fresh
+      // hello. onclose then reconnects (~1s), re-registering us as host.
+      refresh = setTimeout(() => {
+        try {
+          ws.close();
+        } catch {}
+      }, SIG_REFRESH_MS);
       onReady();
     };
     ws.onmessage = async (ev) => {
@@ -321,14 +385,28 @@ export async function startShare(
     ws.onclose = (ev: any) => {
       stopHb();
       if (closed) return; // shutting down — don't resurrect the rendezvous
-      // The signaling server pins a room to its first host's authToken. A 1008
-      // means a different generation already owns this room — don't hot-loop;
-      // tell the operator to rotate. (Secret-free message.)
+      // The signaling server pins a room to its first host's authToken+protocol.
+      // A 1008 means a different generation already owns this room, so reusing it
+      // can never succeed. For a persisted/auto-minted room, rotate to a fresh one
+      // and reconnect; otherwise (explicit URL) give up with a secret-free hint.
       if (ev?.code === 1008) {
-        closed = true;
-        process.stderr.write(
-          "[share] room rejected by signaling server — delete ~/.agent-yes/.share-room to rotate the room\n",
-        );
+        rotate()
+          .then((rotated) => {
+            if (rotated) {
+              connectSignaling(() => {});
+            } else {
+              closed = true;
+              process.stderr.write(
+                "[share] room rejected by signaling server — delete ~/.agent-yes/.share-room to rotate the room\n",
+              );
+            }
+          })
+          .catch(() => {
+            closed = true;
+            process.stderr.write(
+              "[share] room rejected and rotation failed — delete ~/.agent-yes/.share-room to rotate manually\n",
+            );
+          });
         return;
       }
       // Keep established WebRTC peers; just re-establish the rendezvous so new

package/dist/SUPPORTED_CLIS-BVqe3k7F.js

@@ -1,8 +0,0 @@
-import "./ts-7kSDmCpQ.js";
-import "./logger-B9h0djqx.js";
-import "./versionChecker-B5vxV_hH.js";
-import "./pidStore-B5vBu8Px.js";
-import "./globalPidIndex-gZuTvTBs.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DFYbm2uk.js";
-
-export { SUPPORTED_CLIS };