agent-yes 1.169.1 → 1.170.1

package/dist/{remotes-BmAPylU_.js → remotes-CC-4GuJb.js}

@@ -1,4 +1,4 @@
-import { n as isWebrtcSpec } from "./webrtcLink-BG0Xc4-W.js";
+import { n as isWebrtcSpec } from "./webrtcLink-B7REGtK2.js";
 import { mkdir, readFile, writeFile } from "fs/promises";
 import { homedir } from "os";
 import path from "path";
@@ -86,7 +86,7 @@ async function resolveRemoteSpec(spec) {
 * The bridge lives for the rest of the process (torn down on `process.exit`).
 */
 async function resolveWebrtc(link, keyword) {
-	const { startWebrtcBridge } = await import("./webrtcRemote-SybKurg9.js");
+	const { startWebrtcBridge } = await import("./webrtcRemote-Bx-eD_0I.js");
 	const bridge = await startWebrtcBridge(link);
 	return {
 		url: bridge.baseUrl,
@@ -173,4 +173,4 @@ async function cmdRemote(rest) {
 
 //#endregion
 export { resolveRemoteSpec as a, readRemotes as i, deleteRemoteAlias as n, writeRemoteAlias as o, parseDirectRemoteSpec as r, cmdRemote as t };
-//# sourceMappingURL=remotes-BmAPylU_.js.map
+//# sourceMappingURL=remotes-CC-4GuJb.js.map

package/dist/{runningLock-BobVW1_A.js → runningLock-CNMl13dC.js}

@@ -277,4 +277,4 @@ function shouldUseLock(_cwd) {
 
 //#endregion
 export { shouldUseLock as i, getRunningAgentCount as n, releaseLock as r, acquireLock as t };
-//# sourceMappingURL=runningLock-BobVW1_A.js.map
+//# sourceMappingURL=runningLock-CNMl13dC.js.map

package/dist/rustBinary-DsO0IlNq.js

@@ -0,0 +1,228 @@
+import { r as getInstalledPackage } from "./versionChecker-Czk3aHqy.js";
+import { execFileSync } from "child_process";
+import { existsSync, mkdirSync, unlinkSync } from "fs";
+import { chmod, copyFile } from "fs/promises";
+import path from "path";
+
+//#region ts/rustBinary.ts
+/**
+* Rust binary helper - finds or downloads the appropriate prebuilt binary
+*/
+const PLATFORM_MAP = {
+	"linux-x64": "agent-yes-linux-x64-musl",
+	"linux-arm64": "agent-yes-linux-arm64-musl",
+	"darwin-x64": "agent-yes-darwin-x64",
+	"darwin-arm64": "agent-yes-darwin-arm64",
+	"win32-x64": "agent-yes-win32-x64"
+};
+/**
+* Get the binary name for the current platform
+*/
+function getBinaryName() {
+	const platform = process.platform;
+	const arch = process.arch;
+	const binaryName = PLATFORM_MAP[`${platform}-${arch}`];
+	if (!binaryName) throw new Error(`Unsupported platform: ${platform}-${arch}. Supported: ${Object.keys(PLATFORM_MAP).join(", ")}`);
+	return binaryName + (platform === "win32" ? ".exe" : "");
+}
+/**
+* Get the directory where binaries are stored
+*/
+function getBinDir() {
+	const packageBinDir = path.resolve(import.meta.dirname ?? import.meta.dir, "../bin");
+	if (existsSync(packageBinDir)) return packageBinDir;
+	const cacheDir = process.env.AGENT_YES_CACHE_DIR || path.join(process.env.XDG_CACHE_HOME || path.join(process.env.HOME || "/tmp", ".cache"), "agent-yes");
+	return path.join(cacheDir, "bin", getInstalledPackage().version);
+}
+/**
+* Find the Rust binary, checking multiple locations
+*/
+function findRustBinary(verbose = false) {
+	const binaryName = getBinaryName();
+	const ext = process.platform === "win32" ? ".exe" : "";
+	const searchPaths = [
+		path.resolve(import.meta.dirname ?? import.meta.dir, `../rs/target/release/agent-yes${ext}`),
+		path.resolve(import.meta.dirname ?? import.meta.dir, `../rs/target/debug/agent-yes${ext}`),
+		path.join(getBinDir(), binaryName),
+		path.join(getBinDir(), binaryName)
+	];
+	if (verbose) {
+		console.log(`[rust] Looking for binary: ${binaryName}`);
+		console.log(`[rust] Search paths:`);
+	}
+	for (const p of searchPaths) {
+		if (verbose) console.log(`[rust]   - ${p}: ${existsSync(p) ? "FOUND" : "not found"}`);
+		if (existsSync(p)) return p;
+	}
+}
+/**
+* Locate the `ay-spawn-hidden` launcher (Windows-only). Returns undefined off
+* Windows, or when the launcher isn't present — older installs, or a release
+* that predates it. Callers MUST fall back to spawning the program directly.
+*
+* The launcher is a second `[[bin]]` built alongside `agent-yes`, so it sits
+* next to the Rust binary in every install shape: the cargo `target/` build
+* dir, the downloaded release bin dir (getBinDir), and `~/.cargo/bin` on PATH.
+*/
+function findSpawnHiddenLauncher() {
+	if (process.platform !== "win32") return void 0;
+	const dir = import.meta.dirname ?? import.meta.dir;
+	const searchPaths = [
+		path.resolve(dir, "../rs/target/release/ay-spawn-hidden.exe"),
+		path.resolve(dir, "../rs/target/debug/ay-spawn-hidden.exe"),
+		path.join(getBinDir(), "ay-spawn-hidden.exe"),
+		Bun.which("ay-spawn-hidden") ?? ""
+	];
+	for (const p of searchPaths) if (p && existsSync(p)) return p;
+}
+/**
+* Get GitHub release download URL for the binary
+*/
+function getDownloadUrl(version = "latest") {
+	const binaryName = getBinaryName().replace(/\.exe$/, "");
+	const ext = process.platform === "win32" ? ".zip" : ".tar.gz";
+	if (version === "latest") return `https://github.com/snomiao/agent-yes/releases/latest/download/${binaryName}${ext}`;
+	return `https://github.com/snomiao/agent-yes/releases/download/v${version}/${binaryName}${ext}`;
+}
+/**
+* Download and extract the binary
+*/
+async function downloadBinary(verbose = false) {
+	const binDir = getBinDir();
+	const binaryName = getBinaryName();
+	const binaryPath = path.join(binDir, binaryName);
+	mkdirSync(binDir, { recursive: true });
+	const url = getDownloadUrl(getInstalledPackage().version);
+	if (verbose) console.log(`[rust] Downloading binary from: ${url}`);
+	const response = await fetch(url);
+	if (!response.ok) throw new Error(`Failed to download binary: ${response.status} ${response.statusText}`);
+	if (process.platform === "win32") {
+		const tempZipPath = path.join(binDir, "temp.zip");
+		await Bun.write(tempZipPath, await response.arrayBuffer());
+		await Bun.spawn([
+			"powershell",
+			"-Command",
+			`Expand-Archive -Path '${tempZipPath}' -DestinationPath '${binDir}' -Force`
+		], {
+			cwd: binDir,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		}).exited;
+		try {
+			unlinkSync(tempZipPath);
+		} catch {}
+	} else {
+		const tarPath = path.join(binDir, "temp.tar.gz");
+		await Bun.write(tarPath, await response.arrayBuffer());
+		await Bun.spawn([
+			"tar",
+			"-xzf",
+			tarPath,
+			"-C",
+			binDir
+		], {
+			cwd: binDir,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		}).exited;
+		const possibleNames = [
+			"agent-yes",
+			binaryName.replace(/-musl$/, "").replace(/-gnu$/, ""),
+			binaryName
+		];
+		for (const name of possibleNames) {
+			const extractedPath = path.join(binDir, name);
+			if (existsSync(extractedPath) && extractedPath !== binaryPath) {
+				try {
+					await copyFile(extractedPath, binaryPath);
+					unlinkSync(extractedPath);
+				} catch {}
+				break;
+			}
+		}
+		try {
+			unlinkSync(tarPath);
+		} catch {}
+		await chmod(binaryPath, 493);
+	}
+	if (verbose) console.log(`[rust] Binary downloaded to: ${binaryPath}`);
+	return binaryPath;
+}
+/**
+* Get the version of a Rust binary by running it with --version
+*/
+function getRustBinaryVersion(binaryPath) {
+	try {
+		const match = execFileSync(binaryPath, ["--version"], {
+			timeout: 5e3,
+			encoding: "utf8",
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			]
+		}).match(/(\d+\.\d+\.\d+)/);
+		return match ? match[1] ?? null : null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Check if a binary path is inside a git repo (dev build), and rebuild if outdated.
+* Returns the same path if up-to-date or rebuilt, undefined if rebuild failed.
+*/
+function autoRebuildIfOutdated(binaryPath, verbose) {
+	if (!binaryPath.includes("/target/release") && !binaryPath.includes("/target/debug")) return true;
+	const binaryVersion = getRustBinaryVersion(binaryPath);
+	const pkgVersion = getInstalledPackage().version;
+	if (verbose) console.log(`[rust] Binary version: ${binaryVersion}, package version: ${pkgVersion}`);
+	if (binaryVersion === pkgVersion) return true;
+	const rsDir = binaryPath.replace(/\/target\/(release|debug)\/agent-yes.*$/, "");
+	if (!existsSync(path.join(rsDir, "Cargo.toml"))) {
+		if (verbose) console.log(`[rust] Cannot find Cargo.toml at ${rsDir}, skipping rebuild`);
+		return true;
+	}
+	process.stderr.write(`\x1b[33m[rust] Binary outdated (${binaryVersion ?? "unknown"} → ${pkgVersion}), rebuilding…\x1b[0m\n`);
+	try {
+		execFileSync("cargo", ["build", ...binaryPath.includes("/target/release") ? ["--release"] : []], {
+			cwd: rsDir,
+			stdio: "inherit",
+			timeout: 3e5
+		});
+		process.stderr.write(`\x1b[32m[rust] Rebuild complete\x1b[0m\n`);
+		return true;
+	} catch {
+		process.stderr.write(`\x1b[31m[rust] Auto-rebuild failed, using outdated binary\x1b[0m\n`);
+		return true;
+	}
+}
+/**
+* Get or download the Rust binary
+*/
+async function getRustBinary(options = {}) {
+	const { verbose = false, forceDownload = false } = options;
+	if (!forceDownload) {
+		const existing = findRustBinary(verbose);
+		if (existing) {
+			if (verbose) console.log(`[rust] Using existing binary: ${existing}`);
+			autoRebuildIfOutdated(existing, verbose);
+			return existing;
+		}
+	}
+	if (verbose) console.log(`[rust] Binary not found, downloading...`);
+	try {
+		return await downloadBinary(verbose);
+	} catch (err) {
+		throw new Error(`Failed to get Rust binary: ${err instanceof Error ? err.message : err}\nYou can build manually with: cd rs && cargo build --release`);
+	}
+}
+
+//#endregion
+export { getRustBinary as n, findSpawnHiddenLauncher as t };
+//# sourceMappingURL=rustBinary-DsO0IlNq.js.map

package/dist/{schedule-CtVvSyaN.js → schedule-ChTPIcXf.js}

@@ -1,10 +1,10 @@
-import "./ts-Bbhf5JbN.js";
+import "./ts-DsxejviJ.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BmWkWhcJ.js";
-import "./pidStore-BfoBWUjc.js";
-import "./globalPidIndex-DlmmJlO8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-Bwg9VqLI.js";
-import { l as resolveSpawnCwd } from "./workspaceConfig-BC03X4Y1.js";
+import "./versionChecker-Czk3aHqy.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-ByppVvWO.js";
+import { d as resolveSpawnCwd } from "./workspaceConfig-BgqK-31W.js";
 import { createHash } from "node:crypto";
 
 //#region ts/oxmgrService.ts
@@ -141,4 +141,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-CtVvSyaN.js.map
+//# sourceMappingURL=schedule-ChTPIcXf.js.map

package/dist/{serve-CLmk5ujF.js → serve-De1gAWNI.js}

@@ -1,17 +1,18 @@
-import "./ts-Bbhf5JbN.js";
+import "./ts-DsxejviJ.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-BmWkWhcJ.js";
-import "./pidStore-BfoBWUjc.js";
-import { a as updateGlobalPidStatus } from "./globalPidIndex-DlmmJlO8.js";
-import { t as pgidForWrapper } from "./reaper-C-eWAxIj.js";
-import "./configShared-CEyhl0WH.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-Bwg9VqLI.js";
-import "./e2e-BeKjLhmO.js";
-import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-BmAPylU_.js";
-import { c as isProvisionAllowed, i as getSpawnHook, l as resolveSpawnCwd, r as getProvisionRoot, s as hasSpawnHook } from "./workspaceConfig-BC03X4Y1.js";
-import { M as writeToIpc, S as renderRawLog, _ as listRecords, b as readNotes, i as controlCodeFromName, k as snapshotStatus, l as extractNeedsInput, o as deriveLiveStatus, s as extractBadges, u as extractTaskCounts, w as resolveOne, x as readPtysize } from "./subcommands--EUush_X.js";
-import { r as spawnRejectionReason } from "./spawnGate-DzPfa1PZ.js";
+import { r as getInstalledPackage } from "./versionChecker-Czk3aHqy.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-DsO0IlNq.js";
+import "./pidStore-BIvsBQ8X.js";
+import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
+import { t as pgidForWrapper } from "./reaper-CWF2_ATd.js";
+import "./configShared-0MnIQ652.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-ByppVvWO.js";
+import { A as resolveOne, E as readPtysize, F as snapshotStatus, H as TYPING_BADGE, O as renderRawLog, S as listRecords, T as readNotes, V as writeToIpc, b as isUserTyping, f as extractNeedsInput, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-BFlpV23b.js";
+import "./e2e-jb0Hp43q.js";
+import "./webrtcLink-B7REGtK2.js";
+import "./remotes-CC-4GuJb.js";
+import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-BgqK-31W.js";
+import { r as spawnRejectionReason } from "./spawnGate-IJDByl2U.js";
 import yargs from "yargs";
 import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { homedir, hostname, userInfo } from "os";
@@ -148,6 +149,70 @@ function freshAgentEnv() {
 	}
 	return env;
 }
+function originOwnerRepo(cwd) {
+	try {
+		const r = Bun.spawnSync([
+			"git",
+			"-C",
+			cwd,
+			"remote",
+			"get-url",
+			"origin"
+		]);
+		if (r.exitCode !== 0) return null;
+		const m = new TextDecoder().decode(r.stdout).trim().match(/github\.com[:/]([^/]+)\/(.+?)(?:\.git)?\/?$/i);
+		return m && m[1] && m[2] ? {
+			owner: m[1],
+			repo: m[2]
+		} : null;
+	} catch {
+		return null;
+	}
+}
+async function runProvisionHook(cwd, koho) {
+	const hook = getProvisionHook();
+	if (!hook) return { ran: false };
+	const shell = process.env.AGENT_YES_PROVISION_SHELL?.trim() || process.env.AGENT_YES_SPAWN_SHELL?.trim() || "/bin/sh";
+	const outPath = path.join(agentYesHome(), `provision-hook-${process.pid}-${performance.now().toString(36).replace(".", "")}.log`);
+	const timeoutMs = Number(process.env.AGENT_YES_PROVISION_HOOK_TIMEOUT_MS) || 6e4;
+	let code = null;
+	try {
+		const child = Bun.spawn([
+			shell,
+			"-c",
+			`set -e\n${hook}`
+		], {
+			cwd,
+			env: {
+				...freshAgentEnv(),
+				...koho
+			},
+			stdin: "ignore",
+			stdout: Bun.file(outPath),
+			stderr: Bun.file(outPath)
+		});
+		code = await Promise.race([child.exited, new Promise((r) => setTimeout(() => r(124), timeoutMs))]);
+		if (code === 124) child.kill();
+	} catch (e) {
+		return {
+			ran: true,
+			ok: false,
+			code: null,
+			detail: e.message
+		};
+	}
+	let detail = "";
+	try {
+		detail = (await Bun.file(outPath).text()).slice(0, 4096).trimEnd();
+	} catch {}
+	await unlink(outPath).catch(() => {});
+	return {
+		ran: true,
+		ok: code === 0,
+		code,
+		detail
+	};
+}
 const DAEMON_NAME = "agent-yes";
 function resolveDaemonManager() {
 	const oxmgr = Bun.which("oxmgr");
@@ -308,7 +373,7 @@ async function cmdServeDaemon(sub, args) {
 		let shareLink = null;
 		let shareLinkMinted = false;
 		if (webrtcDaemon) try {
-			const { loadOrCreateShareRoom, shareLinkFromRoomUrl } = await import("./share-D_e2Fwiy.js");
+			const { loadOrCreateShareRoom, shareLinkFromRoomUrl } = await import("./share-QregR8a_.js");
 			const explicit = explicitWebrtcUrl(effArgs);
 			shareLink = shareLinkFromRoomUrl(explicit ?? await loadOrCreateShareRoom());
 			shareLinkMinted = !explicit;
@@ -317,7 +382,7 @@ async function cmdServeDaemon(sub, args) {
 			if (!webrtcDaemon) return;
 			if (shareLink) {
 				process.stdout.write(`\nshared over WebRTC — open this link (the token is eaten from the URL on open):\n  ${shareLink}\n` + (shareLinkMinted ? `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n` : ``));
-				const { offerOpenInBrowser } = await import("./openBrowser-CCF1iuQK.js");
+				const { offerOpenInBrowser } = await import("./openBrowser-ChR4llYa.js");
 				await offerOpenInBrowser(shareLink);
 			} else process.stdout.write("\nthe WebRTC share link carries a secret, so the daemon does NOT log it —\nread it from ~/.agent-yes/.share-link (mode 0600). The room persists in\n~/.agent-yes/.share-room, so the link survives restarts.\n");
 		};
@@ -343,6 +408,8 @@ async function cmdServeDaemon(sub, args) {
 			]);
 		}
 		const serveArgv = ayServeArgv(effArgs);
+		const spawnHidden = findSpawnHiddenLauncher();
+		const managedArgv = spawnHidden ? [spawnHidden, ...serveArgv] : serveArgv;
 		const oxmgrHealth = webrtcDaemon && mgr.id === "oxmgr" ? [
 			"--health-cmd",
 			ayServeArgv(["healthcheck"]).join(" "),
@@ -356,7 +423,7 @@ async function cmdServeDaemon(sub, args) {
 		const startArgv = mgr.id === "oxmgr" ? [
 			mgr.bin,
 			"start",
-			serveArgv.join(" "),
+			managedArgv.join(" "),
 			"--name",
 			DAEMON_NAME,
 			"--restart",
@@ -367,7 +434,7 @@ async function cmdServeDaemon(sub, args) {
 		] : [
 			mgr.bin,
 			"start",
-			serveArgv[0],
+			managedArgv[0],
 			"--name",
 			DAEMON_NAME,
 			"--interpreter",
@@ -375,7 +442,7 @@ async function cmdServeDaemon(sub, args) {
 			"--exp-backoff-restart-delay",
 			"200",
 			"--",
-			...serveArgv.slice(1)
+			...managedArgv.slice(1)
 		];
 		const code = await Bun.spawn(startArgv, { stdio: [
 			"ignore",
@@ -781,14 +848,16 @@ Options:
 	const withMeta = async (r) => {
 		const status = await deriveLiveStatus(r);
 		const question = status !== "exited" && !r.unresponsive ? await logNeedsInput(r.log_file, r.cli) : null;
+		const lastActiveAt = r.log_file ? await stat(r.log_file).then((s) => s.mtimeMs).catch(() => r.started_at) : r.started_at;
 		return {
 			...r,
+			last_active_at: lastActiveAt,
 			status: status === "exited" ? status : r.unresponsive ? "stuck" : question ? "needs_input" : status,
 			question,
 			title: await logTitle(r.log_file),
 			git: status === "exited" ? null : await gitStatus(r.cwd),
 			tasks: status === "exited" ? null : await logTasks(r.log_file),
-			badges: status === "exited" ? [] : await logBadges(r.log_file)
+			badges: status === "exited" ? [] : await logBadges(r.log_file).then(async (b) => await isUserTyping(r.pid) ? [...b, TYPING_BADGE.id] : b)
 		};
 	};
 	const presence = /* @__PURE__ */ new Map();
@@ -894,7 +963,10 @@ Options:
 			return Response.json({ host: user ? `${user}@${host}` : host });
 		}
 		if (req.method === "GET" && p === "/api/version") return Response.json({ version: getInstalledPackage().version });
-		if (req.method === "GET" && p === "/api/spawn-config") return Response.json({ hasSpawnHook: hasSpawnHook() });
+		if (req.method === "GET" && p === "/api/spawn-config") return Response.json({
+			hasSpawnHook: hasSpawnHook(),
+			hasProvisionHook: hasProvisionHook()
+		});
 		if (req.method === "GET" && p === "/api/notes") {
 			const notes = await readNotes();
 			return Response.json(Object.fromEntries(notes));
@@ -1104,7 +1176,9 @@ Options:
 				const record = await resolveOne(keyword, defaultOpts({ all: true }));
 				const args = ["restart", String(record.pid)];
 				if (body.fresh) args.push("--fresh");
-				Bun.spawn(["agent-yes", ...args], {
+				const ayBin = Bun.which("ay") ?? process.argv[1];
+				const ayCmd = process.platform === "win32" && ayBin.toLowerCase().endsWith(".exe") ? [ayBin] : [process.execPath, ayBin];
+				Bun.spawn([...ayCmd, ...args], {
 					cwd: record.cwd,
 					detached: true,
 					stdio: [
@@ -1206,6 +1280,16 @@ Options:
 				} catch (e) {
 					return new Response(`fork needs the 'codehost' package (codehost/provision) — install it (npm i -g codehost) or 'bun link' it for local dev: ${e.message}`, { status: 501 });
 				}
+				const forkOrigin = originOwnerRepo(fork.fromCwd);
+				const forkHook = await runProvisionHook(fork.fromCwd, {
+					KOHO_ACTION: "fork",
+					KOHO_FROM_CWD: fork.fromCwd,
+					KOHO_BRANCH: fork.branch,
+					KOHO_OWNER: forkOrigin?.owner ?? "",
+					KOHO_REPO: forkOrigin?.repo ?? "",
+					KOHO_WS_ROOT: getProvisionRoot() ?? ""
+				});
+				if (forkHook.ran && !forkHook.ok) return new Response(`provision hook denied this fork (exit ${forkHook.code})` + (forkHook.detail ? `:\n${forkHook.detail}` : ""), { status: 403 });
 				let result;
 				try {
 					const wsRoot = getProvisionRoot();
@@ -1218,7 +1302,7 @@ Options:
 					return new Response(`fork failed: ${e.message}`, { status: 502 });
 				}
 				if (!result?.ok) return new Response(result?.error ?? "fork failed", { status: 502 });
-				if (result.spec && !isProvisionAllowed(result.spec.owner, result.spec.repo)) return new Response(`forking '${result.spec.owner}/${result.spec.repo}' is not allowed — add the owner to provisionAllowlist in ~/.agent-yes/config.json (or "*" to allow all)`, { status: 403 });
+				if (!forkHook.ran && result.spec && !isProvisionAllowed(result.spec.owner, result.spec.repo)) return new Response(`forking '${result.spec.owner}/${result.spec.repo}' is not allowed — add the owner to provisionAllowlist in ~/.agent-yes/config.json (or "*" to allow all), or set a provisionHook to gate it yourself`, { status: 403 });
 				cwd = result.folder;
 				provisioned = {
 					action: result.action,
@@ -1238,7 +1322,17 @@ Options:
 					spec = null;
 				}
 				if (!spec) return new Response(`unrecognized spawn source: ${from}`, { status: 400 });
-				if (!isProvisionAllowed(spec.owner, spec.repo)) return new Response(`provisioning '${spec.owner}/${spec.repo}' is not allowed — add the owner to provisionAllowlist in ~/.agent-yes/config.json (or "*" to allow all)`, { status: 403 });
+				const fromHook = await runProvisionHook(getProvisionRoot() ?? homedir(), {
+					KOHO_ACTION: "from",
+					KOHO_SOURCE: from,
+					KOHO_OWNER: spec.owner,
+					KOHO_REPO: spec.repo,
+					KOHO_BRANCH: spec.branch,
+					KOHO_WS_ROOT: getProvisionRoot() ?? ""
+				});
+				if (fromHook.ran) {
+					if (!fromHook.ok) return new Response(`provision hook denied '${spec.owner}/${spec.repo}' (exit ${fromHook.code})` + (fromHook.detail ? `:\n${fromHook.detail}` : ""), { status: 403 });
+				} else if (!isProvisionAllowed(spec.owner, spec.repo)) return new Response(`provisioning '${spec.owner}/${spec.repo}' is not allowed — add the owner to provisionAllowlist in ~/.agent-yes/config.json (or "*" to allow all), or set a provisionHook to gate it yourself`, { status: 403 });
 				let result;
 				try {
 					const wsRoot = getProvisionRoot();
@@ -1405,7 +1499,7 @@ Options:
 		const webrtcVal = argv.webrtc ?? argv.share;
 		const explicitUrl = typeof webrtcVal === "string" && webrtcVal.startsWith("webrtc://") ? webrtcVal : void 0;
 		try {
-			const { startShare, loadOrCreateShareRoom } = await import("./share-D_e2Fwiy.js");
+			const { startShare, loadOrCreateShareRoom } = await import("./share-QregR8a_.js");
 			const linkFile = path.join(process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"), ".share-link");
 			const announce = async (room, link, rotated) => {
 				const lead = rotated ? "the room was rejected by signaling (stale generation) — rotated to a fresh link" : "shared over WebRTC — open this link (the token is eaten from the URL on open)";
@@ -1413,7 +1507,7 @@ Options:
 					const persistNote = explicitUrl ? "\n" : `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n\n`;
 					process.stdout.write(`${wantHttp ? "\n" : ""}${lead}:\n  ${link}\n` + persistNote);
 					if (!rotated) {
-						const { offerOpenInBrowser } = await import("./openBrowser-CCF1iuQK.js");
+						const { offerOpenInBrowser } = await import("./openBrowser-ChR4llYa.js");
 						await offerOpenInBrowser(link);
 					}
 				} else {
@@ -1464,4 +1558,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-CLmk5ujF.js.map
+//# sourceMappingURL=serve-De1gAWNI.js.map

package/dist/{setup-CYbXOcpH.js → setup-nlMqyEPB.js}

@@ -1,4 +1,4 @@
-import { o as getWorkspaceRoot, u as setWorkspaceRoot } from "./workspaceConfig-BC03X4Y1.js";
+import { f as setWorkspaceRoot, s as getWorkspaceRoot } from "./workspaceConfig-BgqK-31W.js";
 import { existsSync } from "node:fs";
 import { stdin, stdout } from "node:process";
 import { createInterface } from "node:readline/promises";
@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-CLmk5ujF.js");
+	const { cmdServe } = await import("./serve-De1gAWNI.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-CYbXOcpH.js.map
+//# sourceMappingURL=setup-nlMqyEPB.js.map

package/dist/{share-D_e2Fwiy.js → share-QregR8a_.js}

@@ -1,4 +1,4 @@
-import { a as computeTranscriptHash, c as open$1, d as randomHex, f as seal, i as MAX_CHUNK, l as packEnvelope, n as FLAG_CONFIRM, o as deriveAuthToken, p as unpackEnvelope, r as MARKER, s as deriveDirKeys, t as CONFIRM_TIMEOUT_MS, u as parseSecret } from "./e2e-BeKjLhmO.js";
+import { a as computeTranscriptHash, c as open$1, d as randomHex, f as seal, i as MAX_CHUNK, l as packEnvelope, n as FLAG_CONFIRM, o as deriveAuthToken, p as unpackEnvelope, r as MARKER, s as deriveDirKeys, t as CONFIRM_TIMEOUT_MS, u as parseSecret } from "./e2e-jb0Hp43q.js";
 import { mkdir, readFile, writeFile } from "fs/promises";
 import { homedir } from "os";
 import path from "path";
@@ -534,4 +534,4 @@ async function startShare(opts) {
 
 //#endregion
 export { loadOrCreateShareRoom, shareLinkFromRoomUrl, startShare };
-//# sourceMappingURL=share-D_e2Fwiy.js.map
+//# sourceMappingURL=share-QregR8a_.js.map

package/dist/spawnGate-BFhva-2F.js

@@ -0,0 +1,5 @@
+import "./logger-CDIsZ-Pp.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-IJDByl2U.js";
+
+export { waitForSpawnCapacity };

package/dist/{spawnGate-DzPfa1PZ.js → spawnGate-IJDByl2U.js}

@@ -1,5 +1,5 @@
-import { i as readGlobalPids } from "./globalPidIndex-DlmmJlO8.js";
-import { a as getSpawnWaitMs, n as getMinFreeMb, t as getMaxAgents } from "./workspaceConfig-BC03X4Y1.js";
+import { i as readGlobalPids } from "./globalPidIndex-CoNr7tS8.js";
+import { n as getMinFreeMb, o as getSpawnWaitMs, t as getMaxAgents } from "./workspaceConfig-BgqK-31W.js";
 import { readFile } from "fs/promises";
 
 //#region ts/spawnGate.ts
@@ -104,4 +104,4 @@ async function waitForSpawnCapacity(opts) {
 
 //#endregion
 export { waitForSpawnCapacity as i, spawnGateEnabled as n, spawnRejectionReason as r, memAvailableMb as t };
-//# sourceMappingURL=spawnGate-DzPfa1PZ.js.map
+//# sourceMappingURL=spawnGate-IJDByl2U.js.map