agent-yes 1.190.0 → 1.191.0

package/dist/SUPPORTED_CLIS-P3I0D3Ka.js

@@ -0,0 +1,8 @@
+import "./ts-BQh1-ljE.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-DhCi7ncH.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-mUaQHk4M.js";
+
+export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-BB7Br0fS.js → SUPPORTED_CLIS-mUaQHk4M.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-CeGEhsC9.js";
+import { t as CLIS_CONFIG } from "./ts-BQh1-ljE.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-BB7Br0fS.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-mUaQHk4M.js.map

package/dist/{agentShare-BXfWzPJu.js → agentShare-Boa9P2dK.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { j as resolveOne } from "./subcommands-Deaq1dOk.js";
+import { j as resolveOne } from "./subcommands-CNCgJ48t.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-CgT91bMo.js";
@@ -228,4 +228,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-BXfWzPJu.js.map
+//# sourceMappingURL=agentShare-Boa9P2dK.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DXwf5ip7.js";
-import { n as getRustBinary } from "./rustBinary-C8YZUZGT.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DhCi7ncH.js";
+import { n as getRustBinary } from "./rustBinary-Cu8q2m9s.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-D6TbKFTF.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-Uerol8Tz.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -327,7 +327,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-B729E086.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-P3I0D3Ka.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/{expose-DUYH0tvh.js → expose-B3AGhVhM.js}

@@ -327,7 +327,7 @@ function exposuresPath() {
 	mkdirSync(home, { recursive: true });
 	return path.join(home, "exposures.json");
 }
-/** Stable id+key per (relay, port): re-running `ay expose 5173` keeps its URL. */
+/** Stable id+key per (relay, port): re-exposing a port keeps its URL. */
 function loadOrCreateExposure(relayHost, port) {
 	const file = exposuresPath();
 	let all = {};
@@ -369,6 +369,139 @@ function wsTransport(ws) {
 		onClose: (cb) => ws.addEventListener("close", () => cb())
 	};
 }
+/**
+* Start (or fail) one exposure. Resolves once the relay has accepted the daemon
+* and the tunnel is live; rejects if the relay refuses this exposure (bad key).
+* Reconnects with backoff for the life of the handle.
+*/
+function startExposure(opts) {
+	const relay = opts.relay ?? DEFAULT_RELAY;
+	const port = opts.port;
+	const log = opts.log ?? (() => {});
+	const relayUrl = new URL(relay);
+	const rec = loadOrCreateExposure(relayUrl.host, port);
+	const tunnelUrl = `${relayUrl.protocol === "http:" ? "ws:" : "wss:"}//${relayUrl.host}/_ay/tunnel/${rec.id}`;
+	const publicHost = relayUrl.host === "agent-yes.com" ? `${rec.id}.agent-yes.com` : relayUrl.host;
+	const publicUrl = `https://${publicHost}/`;
+	let stopped = false;
+	let sock = null;
+	let ready = false;
+	let backoff = RECONNECT_MIN_MS;
+	const handle = {
+		id: rec.id,
+		port,
+		publicHost,
+		url: publicUrl,
+		relayHost: relayUrl.host,
+		createdAt: Date.now(),
+		mintClaim() {
+			const token = randomBytes(18).toString("base64url");
+			const hash = createHash("sha256").update(token).digest("hex");
+			if (sock && sock.readyState === WebSocket.OPEN) sock.send(JSON.stringify({
+				t: "claim",
+				claims: [hash]
+			}));
+			return `https://${publicHost}/_ay/claim?t=${token}`;
+		},
+		stop() {
+			stopped = true;
+			try {
+				sock?.close();
+			} catch {}
+		}
+	};
+	return new Promise((resolve, reject) => {
+		const connect = () => {
+			if (stopped) return;
+			sock = new WebSocket(tunnelUrl);
+			sock.binaryType = "arraybuffer";
+			const ws = sock;
+			let ping = null;
+			ws.addEventListener("open", () => {
+				ws.send(JSON.stringify({
+					t: "hello",
+					key: rec.key,
+					port,
+					v: 1
+				}));
+			});
+			ws.addEventListener("message", (ev) => {
+				if (typeof ev.data !== "string") return;
+				let msg;
+				try {
+					msg = JSON.parse(ev.data);
+				} catch {
+					return;
+				}
+				if (msg.t === "ready") {
+					backoff = RECONNECT_MIN_MS;
+					new TunnelHost(wsTransport(ws), { port });
+					ping = setInterval(() => {
+						if (ws.readyState === WebSocket.OPEN) ws.send("ping");
+					}, PING_MS);
+					if (!ready) {
+						ready = true;
+						log(`sharing 127.0.0.1:${port} at ${publicUrl}`);
+						resolve(handle);
+					} else log(`reconnected`);
+				}
+			});
+			ws.addEventListener("close", (ev) => {
+				if (ping) clearInterval(ping);
+				if (stopped) return;
+				if (ev.code === 1008) {
+					const err = /* @__PURE__ */ new Error(`relay refused exposure (${ev.reason || "forbidden"})`);
+					if (!ready) return reject(err);
+					log(err.message);
+					return;
+				}
+				log(`connection lost, retrying in ${Math.round(backoff / 1e3)}s…`);
+				setTimeout(connect, backoff);
+				backoff = Math.min(backoff * 2, RECONNECT_MAX_MS);
+			});
+			ws.addEventListener("error", () => {});
+		};
+		connect();
+	});
+}
+const active = /* @__PURE__ */ new Map();
+/** In-flight starts, so concurrent POSTs for the same port share one dial. */
+const starting = /* @__PURE__ */ new Map();
+/** Start an exposure for `port` (or reuse a running one). Idempotent per port. */
+async function ensureExposure(port, relay) {
+	const existing = active.get(port);
+	if (existing) return existing;
+	const inflight = starting.get(port);
+	if (inflight) return inflight;
+	const p = startExposure({
+		port,
+		relay
+	}).then((h) => {
+		active.set(port, h);
+		starting.delete(port);
+		return h;
+	}).catch((e) => {
+		starting.delete(port);
+		throw e;
+	});
+	starting.set(port, p);
+	return p;
+}
+function listExposures() {
+	return [...active.values()].sort((a, b) => b.createdAt - a.createdAt).map((h) => ({
+		id: h.id,
+		port: h.port,
+		url: h.url,
+		createdAt: h.createdAt
+	}));
+}
+function stopExposure(port) {
+	const h = active.get(port);
+	if (!h) return false;
+	h.stop();
+	active.delete(port);
+	return true;
+}
 async function cmdExpose(args) {
 	let relay = DEFAULT_RELAY;
 	let port = 0;
@@ -386,74 +519,24 @@ async function cmdExpose(args) {
 		console.error("usage: ay expose <port> [--relay https://…]  (see ay expose --help)");
 		return 1;
 	}
-	const relayUrl = new URL(relay);
-	const rec = loadOrCreateExposure(relayUrl.host, port);
-	const tunnelUrl = `${relayUrl.protocol === "http:" ? "ws:" : "wss:"}//${relayUrl.host}/_ay/tunnel/${rec.id}`;
-	const publicHost = relayUrl.host === "agent-yes.com" ? `${rec.id}.agent-yes.com` : relayUrl.host;
-	const claimToken = randomBytes(18).toString("base64url");
-	const claimHash = createHash("sha256").update(claimToken).digest("hex");
-	let stopped = false;
-	let ws = null;
-	let backoff = RECONNECT_MIN_MS;
-	let announced = false;
-	const connect = () => {
-		if (stopped) return;
-		ws = new WebSocket(tunnelUrl);
-		ws.binaryType = "arraybuffer";
-		const sock = ws;
-		let ping = null;
-		sock.addEventListener("open", () => {
-			sock.send(JSON.stringify({
-				t: "hello",
-				key: rec.key,
-				port,
-				claims: [claimHash],
-				v: 1
-			}));
-		});
-		sock.addEventListener("message", (ev) => {
-			if (typeof ev.data !== "string") return;
-			let msg;
-			try {
-				msg = JSON.parse(ev.data);
-			} catch {
-				return;
-			}
-			if (msg.t === "ready") {
-				backoff = RECONNECT_MIN_MS;
-				new TunnelHost(wsTransport(sock), { port });
-				ping = setInterval(() => {
-					if (sock.readyState === WebSocket.OPEN) sock.send("ping");
-				}, PING_MS);
-				if (!announced) {
-					announced = true;
-					console.log(`[ay expose] sharing 127.0.0.1:${port}`);
-					console.log(`  url:    https://${publicHost}/`);
-					console.log(`  claim:  https://${publicHost}/_ay/claim?t=${claimToken}`);
-					console.log(`          (one-time link — opens access for 8h in that browser)`);
-				} else console.log(`[ay expose] reconnected`);
-			}
-		});
-		sock.addEventListener("close", (ev) => {
-			if (ping) clearInterval(ping);
-			if (stopped) return;
-			if (ev.code === 1008) {
-				console.error(`[ay expose] relay refused this exposure (${ev.reason || "forbidden"}) — giving up`);
-				process.exit(1);
-			}
-			console.log(`[ay expose] connection lost, retrying in ${Math.round(backoff / 1e3)}s…`);
-			setTimeout(connect, backoff);
-			backoff = Math.min(backoff * 2, RECONNECT_MAX_MS);
+	let handle;
+	try {
+		handle = await startExposure({
+			port,
+			relay,
+			log: (m) => console.log(`[ay expose] ${m}`)
 		});
-		sock.addEventListener("error", () => {});
-	};
-	connect();
+	} catch (e) {
+		console.error(`[ay expose] ${e.message} — giving up`);
+		return 1;
+	}
+	const claimUrl = handle.mintClaim();
+	console.log(`  url:    ${handle.url}`);
+	console.log(`  claim:  ${claimUrl}`);
+	console.log(`          (one-time link — opens access for 8h in that browser)`);
 	const shutdown = () => {
-		stopped = true;
 		console.log("\n[ay expose] stopped — the URL now answers 502 until you expose again");
-		try {
-			ws?.close();
-		} catch {}
+		handle.stop();
 		process.exit(0);
 	};
 	process.on("SIGINT", shutdown);
@@ -462,5 +545,5 @@ async function cmdExpose(args) {
 }
 
 //#endregion
-export { cmdExpose };
-//# sourceMappingURL=expose-DUYH0tvh.js.map
+export { cmdExpose, ensureExposure, listExposures, stopExposure };
+//# sourceMappingURL=expose-B3AGhVhM.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-CeGEhsC9.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-BQh1-ljE.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DXwf5ip7.js";
+import "./versionChecker-DhCi7ncH.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 

package/dist/{notifyDaemon-APkkoCzC.js → notifyDaemon-hKT38cBs.js}

@@ -1,7 +1,7 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-Deaq1dOk.js";
+import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-CNCgJ48t.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-CgT91bMo.js";
@@ -588,4 +588,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-APkkoCzC.js.map
+//# sourceMappingURL=notifyDaemon-hKT38cBs.js.map

package/dist/{rustBinary-C8YZUZGT.js → rustBinary-Cu8q2m9s.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-DXwf5ip7.js";
+import { r as getInstalledPackage } from "./versionChecker-DhCi7ncH.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-C8YZUZGT.js.map
+//# sourceMappingURL=rustBinary-Cu8q2m9s.js.map

package/dist/{schedule-BYG6MGpH.js → schedule-Bb98iG9W.js}

@@ -1,9 +1,9 @@
-import "./ts-CeGEhsC9.js";
+import "./ts-BQh1-ljE.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DXwf5ip7.js";
+import "./versionChecker-DhCi7ncH.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BB7Br0fS.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-mUaQHk4M.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-_GtAZtsi.js";
 import { createHash } from "node:crypto";
 
@@ -141,4 +141,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-BYG6MGpH.js.map
+//# sourceMappingURL=schedule-Bb98iG9W.js.map

package/dist/{serve-Df3wcUU-.js → serve-DVhbtjR4.js}

@@ -1,13 +1,13 @@
-import "./ts-CeGEhsC9.js";
+import "./ts-BQh1-ljE.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DXwf5ip7.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-C8YZUZGT.js";
+import { r as getInstalledPackage } from "./versionChecker-DhCi7ncH.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-Cu8q2m9s.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { t as pgidForWrapper } from "./reaper-CWF2_ATd.js";
 import "./configShared-0MnIQ652.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BB7Br0fS.js";
-import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-Deaq1dOk.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-mUaQHk4M.js";
+import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-CNCgJ48t.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-CgT91bMo.js";
@@ -1851,7 +1851,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-BXfWzPJu.js");
+				const { createScopedShare } = await import("./agentShare-Boa9P2dK.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -1866,15 +1866,48 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-BXfWzPJu.js");
+			const { listShares } = await import("./agentShare-Boa9P2dK.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-BXfWzPJu.js");
+			const { revokeShare } = await import("./agentShare-Boa9P2dK.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
+		if (req.method === "POST" && p === "/api/expose") {
+			let body;
+			try {
+				body = await req.json();
+			} catch {
+				return new Response("invalid JSON body", { status: 400 });
+			}
+			const port = Number(body.port);
+			if (!Number.isInteger(port) || port < 1 || port > 65535) return new Response("valid port required", { status: 400 });
+			try {
+				const { ensureExposure } = await import("./expose-B3AGhVhM.js");
+				const h = await ensureExposure(port, body.relay);
+				return Response.json({
+					id: h.id,
+					port: h.port,
+					url: h.url,
+					claim: h.mintClaim(),
+					createdAt: h.createdAt
+				});
+			} catch (e) {
+				return new Response(`expose failed: ${e.message}`, { status: 502 });
+			}
+		}
+		if (req.method === "GET" && p === "/api/exposes") {
+			const { listExposures } = await import("./expose-B3AGhVhM.js");
+			return Response.json(listExposures());
+		}
+		const unexposeM = /^\/api\/expose\/(\d+)$/.exec(p);
+		if (req.method === "DELETE" && unexposeM) {
+			const { stopExposure } = await import("./expose-B3AGhVhM.js");
+			const ok = stopExposure(Number(unexposeM[1]));
+			return new Response(ok ? "revoked" : "no such exposure", { status: ok ? 200 : 404 });
+		}
 		return new Response("Not Found", { status: 404 });
 	};
 	const uiDir = path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "lab", "ui");
@@ -1912,8 +1945,11 @@ Options:
 		if (req.method === "GET" && p === "/r/main.js.map") return serveUiFile("rgui/dist/main.js.map", "application/json");
 		if (req.method === "GET" && p === "/room-client.js") return serveUiFile("room-client.js", "text/javascript; charset=utf-8");
 		if (req.method === "GET" && p === "/console-logic.js") return serveUiFile("console-logic.js", "text/javascript; charset=utf-8");
+		if (req.method === "GET" && p === "/rtc.js") return serveUiFile("rtc.js", "text/javascript; charset=utf-8");
 		if (req.method === "GET" && p === "/e2e.js") return serveUiFile("e2e.js", "text/javascript; charset=utf-8");
 		if (req.method === "GET" && p === "/qrcode.js") return serveUiFile("qrcode.js", "text/javascript; charset=utf-8");
+		if (req.method === "GET" && p === "/manifest.webmanifest") return serveUiFile("manifest.webmanifest", "application/manifest+json");
+		if (req.method === "GET" && p === "/icon.svg") return serveUiFile("icon.svg", "image/svg+xml");
 		if (req.method === "GET" && p === "/favicon.ico") return new Response(null, { status: 204 });
 		return apiFetch(req);
 	};
@@ -2016,7 +2052,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-BXfWzPJu.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-Boa9P2dK.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		resolve();
 	};
@@ -2029,4 +2065,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-Df3wcUU-.js.map
+//# sourceMappingURL=serve-DVhbtjR4.js.map

package/dist/{setup-C65eaHZ8.js → setup-Dj8Grg0K.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-Df3wcUU-.js");
+	const { cmdServe } = await import("./serve-DVhbtjR4.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-C65eaHZ8.js.map
+//# sourceMappingURL=setup-Dj8Grg0K.js.map

package/dist/{subcommands-Deaq1dOk.js → subcommands-CNCgJ48t.js}

@@ -1146,15 +1146,15 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-Df3wcUU-.js");
+				const { cmdServe } = await import("./serve-DVhbtjR4.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-C65eaHZ8.js");
+				const { cmdSetup } = await import("./setup-Dj8Grg0K.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-BYG6MGpH.js");
+				const { cmdSchedule } = await import("./schedule-Bb98iG9W.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1162,7 +1162,7 @@ async function runSubcommand(argv) {
 				return cmdRemote(rest);
 			}
 			case "expose": {
-				const { cmdExpose } = await import("./expose-DUYH0tvh.js");
+				const { cmdExpose } = await import("./expose-B3AGhVhM.js");
 				return cmdExpose(rest);
 			}
 			case "reap":
@@ -3996,7 +3996,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-APkkoCzC.js");
+		const { ensureDaemon } = await import("./notifyDaemon-hKT38cBs.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4070,7 +4070,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-APkkoCzC.js");
+	const daemon = await import("./notifyDaemon-hKT38cBs.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4097,4 +4097,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { TYPING_BADGE as $, renderRawLogLines as A, waitForLogQuiet as B, matchKeyword as C, recentReadEdges as D, readPtysize as E, runSubcommand as F, hostId as G, writeToIpc as H, snapshotStatus as I, readInbox as J, listInboxParents as K, stdinActivityPath as L, resolveReadWindow as M, resolveResumeArgs as N, renderLogTailLines as O, restartHintLines as P, notifyDir as Q, stopTipForCli as R, listRecords as S, readNotes as T, appendEvent as U, writeKeysPaced as V, gcInboxes as W, daemonLockDir as X, shouldStealLock as Y, daemonLockOwnerPath as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, resolveOne as j, renderRawLog as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, liveWatchers as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, submitAndConfirm as z };
-//# sourceMappingURL=subcommands-Deaq1dOk.js.map
+//# sourceMappingURL=subcommands-CNCgJ48t.js.map

package/dist/{subcommands-D6TbKFTF.js → subcommands-Uerol8Tz.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-Deaq1dOk.js";
+import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-CNCgJ48t.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-CgT91bMo.js";

package/dist/{ts-CeGEhsC9.js → ts-BQh1-ljE.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DXwf5ip7.js";
+import { r as getInstalledPackage } from "./versionChecker-DhCi7ncH.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CNMl13dC.js";
 import { t as PidStore } from "./pidStore-BIvsBQ8X.js";
@@ -1824,4 +1824,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-CeGEhsC9.js.map
+//# sourceMappingURL=ts-BQh1-ljE.js.map

package/dist/{versionChecker-DXwf5ip7.js → versionChecker-DhCi7ncH.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.190.0";
+var version = "1.191.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-DXwf5ip7.js.map
+//# sourceMappingURL=versionChecker-DhCi7ncH.js.map

package/lab/ui/index.html

@@ -352,6 +352,46 @@
       .app.steer-agent #shareAgentRW {
         display: none !important;
       }
+      /* Expose modal — ports manager list rows. */
+      .exposeList {
+        margin: 10px 0;
+        display: flex;
+        flex-direction: column;
+        gap: 6px;
+        max-height: 40vh;
+        overflow-y: auto;
+      }
+      .exposerow {
+        display: flex;
+        align-items: center;
+        gap: 8px;
+        border: 1px solid var(--line);
+        border-radius: 8px;
+        padding: 7px 9px;
+      }
+      .exposerow .exmeta {
+        flex: 1;
+        min-width: 0;
+      }
+      .exposerow .explabel {
+        font-weight: 600;
+      }
+      .exposerow .exurl {
+        font-size: 11px;
+        opacity: 0.7;
+        overflow: hidden;
+        text-overflow: ellipsis;
+        white-space: nowrap;
+      }
+      .exposerow .exhost {
+        font-size: 10px;
+        opacity: 0.55;
+      }
+      .exposePrompt {
+        border-bottom: 1px solid var(--line);
+        padding-bottom: 10px;
+        margin-bottom: 4px;
+      }
       /* Share modal — QR + link for a single-agent view-only share. */
       .modal-backdrop {
         position: fixed;
@@ -1685,6 +1725,9 @@
               <button id="foldbtn" class="viewbtn" title="fold subagent trees">⊞ subs</button>
               <button id="sortbtn" class="viewbtn" title="cycle sort order">⇅ state</button>
               <button id="viewbtn" class="viewbtn" title="toggle compact list">☰</button>
+              <button id="portsbtn" class="viewbtn" title="manage exposed localhost ports">
+                ⇄ ports
+              </button>
               <button id="rguibtn" class="viewbtn" title="open the agent graph view (/r/) for this fleet">
                 ⌗ graph
               </button>
@@ -1890,6 +1933,32 @@
       </div>
     </div>
 
+    <!-- Expose modal: prompt to publish a clicked localhost:PORT through
+         agent-yes.com, plus the ports manager (list + revoke active exposures). -->
+    <div class="modal-backdrop" id="exposeModal" hidden>
+      <div class="sharebox" role="dialog" aria-modal="true" aria-label="Expose localhost port">
+        <h3 id="exposeTitle">Exposed ports</h3>
+        <div class="exposePrompt" id="exposePrompt" hidden>
+          <p class="sub" id="exposePromptSub">Publish this local server on the internet?</p>
+          <p class="note">
+            A private link on <strong>agent-yes.com</strong> will tunnel to this port on the agent's
+            machine. Only someone who opens the one-time claim link (which opens automatically for
+            you) can reach it. Revoke anytime below.
+          </p>
+          <div class="srow">
+            <button class="primary" id="exposeGo" type="button">Expose &amp; open</button>
+            <button id="exposeCancel" type="button">Cancel</button>
+          </div>
+        </div>
+        <div class="exposeList" id="exposeList">
+          <p class="sub" id="exposeEmpty">No ports are exposed right now.</p>
+        </div>
+        <div class="srow">
+          <button id="exposeClose" type="button">Close</button>
+        </div>
+      </div>
+    </div>
+
     <!-- Cmd/Ctrl+K omnibox: search agents by title (instant) then output (tail),
          or spawn a new agent in the highlighted agent's cwd with the typed prompt. -->
     <div class="omni" id="omni" style="display: none">
@@ -3242,6 +3311,157 @@
         if (modal) modal.hidden = true;
         pendingRw = null; // a cancelled read-write flow never minted anything
       }
+
+      // ---- Port exposure: publish a clicked localhost:PORT through agent-yes.com ----
+
+      // Recognise a local-loopback URL and pull its port (default 80). Only these
+      // are offered for exposure — a real public URL just opens normally.
+      function localhostPort(uri) {
+        let u;
+        try {
+          u = new URL(uri);
+        } catch {
+          return null;
+        }
+        if (u.protocol !== "http:" && u.protocol !== "https:") return null;
+        const h = u.hostname;
+        if (h !== "localhost" && h !== "127.0.0.1" && h !== "0.0.0.0" && h !== "::1") return null;
+        const port = Number(u.port) || (u.protocol === "https:" ? 443 : 80);
+        return port >= 1 && port <= 65535 ? port : null;
+      }
+
+      // The tx the expose prompt should call (the daemon whose terminal was clicked).
+      let exposePendingTx = null;
+      let exposePendingPort = 0;
+
+      // Called by the terminal link handler when a localhost URL is clicked.
+      function promptExpose(port, tx) {
+        exposePendingTx = tx || localTx;
+        exposePendingPort = port;
+        $("exposeTitle").textContent = "Expose localhost:" + port + "?";
+        $("exposePromptSub").textContent =
+          "Publish this local server (port " + port + ") on the internet via agent-yes.com?";
+        $("exposePrompt").hidden = false;
+        openExposeManager(false);
+      }
+
+      // Open the ports manager (list of active exposures across every host).
+      function openExposeManager(resetPrompt) {
+        if (resetPrompt !== false) {
+          $("exposePrompt").hidden = true;
+          $("exposeTitle").textContent = "Exposed ports";
+        }
+        const modal = $("exposeModal");
+        if (modal) modal.hidden = false;
+        refreshExposeList();
+      }
+      function closeExposeModal() {
+        const modal = $("exposeModal");
+        if (modal) modal.hidden = true;
+        exposePendingTx = null;
+        exposePendingPort = 0;
+      }
+
+      // Agree → mint the exposure on its host and open the claim link (which sets
+      // the 8h cookie and redirects to the app), then refresh the manager list.
+      async function doExpose() {
+        const tx = exposePendingTx || localTx;
+        const port = exposePendingPort;
+        $("exposePrompt").hidden = true;
+        if (!port) return;
+        let info = null;
+        try {
+          const r = await tx.post("/api/expose", { port });
+          if (r.ok) info = JSON.parse(r.text);
+        } catch {}
+        if (!info || !info.claim) {
+          $("exposeEmpty").hidden = false;
+          $("exposeEmpty").textContent = "Couldn't expose port " + port + " (is `ay serve` reachable?).";
+          return;
+        }
+        window.open(info.claim, "_blank", "noopener,noreferrer");
+        refreshExposeList();
+      }
+
+      // Gather active exposures from every live host and render the manager rows.
+      async function refreshExposeList() {
+        const list = $("exposeList");
+        if (!list) return;
+        const rows = [];
+        await Promise.all(
+          [...sources.values()].map(async (s) => {
+            const tx = s.tx || (s.id === "local" ? localTx : null);
+            if (!tx) return;
+            let arr;
+            try {
+              arr = await tx.fetchJSON("/api/exposes");
+            } catch {
+              return;
+            }
+            if (Array.isArray(arr))
+              for (const ex of arr) rows.push({ ...ex, _srcName: s.name || s.id, _tx: tx });
+          }),
+        );
+        list.textContent = "";
+        if (!rows.length) {
+          const p = document.createElement("p");
+          p.className = "sub";
+          p.id = "exposeEmpty";
+          p.textContent = "No ports are exposed right now.";
+          list.appendChild(p);
+          return;
+        }
+        rows.sort((a, b) => b.createdAt - a.createdAt);
+        for (const ex of rows) list.appendChild(renderExposeRow(ex));
+      }
+
+      function renderExposeRow(ex) {
+        const row = document.createElement("div");
+        row.className = "exposerow";
+        const meta = document.createElement("div");
+        meta.className = "exmeta";
+        const label = document.createElement("div");
+        label.className = "explabel";
+        label.textContent = "localhost:" + ex.port;
+        const url = document.createElement("div");
+        url.className = "exurl";
+        url.textContent = ex.url;
+        const host = document.createElement("div");
+        host.className = "exhost";
+        host.textContent = ex._srcName;
+        meta.appendChild(label);
+        meta.appendChild(url);
+        meta.appendChild(host);
+        row.appendChild(meta);
+
+        const openBtn = document.createElement("button");
+        openBtn.className = "primary";
+        openBtn.textContent = "Open";
+        // Re-mint a fresh claim so the owner (or a guest) gets a usable link.
+        openBtn.onclick = async () => {
+          try {
+            const r = await ex._tx.post("/api/expose", { port: ex.port });
+            const info = r.ok ? JSON.parse(r.text) : null;
+            window.open(info && info.claim ? info.claim : ex.url, "_blank", "noopener,noreferrer");
+          } catch {
+            window.open(ex.url, "_blank", "noopener,noreferrer");
+          }
+        };
+        row.appendChild(openBtn);
+
+        const revoke = document.createElement("button");
+        revoke.className = "danger";
+        revoke.textContent = "Revoke";
+        revoke.onclick = async () => {
+          revoke.disabled = true;
+          try {
+            await ex._tx.del("/api/expose/" + ex.port);
+          } catch {}
+          refreshExposeList();
+        };
+        row.appendChild(revoke);
+        return row;
+      }
       // Draw the QR onto a fresh canvas (white quiet-zone always, so it scans in
       // dark mode too). `qrcode` is the vendored global from qrcode.js.
       function renderQr(container, text) {
@@ -3291,6 +3511,18 @@
         currentShare = null;
         closeShareModal();
       }
+      (function exposeModalBoot() {
+        $("portsbtn")?.addEventListener("click", () => openExposeManager(true));
+        $("exposeGo")?.addEventListener("click", doExpose);
+        $("exposeCancel")?.addEventListener("click", () => {
+          $("exposePrompt").hidden = true;
+          $("exposeTitle").textContent = "Exposed ports";
+        });
+        $("exposeClose")?.addEventListener("click", closeExposeModal);
+        $("exposeModal")?.addEventListener("click", (e) => {
+          if (e.target === $("exposeModal")) closeExposeModal();
+        });
+      })();
       (function shareModalBoot() {
         $("shareClose")?.addEventListener("click", closeShareModal);
         $("shareCloseAlt")?.addEventListener("click", closeShareModal);
@@ -4256,9 +4488,13 @@
         // new tab (noopener so the page can't be tampered with via window.opener).
         try {
           term.loadAddon(
-            new WebLinksAddon.WebLinksAddon((e, uri) =>
-              window.open(uri, "_blank", "noopener,noreferrer"),
-            ),
+            new WebLinksAddon.WebLinksAddon((ev, uri) => {
+              // A localhost URL isn't reachable from the viewer's browser — offer
+              // to publish it through agent-yes.com (on THIS agent's host: txFor(e)).
+              const port = localhostPort(uri);
+              if (port) return promptExpose(port, txFor(e));
+              window.open(uri, "_blank", "noopener,noreferrer");
+            }),
           );
         } catch {
           /* addon CDN blocked — terminal still works, just without auto-links */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.190.0",
+  "version": "1.191.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/expose.ts

@@ -3,9 +3,15 @@
 //
 // The daemon dials OUT (wss://<relay>/_ay/tunnel/<id>), so it works behind any
 // NAT, and runs the codehost tunnel protocol's host half against the local
-// port. Private by default: visitors need the single-use claim link printed
-// below (it swaps for an 8h HttpOnly cookie at the edge; unauthenticated
-// requests never reach this machine). See lab/ui/cf/exposure.ts for the edge.
+// port. Private by default: visitors need a single-use claim link (it swaps
+// for an 8h HttpOnly cookie at the edge; unauthenticated requests never reach
+// this machine). See lab/ui/cf/exposure.ts for the edge.
+//
+// Two front doors share one implementation:
+//   - the CLI (`cmdExpose`), which starts one exposure and blocks; and
+//   - the in-process manager (`ensureExposure` / `listExposures` /
+//     `stopExposure`), which `ay serve` drives from POST /api/expose so the web
+//     console can expose a clicked localhost port and revoke it later.
 
 import { randomBytes, createHash } from "node:crypto";
 import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -24,13 +30,41 @@ interface ExposureRecord {
   key: string;
 }
 
+/** Live handle for one exposed port. */
+export interface ExposureHandle {
+  /** Opaque exposure id (also the subdomain label). */
+  id: string;
+  /** Local loopback port being shared. */
+  port: number;
+  /** Public host, e.g. x….agent-yes.com (or the relay host for a dev relay). */
+  publicHost: string;
+  /** Public root URL. */
+  url: string;
+  /** Relay host this exposure is registered on. */
+  relayHost: string;
+  createdAt: number;
+  /** Mint a fresh single-use claim link and register it with the relay. The
+   *  visitor opening it gets an 8h session cookie for this exposure. */
+  mintClaim(): string;
+  /** Stop sharing (closes the relay socket; the URL then answers 502). */
+  stop(): void;
+}
+
+/** Serializable view of an active exposure (for the console's ports manager). */
+export interface ExposureInfo {
+  id: string;
+  port: number;
+  url: string;
+  createdAt: number;
+}
+
 function exposuresPath(): string {
   const home = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
   mkdirSync(home, { recursive: true });
   return path.join(home, "exposures.json");
 }
 
-/** Stable id+key per (relay, port): re-running `ay expose 5173` keeps its URL. */
+/** Stable id+key per (relay, port): re-exposing a port keeps its URL. */
 function loadOrCreateExposure(relayHost: string, port: number): ExposureRecord {
   const file = exposuresPath();
   let all: Record<string, ExposureRecord> = {};
@@ -79,6 +113,160 @@ function wsTransport(ws: WebSocket): TunnelTransport {
   };
 }
 
+/**
+ * Start (or fail) one exposure. Resolves once the relay has accepted the daemon
+ * and the tunnel is live; rejects if the relay refuses this exposure (bad key).
+ * Reconnects with backoff for the life of the handle.
+ */
+export function startExposure(opts: {
+  port: number;
+  relay?: string;
+  /** Log lifecycle transitions (CLI wants this; the manager stays quiet). */
+  log?: (msg: string) => void;
+}): Promise<ExposureHandle> {
+  const relay = opts.relay ?? DEFAULT_RELAY;
+  const port = opts.port;
+  const log = opts.log ?? (() => {});
+  const relayUrl = new URL(relay);
+  const rec = loadOrCreateExposure(relayUrl.host, port);
+  const wsProto = relayUrl.protocol === "http:" ? "ws:" : "wss:";
+  const tunnelUrl = `${wsProto}//${relayUrl.host}/_ay/tunnel/${rec.id}`;
+  // Public hostname: <id>.<zone> on the real relay; the relay host itself (with
+  // a Host-header spoof) when pointing at a dev relay (wrangler dev).
+  const publicHost = relayUrl.host === "agent-yes.com" ? `${rec.id}.agent-yes.com` : relayUrl.host;
+  const publicUrl = `https://${publicHost}/`;
+
+  let stopped = false;
+  let sock: WebSocket | null = null;
+  let ready = false;
+  let backoff = RECONNECT_MIN_MS;
+
+  const handle: ExposureHandle = {
+    id: rec.id,
+    port,
+    publicHost,
+    url: publicUrl,
+    relayHost: relayUrl.host,
+    createdAt: Date.now(),
+    mintClaim() {
+      const token = randomBytes(18).toString("base64url");
+      const hash = createHash("sha256").update(token).digest("hex");
+      if (sock && sock.readyState === WebSocket.OPEN) {
+        sock.send(JSON.stringify({ t: "claim", claims: [hash] }));
+      }
+      return `https://${publicHost}/_ay/claim?t=${token}`;
+    },
+    stop() {
+      stopped = true;
+      try {
+        sock?.close();
+      } catch {
+        /* ignore */
+      }
+    },
+  };
+
+  return new Promise<ExposureHandle>((resolve, reject) => {
+    const connect = () => {
+      if (stopped) return;
+      sock = new WebSocket(tunnelUrl);
+      sock.binaryType = "arraybuffer";
+      const ws = sock;
+      let ping: ReturnType<typeof setInterval> | null = null;
+
+      ws.addEventListener("open", () => {
+        ws.send(JSON.stringify({ t: "hello", key: rec.key, port, v: 1 }));
+      });
+      ws.addEventListener("message", (ev) => {
+        if (typeof ev.data !== "string") return; // binary frames belong to the TunnelHost
+        let msg: { t?: string };
+        try {
+          msg = JSON.parse(ev.data);
+        } catch {
+          return;
+        }
+        if (msg.t === "ready") {
+          backoff = RECONNECT_MIN_MS;
+          new TunnelHost(wsTransport(ws), { port });
+          ping = setInterval(() => {
+            if (ws.readyState === WebSocket.OPEN) ws.send("ping");
+          }, PING_MS);
+          if (!ready) {
+            ready = true;
+            log(`sharing 127.0.0.1:${port} at ${publicUrl}`);
+            resolve(handle);
+          } else {
+            log(`reconnected`);
+          }
+        }
+      });
+      ws.addEventListener("close", (ev) => {
+        if (ping) clearInterval(ping);
+        if (stopped) return;
+        if (ev.code === 1008) {
+          const err = new Error(`relay refused exposure (${ev.reason || "forbidden"})`);
+          if (!ready) return reject(err);
+          log(err.message);
+          return;
+        }
+        log(`connection lost, retrying in ${Math.round(backoff / 1000)}s…`);
+        setTimeout(connect, backoff);
+        backoff = Math.min(backoff * 2, RECONNECT_MAX_MS);
+      });
+      ws.addEventListener("error", () => {
+        /* close fires right after; retry there */
+      });
+    };
+    connect();
+  });
+}
+
+// ---- in-process manager (driven by `ay serve` POST /api/expose) ----
+
+const active = new Map<number, ExposureHandle>();
+/** In-flight starts, so concurrent POSTs for the same port share one dial. */
+const starting = new Map<number, Promise<ExposureHandle>>();
+
+/** Start an exposure for `port` (or reuse a running one). Idempotent per port. */
+export async function ensureExposure(port: number, relay?: string): Promise<ExposureHandle> {
+  const existing = active.get(port);
+  if (existing) return existing;
+  const inflight = starting.get(port);
+  if (inflight) return inflight;
+  const p = startExposure({ port, relay })
+    .then((h) => {
+      active.set(port, h);
+      starting.delete(port);
+      return h;
+    })
+    .catch((e) => {
+      starting.delete(port);
+      throw e;
+    });
+  starting.set(port, p);
+  return p;
+}
+
+export function listExposures(): ExposureInfo[] {
+  return [...active.values()]
+    .sort((a, b) => b.createdAt - a.createdAt)
+    .map((h) => ({ id: h.id, port: h.port, url: h.url, createdAt: h.createdAt }));
+}
+
+export function stopExposure(port: number): boolean {
+  const h = active.get(port);
+  if (!h) return false;
+  h.stop();
+  active.delete(port);
+  return true;
+}
+
+export function stopAllExposures(): void {
+  for (const port of [...active.keys()]) stopExposure(port);
+}
+
+// ---- CLI ----
+
 export async function cmdExpose(args: string[]): Promise<number> {
   let relay = DEFAULT_RELAY;
   let port = 0;
@@ -102,83 +290,21 @@ export async function cmdExpose(args: string[]): Promise<number> {
     return 1;
   }
 
-  const relayUrl = new URL(relay);
-  const rec = loadOrCreateExposure(relayUrl.host, port);
-  const wsProto = relayUrl.protocol === "http:" ? "ws:" : "wss:";
-  const tunnelUrl = `${wsProto}//${relayUrl.host}/_ay/tunnel/${rec.id}`;
-  // Public hostname: <id>.<zone> on the real relay; the relay host itself (with
-  // a Host-header spoof) when pointing at wrangler dev.
-  const publicHost = relayUrl.host === "agent-yes.com" ? `${rec.id}.agent-yes.com` : relayUrl.host;
-
-  // Fresh single-use claim token every run; only its hash goes to the edge.
-  const claimToken = randomBytes(18).toString("base64url");
-  const claimHash = createHash("sha256").update(claimToken).digest("hex");
-
-  let stopped = false;
-  let ws: WebSocket | null = null;
-  let backoff = RECONNECT_MIN_MS;
-  let announced = false;
-
-  const connect = () => {
-    if (stopped) return;
-    ws = new WebSocket(tunnelUrl);
-    ws.binaryType = "arraybuffer";
-    const sock = ws;
-    let ping: ReturnType<typeof setInterval> | null = null;
-
-    sock.addEventListener("open", () => {
-      sock.send(JSON.stringify({ t: "hello", key: rec.key, port, claims: [claimHash], v: 1 }));
-    });
-    sock.addEventListener("message", (ev) => {
-      if (typeof ev.data !== "string") return; // binary frames belong to the TunnelHost
-      let msg: { t?: string };
-      try {
-        msg = JSON.parse(ev.data);
-      } catch {
-        return;
-      }
-      if (msg.t === "ready") {
-        backoff = RECONNECT_MIN_MS;
-        new TunnelHost(wsTransport(sock), { port });
-        ping = setInterval(() => {
-          if (sock.readyState === WebSocket.OPEN) sock.send("ping");
-        }, PING_MS);
-        if (!announced) {
-          announced = true;
-          console.log(`[ay expose] sharing 127.0.0.1:${port}`);
-          console.log(`  url:    https://${publicHost}/`);
-          console.log(`  claim:  https://${publicHost}/_ay/claim?t=${claimToken}`);
-          console.log(`          (one-time link — opens access for 8h in that browser)`);
-        } else {
-          console.log(`[ay expose] reconnected`);
-        }
-      }
-    });
-    sock.addEventListener("close", (ev) => {
-      if (ping) clearInterval(ping);
-      if (stopped) return;
-      if (ev.code === 1008) {
-        console.error(`[ay expose] relay refused this exposure (${ev.reason || "forbidden"}) — giving up`);
-        process.exit(1);
-      }
-      console.log(`[ay expose] connection lost, retrying in ${Math.round(backoff / 1000)}s…`);
-      setTimeout(connect, backoff);
-      backoff = Math.min(backoff * 2, RECONNECT_MAX_MS);
-    });
-    sock.addEventListener("error", () => {
-      /* close fires right after; retry there */
-    });
-  };
-  connect();
+  let handle: ExposureHandle;
+  try {
+    handle = await startExposure({ port, relay, log: (m) => console.log(`[ay expose] ${m}`) });
+  } catch (e) {
+    console.error(`[ay expose] ${(e as Error).message} — giving up`);
+    return 1;
+  }
+  const claimUrl = handle.mintClaim();
+  console.log(`  url:    ${handle.url}`);
+  console.log(`  claim:  ${claimUrl}`);
+  console.log(`          (one-time link — opens access for 8h in that browser)`);
 
   const shutdown = () => {
-    stopped = true;
     console.log("\n[ay expose] stopped — the URL now answers 502 until you expose again");
-    try {
-      ws?.close();
-    } catch {
-      /* ignore */
-    }
+    handle.stop();
     process.exit(0);
   };
   process.on("SIGINT", shutdown);

package/ts/serve.ts

@@ -2729,6 +2729,42 @@ export async function cmdServe(rest: string[]): Promise<number> {
       return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
     }
 
+    // POST /api/expose  body {port}  → share 127.0.0.1:<port> through the edge
+    // relay and return {url, claim} (a fresh single-use claim link each call).
+    if (req.method === "POST" && p === "/api/expose") {
+      let body: { port?: number; relay?: string };
+      try {
+        body = (await req.json()) as typeof body;
+      } catch {
+        return new Response("invalid JSON body", { status: 400 });
+      }
+      const port = Number(body.port);
+      if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        return new Response("valid port required", { status: 400 });
+      }
+      try {
+        const { ensureExposure } = await import("./expose.ts");
+        const h = await ensureExposure(port, body.relay);
+        return Response.json({ id: h.id, port: h.port, url: h.url, claim: h.mintClaim(), createdAt: h.createdAt });
+      } catch (e) {
+        return new Response(`expose failed: ${(e as Error).message}`, { status: 502 });
+      }
+    }
+
+    // GET /api/exposes  → active port exposures (for the console's ports manager).
+    if (req.method === "GET" && p === "/api/exposes") {
+      const { listExposures } = await import("./expose.ts");
+      return Response.json(listExposures());
+    }
+
+    // DELETE /api/expose/:port  → revoke (the URL then answers 502).
+    const unexposeM = /^\/api\/expose\/(\d+)$/.exec(p);
+    if (req.method === "DELETE" && unexposeM) {
+      const { stopExposure } = await import("./expose.ts");
+      const ok = stopExposure(Number(unexposeM[1]));
+      return new Response(ok ? "revoked" : "no such exposure", { status: ok ? 200 : 404 });
+    }
+
     return new Response("Not Found", { status: 404 });
   };
 
@@ -2793,10 +2829,18 @@ export async function cmdServe(rest: string[]): Promise<number> {
       return serveUiFile("room-client.js", "text/javascript; charset=utf-8");
     if (req.method === "GET" && p === "/console-logic.js")
       return serveUiFile("console-logic.js", "text/javascript; charset=utf-8");
+    // rtc.js is a STATIC import of the console module (import { RTCClient }) — a
+    // 401 here fails the whole module link and the console never boots.
+    if (req.method === "GET" && p === "/rtc.js")
+      return serveUiFile("rtc.js", "text/javascript; charset=utf-8");
     if (req.method === "GET" && p === "/e2e.js")
       return serveUiFile("e2e.js", "text/javascript; charset=utf-8");
     if (req.method === "GET" && p === "/qrcode.js")
       return serveUiFile("qrcode.js", "text/javascript; charset=utf-8");
+    if (req.method === "GET" && p === "/manifest.webmanifest")
+      return serveUiFile("manifest.webmanifest", "application/manifest+json");
+    if (req.method === "GET" && p === "/icon.svg")
+      return serveUiFile("icon.svg", "image/svg+xml");
     if (req.method === "GET" && p === "/favicon.ico") return new Response(null, { status: 204 });
     return apiFetch(req);
   };

package/dist/SUPPORTED_CLIS-B729E086.js

@@ -1,8 +0,0 @@
-import "./ts-CeGEhsC9.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DXwf5ip7.js";
-import "./pidStore-BIvsBQ8X.js";
-import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BB7Br0fS.js";
-
-export { SUPPORTED_CLIS };