agent-yes 1.191.0 → 1.192.1

package/dist/{SUPPORTED_CLIS-mUaQHk4M.js → SUPPORTED_CLIS-5N015orJ.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-BQh1-ljE.js";
+import { t as CLIS_CONFIG } from "./ts-7XqYx0eW.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-mUaQHk4M.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-5N015orJ.js.map

package/dist/SUPPORTED_CLIS-W067Yn4T.js

@@ -0,0 +1,8 @@
+import "./ts-7XqYx0eW.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-CUMd5SWt.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-5N015orJ.js";
+
+export { SUPPORTED_CLIS };

package/dist/{agentShare-Boa9P2dK.js → agentShare-C4LxU2xT.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { j as resolveOne } from "./subcommands-CNCgJ48t.js";
+import { j as resolveOne } from "./subcommands-DMe0U83W.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-CgT91bMo.js";
@@ -228,4 +228,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-Boa9P2dK.js.map
+//# sourceMappingURL=agentShare-C4LxU2xT.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DhCi7ncH.js";
-import { n as getRustBinary } from "./rustBinary-Cu8q2m9s.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CUMd5SWt.js";
+import { n as getRustBinary } from "./rustBinary-DFoLw-3W.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-Uerol8Tz.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-czdlkI5W.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -327,7 +327,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-P3I0D3Ka.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-W067Yn4T.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-BQh1-ljE.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-7XqYx0eW.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DhCi7ncH.js";
+import "./versionChecker-CUMd5SWt.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 

package/dist/{notifyDaemon-hKT38cBs.js → notifyDaemon--OxBe8nG.js}

@@ -1,7 +1,7 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-CNCgJ48t.js";
+import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-DMe0U83W.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-CgT91bMo.js";
@@ -588,4 +588,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-hKT38cBs.js.map
+//# sourceMappingURL=notifyDaemon--OxBe8nG.js.map

package/dist/{rustBinary-Cu8q2m9s.js → rustBinary-DFoLw-3W.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-DhCi7ncH.js";
+import { r as getInstalledPackage } from "./versionChecker-CUMd5SWt.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-Cu8q2m9s.js.map
+//# sourceMappingURL=rustBinary-DFoLw-3W.js.map

package/dist/{schedule-Bb98iG9W.js → schedule-AZACZY6R.js}

@@ -1,9 +1,9 @@
-import "./ts-BQh1-ljE.js";
+import "./ts-7XqYx0eW.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DhCi7ncH.js";
+import "./versionChecker-CUMd5SWt.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-mUaQHk4M.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-5N015orJ.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-_GtAZtsi.js";
 import { createHash } from "node:crypto";
 
@@ -141,4 +141,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-Bb98iG9W.js.map
+//# sourceMappingURL=schedule-AZACZY6R.js.map

package/dist/{serve-DVhbtjR4.js → serve-CSijvUDO.js}

@@ -1,20 +1,20 @@
-import "./ts-BQh1-ljE.js";
+import "./ts-7XqYx0eW.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DhCi7ncH.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-Cu8q2m9s.js";
+import { r as getInstalledPackage } from "./versionChecker-CUMd5SWt.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-DFoLw-3W.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { t as pgidForWrapper } from "./reaper-CWF2_ATd.js";
 import "./configShared-0MnIQ652.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-mUaQHk4M.js";
-import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-CNCgJ48t.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-5N015orJ.js";
+import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-DMe0U83W.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-CgT91bMo.js";
 import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-_GtAZtsi.js";
 import { r as spawnRejectionReason } from "./spawnGate-CA5QD7D4.js";
 import yargs from "yargs";
-import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
+import { chmod, mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
 import path from "path";
 import { execFileSync } from "node:child_process";
@@ -289,16 +289,55 @@ async function globalBinDir(installer) {
 	if (!out) return null;
 	return isBun ? out : path.join(out, "bin");
 }
-async function managerRunnable(mgr) {
+async function ensureNodeRuntime(which = Bun.which) {
+	if (process.platform === "win32") return null;
+	if (which("node")) return null;
+	const bun = which("bun");
+	if (!bun) return null;
+	const binDir = path.join(agentYesHome(), "bin");
+	const shim = path.join(binDir, "node");
+	const body = `#!/bin/sh\nexec '${bun.replace(/'/g, `'\\''`)}' "$@"\n`;
 	try {
-		return (await Bun.spawn([mgr.bin, "--version"], {
-			stdout: "ignore",
-			stderr: "ignore"
-		}).exited ?? 1) === 0;
+		if (await readFile(shim, "utf-8").catch(() => null) !== body) {
+			await mkdir(binDir, { recursive: true });
+			await writeFile(shim, body);
+			await chmod(shim, 493);
+		}
+		if (!(process.env.PATH ?? "").split(path.delimiter).includes(binDir)) process.env.PATH = `${binDir}${path.delimiter}${process.env.PATH ?? ""}`;
+		return shim;
 	} catch {
-		return false;
+		return null;
+	}
+}
+function isNoNodeExecError(stderr) {
+	return /env: '?node'?: No such file or directory/.test(stderr) || /'node' is not recognized/.test(stderr);
+}
+async function managerProbe(mgr) {
+	try {
+		const p = Bun.spawn([mgr.bin, "--version"], {
+			stdout: "ignore",
+			stderr: "pipe",
+			env: {
+				...process.env,
+				LC_ALL: "C"
+			}
+		});
+		const [code, stderr] = await Promise.all([p.exited, new Response(p.stderr).text()]);
+		return {
+			ok: (code ?? 1) === 0,
+			stderr
+		};
+	} catch (e) {
+		return {
+			ok: false,
+			stderr: String(e)
+		};
 	}
 }
+async function managerRunnable(mgr) {
+	await ensureNodeRuntime();
+	return (await managerProbe(mgr)).ok;
+}
 async function resolveActiveManager() {
 	const oxmgr = Bun.which("oxmgr");
 	const pm2 = Bun.which("pm2");
@@ -352,8 +391,12 @@ async function installAndVerify(pkg) {
 		id: pkg,
 		bin
 	};
-	if (!await managerRunnable(mgr)) {
-		const why = pkg === "oxmgr" ? "a native/glibc mismatch, e.g. glibc < 2.39" : "pm2 needs a Node.js runtime and none was found";
+	await ensureNodeRuntime();
+	const probe = await managerProbe(mgr);
+	if (!probe.ok) {
+		const detailLine = probe.stderr.trim().split("\n").filter(Boolean).pop()?.slice(0, 160);
+		const detail = detailLine ? ` — ${detailLine}` : "";
+		const why = isNoNodeExecError(probe.stderr) ? `${pkg} needs a Node.js runtime (its bin is a '#!/usr/bin/env node' script) and none was found` : pkg === "oxmgr" ? `likely a native binary mismatch, e.g. glibc < 2.39 on Linux${detail}` : `exec probe failed${detail}`;
 		process.stderr.write(`ay serve install: ${pkg} installed but can't exec here (${why})` + (pkg === "oxmgr" ? " — falling back to pm2\n" : "\n"));
 		return null;
 	}
@@ -489,12 +532,12 @@ async function fetchDaemonVersion(port, token) {
 async function cmdServeDaemon(sub, args) {
 	let mgr = resolveDaemonManager();
 	if (mgr && !await managerRunnable(mgr)) {
-		process.stderr.write(`ay serve install: ${mgr.id} is on PATH but can't exec here (likely a native/glibc mismatch) — bootstrapping a working manager…\n`);
+		process.stderr.write(`ay serve install: ${mgr.id} is on PATH but can't exec here — bootstrapping a working manager…\n`);
 		mgr = null;
 	}
 	if (!mgr) mgr = await bootstrapDaemonManager();
 	if (!mgr) {
-		process.stderr.write("ay serve install: no usable process manager (need oxmgr or pm2)\n  - oxmgr: bun add -g oxmgr   (native binary; needs glibc ≥ 2.39 on Linux)\n  - pm2:   bun add -g pm2     (needs a Node.js runtime on PATH)\n  On a minimal bun-only box, install node (for pm2) or a newer glibc (for oxmgr).\n");
+		process.stderr.write("ay serve install: no usable process manager (need oxmgr or pm2)\n  - oxmgr: bun add -g oxmgr   (native binary; needs glibc ≥ 2.39 on Linux)\n  - pm2:   bun add -g pm2     (pure JS; needs a node runtime — on a bun-only box\n           ay auto-writes a node→bun shim into ~/.agent-yes/bin, so if you still\n           see this, check that dir is writable or install node)\n");
 		return 1;
 	}
 	if (sub === "install") {
@@ -1851,7 +1894,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-Boa9P2dK.js");
+				const { createScopedShare } = await import("./agentShare-C4LxU2xT.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -1866,12 +1909,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-Boa9P2dK.js");
+			const { listShares } = await import("./agentShare-C4LxU2xT.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-Boa9P2dK.js");
+			const { revokeShare } = await import("./agentShare-C4LxU2xT.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -2052,7 +2095,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-Boa9P2dK.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-C4LxU2xT.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		resolve();
 	};
@@ -2065,4 +2108,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-DVhbtjR4.js.map
+//# sourceMappingURL=serve-CSijvUDO.js.map

package/dist/{setup-Dj8Grg0K.js → setup-ChMQrv6t.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-DVhbtjR4.js");
+	const { cmdServe } = await import("./serve-CSijvUDO.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-Dj8Grg0K.js.map
+//# sourceMappingURL=setup-ChMQrv6t.js.map

package/dist/{subcommands-CNCgJ48t.js → subcommands-DMe0U83W.js}

@@ -12,6 +12,7 @@ import { homedir } from "os";
 import path from "path";
 import { randomUUID } from "node:crypto";
 import os from "node:os";
+import { randomBytes as randomBytes$1 } from "crypto";
 
 //#region ts/agentTree.ts
 /**
@@ -1146,15 +1147,15 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-DVhbtjR4.js");
+				const { cmdServe } = await import("./serve-CSijvUDO.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-Dj8Grg0K.js");
+				const { cmdSetup } = await import("./setup-ChMQrv6t.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-Bb98iG9W.js");
+				const { cmdSchedule } = await import("./schedule-AZACZY6R.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -2729,7 +2730,7 @@ async function cmdSpawn(rest) {
 * (`send`, `key`, `select`): refuse a self-targeting loop, and require that THIS
 * sender actually looked at THIS target recently — an agent is blocked, an
 * interactive human is only warned — unless `force`. Returns the sender context
-* so a caller can reuse it (e.g. `send`'s `[from …]` prefix). Extracted from
+* so a caller can reuse it (e.g. `send`'s `[ay-msg …]` header). Extracted from
 * cmdSend so the action commands enforce the identical guard.
 */
 async function enforceSendGuards(record, force) {
@@ -2926,7 +2927,14 @@ async function cmdSend(rest) {
 		return 0;
 	}
 	const replyTarget = sender.agent?.agent_id || sender.agent?.pid;
-	const fullBody = (sender.agent && !isSlashCommand(body) ? `[from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${replyTarget} "..."]\n` : "") + body;
+	let prefix = "";
+	let suffix = "";
+	if (sender.agent && !isSlashCommand(body)) {
+		const nonce = randomBytes$1(4).toString("hex");
+		prefix = `[ay-msg ${nonce} from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${replyTarget} "..."]\n`;
+		suffix = `\n[/ay-msg ${nonce}]`;
+	}
+	const fullBody = prefix + body + suffix;
 	const noWait = Boolean(argv.noWait) || process.env.AGENT_YES_SEND_NO_WAIT === "1";
 	if (fullBody && !noWait && !force) {
 		const { clear, waitedMs } = await backoffWhileTyping(record.pid, SEND_TYPING_MAX_WAIT_MS);
@@ -3996,7 +4004,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-hKT38cBs.js");
+		const { ensureDaemon } = await import("./notifyDaemon--OxBe8nG.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4070,7 +4078,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-hKT38cBs.js");
+	const daemon = await import("./notifyDaemon--OxBe8nG.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4097,4 +4105,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { TYPING_BADGE as $, renderRawLogLines as A, waitForLogQuiet as B, matchKeyword as C, recentReadEdges as D, readPtysize as E, runSubcommand as F, hostId as G, writeToIpc as H, snapshotStatus as I, readInbox as J, listInboxParents as K, stdinActivityPath as L, resolveReadWindow as M, resolveResumeArgs as N, renderLogTailLines as O, restartHintLines as P, notifyDir as Q, stopTipForCli as R, listRecords as S, readNotes as T, appendEvent as U, writeKeysPaced as V, gcInboxes as W, daemonLockDir as X, shouldStealLock as Y, daemonLockOwnerPath as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, resolveOne as j, renderRawLog as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, liveWatchers as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, submitAndConfirm as z };
-//# sourceMappingURL=subcommands-CNCgJ48t.js.map
+//# sourceMappingURL=subcommands-DMe0U83W.js.map

package/dist/{subcommands-Uerol8Tz.js → subcommands-czdlkI5W.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-CNCgJ48t.js";
+import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-DMe0U83W.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-CgT91bMo.js";

package/dist/{ts-BQh1-ljE.js → ts-7XqYx0eW.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DhCi7ncH.js";
+import { r as getInstalledPackage } from "./versionChecker-CUMd5SWt.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CNMl13dC.js";
 import { t as PidStore } from "./pidStore-BIvsBQ8X.js";
@@ -1824,4 +1824,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-BQh1-ljE.js.map
+//# sourceMappingURL=ts-7XqYx0eW.js.map

package/dist/{versionChecker-DhCi7ncH.js → versionChecker-CUMd5SWt.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.191.0";
+var version = "1.192.1";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-DhCi7ncH.js.map
+//# sourceMappingURL=versionChecker-CUMd5SWt.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.191.0",
+  "version": "1.192.1",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.spec.ts

@@ -1,5 +1,8 @@
-import { describe, expect, it } from "vitest";
-import { oxmgrVersionHasWindowsFix } from "./serve.ts";
+import { mkdtemp, readFile, rm, stat } from "fs/promises";
+import { tmpdir } from "os";
+import path from "path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { ensureNodeRuntime, isNoNodeExecError, oxmgrVersionHasWindowsFix } from "./serve.ts";
 
 // Guards the Windows daemon-manager selection: on Windows we only PREFER oxmgr
 // when the installed build carries the daemon-socket-inheritance fix. Stock
@@ -31,3 +34,106 @@ describe("oxmgrVersionHasWindowsFix", () => {
     expect(oxmgrVersionHasWindowsFix("oxmgr (unknown)")).toBe(false);
   });
 });
+
+// The bun-only-no-node path (sym003): pm2/oxmgr bins are `#!/usr/bin/env node`
+// scripts, so with no node on PATH they die at the shebang. ensureNodeRuntime
+// must bridge that with a node→bun shim in ay's own bin dir.
+describe("ensureNodeRuntime", () => {
+  let home: string;
+  let savedPath: string | undefined;
+  let savedHome: string | undefined;
+
+  beforeEach(async () => {
+    home = await mkdtemp(path.join(tmpdir(), "ay-node-shim-"));
+    savedPath = process.env.PATH;
+    savedHome = process.env.AGENT_YES_HOME;
+    process.env.AGENT_YES_HOME = home;
+  });
+
+  afterEach(async () => {
+    process.env.PATH = savedPath;
+    if (savedHome === undefined) delete process.env.AGENT_YES_HOME;
+    else process.env.AGENT_YES_HOME = savedHome;
+    await rm(home, { recursive: true, force: true });
+  });
+
+  const noNode = (cmd: string) => (cmd === "bun" ? "/fake/bin/bun" : null);
+
+  it.skipIf(process.platform === "win32")(
+    "writes an executable node→bun shim and prepends it to PATH when node is absent",
+    async () => {
+      const shim = await ensureNodeRuntime(noNode);
+      expect(shim).toBe(path.join(home, "bin", "node"));
+      const body = await readFile(shim!, "utf-8");
+      expect(body).toBe("#!/bin/sh\nexec '/fake/bin/bun' \"$@\"\n");
+      expect((await stat(shim!)).mode & 0o111).not.toBe(0); // executable
+      expect(process.env.PATH!.split(path.delimiter)[0]).toBe(path.join(home, "bin"));
+    },
+  );
+
+  it.skipIf(process.platform === "win32")("does not duplicate the PATH entry", async () => {
+    await ensureNodeRuntime(noNode);
+    await ensureNodeRuntime(noNode);
+    const binDir = path.join(home, "bin");
+    const hits = process.env.PATH!.split(path.delimiter).filter((p) => p === binDir);
+    expect(hits).toHaveLength(1);
+  });
+
+  it.skipIf(process.platform === "win32")(
+    "leaves an up-to-date shim untouched on repeat calls (read-only paths stay read-only)",
+    async () => {
+      const shim = (await ensureNodeRuntime(noNode))!;
+      const before = await stat(shim);
+      await new Promise((r) => setTimeout(r, 20));
+      await ensureNodeRuntime(noNode);
+      const after = await stat(shim);
+      expect(after.mtimeMs).toBe(before.mtimeMs); // not rewritten
+    },
+  );
+
+  it.skipIf(process.platform === "win32")(
+    "single-quotes a bun path containing sh-special characters",
+    async () => {
+      const shim = await ensureNodeRuntime((cmd) =>
+        cmd === "bun" ? "/opt/we$ird `dir'/bun" : null,
+      );
+      const body = await readFile(shim!, "utf-8");
+      expect(body).toBe("#!/bin/sh\nexec '/opt/we$ird `dir'\\''/bun' \"$@\"\n");
+    },
+  );
+
+  it("is a no-op when a real node exists", async () => {
+    expect(await ensureNodeRuntime(() => "/usr/bin/whatever")).toBeNull();
+  });
+
+  it("is a no-op when bun is missing too (nothing to shim to)", async () => {
+    expect(await ensureNodeRuntime(() => null)).toBeNull();
+  });
+});
+
+// Guards the serve-install diagnostic: a missing node runtime must be reported
+// as such, never as a "glibc mismatch" (glibc doesn't even exist on macOS).
+describe("isNoNodeExecError", () => {
+  it("matches macOS/BSD env output", () => {
+    expect(isNoNodeExecError("env: node: No such file or directory")).toBe(true);
+  });
+
+  it("matches GNU coreutils quoted env output", () => {
+    expect(isNoNodeExecError("env: 'node': No such file or directory")).toBe(true);
+  });
+
+  it("matches Windows cmd output", () => {
+    expect(
+      isNoNodeExecError("'node' is not recognized as an internal or external command"),
+    ).toBe(true);
+  });
+
+  it("does not match a real native/glibc failure", () => {
+    expect(
+      isNoNodeExecError(
+        "oxmgr: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.39' not found",
+      ),
+    ).toBe(false);
+    expect(isNoNodeExecError("")).toBe(false);
+  });
+});

package/ts/serve.ts

@@ -1,4 +1,4 @@
-import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
+import { chmod, mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { renameSync, watch, writeFileSync } from "node:fs";
 import { execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -405,18 +405,83 @@ async function globalBinDir(installer: string[]): Promise<string | null> {
   return isBun ? out : path.join(out, "bin");
 }
 
+// Both oxmgr's and pm2's global bins are `#!/usr/bin/env node` JS scripts, so on
+// a bun-only box (setup.sh installs no node) exec dies with "env: node: No such
+// file or directory" — even though pm2 is pure JS and runs perfectly under bun.
+// When node is missing but bun exists, write a node→bun shim into ay's own bin
+// dir and prepend it to PATH so `env node` resolves. NOT solvable with
+// `bun add -g node`: that package (node-bin-gen) lands a broken arch-specific
+// stub and `Bun.which("node")` still finds nothing. POSIX-only — on Windows the
+// npm .cmd shims invoke node.exe directly and an sh script can't stand in.
+// Called from managerRunnable, which read-only paths (`ay serve status`) also
+// reach: an up-to-date shim is left untouched there (a read, not a write), so
+// only the very first run on a node-less box materializes the file.
+// Returns the shim path when the shim is in effect, null when unneeded/impossible.
+export async function ensureNodeRuntime(
+  which: (cmd: string) => string | null = Bun.which,
+): Promise<string | null> {
+  if (process.platform === "win32") return null;
+  if (which("node")) return null;
+  const bun = which("bun");
+  if (!bun) return null;
+  const binDir = path.join(agentYesHome(), "bin");
+  const shim = path.join(binDir, "node");
+  // Single-quote the bun path: inside sh double quotes `$`, backtick and `\`
+  // would still expand, corrupting the shim for a path containing them.
+  const body = `#!/bin/sh\nexec '${bun.replace(/'/g, `'\\''`)}' "$@"\n`;
+  try {
+    if ((await readFile(shim, "utf-8").catch(() => null)) !== body) {
+      await mkdir(binDir, { recursive: true });
+      await writeFile(shim, body);
+      await chmod(shim, 0o755);
+    }
+    if (!(process.env.PATH ?? "").split(path.delimiter).includes(binDir)) {
+      process.env.PATH = `${binDir}${path.delimiter}${process.env.PATH ?? ""}`;
+    }
+    return shim;
+  } catch {
+    return null; // best-effort: the exec probe will fail and name the reason
+  }
+}
+
+// Did an exec attempt die because `env` couldn't find a node runtime? macOS/BSD
+// env says `env: node: No such file or directory`, GNU coreutils quotes it
+// (`env: 'node': …`), Windows cmd says `'node' is not recognized`.
+export function isNoNodeExecError(stderr: string): boolean {
+  return (
+    /env: '?node'?: No such file or directory/.test(stderr) ||
+    /'node' is not recognized/.test(stderr)
+  );
+}
+
+// Probe one manager binary with `--version`, capturing stderr so a failure can
+// be diagnosed (glibc mismatch vs missing node runtime vs anything else).
+// LC_ALL=C pins env(1)/libc error text to English so isNoNodeExecError's
+// patterns hold on localized systems.
+async function managerProbe(mgr: DaemonManager): Promise<{ ok: boolean; stderr: string }> {
+  try {
+    const p = Bun.spawn([mgr.bin, "--version"], {
+      stdout: "ignore",
+      stderr: "pipe",
+      env: { ...process.env, LC_ALL: "C" },
+    });
+    const [code, stderr] = await Promise.all([p.exited, new Response(p.stderr).text()]);
+    return { ok: (code ?? 1) === 0, stderr };
+  } catch (e) {
+    return { ok: false, stderr: String(e) };
+  }
+}
+
 // Does this manager's binary actually execute? A `bun add -g oxmgr` can succeed
 // yet leave a binary that can't run: oxmgr vendors a native binary requiring
 // GLIBC_2.39, which a box like Debian 12 (glibc 2.36) lacks, so exec dies with
-// "GLIBC_2.39 not found". Probe with `--version`: exit 0 means runnable; a
-// non-zero exit or spawn failure means the shim is on PATH but unusable.
+// "GLIBC_2.39 not found"; and on a node-less box the `env node` shebang itself
+// fails (see ensureNodeRuntime, applied here so every probe self-heals). Probe
+// with `--version`: exit 0 means runnable; a non-zero exit or spawn failure
+// means the shim is on PATH but unusable.
 async function managerRunnable(mgr: DaemonManager): Promise<boolean> {
-  try {
-    const p = Bun.spawn([mgr.bin, "--version"], { stdout: "ignore", stderr: "ignore" });
-    return ((await p.exited) ?? 1) === 0;
-  } catch {
-    return false;
-  }
+  await ensureNodeRuntime();
+  return (await managerProbe(mgr)).ok;
 }
 
 // Which manager is ACTUALLY running our daemon? `resolveDaemonManager` picks by
@@ -464,14 +529,23 @@ async function installAndVerify(pkg: "oxmgr" | "pm2"): Promise<DaemonManager | n
   const bin = Bun.which(pkg);
   if (!bin) return null;
   const mgr: DaemonManager = { id: pkg, bin };
-  if (!(await managerRunnable(mgr))) {
-    // Name the actual reason: oxmgr ships a native binary (glibc), pm2 is a
-    // Node.js app that needs `node` on PATH — a bun-only box has neither by
-    // default, so a generic "glibc mismatch" would mislead for pm2.
-    const why =
-      pkg === "oxmgr"
-        ? "a native/glibc mismatch, e.g. glibc < 2.39"
-        : "pm2 needs a Node.js runtime and none was found";
+  await ensureNodeRuntime();
+  const probe = await managerProbe(mgr);
+  if (!probe.ok) {
+    // Name the ACTUAL reason from the probe's stderr. A missing node runtime
+    // hits both managers identically (`env: node: No such file or directory` —
+    // their bins are `#!/usr/bin/env node` scripts), and reporting that as a
+    // "glibc mismatch" is nonsense on macOS where glibc doesn't exist. Only
+    // blame glibc for an oxmgr that got PAST the shebang and died natively;
+    // any other failure just gets the probe's own last stderr line — claiming
+    // "no node runtime" here would be false, ensureNodeRuntime just provided one.
+    const detailLine = probe.stderr.trim().split("\n").filter(Boolean).pop()?.slice(0, 160);
+    const detail = detailLine ? ` — ${detailLine}` : "";
+    const why = isNoNodeExecError(probe.stderr)
+      ? `${pkg} needs a Node.js runtime (its bin is a '#!/usr/bin/env node' script) and none was found`
+      : pkg === "oxmgr"
+        ? `likely a native binary mismatch, e.g. glibc < 2.39 on Linux${detail}`
+        : `exec probe failed${detail}`;
     process.stderr.write(
       `ay serve install: ${pkg} installed but can't exec here (${why})` +
         (pkg === "oxmgr" ? " — falling back to pm2\n" : "\n"),
@@ -670,7 +744,7 @@ async function cmdServeDaemon(sub: string, args: string[]): Promise<number> {
   let mgr = resolveDaemonManager();
   if (mgr && !(await managerRunnable(mgr))) {
     process.stderr.write(
-      `ay serve install: ${mgr.id} is on PATH but can't exec here (likely a native/glibc mismatch) — bootstrapping a working manager…\n`,
+      `ay serve install: ${mgr.id} is on PATH but can't exec here — bootstrapping a working manager…\n`,
     );
     mgr = null;
   }
@@ -679,8 +753,9 @@ async function cmdServeDaemon(sub: string, args: string[]): Promise<number> {
     process.stderr.write(
       "ay serve install: no usable process manager (need oxmgr or pm2)\n" +
         "  - oxmgr: bun add -g oxmgr   (native binary; needs glibc ≥ 2.39 on Linux)\n" +
-        "  - pm2:   bun add -g pm2     (needs a Node.js runtime on PATH)\n" +
-        "  On a minimal bun-only box, install node (for pm2) or a newer glibc (for oxmgr).\n",
+        "  - pm2:   bun add -g pm2     (pure JS; needs a node runtime — on a bun-only box\n" +
+        "           ay auto-writes a node→bun shim into ~/.agent-yes/bin, so if you still\n" +
+        "           see this, check that dir is writable or install node)\n",
     );
     return 1;
   }

package/ts/subcommands.ts

@@ -11,6 +11,7 @@
  * to the normal agent-spawning flow.
  */
 
+import { randomBytes } from "crypto";
 import { appendFile, mkdir, open, readFile, stat, writeFile } from "fs/promises";
 import ms from "ms";
 import { homedir } from "os";
@@ -2653,7 +2654,7 @@ async function cmdSpawn(rest: string[]): Promise<number> {
  * (`send`, `key`, `select`): refuse a self-targeting loop, and require that THIS
  * sender actually looked at THIS target recently — an agent is blocked, an
  * interactive human is only warned — unless `force`. Returns the sender context
- * so a caller can reuse it (e.g. `send`'s `[from …]` prefix). Extracted from
+ * so a caller can reuse it (e.g. `send`'s `[ay-msg …]` header). Extracted from
  * cmdSend so the action commands enforce the identical guard.
  */
 async function enforceSendGuards(
@@ -2962,13 +2963,21 @@ async function cmdSend(rest: string[]): Promise<number> {
   // prefix would bump it to line 2 and the CLI would type the command as plain
   // text. So skip the prefix for a command body and send it verbatim —
   // attribution is dropped for the command, but it actually runs.
+  // The header/footer pair shares a random nonce so the recipient can trust the
+  // block's boundaries: text INSIDE the body can't forge a matching open/close
+  // marker (the nonce is generated here, after the body was authored), so a
+  // spoofed "[from …]" line or a premature "[/ay-msg]" embedded in a message
+  // can't impersonate another sender or truncate/extend the trusted region.
   const replyTarget = sender.agent?.agent_id || sender.agent?.pid;
-  const prefix =
-    sender.agent && !isSlashCommand(body)
-      ? `[from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${replyTarget} "..."]\n`
-      : "";
+  let prefix = "";
+  let suffix = "";
+  if (sender.agent && !isSlashCommand(body)) {
+    const nonce = randomBytes(4).toString("hex");
+    prefix = `[ay-msg ${nonce} from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${replyTarget} "..."]\n`;
+    suffix = `\n[/ay-msg ${nonce}]`;
+  }
 
-  const fullBody = prefix + body;
+  const fullBody = prefix + body + suffix;
   const noWait = Boolean(argv.noWait) || process.env.AGENT_YES_SEND_NO_WAIT === "1";
 
   // Back off while the user is typing at the target's terminal — injecting our

package/dist/SUPPORTED_CLIS-P3I0D3Ka.js

@@ -1,8 +0,0 @@
-import "./ts-BQh1-ljE.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DhCi7ncH.js";
-import "./pidStore-BIvsBQ8X.js";
-import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-mUaQHk4M.js";
-
-export { SUPPORTED_CLIS };