agent-yes 1.192.1 → 1.192.2

package/dist/{SUPPORTED_CLIS-5N015orJ.js → SUPPORTED_CLIS-CryNU1fs.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-7XqYx0eW.js";
+import { t as CLIS_CONFIG } from "./ts-Cp_21mny.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-5N015orJ.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-CryNU1fs.js.map

package/dist/SUPPORTED_CLIS-wrXQttpW.js

@@ -0,0 +1,8 @@
+import "./ts-Cp_21mny.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-CaOEu_WC.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CryNU1fs.js";
+
+export { SUPPORTED_CLIS };

package/dist/{agentShare-C4LxU2xT.js → agentShare-BY9WWDBm.js}

@@ -1,10 +1,10 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { j as resolveOne } from "./subcommands-DMe0U83W.js";
+import { j as resolveOne } from "./subcommands-Cq1mzI8Z.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-CgT91bMo.js";
+import "./remotes-oSmwSYaV.js";
 import { r as startShare } from "./share-29YbzpbU.js";
 
 //#region ts/agentShare.ts
@@ -228,4 +228,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-C4LxU2xT.js.map
+//# sourceMappingURL=agentShare-BY9WWDBm.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CUMd5SWt.js";
-import { n as getRustBinary } from "./rustBinary-DFoLw-3W.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CaOEu_WC.js";
+import { n as getRustBinary } from "./rustBinary-CeRekAdR.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-czdlkI5W.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-BnEmKfiM.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -299,16 +299,16 @@ await checkAndAutoUpdate();
 logger.info(versionString());
 const config = parseCliArgs(process.argv);
 if (config.tray) {
-	const { startTray } = await import("./tray-PMOWFOfk.js");
+	const { startTray } = await import("./tray-BKTZ5gIf.js");
 	await startTray();
 	await new Promise(() => {});
 }
 {
-	const { ensureTray } = await import("./tray-PMOWFOfk.js");
+	const { ensureTray } = await import("./tray-BKTZ5gIf.js");
 	ensureTray();
 }
 if (!config.showVersion && !config.appendPrompt && !config.tray) {
-	const { waitForSpawnCapacity } = await import("./spawnGate-BejtWiMJ.js");
+	const { waitForSpawnCapacity } = await import("./spawnGate-CWbdnJ5K.js");
 	await waitForSpawnCapacity({
 		onWait: (reason, waitedMs) => {
 			if (config.verbose || waitedMs === 0) console.error(`[agent-yes] spawn gate: ${reason} — waiting…`);
@@ -327,7 +327,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-W067Yn4T.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-wrXQttpW.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-7XqYx0eW.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-Cp_21mny.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CUMd5SWt.js";
+import "./versionChecker-CaOEu_WC.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 

package/dist/nodeRuntime-DZRjxpNp.js

@@ -0,0 +1,56 @@
+import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
+import { chmod, mkdir, readFile, writeFile } from "fs/promises";
+import path from "path";
+
+//#region ts/nodeRuntime.ts
+/**
+* Snapshot of the CURRENT process.env for child spawns. Bun.spawn without an
+* explicit `env` hands the child the environ captured at PROCESS STARTUP — not
+* the live process.env — so post-startup mutations (ensureNodeRuntime's shim
+* PATH prepend, installAndVerify's global-bin-dir prepend) silently never reach
+* the child. That is exactly how `ay serve install` kept dying with
+* `env: node: No such file or directory` at the `pm2 start` spawn on a bun-only
+* box even though the probe (which passes env explicitly) had just succeeded.
+* Every spawn of a process-manager binary must pass `env: liveEnv()`.
+*/
+function liveEnv() {
+	return { ...process.env };
+}
+/**
+* Both oxmgr's and pm2's global bins are `#!/usr/bin/env node` JS scripts, so on
+* a bun-only box (setup.sh installs no node) exec dies with "env: node: No such
+* file or directory" — even though pm2 is pure JS and runs perfectly under bun.
+* When node is missing but bun exists, write a node→bun shim into ay's own bin
+* dir and prepend it to PATH so `env node` resolves. NOT solvable with
+* `bun add -g node`: that package (node-bin-gen) lands a broken arch-specific
+* stub and `Bun.which("node")` still finds nothing. POSIX-only — on Windows the
+* npm .cmd shims invoke node.exe directly and an sh script can't stand in.
+* Read-only paths (`ay serve status`) also reach this via the manager probes:
+* an up-to-date shim is left untouched there (a read, not a write), so only the
+* very first run on a node-less box materializes the file.
+* Returns the shim path when the shim is in effect, null when unneeded/impossible.
+*/
+async function ensureNodeRuntime(which = Bun.which) {
+	if (process.platform === "win32") return null;
+	if (which("node")) return null;
+	const bun = which("bun");
+	if (!bun) return null;
+	const binDir = path.join(agentYesHome(), "bin");
+	const shim = path.join(binDir, "node");
+	const body = `#!/bin/sh\nexec '${bun.replace(/'/g, `'\\''`)}' "$@"\n`;
+	try {
+		if (await readFile(shim, "utf-8").catch(() => null) !== body) {
+			await mkdir(binDir, { recursive: true });
+			await writeFile(shim, body);
+			await chmod(shim, 493);
+		}
+		if (!(process.env.PATH ?? "").split(path.delimiter).includes(binDir)) process.env.PATH = `${binDir}${path.delimiter}${process.env.PATH ?? ""}`;
+		return shim;
+	} catch {
+		return null;
+	}
+}
+
+//#endregion
+export { liveEnv as n, ensureNodeRuntime as t };
+//# sourceMappingURL=nodeRuntime-DZRjxpNp.js.map

package/dist/{notifyDaemon--OxBe8nG.js → notifyDaemon-BPcU9HOC.js}

@@ -1,10 +1,10 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-DMe0U83W.js";
+import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-Cq1mzI8Z.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-CgT91bMo.js";
+import "./remotes-oSmwSYaV.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
@@ -588,4 +588,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon--OxBe8nG.js.map
+//# sourceMappingURL=notifyDaemon-BPcU9HOC.js.map

package/dist/{remotes-WVJBNajZ.js → remotes-CW-yxSgW.js}

@@ -1,5 +1,5 @@
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-CgT91bMo.js";
+import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-oSmwSYaV.js";
 
 export { cmdRemote };

package/dist/{remotes-CgT91bMo.js → remotes-oSmwSYaV.js}

@@ -86,7 +86,7 @@ async function resolveRemoteSpec(spec) {
 * The bridge lives for the rest of the process (torn down on `process.exit`).
 */
 async function resolveWebrtc(link, keyword) {
-	const { startWebrtcBridge } = await import("./webrtcRemote-CD5EQ3uX.js");
+	const { startWebrtcBridge } = await import("./webrtcRemote-BmuVKcrx.js");
 	const bridge = await startWebrtcBridge(link);
 	return {
 		url: bridge.baseUrl,
@@ -173,4 +173,4 @@ async function cmdRemote(rest) {
 
 //#endregion
 export { resolveRemoteSpec as a, readRemotes as i, deleteRemoteAlias as n, writeRemoteAlias as o, parseDirectRemoteSpec as r, cmdRemote as t };
-//# sourceMappingURL=remotes-CgT91bMo.js.map
+//# sourceMappingURL=remotes-oSmwSYaV.js.map

package/dist/{rustBinary-DFoLw-3W.js → rustBinary-CeRekAdR.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-CUMd5SWt.js";
+import { r as getInstalledPackage } from "./versionChecker-CaOEu_WC.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-DFoLw-3W.js.map
+//# sourceMappingURL=rustBinary-CeRekAdR.js.map

package/dist/{schedule-AZACZY6R.js → schedule-DCVkaHCo.js}

@@ -1,10 +1,11 @@
-import "./ts-7XqYx0eW.js";
+import "./ts-Cp_21mny.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CUMd5SWt.js";
+import "./versionChecker-CaOEu_WC.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-5N015orJ.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CryNU1fs.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-_GtAZtsi.js";
+import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-DZRjxpNp.js";
 import { createHash } from "node:crypto";
 
 //#region ts/oxmgrService.ts
@@ -14,20 +15,26 @@ async function ensureBootAutostart(oxmgrBin) {
 			oxmgrBin,
 			"service",
 			"status"
-		], { stdio: [
-			"ignore",
-			"ignore",
-			"ignore"
-		] }).exited === 0) return true;
+		], {
+			stdio: [
+				"ignore",
+				"ignore",
+				"ignore"
+			],
+			env: liveEnv()
+		}).exited === 0) return true;
 		return await Bun.spawn([
 			oxmgrBin,
 			"service",
 			"install"
-		], { stdio: [
-			"ignore",
-			"ignore",
-			"ignore"
-		] }).exited === 0;
+		], {
+			stdio: [
+				"ignore",
+				"ignore",
+				"ignore"
+			],
+			env: liveEnv()
+		}).exited === 0;
 	} catch {
 		return false;
 	}
@@ -58,7 +65,8 @@ async function run(cmd, capture = false) {
 	const p = Bun.spawn(cmd, {
 		stdin: "ignore",
 		stdout: capture ? "pipe" : "inherit",
-		stderr: capture ? "pipe" : "inherit"
+		stderr: capture ? "pipe" : "inherit",
+		env: liveEnv()
 	});
 	const out = capture ? await new Response(p.stdout).text() : "";
 	return {
@@ -67,6 +75,7 @@ async function run(cmd, capture = false) {
 	};
 }
 async function cmdSchedule(rest) {
+	await ensureNodeRuntime();
 	const oxmgrBin = Bun.which("oxmgr");
 	if (!oxmgrBin) {
 		process.stderr.write("ay schedule: oxmgr not found\n  install with:  cargo install oxmgr\n             or: bun add -g oxmgr\n");
@@ -141,4 +150,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-AZACZY6R.js.map
+//# sourceMappingURL=schedule-DCVkaHCo.js.map

package/dist/{serve-CSijvUDO.js → serve-Dxxm6cs6.js}

@@ -1,20 +1,21 @@
-import "./ts-7XqYx0eW.js";
+import "./ts-Cp_21mny.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-CUMd5SWt.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-DFoLw-3W.js";
+import { r as getInstalledPackage } from "./versionChecker-CaOEu_WC.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-CeRekAdR.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { t as pgidForWrapper } from "./reaper-CWF2_ATd.js";
 import "./configShared-0MnIQ652.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-5N015orJ.js";
-import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-DMe0U83W.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CryNU1fs.js";
+import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-Cq1mzI8Z.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-CgT91bMo.js";
+import "./remotes-oSmwSYaV.js";
 import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-_GtAZtsi.js";
-import { r as spawnRejectionReason } from "./spawnGate-CA5QD7D4.js";
+import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-DZRjxpNp.js";
+import { r as spawnRejectionReason } from "./spawnGate-DRWa_Fzj.js";
 import yargs from "yargs";
-import { chmod, mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
+import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
 import path from "path";
 import { execFileSync } from "node:child_process";
@@ -239,7 +240,8 @@ function oxmgrHasWindowsFix(bin) {
 				"ignore",
 				"pipe",
 				"ignore"
-			]
+			],
+			env: { ...process.env }
 		}));
 	} catch {
 		oxmgrWinFixCache = false;
@@ -289,26 +291,6 @@ async function globalBinDir(installer) {
 	if (!out) return null;
 	return isBun ? out : path.join(out, "bin");
 }
-async function ensureNodeRuntime(which = Bun.which) {
-	if (process.platform === "win32") return null;
-	if (which("node")) return null;
-	const bun = which("bun");
-	if (!bun) return null;
-	const binDir = path.join(agentYesHome(), "bin");
-	const shim = path.join(binDir, "node");
-	const body = `#!/bin/sh\nexec '${bun.replace(/'/g, `'\\''`)}' "$@"\n`;
-	try {
-		if (await readFile(shim, "utf-8").catch(() => null) !== body) {
-			await mkdir(binDir, { recursive: true });
-			await writeFile(shim, body);
-			await chmod(shim, 493);
-		}
-		if (!(process.env.PATH ?? "").split(path.delimiter).includes(binDir)) process.env.PATH = `${binDir}${path.delimiter}${process.env.PATH ?? ""}`;
-		return shim;
-	} catch {
-		return null;
-	}
-}
 function isNoNodeExecError(stderr) {
 	return /env: '?node'?: No such file or directory/.test(stderr) || /'node' is not recognized/.test(stderr);
 }
@@ -318,7 +300,7 @@ async function managerProbe(mgr) {
 			stdout: "ignore",
 			stderr: "pipe",
 			env: {
-				...process.env,
+				...liveEnv(),
 				LC_ALL: "C"
 			}
 		});
@@ -374,11 +356,14 @@ async function installAndVerify(pkg) {
 	] : null;
 	if (!installer) return null;
 	process.stderr.write(`ay serve install: installing ${pkg}…\n`);
-	const code = await Bun.spawn(installer, { stdio: [
-		"ignore",
-		"inherit",
-		"inherit"
-	] }).exited ?? 1;
+	const code = await Bun.spawn(installer, {
+		stdio: [
+			"ignore",
+			"inherit",
+			"inherit"
+		],
+		env: liveEnv()
+	}).exited ?? 1;
 	if (code !== 0) {
 		process.stderr.write(`ay serve install: '${installer.join(" ")}' failed (exit ${code})\n`);
 		return null;
@@ -460,11 +445,14 @@ async function ensureBootAutostart(mgr) {
 }
 async function spawnExit(cmd) {
 	try {
-		return await Bun.spawn(cmd, { stdio: [
-			"ignore",
-			"ignore",
-			"ignore"
-		] }).exited ?? 1;
+		return await Bun.spawn(cmd, {
+			stdio: [
+				"ignore",
+				"ignore",
+				"ignore"
+			],
+			env: liveEnv()
+		}).exited ?? 1;
 	} catch {
 		return 1;
 	}
@@ -478,7 +466,8 @@ async function readDaemonServeArgs(mgr) {
 				DAEMON_NAME
 			], {
 				stdout: "pipe",
-				stderr: "ignore"
+				stderr: "ignore",
+				env: liveEnv()
 			});
 			const out = await new Response(p.stdout).text();
 			if (await p.exited !== 0) return null;
@@ -489,7 +478,8 @@ async function readDaemonServeArgs(mgr) {
 		}
 		const p = Bun.spawn([mgr.bin, "jlist"], {
 			stdout: "pipe",
-			stderr: "ignore"
+			stderr: "ignore",
+			env: liveEnv()
 		});
 		const out = await new Response(p.stdout).text();
 		if (await p.exited !== 0) return null;
@@ -620,11 +610,14 @@ async function cmdServeDaemon(sub, args) {
 			"--",
 			...managedArgv.slice(1)
 		];
-		const code = await Bun.spawn(startArgv, { stdio: [
-			"ignore",
-			"inherit",
-			"inherit"
-		] }).exited;
+		const code = await Bun.spawn(startArgv, {
+			stdio: [
+				"ignore",
+				"inherit",
+				"inherit"
+			],
+			env: liveEnv()
+		}).exited;
 		if (code === 0) {
 			const onBoot = await ensureBootAutostart(mgr);
 			const port = portFromArgs(effArgs);
@@ -650,11 +643,14 @@ async function cmdServeDaemon(sub, args) {
 			mgr.bin,
 			"delete",
 			DAEMON_NAME
-		], { stdio: [
-			"ignore",
-			"inherit",
-			"inherit"
-		] }).exited ?? 1;
+		], {
+			stdio: [
+				"ignore",
+				"inherit",
+				"inherit"
+			],
+			env: liveEnv()
+		}).exited ?? 1;
 		if (mgr.id === "pm2" && code === 0) {
 			await spawnExit([mgr.bin, "save"]);
 			if (process.platform === "win32") await spawnExit([
@@ -673,11 +669,14 @@ async function cmdServeDaemon(sub, args) {
 		"logs",
 		DAEMON_NAME,
 		...args
-	], { stdio: [
-		"ignore",
-		"inherit",
-		"inherit"
-	] }).exited ?? 1;
+	], {
+		stdio: [
+			"ignore",
+			"inherit",
+			"inherit"
+		],
+		env: liveEnv()
+	}).exited ?? 1;
 	return 1;
 }
 async function cmdServeStatus(args) {
@@ -1894,7 +1893,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-C4LxU2xT.js");
+				const { createScopedShare } = await import("./agentShare-BY9WWDBm.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -1909,12 +1908,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-C4LxU2xT.js");
+			const { listShares } = await import("./agentShare-BY9WWDBm.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-C4LxU2xT.js");
+			const { revokeShare } = await import("./agentShare-BY9WWDBm.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -2095,7 +2094,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-C4LxU2xT.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-BY9WWDBm.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		resolve();
 	};
@@ -2108,4 +2107,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-CSijvUDO.js.map
+//# sourceMappingURL=serve-Dxxm6cs6.js.map

package/dist/{setup-ChMQrv6t.js → setup-CnHHrqP9.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-CSijvUDO.js");
+	const { cmdServe } = await import("./serve-Dxxm6cs6.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-ChMQrv6t.js.map
+//# sourceMappingURL=setup-CnHHrqP9.js.map

package/dist/{spawnGate-BejtWiMJ.js → spawnGate-CWbdnJ5K.js}

@@ -1,5 +1,5 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-CA5QD7D4.js";
+import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-DRWa_Fzj.js";
 
 export { waitForSpawnCapacity };

package/dist/{spawnGate-CA5QD7D4.js → spawnGate-DRWa_Fzj.js}

@@ -104,4 +104,4 @@ async function waitForSpawnCapacity(opts) {
 
 //#endregion
 export { waitForSpawnCapacity as i, spawnGateEnabled as n, spawnRejectionReason as r, memAvailableMb as t };
-//# sourceMappingURL=spawnGate-CA5QD7D4.js.map
+//# sourceMappingURL=spawnGate-DRWa_Fzj.js.map

package/dist/{subcommands-czdlkI5W.js → subcommands-BnEmKfiM.js}

@@ -1,9 +1,9 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-DMe0U83W.js";
+import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-Cq1mzI8Z.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
-import "./remotes-CgT91bMo.js";
+import "./remotes-oSmwSYaV.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{subcommands-DMe0U83W.js → subcommands-Cq1mzI8Z.js}

@@ -4,7 +4,7 @@ import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidIndex-CoNr7tS8.js";
 import { t as loadSharedCliDefaults } from "./configShared-0MnIQ652.js";
 import { n as isWebrtcSpec } from "./webrtcLink-BG0Xc4-W.js";
-import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-CgT91bMo.js";
+import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-oSmwSYaV.js";
 import ms from "ms";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from "fs/promises";
@@ -1147,19 +1147,19 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-CSijvUDO.js");
+				const { cmdServe } = await import("./serve-Dxxm6cs6.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-ChMQrv6t.js");
+				const { cmdSetup } = await import("./setup-CnHHrqP9.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-AZACZY6R.js");
+				const { cmdSchedule } = await import("./schedule-DCVkaHCo.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
-				const { cmdRemote } = await import("./remotes-WVJBNajZ.js");
+				const { cmdRemote } = await import("./remotes-CW-yxSgW.js");
 				return cmdRemote(rest);
 			}
 			case "expose": {
@@ -1556,7 +1556,7 @@ async function fetchRemoteRecordsRaw(url, token, opts) {
 		let base = url;
 		let bearer = token;
 		if (isWebrtcSpec(url)) {
-			const { startWebrtcBridge } = await import("./webrtcRemote-CD5EQ3uX.js");
+			const { startWebrtcBridge } = await import("./webrtcRemote-BmuVKcrx.js");
 			bridge = await startWebrtcBridge(url);
 			base = bridge.baseUrl;
 			bearer = bridge.token;
@@ -4004,7 +4004,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon--OxBe8nG.js");
+		const { ensureDaemon } = await import("./notifyDaemon-BPcU9HOC.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4078,7 +4078,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon--OxBe8nG.js");
+	const daemon = await import("./notifyDaemon-BPcU9HOC.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4105,4 +4105,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { TYPING_BADGE as $, renderRawLogLines as A, waitForLogQuiet as B, matchKeyword as C, recentReadEdges as D, readPtysize as E, runSubcommand as F, hostId as G, writeToIpc as H, snapshotStatus as I, readInbox as J, listInboxParents as K, stdinActivityPath as L, resolveReadWindow as M, resolveResumeArgs as N, renderLogTailLines as O, restartHintLines as P, notifyDir as Q, stopTipForCli as R, listRecords as S, readNotes as T, appendEvent as U, writeKeysPaced as V, gcInboxes as W, daemonLockDir as X, shouldStealLock as Y, daemonLockOwnerPath as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, resolveOne as j, renderRawLog as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, liveWatchers as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, submitAndConfirm as z };
-//# sourceMappingURL=subcommands-DMe0U83W.js.map
+//# sourceMappingURL=subcommands-Cq1mzI8Z.js.map

package/dist/{tray-PMOWFOfk.js → tray-BKTZ5gIf.js}

@@ -187,4 +187,4 @@ async function startTray() {
 
 //#endregion
 export { ensureTray, startTray };
-//# sourceMappingURL=tray-PMOWFOfk.js.map
+//# sourceMappingURL=tray-BKTZ5gIf.js.map

package/dist/{ts-7XqYx0eW.js → ts-Cp_21mny.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-CUMd5SWt.js";
+import { r as getInstalledPackage } from "./versionChecker-CaOEu_WC.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CNMl13dC.js";
 import { t as PidStore } from "./pidStore-BIvsBQ8X.js";
@@ -1824,4 +1824,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-7XqYx0eW.js.map
+//# sourceMappingURL=ts-Cp_21mny.js.map

package/dist/{versionChecker-CUMd5SWt.js → versionChecker-CaOEu_WC.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.192.1";
+var version = "1.192.2";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-CUMd5SWt.js.map
+//# sourceMappingURL=versionChecker-CaOEu_WC.js.map

package/dist/{webrtcRemote-CD5EQ3uX.js → webrtcRemote-BmuVKcrx.js}

@@ -256,4 +256,4 @@ async function startWebrtcBridge(link) {
 
 //#endregion
 export { startWebrtcBridge };
-//# sourceMappingURL=webrtcRemote-CD5EQ3uX.js.map
+//# sourceMappingURL=webrtcRemote-BmuVKcrx.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.192.1",
+  "version": "1.192.2",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/nodeRuntime.spec.ts

@@ -0,0 +1,99 @@
+import { mkdtemp, readFile, rm, stat } from "fs/promises";
+import { tmpdir } from "os";
+import path from "path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { ensureNodeRuntime, liveEnv } from "./nodeRuntime.ts";
+
+// process.platform is stubbed per test (instead of skipIf) so every branch of
+// ensureNodeRuntime is exercised on every CI OS — the win32 early-return on
+// POSIX runners and the POSIX shim path on Windows runners (mkdir/writeFile/
+// chmod all work there; the shim just isn't consulted by real spawns).
+const realPlatform = process.platform;
+function setPlatform(p: string) {
+  Object.defineProperty(process, "platform", { value: p, configurable: true });
+}
+
+// The bun-only-no-node path (sym003): pm2/oxmgr bins are `#!/usr/bin/env node`
+// scripts, so with no node on PATH they die at the shebang. ensureNodeRuntime
+// must bridge that with a node→bun shim in ay's own bin dir.
+describe("ensureNodeRuntime", () => {
+  let home: string;
+  let savedPath: string | undefined;
+  let savedHome: string | undefined;
+
+  beforeEach(async () => {
+    home = await mkdtemp(path.join(tmpdir(), "ay-node-shim-"));
+    savedPath = process.env.PATH;
+    savedHome = process.env.AGENT_YES_HOME;
+    process.env.AGENT_YES_HOME = home;
+    setPlatform("linux");
+  });
+
+  afterEach(async () => {
+    setPlatform(realPlatform);
+    process.env.PATH = savedPath;
+    if (savedHome === undefined) delete process.env.AGENT_YES_HOME;
+    else process.env.AGENT_YES_HOME = savedHome;
+    await rm(home, { recursive: true, force: true });
+  });
+
+  const noNode = (cmd: string) => (cmd === "bun" ? "/fake/bin/bun" : null);
+
+  it("writes an executable node→bun shim and prepends it to PATH when node is absent", async () => {
+    const shim = await ensureNodeRuntime(noNode);
+    expect(shim).toBe(path.join(home, "bin", "node"));
+    const body = await readFile(shim!, "utf-8");
+    expect(body).toBe("#!/bin/sh\nexec '/fake/bin/bun' \"$@\"\n");
+    if (realPlatform !== "win32") {
+      expect((await stat(shim!)).mode & 0o111).not.toBe(0); // executable
+    }
+    expect(process.env.PATH!.split(path.delimiter)[0]).toBe(path.join(home, "bin"));
+  });
+
+  it("does not duplicate the PATH entry", async () => {
+    await ensureNodeRuntime(noNode);
+    await ensureNodeRuntime(noNode);
+    const binDir = path.join(home, "bin");
+    const hits = process.env.PATH!.split(path.delimiter).filter((p) => p === binDir);
+    expect(hits).toHaveLength(1);
+  });
+
+  it("leaves an up-to-date shim untouched on repeat calls (read-only paths stay read-only)", async () => {
+    const shim = (await ensureNodeRuntime(noNode))!;
+    const before = await stat(shim);
+    await new Promise((r) => setTimeout(r, 20));
+    await ensureNodeRuntime(noNode);
+    const after = await stat(shim);
+    expect(after.mtimeMs).toBe(before.mtimeMs); // not rewritten
+  });
+
+  it("single-quotes a bun path containing sh-special characters", async () => {
+    const shim = await ensureNodeRuntime((cmd) => (cmd === "bun" ? "/opt/we$ird `dir'/bun" : null));
+    const body = await readFile(shim!, "utf-8");
+    expect(body).toBe("#!/bin/sh\nexec '/opt/we$ird `dir'\\''/bun' \"$@\"\n");
+  });
+
+  it("is a no-op when a real node exists", async () => {
+    expect(await ensureNodeRuntime(() => "/usr/bin/whatever")).toBeNull();
+  });
+
+  it("is a no-op when bun is missing too (nothing to shim to)", async () => {
+    expect(await ensureNodeRuntime(() => null)).toBeNull();
+  });
+
+  it("is a no-op on Windows (npm .cmd shims invoke node.exe directly)", async () => {
+    setPlatform("win32");
+    expect(await ensureNodeRuntime(noNode)).toBeNull();
+  });
+});
+
+describe("liveEnv", () => {
+  it("carries post-startup process.env mutations (unlike Bun.spawn's implicit env)", () => {
+    process.env.AY_LIVE_ENV_TEST = "set-after-start";
+    try {
+      expect(liveEnv().AY_LIVE_ENV_TEST).toBe("set-after-start");
+    } finally {
+      delete process.env.AY_LIVE_ENV_TEST;
+    }
+  });
+});

package/ts/nodeRuntime.ts

@@ -0,0 +1,58 @@
+import { chmod, mkdir, readFile, writeFile } from "fs/promises";
+import path from "path";
+import { agentYesHome } from "./agentYesHome.ts";
+
+/**
+ * Snapshot of the CURRENT process.env for child spawns. Bun.spawn without an
+ * explicit `env` hands the child the environ captured at PROCESS STARTUP — not
+ * the live process.env — so post-startup mutations (ensureNodeRuntime's shim
+ * PATH prepend, installAndVerify's global-bin-dir prepend) silently never reach
+ * the child. That is exactly how `ay serve install` kept dying with
+ * `env: node: No such file or directory` at the `pm2 start` spawn on a bun-only
+ * box even though the probe (which passes env explicitly) had just succeeded.
+ * Every spawn of a process-manager binary must pass `env: liveEnv()`.
+ */
+export function liveEnv(): Record<string, string | undefined> {
+  return { ...process.env };
+}
+
+/**
+ * Both oxmgr's and pm2's global bins are `#!/usr/bin/env node` JS scripts, so on
+ * a bun-only box (setup.sh installs no node) exec dies with "env: node: No such
+ * file or directory" — even though pm2 is pure JS and runs perfectly under bun.
+ * When node is missing but bun exists, write a node→bun shim into ay's own bin
+ * dir and prepend it to PATH so `env node` resolves. NOT solvable with
+ * `bun add -g node`: that package (node-bin-gen) lands a broken arch-specific
+ * stub and `Bun.which("node")` still finds nothing. POSIX-only — on Windows the
+ * npm .cmd shims invoke node.exe directly and an sh script can't stand in.
+ * Read-only paths (`ay serve status`) also reach this via the manager probes:
+ * an up-to-date shim is left untouched there (a read, not a write), so only the
+ * very first run on a node-less box materializes the file.
+ * Returns the shim path when the shim is in effect, null when unneeded/impossible.
+ */
+export async function ensureNodeRuntime(
+  which: (cmd: string) => string | null = Bun.which,
+): Promise<string | null> {
+  if (process.platform === "win32") return null;
+  if (which("node")) return null;
+  const bun = which("bun");
+  if (!bun) return null;
+  const binDir = path.join(agentYesHome(), "bin");
+  const shim = path.join(binDir, "node");
+  // Single-quote the bun path: inside sh double quotes `$`, backtick and `\`
+  // would still expand, corrupting the shim for a path containing them.
+  const body = `#!/bin/sh\nexec '${bun.replace(/'/g, `'\\''`)}' "$@"\n`;
+  try {
+    if ((await readFile(shim, "utf-8").catch(() => null)) !== body) {
+      await mkdir(binDir, { recursive: true });
+      await writeFile(shim, body);
+      await chmod(shim, 0o755);
+    }
+    if (!(process.env.PATH ?? "").split(path.delimiter).includes(binDir)) {
+      process.env.PATH = `${binDir}${path.delimiter}${process.env.PATH ?? ""}`;
+    }
+    return shim;
+  } catch {
+    return null; // best-effort: the exec probe will fail and name the reason
+  }
+}

package/ts/oxmgrService.ts

@@ -1,3 +1,4 @@
+import { liveEnv } from "./nodeRuntime.ts";
 // Register oxmgr's daemon with the platform init system (launchd on macOS,
 // systemd on Linux, Task Scheduler on Windows) so managed processes survive a
 // *reboot*, not just a crash.
@@ -18,8 +19,12 @@ export async function ensureBootAutostart(oxmgrBin: string): Promise<boolean> {
   try {
     // Already registered with the init system? Then we're done — don't bounce
     // the daemon (and all its children) just to re-assert what's already true.
+    // env: liveEnv() so the node→bun shim's PATH prepend reaches oxmgr's
+    // `#!/usr/bin/env node` launcher (implicit inheritance uses the startup
+    // environ, missing post-startup mutations).
     const status = Bun.spawn([oxmgrBin, "service", "status"], {
       stdio: ["ignore", "ignore", "ignore"],
+      env: liveEnv(),
     });
     if ((await status.exited) === 0) return true;
 
@@ -28,6 +33,7 @@ export async function ensureBootAutostart(oxmgrBin: string): Promise<boolean> {
     // so passing it after `install` is rejected.
     const svc = Bun.spawn([oxmgrBin, "service", "install"], {
       stdio: ["ignore", "ignore", "ignore"],
+      env: liveEnv(),
     });
     return (await svc.exited) === 0;
   } catch {

package/ts/schedule.ts

@@ -2,6 +2,7 @@ import { createHash } from "node:crypto";
 import { SUPPORTED_CLIS } from "./SUPPORTED_CLIS.ts";
 import { resolveSpawnCwd } from "./workspaceConfig.ts";
 import { ensureBootAutostart } from "./oxmgrService.ts";
+import { ensureNodeRuntime, liveEnv } from "./nodeRuntime.ts";
 
 // `ay schedule` — run an agent on a recurring schedule via oxmgr's cron support.
 // A scheduled job runs once immediately AND on every cron tick (with
@@ -33,16 +34,23 @@ function schedName(explicit: string | undefined, cli: string, key: string): stri
 }
 
 async function run(cmd: string[], capture = false): Promise<{ code: number; out: string }> {
+  // env: liveEnv() — oxmgr's global bin is a `#!/usr/bin/env node` script, and
+  // ensureNodeRuntime's shim PATH prepend only reaches children given the LIVE
+  // process.env (Bun.spawn's implicit inheritance uses the startup environ).
   const p = Bun.spawn(cmd, {
     stdin: "ignore",
     stdout: capture ? "pipe" : "inherit",
     stderr: capture ? "pipe" : "inherit",
+    env: liveEnv(),
   });
   const out = capture ? await new Response(p.stdout).text() : "";
   return { code: (await p.exited) ?? 1, out };
 }
 
 export async function cmdSchedule(rest: string[]): Promise<number> {
+  // On a bun-only box oxmgr's `#!/usr/bin/env node` launcher needs the node→bun
+  // shim before ANY oxmgr call below can exec (same fix as serve-install).
+  await ensureNodeRuntime();
   const oxmgrBin = Bun.which("oxmgr");
   if (!oxmgrBin) {
     process.stderr.write(

package/ts/serve.spec.ts

@@ -1,8 +1,6 @@
-import { mkdtemp, readFile, rm, stat } from "fs/promises";
-import { tmpdir } from "os";
-import path from "path";
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { ensureNodeRuntime, isNoNodeExecError, oxmgrVersionHasWindowsFix } from "./serve.ts";
+import { readFile } from "fs/promises";
+import { describe, expect, it } from "vitest";
+import { isNoNodeExecError, oxmgrVersionHasWindowsFix } from "./serve.ts";
 
 // Guards the Windows daemon-manager selection: on Windows we only PREFER oxmgr
 // when the installed build carries the daemon-socket-inheritance fix. Stock
@@ -35,82 +33,6 @@ describe("oxmgrVersionHasWindowsFix", () => {
   });
 });
 
-// The bun-only-no-node path (sym003): pm2/oxmgr bins are `#!/usr/bin/env node`
-// scripts, so with no node on PATH they die at the shebang. ensureNodeRuntime
-// must bridge that with a node→bun shim in ay's own bin dir.
-describe("ensureNodeRuntime", () => {
-  let home: string;
-  let savedPath: string | undefined;
-  let savedHome: string | undefined;
-
-  beforeEach(async () => {
-    home = await mkdtemp(path.join(tmpdir(), "ay-node-shim-"));
-    savedPath = process.env.PATH;
-    savedHome = process.env.AGENT_YES_HOME;
-    process.env.AGENT_YES_HOME = home;
-  });
-
-  afterEach(async () => {
-    process.env.PATH = savedPath;
-    if (savedHome === undefined) delete process.env.AGENT_YES_HOME;
-    else process.env.AGENT_YES_HOME = savedHome;
-    await rm(home, { recursive: true, force: true });
-  });
-
-  const noNode = (cmd: string) => (cmd === "bun" ? "/fake/bin/bun" : null);
-
-  it.skipIf(process.platform === "win32")(
-    "writes an executable node→bun shim and prepends it to PATH when node is absent",
-    async () => {
-      const shim = await ensureNodeRuntime(noNode);
-      expect(shim).toBe(path.join(home, "bin", "node"));
-      const body = await readFile(shim!, "utf-8");
-      expect(body).toBe("#!/bin/sh\nexec '/fake/bin/bun' \"$@\"\n");
-      expect((await stat(shim!)).mode & 0o111).not.toBe(0); // executable
-      expect(process.env.PATH!.split(path.delimiter)[0]).toBe(path.join(home, "bin"));
-    },
-  );
-
-  it.skipIf(process.platform === "win32")("does not duplicate the PATH entry", async () => {
-    await ensureNodeRuntime(noNode);
-    await ensureNodeRuntime(noNode);
-    const binDir = path.join(home, "bin");
-    const hits = process.env.PATH!.split(path.delimiter).filter((p) => p === binDir);
-    expect(hits).toHaveLength(1);
-  });
-
-  it.skipIf(process.platform === "win32")(
-    "leaves an up-to-date shim untouched on repeat calls (read-only paths stay read-only)",
-    async () => {
-      const shim = (await ensureNodeRuntime(noNode))!;
-      const before = await stat(shim);
-      await new Promise((r) => setTimeout(r, 20));
-      await ensureNodeRuntime(noNode);
-      const after = await stat(shim);
-      expect(after.mtimeMs).toBe(before.mtimeMs); // not rewritten
-    },
-  );
-
-  it.skipIf(process.platform === "win32")(
-    "single-quotes a bun path containing sh-special characters",
-    async () => {
-      const shim = await ensureNodeRuntime((cmd) =>
-        cmd === "bun" ? "/opt/we$ird `dir'/bun" : null,
-      );
-      const body = await readFile(shim!, "utf-8");
-      expect(body).toBe("#!/bin/sh\nexec '/opt/we$ird `dir'\\''/bun' \"$@\"\n");
-    },
-  );
-
-  it("is a no-op when a real node exists", async () => {
-    expect(await ensureNodeRuntime(() => "/usr/bin/whatever")).toBeNull();
-  });
-
-  it("is a no-op when bun is missing too (nothing to shim to)", async () => {
-    expect(await ensureNodeRuntime(() => null)).toBeNull();
-  });
-});
-
 // Guards the serve-install diagnostic: a missing node runtime must be reported
 // as such, never as a "glibc mismatch" (glibc doesn't even exist on macOS).
 describe("isNoNodeExecError", () => {
@@ -128,6 +50,12 @@ describe("isNoNodeExecError", () => {
     ).toBe(true);
   });
 
+  it("matches localized-then-normalized output (probe pins LC_ALL=C)", () => {
+    // managerProbe spawns with LC_ALL=C precisely so this English form is what
+    // we always see; this test documents the coupling.
+    expect(isNoNodeExecError("env: node: No such file or directory")).toBe(true);
+  });
+
   it("does not match a real native/glibc failure", () => {
     expect(
       isNoNodeExecError(
@@ -137,3 +65,28 @@ describe("isNoNodeExecError", () => {
     expect(isNoNodeExecError("")).toBe(false);
   });
 });
+
+// Bun.spawn without an explicit `env` hands the child the environ captured at
+// process startup, NOT the live process.env — so ensureNodeRuntime's shim PATH
+// prepend never reached children spawned that way (`pm2 start` died with
+// `env: node: No such file or directory` right after the probe passed). Guard
+// the fix pattern: every spawn of a daemon-manager binary in serve.ts must pass
+// an explicit env.
+describe("manager spawns pass a live env snapshot", () => {
+  it("every Bun.spawn of mgr.bin/startArgv/installer carries an env option", async () => {
+    const src = await readFile(new URL("./serve.ts", import.meta.url), "utf-8");
+    // Grab each Bun.spawn(...) call whose argv mentions a manager binary.
+    // Capture from the call opening through the options object's closing `})`.
+    const calls = src.match(
+      /Bun\.spawn\((?:\[[^\]]*mgr\.bin[^\]]*\]|startArgv|installer),[\s\S]*?\}\)/g,
+    );
+    expect(calls?.length).toBeGreaterThanOrEqual(7);
+    for (const call of calls!) {
+      // Require a real liveEnv() env option, not just the substring "env:"
+      // (which a comment inside the options object could satisfy).
+      expect(call, `missing explicit env in: ${call.slice(0, 80)}`).toMatch(
+        /env: (?:\{\s*(?:\.\.\.)?)?liveEnv\(\)/,
+      );
+    }
+  });
+});

package/ts/serve.ts

@@ -1,4 +1,4 @@
-import { chmod, mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
+import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { renameSync, watch, writeFileSync } from "node:fs";
 import { execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -25,6 +25,7 @@ import {
   type CommonOpts,
 } from "./subcommands.ts";
 import { TYPING_BADGE } from "./badges.ts";
+import { ensureNodeRuntime, liveEnv } from "./nodeRuntime.ts";
 import { updateGlobalPidStatus } from "./globalPidIndex.ts";
 import { spawnRejectionReason } from "./spawnGate.ts";
 import { findSpawnHiddenLauncher } from "./rustBinary.ts";
@@ -359,6 +360,7 @@ function oxmgrHasWindowsFix(bin: string): boolean {
       encoding: "utf-8",
       timeout: 3000,
       stdio: ["ignore", "pipe", "ignore"],
+      env: { ...process.env } as NodeJS.ProcessEnv,
     });
     oxmgrWinFixCache = oxmgrVersionHasWindowsFix(out);
   } catch {
@@ -405,45 +407,6 @@ async function globalBinDir(installer: string[]): Promise<string | null> {
   return isBun ? out : path.join(out, "bin");
 }
 
-// Both oxmgr's and pm2's global bins are `#!/usr/bin/env node` JS scripts, so on
-// a bun-only box (setup.sh installs no node) exec dies with "env: node: No such
-// file or directory" — even though pm2 is pure JS and runs perfectly under bun.
-// When node is missing but bun exists, write a node→bun shim into ay's own bin
-// dir and prepend it to PATH so `env node` resolves. NOT solvable with
-// `bun add -g node`: that package (node-bin-gen) lands a broken arch-specific
-// stub and `Bun.which("node")` still finds nothing. POSIX-only — on Windows the
-// npm .cmd shims invoke node.exe directly and an sh script can't stand in.
-// Called from managerRunnable, which read-only paths (`ay serve status`) also
-// reach: an up-to-date shim is left untouched there (a read, not a write), so
-// only the very first run on a node-less box materializes the file.
-// Returns the shim path when the shim is in effect, null when unneeded/impossible.
-export async function ensureNodeRuntime(
-  which: (cmd: string) => string | null = Bun.which,
-): Promise<string | null> {
-  if (process.platform === "win32") return null;
-  if (which("node")) return null;
-  const bun = which("bun");
-  if (!bun) return null;
-  const binDir = path.join(agentYesHome(), "bin");
-  const shim = path.join(binDir, "node");
-  // Single-quote the bun path: inside sh double quotes `$`, backtick and `\`
-  // would still expand, corrupting the shim for a path containing them.
-  const body = `#!/bin/sh\nexec '${bun.replace(/'/g, `'\\''`)}' "$@"\n`;
-  try {
-    if ((await readFile(shim, "utf-8").catch(() => null)) !== body) {
-      await mkdir(binDir, { recursive: true });
-      await writeFile(shim, body);
-      await chmod(shim, 0o755);
-    }
-    if (!(process.env.PATH ?? "").split(path.delimiter).includes(binDir)) {
-      process.env.PATH = `${binDir}${path.delimiter}${process.env.PATH ?? ""}`;
-    }
-    return shim;
-  } catch {
-    return null; // best-effort: the exec probe will fail and name the reason
-  }
-}
-
 // Did an exec attempt die because `env` couldn't find a node runtime? macOS/BSD
 // env says `env: node: No such file or directory`, GNU coreutils quotes it
 // (`env: 'node': …`), Windows cmd says `'node' is not recognized`.
@@ -463,7 +426,7 @@ async function managerProbe(mgr: DaemonManager): Promise<{ ok: boolean; stderr:
     const p = Bun.spawn([mgr.bin, "--version"], {
       stdout: "ignore",
       stderr: "pipe",
-      env: { ...process.env, LC_ALL: "C" },
+      env: { ...liveEnv(), LC_ALL: "C" },
     });
     const [code, stderr] = await Promise.all([p.exited, new Response(p.stderr).text()]);
     return { ok: (code ?? 1) === 0, stderr };
@@ -517,7 +480,11 @@ async function installAndVerify(pkg: "oxmgr" | "pm2"): Promise<DaemonManager | n
   const installer = bun ? [bun, "add", "-g", pkg] : npm ? [npm, "install", "-g", pkg] : null;
   if (!installer) return null;
   process.stderr.write(`ay serve install: installing ${pkg}…\n`);
-  const code = (await Bun.spawn(installer, { stdio: ["ignore", "inherit", "inherit"] }).exited) ?? 1;
+  const code =
+    (await Bun.spawn(installer, {
+      stdio: ["ignore", "inherit", "inherit"],
+      env: liveEnv(),
+    }).exited) ?? 1;
   if (code !== 0) {
     process.stderr.write(`ay serve install: '${installer.join(" ")}' failed (exit ${code})\n`);
     return null;
@@ -662,7 +629,9 @@ async function ensureBootAutostart(mgr: DaemonManager): Promise<boolean> {
 
 async function spawnExit(cmd: string[]): Promise<number> {
   try {
-    return (await Bun.spawn(cmd, { stdio: ["ignore", "ignore", "ignore"] }).exited) ?? 1;
+    return (
+      (await Bun.spawn(cmd, { stdio: ["ignore", "ignore", "ignore"], env: liveEnv() }).exited) ?? 1
+    );
   } catch {
     return 1;
   }
@@ -675,7 +644,11 @@ async function spawnExit(cmd: string[]): Promise<number> {
 async function readDaemonServeArgs(mgr: DaemonManager): Promise<string[] | null> {
   try {
     if (mgr.id === "oxmgr") {
-      const p = Bun.spawn([mgr.bin, "status", DAEMON_NAME], { stdout: "pipe", stderr: "ignore" });
+      const p = Bun.spawn([mgr.bin, "status", DAEMON_NAME], {
+        stdout: "pipe",
+        stderr: "ignore",
+        env: liveEnv(),
+      });
       const out = await new Response(p.stdout).text();
       if ((await p.exited) !== 0) return null;
       const m = /Command:\s*(.+)/.exec(out);
@@ -683,7 +656,7 @@ async function readDaemonServeArgs(mgr: DaemonManager): Promise<string[] | null>
       const after = /\bserve\b\s*(.*)$/.exec(m[1]!.trim());
       return after ? after[1]!.split(/\s+/).filter(Boolean) : [];
     }
-    const p = Bun.spawn([mgr.bin, "jlist"], { stdout: "pipe", stderr: "ignore" });
+    const p = Bun.spawn([mgr.bin, "jlist"], { stdout: "pipe", stderr: "ignore", env: liveEnv() });
     const out = await new Response(p.stdout).text();
     if ((await p.exited) !== 0) return null;
     const list = JSON.parse(out) as Array<{ name?: string; pm2_env?: { args?: string[] } }>;
@@ -911,7 +884,7 @@ async function cmdServeDaemon(sub: string, args: string[]): Promise<number> {
             "--",
             ...managedArgv.slice(1),
           ];
-    const proc = Bun.spawn(startArgv, { stdio: ["ignore", "inherit", "inherit"] });
+    const proc = Bun.spawn(startArgv, { stdio: ["ignore", "inherit", "inherit"], env: liveEnv() });
     const code = await proc.exited;
     if (code === 0) {
       const onBoot = await ensureBootAutostart(mgr);
@@ -962,6 +935,7 @@ async function cmdServeDaemon(sub: string, args: string[]): Promise<number> {
   if (sub === "uninstall") {
     const proc = Bun.spawn([mgr.bin, "delete", DAEMON_NAME], {
       stdio: ["ignore", "inherit", "inherit"],
+      env: liveEnv(),
     });
     const code = (await proc.exited) ?? 1;
     if (mgr.id === "pm2" && code === 0) {
@@ -977,6 +951,7 @@ async function cmdServeDaemon(sub: string, args: string[]): Promise<number> {
   if (sub === "logs") {
     const proc = Bun.spawn([mgr.bin, "logs", DAEMON_NAME, ...args], {
       stdio: ["ignore", "inherit", "inherit"],
+      env: liveEnv(),
     });
     return (await proc.exited) ?? 1;
   }

package/dist/SUPPORTED_CLIS-W067Yn4T.js

@@ -1,8 +0,0 @@
-import "./ts-7XqYx0eW.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CUMd5SWt.js";
-import "./pidStore-BIvsBQ8X.js";
-import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-5N015orJ.js";
-
-export { SUPPORTED_CLIS };