agent-yes 1.189.1 → 1.190.0

package/dist/SUPPORTED_CLIS-B729E086.js

@@ -0,0 +1,8 @@
+import "./ts-CeGEhsC9.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-DXwf5ip7.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BB7Br0fS.js";
+
+export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-DcA00P5Z.js → SUPPORTED_CLIS-BB7Br0fS.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-1qx-QhAe.js";
+import { t as CLIS_CONFIG } from "./ts-CeGEhsC9.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-DcA00P5Z.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-BB7Br0fS.js.map

package/dist/{agentShare-D5qYAXeL.js → agentShare-BXfWzPJu.js}

@@ -1,10 +1,10 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { j as resolveOne } from "./subcommands-BYKJkWNP.js";
+import { j as resolveOne } from "./subcommands-Deaq1dOk.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-DsTnQhyx.js";
+import "./remotes-CgT91bMo.js";
 import { r as startShare } from "./share-29YbzpbU.js";
 
 //#region ts/agentShare.ts
@@ -228,4 +228,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-D5qYAXeL.js.map
+//# sourceMappingURL=agentShare-BXfWzPJu.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-Do5ex5Wm.js";
-import { n as getRustBinary } from "./rustBinary-xhXsfVn-.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DXwf5ip7.js";
+import { n as getRustBinary } from "./rustBinary-C8YZUZGT.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-qe4h_Cvx.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-D6TbKFTF.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -299,16 +299,16 @@ await checkAndAutoUpdate();
 logger.info(versionString());
 const config = parseCliArgs(process.argv);
 if (config.tray) {
-	const { startTray } = await import("./tray-DKwVRBwr.js");
+	const { startTray } = await import("./tray-PMOWFOfk.js");
 	await startTray();
 	await new Promise(() => {});
 }
 {
-	const { ensureTray } = await import("./tray-DKwVRBwr.js");
+	const { ensureTray } = await import("./tray-PMOWFOfk.js");
 	ensureTray();
 }
 if (!config.showVersion && !config.appendPrompt && !config.tray) {
-	const { waitForSpawnCapacity } = await import("./spawnGate-C5nBiUZQ.js");
+	const { waitForSpawnCapacity } = await import("./spawnGate-BejtWiMJ.js");
 	await waitForSpawnCapacity({
 		onWait: (reason, waitedMs) => {
 			if (config.verbose || waitedMs === 0) console.error(`[agent-yes] spawn gate: ${reason} — waiting…`);
@@ -327,14 +327,14 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-D8ocFVqe.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-B729E086.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);
 			console.log(`[rust] Args: ${rustArgs.join(" ")}`);
 		}
 		const attach = config.attach || process.env.AGENT_YES_ATTACH === "1";
-		const { shouldForkNested, buildSpawnTutorial, waitForFifo } = await import("./forkNested-C8q7E6mp.js");
+		const { shouldForkNested, buildSpawnTutorial, waitForFifo } = await import("./forkNested-C1kKsXi5.js");
 		if (shouldForkNested({
 			isTTY: Boolean(process.stdout.isTTY),
 			ayPid: process.env.AGENT_YES_PID,

package/dist/expose-DUYH0tvh.js

@@ -0,0 +1,466 @@
+import { createHash, randomBytes } from "node:crypto";
+import { homedir } from "node:os";
+import path from "node:path";
+import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+
+//#region node_modules/codehost/src/tunnel/protocol.ts
+let Op = /* @__PURE__ */ function(Op) {
+	Op[Op["HttpReq"] = 1] = "HttpReq";
+	Op[Op["HttpReqBody"] = 2] = "HttpReqBody";
+	Op[Op["HttpReqEnd"] = 3] = "HttpReqEnd";
+	Op[Op["HttpResHead"] = 4] = "HttpResHead";
+	Op[Op["HttpResBody"] = 5] = "HttpResBody";
+	Op[Op["HttpResEnd"] = 6] = "HttpResEnd";
+	Op[Op["WsOpen"] = 7] = "WsOpen";
+	Op[Op["WsText"] = 9] = "WsText";
+	Op[Op["WsBin"] = 10] = "WsBin";
+	Op[Op["WsClose"] = 11] = "WsClose";
+	Op[Op["WsOpenAck"] = 8] = "WsOpenAck";
+	Op[Op["Error"] = 12] = "Error";
+	Op[Op["WsCont"] = 13] = "WsCont";
+	return Op;
+}({});
+const FRAME_HEADER = 5;
+const MAX_FRAME = 64 * 1024;
+/** Max payload bytes per frame; larger bodies/messages are split across frames. */
+const MAX_CHUNK = MAX_FRAME - FRAME_HEADER;
+const enc = new TextEncoder();
+const dec = new TextDecoder();
+function encodeFrame(op, streamId, payload) {
+	const len = payload?.byteLength ?? 0;
+	const buf = new Uint8Array(5 + len);
+	buf[0] = op;
+	new DataView(buf.buffer).setUint32(1, streamId >>> 0, false);
+	if (payload && len) buf.set(payload, 5);
+	return buf;
+}
+function encodeJson(op, streamId, obj) {
+	return encodeFrame(op, streamId, enc.encode(JSON.stringify(obj)));
+}
+function decodeFrame(data) {
+	const u8 = data instanceof Uint8Array ? data : new Uint8Array(data);
+	return {
+		op: u8[0],
+		streamId: new DataView(u8.buffer, u8.byteOffset, u8.byteLength).getUint32(1, false),
+		payload: u8.subarray(5)
+	};
+}
+function payloadJson(payload) {
+	return JSON.parse(dec.decode(payload));
+}
+/** Split a body into MAX_CHUNK-sized slices (copies, safe to transfer). */
+function* chunk(body) {
+	for (let off = 0; off < body.byteLength; off += MAX_CHUNK) yield body.slice(off, Math.min(off + MAX_CHUNK, body.byteLength));
+}
+function concatBytes(parts) {
+	if (parts.length === 1) return parts[0];
+	const total = parts.reduce((n, p) => n + p.byteLength, 0);
+	const out = new Uint8Array(total);
+	let off = 0;
+	for (const p of parts) {
+		out.set(p, off);
+		off += p.byteLength;
+	}
+	return out;
+}
+/**
+* Frames for one WebSocket message. Messages that fit in a single frame emit
+* just a WsText/WsBin frame (back-compatible). Larger ones are split into
+* WsCont frames carrying the leading bytes, terminated by the WsText/WsBin
+* frame with the final bytes; the receiver concatenates them in order.
+*/
+function* wsMessageFrames(terminal, streamId, payload) {
+	let off = 0;
+	while (payload.byteLength - off > MAX_CHUNK) {
+		yield encodeFrame(Op.WsCont, streamId, payload.subarray(off, off + MAX_CHUNK));
+		off += MAX_CHUNK;
+	}
+	yield encodeFrame(terminal, streamId, payload.subarray(off));
+}
+/**
+* Reassembles WsCont + terminal frames back into whole WebSocket messages,
+* keyed by streamId. Feed it every WsCont/WsText/WsBin payload; it returns the
+* complete message bytes on a terminal frame, or null while buffering.
+*/
+var WsReassembler = class {
+	pending = /* @__PURE__ */ new Map();
+	cont(streamId, payload) {
+		const buf = this.pending.get(streamId);
+		if (buf) buf.push(payload.slice());
+		else this.pending.set(streamId, [payload.slice()]);
+	}
+	finish(streamId, payload) {
+		const buf = this.pending.get(streamId);
+		if (!buf) return payload;
+		this.pending.delete(streamId);
+		buf.push(payload);
+		return concatBytes(buf);
+	}
+	drop(streamId) {
+		this.pending.delete(streamId);
+	}
+};
+
+//#endregion
+//#region node_modules/codehost/src/tunnel/host.ts
+const textDecoder = new TextDecoder();
+const HIGH_WATER = 4 * 1024 * 1024;
+const LOW_WATER = 1 * 1024 * 1024;
+const HOP_BY_HOP = new Set([
+	"connection",
+	"keep-alive",
+	"proxy-authenticate",
+	"proxy-authorization",
+	"te",
+	"trailer",
+	"transfer-encoding",
+	"upgrade",
+	"content-length",
+	"host"
+]);
+/**
+* Server half of the tunnel: bridges one transport to a local HTTP/WS server
+* on 127.0.0.1. Multiplexes concurrent HTTP requests and WebSocket
+* connections by streamId.
+*/
+var TunnelHost = class {
+	httpStreams = /* @__PURE__ */ new Map();
+	wsConns = /* @__PURE__ */ new Map();
+	wsRx = new WsReassembler();
+	origin;
+	wsOrigin;
+	port;
+	stripPrefix;
+	onLocal;
+	constructor(transport, opts) {
+		this.transport = transport;
+		this.port = opts.port;
+		this.stripPrefix = opts.stripPrefix;
+		this.onLocal = opts.onLocal;
+		this.origin = `http://127.0.0.1:${opts.port}`;
+		this.wsOrigin = `ws://127.0.0.1:${opts.port}`;
+		transport.setBufferedAmountLow?.(LOW_WATER, () => this.drainWaiter?.());
+		transport.onFrame((data) => void this.onFrame(data));
+		transport.onClose(() => this.closeAll());
+	}
+	/** Map a tunneled path to the local server's path, stripping the base prefix. */
+	localPath(path) {
+		if (this.stripPrefix && path.startsWith(this.stripPrefix)) {
+			const rest = path.slice(this.stripPrefix.length);
+			return rest.startsWith("/") ? rest : `/${rest}`;
+		}
+		return path;
+	}
+	async onFrame(data) {
+		const { op, streamId, payload } = decodeFrame(data);
+		switch (op) {
+			case Op.HttpReq:
+				this.httpStreams.set(streamId, {
+					head: payloadJson(payload),
+					body: []
+				});
+				break;
+			case Op.HttpReqBody:
+				this.httpStreams.get(streamId)?.body.push(payload.slice());
+				break;
+			case Op.HttpReqEnd:
+				await this.doHttp(streamId);
+				break;
+			case Op.WsOpen:
+				this.openWs(streamId, payloadJson(payload));
+				break;
+			case Op.WsCont:
+				this.wsRx.cont(streamId, payload);
+				break;
+			case Op.WsText:
+				this.wsConns.get(streamId)?.send(textDecoder.decode(this.wsRx.finish(streamId, payload)));
+				break;
+			case Op.WsBin:
+				this.wsConns.get(streamId)?.send(this.wsRx.finish(streamId, payload));
+				break;
+			case Op.WsClose:
+				this.wsRx.drop(streamId);
+				this.wsConns.get(streamId)?.close();
+				this.wsConns.delete(streamId);
+				break;
+		}
+	}
+	async doHttp(streamId) {
+		const stream = this.httpStreams.get(streamId);
+		if (!stream) return;
+		this.httpStreams.delete(streamId);
+		const { method, path, headers } = stream.head;
+		const reqHeaders = new Headers();
+		let forwardedHost = "";
+		for (const [k, v] of Object.entries(headers)) {
+			const lk = k.toLowerCase();
+			if (lk === "x-forwarded-host") {
+				forwardedHost = v;
+				continue;
+			}
+			if (!HOP_BY_HOP.has(lk)) reqHeaders.set(k, v);
+		}
+		reqHeaders.set("host", forwardedHost || `127.0.0.1:${this.port}`);
+		const body = method !== "GET" && method !== "HEAD" && stream.body.length > 0 ? concatBytes(stream.body) : void 0;
+		const wantsGzip = reqHeaders.get("x-codehost-accept-gzip") === "1";
+		reqHeaders.delete("x-codehost-accept-gzip");
+		if (wantsGzip) reqHeaders.set("accept-encoding", "gzip");
+		try {
+			const local = this.onLocal?.({
+				method,
+				path,
+				headers: reqHeaders,
+				body
+			});
+			const res = local ? await local : await fetch(this.origin + this.localPath(path), {
+				method,
+				headers: reqHeaders,
+				body,
+				redirect: "manual",
+				...wantsGzip ? { decompress: false } : {}
+			});
+			const resHeaders = {};
+			res.headers.forEach((v, k) => {
+				if (!HOP_BY_HOP.has(k.toLowerCase())) resHeaders[k] = v;
+			});
+			await this.send(encodeJson(Op.HttpResHead, streamId, {
+				status: res.status,
+				statusText: res.statusText,
+				headers: resHeaders
+			}));
+			if (res.body) {
+				const reader = res.body.getReader();
+				for (;;) {
+					const { done, value } = await reader.read();
+					if (done) break;
+					for (const part of chunk(value)) await this.send(encodeFrame(Op.HttpResBody, streamId, part));
+				}
+			}
+			await this.send(encodeFrame(Op.HttpResEnd, streamId));
+		} catch (err) {
+			await this.send(encodeJson(Op.Error, streamId, { message: `proxy error: ${String(err)}` }));
+		}
+	}
+	openWs(streamId, info) {
+		let ws;
+		try {
+			ws = new WebSocket(this.wsOrigin + this.localPath(info.path), info.protocols);
+		} catch (err) {
+			this.send(encodeJson(Op.WsOpenAck, streamId, {
+				ok: false,
+				error: String(err)
+			}));
+			return;
+		}
+		ws.binaryType = "arraybuffer";
+		this.wsConns.set(streamId, ws);
+		ws.onopen = () => {
+			this.send(encodeJson(Op.WsOpenAck, streamId, {
+				ok: true,
+				protocol: ws.protocol
+			}));
+		};
+		ws.onmessage = (ev) => {
+			const [terminal, u8] = typeof ev.data === "string" ? [Op.WsText, new TextEncoder().encode(ev.data)] : [Op.WsBin, ev.data instanceof ArrayBuffer ? new Uint8Array(ev.data) : new Uint8Array(ev.data)];
+			for (const frame of wsMessageFrames(terminal, streamId, u8)) this.send(frame);
+		};
+		ws.onclose = (ev) => {
+			this.send(encodeJson(Op.WsClose, streamId, {
+				code: ev.code,
+				reason: ev.reason
+			}));
+			this.wsConns.delete(streamId);
+		};
+		ws.onerror = () => {
+			this.send(encodeJson(Op.WsClose, streamId, {
+				code: 1006,
+				reason: "error"
+			}));
+			this.wsConns.delete(streamId);
+		};
+	}
+	sendTail = Promise.resolve();
+	send(frame) {
+		const p = this.sendTail.then(async () => {
+			await this.waitForDrain();
+			if (!this.transport.isOpen()) return;
+			this.transport.send(frame);
+		});
+		this.sendTail = p.catch(() => {});
+		return p;
+	}
+	drainWaiter = null;
+	waitForDrain() {
+		if (!this.transport.isOpen() || this.transport.bufferedAmount() < HIGH_WATER) return Promise.resolve();
+		return new Promise((resolve) => {
+			let settled = false;
+			const finish = () => {
+				if (settled) return;
+				settled = true;
+				clearInterval(timer);
+				this.drainWaiter = null;
+				resolve();
+			};
+			this.drainWaiter = finish;
+			const timer = setInterval(() => {
+				if (!this.transport.isOpen() || this.transport.bufferedAmount() < HIGH_WATER) finish();
+			}, 100);
+		});
+	}
+	closeAll() {
+		for (const ws of this.wsConns.values()) try {
+			ws.close();
+		} catch {}
+		this.wsConns.clear();
+		this.httpStreams.clear();
+	}
+};
+
+//#endregion
+//#region ts/expose.ts
+const DEFAULT_RELAY = "https://agent-yes.com";
+const PING_MS = 25e3;
+const RECONNECT_MIN_MS = 1e3;
+const RECONNECT_MAX_MS = 3e4;
+function exposuresPath() {
+	const home = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
+	mkdirSync(home, { recursive: true });
+	return path.join(home, "exposures.json");
+}
+/** Stable id+key per (relay, port): re-running `ay expose 5173` keeps its URL. */
+function loadOrCreateExposure(relayHost, port) {
+	const file = exposuresPath();
+	let all = {};
+	try {
+		all = JSON.parse(readFileSync(file, "utf8"));
+	} catch {}
+	const slot = `${relayHost}:${port}`;
+	const existing = all[slot];
+	if (existing?.id && existing.key) return existing;
+	const rec = {
+		id: "x" + randomBytes(8).toString("hex").slice(0, 15),
+		key: randomBytes(32).toString("hex")
+	};
+	all[slot] = rec;
+	const tmp = file + ".tmp";
+	writeFileSync(tmp, JSON.stringify(all, null, 2) + "\n");
+	chmodSync(tmp, 384);
+	renameSync(tmp, file);
+	return rec;
+}
+/** Bun's browser-style WebSocket as a TunnelTransport. No bufferedAmountLow
+*  event exists here — TunnelHost's 100ms safety poll covers drain resume. */
+function wsTransport(ws) {
+	return {
+		send: (frame) => {
+			const copy = new Uint8Array(frame.byteLength);
+			copy.set(frame);
+			ws.send(copy);
+		},
+		isOpen: () => ws.readyState === WebSocket.OPEN,
+		bufferedAmount: () => ws.bufferedAmount,
+		onFrame: (cb) => {
+			ws.addEventListener("message", (ev) => {
+				if (typeof ev.data === "string") return;
+				const d = ev.data;
+				cb(d instanceof Uint8Array ? d : new Uint8Array(d));
+			});
+		},
+		onClose: (cb) => ws.addEventListener("close", () => cb())
+	};
+}
+async function cmdExpose(args) {
+	let relay = DEFAULT_RELAY;
+	let port = 0;
+	for (let i = 0; i < args.length; i++) {
+		const a = args[i];
+		if (a === "--relay") relay = args[++i] ?? relay;
+		else if (a.startsWith("--relay=")) relay = a.slice(8);
+		else if (/^\d+$/.test(a)) port = Number(a);
+		else if (a === "-h" || a === "--help") {
+			console.log(`Usage: ay expose <port> [--relay ${DEFAULT_RELAY}]\n\nShares http://127.0.0.1:<port> at https://<id>.agent-yes.com (private:\nvisitors need the printed one-time claim link, which sets an 8h cookie).\nThe URL is stable per port on this machine. Ctrl-C stops sharing.`);
+			return 0;
+		}
+	}
+	if (!port || port < 1 || port > 65535) {
+		console.error("usage: ay expose <port> [--relay https://…]  (see ay expose --help)");
+		return 1;
+	}
+	const relayUrl = new URL(relay);
+	const rec = loadOrCreateExposure(relayUrl.host, port);
+	const tunnelUrl = `${relayUrl.protocol === "http:" ? "ws:" : "wss:"}//${relayUrl.host}/_ay/tunnel/${rec.id}`;
+	const publicHost = relayUrl.host === "agent-yes.com" ? `${rec.id}.agent-yes.com` : relayUrl.host;
+	const claimToken = randomBytes(18).toString("base64url");
+	const claimHash = createHash("sha256").update(claimToken).digest("hex");
+	let stopped = false;
+	let ws = null;
+	let backoff = RECONNECT_MIN_MS;
+	let announced = false;
+	const connect = () => {
+		if (stopped) return;
+		ws = new WebSocket(tunnelUrl);
+		ws.binaryType = "arraybuffer";
+		const sock = ws;
+		let ping = null;
+		sock.addEventListener("open", () => {
+			sock.send(JSON.stringify({
+				t: "hello",
+				key: rec.key,
+				port,
+				claims: [claimHash],
+				v: 1
+			}));
+		});
+		sock.addEventListener("message", (ev) => {
+			if (typeof ev.data !== "string") return;
+			let msg;
+			try {
+				msg = JSON.parse(ev.data);
+			} catch {
+				return;
+			}
+			if (msg.t === "ready") {
+				backoff = RECONNECT_MIN_MS;
+				new TunnelHost(wsTransport(sock), { port });
+				ping = setInterval(() => {
+					if (sock.readyState === WebSocket.OPEN) sock.send("ping");
+				}, PING_MS);
+				if (!announced) {
+					announced = true;
+					console.log(`[ay expose] sharing 127.0.0.1:${port}`);
+					console.log(`  url:    https://${publicHost}/`);
+					console.log(`  claim:  https://${publicHost}/_ay/claim?t=${claimToken}`);
+					console.log(`          (one-time link — opens access for 8h in that browser)`);
+				} else console.log(`[ay expose] reconnected`);
+			}
+		});
+		sock.addEventListener("close", (ev) => {
+			if (ping) clearInterval(ping);
+			if (stopped) return;
+			if (ev.code === 1008) {
+				console.error(`[ay expose] relay refused this exposure (${ev.reason || "forbidden"}) — giving up`);
+				process.exit(1);
+			}
+			console.log(`[ay expose] connection lost, retrying in ${Math.round(backoff / 1e3)}s…`);
+			setTimeout(connect, backoff);
+			backoff = Math.min(backoff * 2, RECONNECT_MAX_MS);
+		});
+		sock.addEventListener("error", () => {});
+	};
+	connect();
+	const shutdown = () => {
+		stopped = true;
+		console.log("\n[ay expose] stopped — the URL now answers 502 until you expose again");
+		try {
+			ws?.close();
+		} catch {}
+		process.exit(0);
+	};
+	process.on("SIGINT", shutdown);
+	process.on("SIGTERM", shutdown);
+	return new Promise(() => {});
+}
+
+//#endregion
+export { cmdExpose };
+//# sourceMappingURL=expose-DUYH0tvh.js.map

package/dist/{forkNested-C8q7E6mp.js → forkNested-C1kKsXi5.js}

@@ -56,4 +56,4 @@ async function waitForFifo(pid, timeoutMs = 2e3, aborted) {
 
 //#endregion
 export { buildSpawnTutorial, shouldForkNested, waitForFifo };
-//# sourceMappingURL=forkNested-C8q7E6mp.js.map
+//# sourceMappingURL=forkNested-C1kKsXi5.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-1qx-QhAe.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-CeGEhsC9.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-Do5ex5Wm.js";
+import "./versionChecker-DXwf5ip7.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 

package/dist/{notifyDaemon-BZmlbBqN.js → notifyDaemon-APkkoCzC.js}

@@ -1,10 +1,10 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-BYKJkWNP.js";
+import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-Deaq1dOk.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-DsTnQhyx.js";
+import "./remotes-CgT91bMo.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
@@ -588,4 +588,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-BZmlbBqN.js.map
+//# sourceMappingURL=notifyDaemon-APkkoCzC.js.map

package/dist/{openBrowser-BO5RVYwL.js → openBrowser-DQVkxCyj.js}

@@ -68,4 +68,4 @@ async function offerOpenInBrowser(url, prompt = "Open in browser now? [Y/n] ") {
 
 //#endregion
 export { offerOpenInBrowser };
-//# sourceMappingURL=openBrowser-BO5RVYwL.js.map
+//# sourceMappingURL=openBrowser-DQVkxCyj.js.map

package/dist/{remotes-DsTnQhyx.js → remotes-CgT91bMo.js}

@@ -86,7 +86,7 @@ async function resolveRemoteSpec(spec) {
 * The bridge lives for the rest of the process (torn down on `process.exit`).
 */
 async function resolveWebrtc(link, keyword) {
-	const { startWebrtcBridge } = await import("./webrtcRemote-BLEbZnbY.js");
+	const { startWebrtcBridge } = await import("./webrtcRemote-CD5EQ3uX.js");
 	const bridge = await startWebrtcBridge(link);
 	return {
 		url: bridge.baseUrl,
@@ -173,4 +173,4 @@ async function cmdRemote(rest) {
 
 //#endregion
 export { resolveRemoteSpec as a, readRemotes as i, deleteRemoteAlias as n, writeRemoteAlias as o, parseDirectRemoteSpec as r, cmdRemote as t };
-//# sourceMappingURL=remotes-DsTnQhyx.js.map
+//# sourceMappingURL=remotes-CgT91bMo.js.map

package/dist/{remotes-BIHNxn1a.js → remotes-WVJBNajZ.js}

@@ -1,5 +1,5 @@
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-DsTnQhyx.js";
+import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-CgT91bMo.js";
 
 export { cmdRemote };

package/dist/{rustBinary-xhXsfVn-.js → rustBinary-C8YZUZGT.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-Do5ex5Wm.js";
+import { r as getInstalledPackage } from "./versionChecker-DXwf5ip7.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-xhXsfVn-.js.map
+//# sourceMappingURL=rustBinary-C8YZUZGT.js.map

package/dist/{schedule-BUp_RUVP.js → schedule-BYG6MGpH.js}

@@ -1,10 +1,10 @@
-import "./ts-1qx-QhAe.js";
+import "./ts-CeGEhsC9.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-Do5ex5Wm.js";
+import "./versionChecker-DXwf5ip7.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DcA00P5Z.js";
-import { d as resolveSpawnCwd } from "./workspaceConfig-DKd6UvVm.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BB7Br0fS.js";
+import { d as resolveSpawnCwd } from "./workspaceConfig-_GtAZtsi.js";
 import { createHash } from "node:crypto";
 
 //#region ts/oxmgrService.ts
@@ -141,4 +141,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-BUp_RUVP.js.map
+//# sourceMappingURL=schedule-BYG6MGpH.js.map

package/dist/{serve-CM9NHaCH.js → serve-Df3wcUU-.js}

@@ -1,18 +1,18 @@
-import "./ts-1qx-QhAe.js";
+import "./ts-CeGEhsC9.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-Do5ex5Wm.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-xhXsfVn-.js";
+import { r as getInstalledPackage } from "./versionChecker-DXwf5ip7.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-C8YZUZGT.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { t as pgidForWrapper } from "./reaper-CWF2_ATd.js";
 import "./configShared-0MnIQ652.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DcA00P5Z.js";
-import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-BYKJkWNP.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BB7Br0fS.js";
+import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-Deaq1dOk.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-DsTnQhyx.js";
-import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-DKd6UvVm.js";
-import { r as spawnRejectionReason } from "./spawnGate-Clp9xBPX.js";
+import "./remotes-CgT91bMo.js";
+import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-_GtAZtsi.js";
+import { r as spawnRejectionReason } from "./spawnGate-CA5QD7D4.js";
 import yargs from "yargs";
 import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -515,7 +515,7 @@ async function cmdServeDaemon(sub, args) {
 			if (!webrtcDaemon) return;
 			if (shareLink) {
 				process.stdout.write(`\nshared over WebRTC — open this link (the token is eaten from the URL on open):\n  ${shareLink}\n` + (shareLinkMinted ? `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n` : ``));
-				const { offerOpenInBrowser } = await import("./openBrowser-BO5RVYwL.js");
+				const { offerOpenInBrowser } = await import("./openBrowser-DQVkxCyj.js");
 				await offerOpenInBrowser(shareLink);
 			} else process.stdout.write("\nthe WebRTC share link carries a secret, so the daemon does NOT log it —\nread it from ~/.agent-yes/.share-link (mode 0600). The room persists in\n~/.agent-yes/.share-room, so the link survives restarts.\n");
 		};
@@ -1851,7 +1851,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-D5qYAXeL.js");
+				const { createScopedShare } = await import("./agentShare-BXfWzPJu.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -1866,12 +1866,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-D5qYAXeL.js");
+			const { listShares } = await import("./agentShare-BXfWzPJu.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-D5qYAXeL.js");
+			const { revokeShare } = await import("./agentShare-BXfWzPJu.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -1977,7 +1977,7 @@ Options:
 					const persistNote = explicitUrl ? "\n" : `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n\n`;
 					process.stdout.write(`${wantHttp ? "\n" : ""}${lead}:\n  ${link}\n` + persistNote);
 					if (!rotated) {
-						const { offerOpenInBrowser } = await import("./openBrowser-BO5RVYwL.js");
+						const { offerOpenInBrowser } = await import("./openBrowser-DQVkxCyj.js");
 						await offerOpenInBrowser(link);
 					}
 				} else {
@@ -2016,7 +2016,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-D5qYAXeL.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-BXfWzPJu.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		resolve();
 	};
@@ -2029,4 +2029,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-CM9NHaCH.js.map
+//# sourceMappingURL=serve-Df3wcUU-.js.map

package/dist/{setup-BE9NyUE3.js → setup-C65eaHZ8.js}

@@ -1,4 +1,4 @@
-import { f as setWorkspaceRoot, s as getWorkspaceRoot } from "./workspaceConfig-DKd6UvVm.js";
+import { f as setWorkspaceRoot, s as getWorkspaceRoot } from "./workspaceConfig-_GtAZtsi.js";
 import { existsSync } from "node:fs";
 import { stdin, stdout } from "node:process";
 import { createInterface } from "node:readline/promises";
@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-CM9NHaCH.js");
+	const { cmdServe } = await import("./serve-Df3wcUU-.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-BE9NyUE3.js.map
+//# sourceMappingURL=setup-C65eaHZ8.js.map

package/dist/{spawnGate-C5nBiUZQ.js → spawnGate-BejtWiMJ.js}

@@ -1,5 +1,5 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-Clp9xBPX.js";
+import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-CA5QD7D4.js";
 
 export { waitForSpawnCapacity };

package/dist/{spawnGate-Clp9xBPX.js → spawnGate-CA5QD7D4.js}

@@ -1,5 +1,5 @@
 import { i as readGlobalPids } from "./globalPidIndex-CoNr7tS8.js";
-import { n as getMinFreeMb, o as getSpawnWaitMs, t as getMaxAgents } from "./workspaceConfig-DKd6UvVm.js";
+import { n as getMinFreeMb, o as getSpawnWaitMs, t as getMaxAgents } from "./workspaceConfig-_GtAZtsi.js";
 import { readFile } from "fs/promises";
 
 //#region ts/spawnGate.ts
@@ -104,4 +104,4 @@ async function waitForSpawnCapacity(opts) {
 
 //#endregion
 export { waitForSpawnCapacity as i, spawnGateEnabled as n, spawnRejectionReason as r, memAvailableMb as t };
-//# sourceMappingURL=spawnGate-Clp9xBPX.js.map
+//# sourceMappingURL=spawnGate-CA5QD7D4.js.map

package/dist/{subcommands-qe4h_Cvx.js → subcommands-D6TbKFTF.js}

@@ -1,9 +1,9 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-BYKJkWNP.js";
+import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-Deaq1dOk.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-DsTnQhyx.js";
+import "./remotes-CgT91bMo.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{subcommands-BYKJkWNP.js → subcommands-Deaq1dOk.js}

@@ -4,7 +4,7 @@ import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidIndex-CoNr7tS8.js";
 import { t as loadSharedCliDefaults } from "./configShared-0MnIQ652.js";
 import { n as isWebrtcSpec } from "./webrtcLink-BG0Xc4-W.js";
-import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-DsTnQhyx.js";
+import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-CgT91bMo.js";
 import ms from "ms";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from "fs/promises";
@@ -1086,6 +1086,7 @@ const SUBCOMMANDS = new Set([
 	"serve",
 	"schedule",
 	"remote",
+	"expose",
 	"reap",
 	"help"
 ]);
@@ -1145,21 +1146,25 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-CM9NHaCH.js");
+				const { cmdServe } = await import("./serve-Df3wcUU-.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-BE9NyUE3.js");
+				const { cmdSetup } = await import("./setup-C65eaHZ8.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-BUp_RUVP.js");
+				const { cmdSchedule } = await import("./schedule-BYG6MGpH.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
-				const { cmdRemote } = await import("./remotes-BIHNxn1a.js");
+				const { cmdRemote } = await import("./remotes-WVJBNajZ.js");
 				return cmdRemote(rest);
 			}
+			case "expose": {
+				const { cmdExpose } = await import("./expose-DUYH0tvh.js");
+				return cmdExpose(rest);
+			}
 			case "reap":
 				await (await import("./reaper-jfSmog15.js")).sweep();
 				return 0;
@@ -1194,7 +1199,7 @@ async function cmdHelp(managerCommands = true) {
 	const setupLine = managerCommands ? `  ay setup                            guided setup: pick a workspace, share to agent-yes.com\n` : ``;
 	const self = process.env.AGENT_YES_PID ? await resolveSender() : null;
 	const agentSection = self ? await buildAgentContextSection(self) : "";
-	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay send <keyword> <msg>             send a message\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent:\n  ay [claude|codex|gemini|...] [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
+	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay send <keyword> <msg>             send a message\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay expose <port>                    share localhost:<port> at https://<id>.agent-yes.com (private link)\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent:\n  ay [claude|codex|gemini|...] [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
 	return 0;
 }
 function matchKeyword(record, keyword) {
@@ -1550,7 +1555,7 @@ async function fetchRemoteRecordsRaw(url, token, opts) {
 		let base = url;
 		let bearer = token;
 		if (isWebrtcSpec(url)) {
-			const { startWebrtcBridge } = await import("./webrtcRemote-BLEbZnbY.js");
+			const { startWebrtcBridge } = await import("./webrtcRemote-CD5EQ3uX.js");
 			bridge = await startWebrtcBridge(url);
 			base = bridge.baseUrl;
 			bearer = bridge.token;
@@ -3991,7 +3996,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-BZmlbBqN.js");
+		const { ensureDaemon } = await import("./notifyDaemon-APkkoCzC.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4065,7 +4070,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-BZmlbBqN.js");
+	const daemon = await import("./notifyDaemon-APkkoCzC.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4092,4 +4097,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { TYPING_BADGE as $, renderRawLogLines as A, waitForLogQuiet as B, matchKeyword as C, recentReadEdges as D, readPtysize as E, runSubcommand as F, hostId as G, writeToIpc as H, snapshotStatus as I, readInbox as J, listInboxParents as K, stdinActivityPath as L, resolveReadWindow as M, resolveResumeArgs as N, renderLogTailLines as O, restartHintLines as P, notifyDir as Q, stopTipForCli as R, listRecords as S, readNotes as T, appendEvent as U, writeKeysPaced as V, gcInboxes as W, daemonLockDir as X, shouldStealLock as Y, daemonLockOwnerPath as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, resolveOne as j, renderRawLog as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, liveWatchers as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, submitAndConfirm as z };
-//# sourceMappingURL=subcommands-BYKJkWNP.js.map
+//# sourceMappingURL=subcommands-Deaq1dOk.js.map

package/dist/{tray-DKwVRBwr.js → tray-PMOWFOfk.js}

@@ -187,4 +187,4 @@ async function startTray() {
 
 //#endregion
 export { ensureTray, startTray };
-//# sourceMappingURL=tray-DKwVRBwr.js.map
+//# sourceMappingURL=tray-PMOWFOfk.js.map

package/dist/{ts-1qx-QhAe.js → ts-CeGEhsC9.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-Do5ex5Wm.js";
+import { r as getInstalledPackage } from "./versionChecker-DXwf5ip7.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CNMl13dC.js";
 import { t as PidStore } from "./pidStore-BIvsBQ8X.js";
@@ -1824,4 +1824,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-1qx-QhAe.js.map
+//# sourceMappingURL=ts-CeGEhsC9.js.map

package/dist/{versionChecker-Do5ex5Wm.js → versionChecker-DXwf5ip7.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.189.1";
+var version = "1.190.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-Do5ex5Wm.js.map
+//# sourceMappingURL=versionChecker-DXwf5ip7.js.map

package/dist/{webrtcRemote-BLEbZnbY.js → webrtcRemote-CD5EQ3uX.js}

@@ -256,4 +256,4 @@ async function startWebrtcBridge(link) {
 
 //#endregion
 export { startWebrtcBridge };
-//# sourceMappingURL=webrtcRemote-BLEbZnbY.js.map
+//# sourceMappingURL=webrtcRemote-CD5EQ3uX.js.map

package/dist/{workspaceConfig-DKd6UvVm.js → workspaceConfig-_GtAZtsi.js}

@@ -193,4 +193,4 @@ function resolveSpawnCwd(input) {
 
 //#endregion
 export { getSpawnHook as a, hasProvisionHook as c, resolveSpawnCwd as d, setWorkspaceRoot as f, getProvisionRoot as i, hasSpawnHook as l, getMinFreeMb as n, getSpawnWaitMs as o, getProvisionHook as r, getWorkspaceRoot as s, getMaxAgents as t, isProvisionAllowed as u };
-//# sourceMappingURL=workspaceConfig-DKd6UvVm.js.map
+//# sourceMappingURL=workspaceConfig-_GtAZtsi.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.189.1",
+  "version": "1.190.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",
@@ -150,7 +150,8 @@
     "tsdown": "^0.20.3",
     "vitest": "4.1.0",
     "ws": "^8.20.0",
-    "zod": "^3.23.0"
+    "zod": "^3.23.0",
+    "codehost": "^0.32.0"
   },
   "peerDependencies": {
     "node-pty": "latest",

package/ts/expose.ts

@@ -0,0 +1,188 @@
+// `ay expose <port>` — share a local HTTP/WS server through the agent-yes edge
+// relay: https://<id>.agent-yes.com/* ⇄ Exposure DO ⇄ this daemon ⇄ 127.0.0.1:<port>.
+//
+// The daemon dials OUT (wss://<relay>/_ay/tunnel/<id>), so it works behind any
+// NAT, and runs the codehost tunnel protocol's host half against the local
+// port. Private by default: visitors need the single-use claim link printed
+// below (it swaps for an 8h HttpOnly cookie at the edge; unauthenticated
+// requests never reach this machine). See lab/ui/cf/exposure.ts for the edge.
+
+import { randomBytes, createHash } from "node:crypto";
+import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+import { TunnelHost } from "codehost/tunnel";
+import type { TunnelTransport } from "codehost/tunnel";
+
+const DEFAULT_RELAY = "https://agent-yes.com";
+const PING_MS = 25_000;
+const RECONNECT_MIN_MS = 1_000;
+const RECONNECT_MAX_MS = 30_000;
+
+interface ExposureRecord {
+  id: string;
+  key: string;
+}
+
+function exposuresPath(): string {
+  const home = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
+  mkdirSync(home, { recursive: true });
+  return path.join(home, "exposures.json");
+}
+
+/** Stable id+key per (relay, port): re-running `ay expose 5173` keeps its URL. */
+function loadOrCreateExposure(relayHost: string, port: number): ExposureRecord {
+  const file = exposuresPath();
+  let all: Record<string, ExposureRecord> = {};
+  try {
+    all = JSON.parse(readFileSync(file, "utf8"));
+  } catch {
+    /* first run */
+  }
+  const slot = `${relayHost}:${port}`;
+  const existing = all[slot];
+  if (existing?.id && existing.key) return existing;
+  const rec: ExposureRecord = {
+    // "x" prefix: exposure hostnames can never collide with named subdomains.
+    id: "x" + randomBytes(8).toString("hex").slice(0, 15),
+    key: randomBytes(32).toString("hex"),
+  };
+  all[slot] = rec;
+  const tmp = file + ".tmp";
+  writeFileSync(tmp, JSON.stringify(all, null, 2) + "\n");
+  chmodSync(tmp, 0o600);
+  renameSync(tmp, file);
+  return rec;
+}
+
+/** Bun's browser-style WebSocket as a TunnelTransport. No bufferedAmountLow
+ *  event exists here — TunnelHost's 100ms safety poll covers drain resume. */
+function wsTransport(ws: WebSocket): TunnelTransport {
+  return {
+    // Copy into a fresh ArrayBuffer-backed view: Bun's ws.send mishandles a
+    // subarray view (byteOffset > 0), which the protocol's fragmentation emits.
+    send: (frame) => {
+      const copy = new Uint8Array(frame.byteLength);
+      copy.set(frame);
+      ws.send(copy);
+    },
+    isOpen: () => ws.readyState === WebSocket.OPEN,
+    bufferedAmount: () => ws.bufferedAmount,
+    onFrame: (cb) => {
+      ws.addEventListener("message", (ev) => {
+        if (typeof ev.data === "string") return;
+        const d = ev.data as ArrayBuffer | Uint8Array;
+        cb(d instanceof Uint8Array ? d : new Uint8Array(d));
+      });
+    },
+    onClose: (cb) => ws.addEventListener("close", () => cb()),
+  };
+}
+
+export async function cmdExpose(args: string[]): Promise<number> {
+  let relay = DEFAULT_RELAY;
+  let port = 0;
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i]!;
+    if (a === "--relay") relay = args[++i] ?? relay;
+    else if (a.startsWith("--relay=")) relay = a.slice("--relay=".length);
+    else if (/^\d+$/.test(a)) port = Number(a);
+    else if (a === "-h" || a === "--help") {
+      console.log(
+        `Usage: ay expose <port> [--relay ${DEFAULT_RELAY}]\n\n` +
+          `Shares http://127.0.0.1:<port> at https://<id>.agent-yes.com (private:\n` +
+          `visitors need the printed one-time claim link, which sets an 8h cookie).\n` +
+          `The URL is stable per port on this machine. Ctrl-C stops sharing.`,
+      );
+      return 0;
+    }
+  }
+  if (!port || port < 1 || port > 65535) {
+    console.error("usage: ay expose <port> [--relay https://…]  (see ay expose --help)");
+    return 1;
+  }
+
+  const relayUrl = new URL(relay);
+  const rec = loadOrCreateExposure(relayUrl.host, port);
+  const wsProto = relayUrl.protocol === "http:" ? "ws:" : "wss:";
+  const tunnelUrl = `${wsProto}//${relayUrl.host}/_ay/tunnel/${rec.id}`;
+  // Public hostname: <id>.<zone> on the real relay; the relay host itself (with
+  // a Host-header spoof) when pointing at wrangler dev.
+  const publicHost = relayUrl.host === "agent-yes.com" ? `${rec.id}.agent-yes.com` : relayUrl.host;
+
+  // Fresh single-use claim token every run; only its hash goes to the edge.
+  const claimToken = randomBytes(18).toString("base64url");
+  const claimHash = createHash("sha256").update(claimToken).digest("hex");
+
+  let stopped = false;
+  let ws: WebSocket | null = null;
+  let backoff = RECONNECT_MIN_MS;
+  let announced = false;
+
+  const connect = () => {
+    if (stopped) return;
+    ws = new WebSocket(tunnelUrl);
+    ws.binaryType = "arraybuffer";
+    const sock = ws;
+    let ping: ReturnType<typeof setInterval> | null = null;
+
+    sock.addEventListener("open", () => {
+      sock.send(JSON.stringify({ t: "hello", key: rec.key, port, claims: [claimHash], v: 1 }));
+    });
+    sock.addEventListener("message", (ev) => {
+      if (typeof ev.data !== "string") return; // binary frames belong to the TunnelHost
+      let msg: { t?: string };
+      try {
+        msg = JSON.parse(ev.data);
+      } catch {
+        return;
+      }
+      if (msg.t === "ready") {
+        backoff = RECONNECT_MIN_MS;
+        new TunnelHost(wsTransport(sock), { port });
+        ping = setInterval(() => {
+          if (sock.readyState === WebSocket.OPEN) sock.send("ping");
+        }, PING_MS);
+        if (!announced) {
+          announced = true;
+          console.log(`[ay expose] sharing 127.0.0.1:${port}`);
+          console.log(`  url:    https://${publicHost}/`);
+          console.log(`  claim:  https://${publicHost}/_ay/claim?t=${claimToken}`);
+          console.log(`          (one-time link — opens access for 8h in that browser)`);
+        } else {
+          console.log(`[ay expose] reconnected`);
+        }
+      }
+    });
+    sock.addEventListener("close", (ev) => {
+      if (ping) clearInterval(ping);
+      if (stopped) return;
+      if (ev.code === 1008) {
+        console.error(`[ay expose] relay refused this exposure (${ev.reason || "forbidden"}) — giving up`);
+        process.exit(1);
+      }
+      console.log(`[ay expose] connection lost, retrying in ${Math.round(backoff / 1000)}s…`);
+      setTimeout(connect, backoff);
+      backoff = Math.min(backoff * 2, RECONNECT_MAX_MS);
+    });
+    sock.addEventListener("error", () => {
+      /* close fires right after; retry there */
+    });
+  };
+  connect();
+
+  const shutdown = () => {
+    stopped = true;
+    console.log("\n[ay expose] stopped — the URL now answers 502 until you expose again");
+    try {
+      ws?.close();
+    } catch {
+      /* ignore */
+    }
+    process.exit(0);
+  };
+  process.on("SIGINT", shutdown);
+  process.on("SIGTERM", shutdown);
+
+  return new Promise<number>(() => {}); // runs until signal
+}

package/ts/subcommands.ts

@@ -306,6 +306,7 @@ const SUBCOMMANDS = new Set([
   "serve",
   "schedule",
   "remote",
+  "expose",
   "reap",
   "help",
 ]);
@@ -427,6 +428,10 @@ export async function runSubcommand(argv: string[]): Promise<number | null> {
         const { cmdRemote } = await import("./remotes.ts");
         return cmdRemote(rest);
       }
+      case "expose": {
+        const { cmdExpose } = await import("./expose.ts");
+        return cmdExpose(rest);
+      }
       case "reap": {
         const reaper = await import("./reaper.ts");
         await reaper.sweep();
@@ -546,6 +551,7 @@ export async function cmdHelp(managerCommands = true): Promise<number> {
       `  ay serve status                     show serve daemon/server status\n` +
       `  ay remote add <alias> http://<token>@<host>:<port>\n` +
       `  ay remote ls / rm <alias>           manage saved remotes\n` +
+      `  ay expose <port>                    share localhost:<port> at https://<id>.agent-yes.com (private link)\n` +
       `  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n` +
       `  ay send <token>@<host>:<port>:<kw> <msg>\n` +
       `\n` +

package/dist/SUPPORTED_CLIS-D8ocFVqe.js

@@ -1,8 +0,0 @@
-import "./ts-1qx-QhAe.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-Do5ex5Wm.js";
-import "./pidStore-BIvsBQ8X.js";
-import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DcA00P5Z.js";
-
-export { SUPPORTED_CLIS };