agent-yes 1.192.2 → 1.193.0

package/dist/{SUPPORTED_CLIS-CryNU1fs.js → SUPPORTED_CLIS-eK4A0Nql.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-Cp_21mny.js";
+import { t as CLIS_CONFIG } from "./ts-Cg0IpitM.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-CryNU1fs.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-eK4A0Nql.js.map

package/dist/SUPPORTED_CLIS-wAOAd_rx.js

@@ -0,0 +1,8 @@
+import "./ts-Cg0IpitM.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-C_ztEPMs.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-eK4A0Nql.js";
+
+export { SUPPORTED_CLIS };

package/dist/{agentShare-BY9WWDBm.js → agentShare-C2PSaiaa.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { j as resolveOne } from "./subcommands-Cq1mzI8Z.js";
+import { j as resolveOne } from "./subcommands-CYAk7q_c.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -228,4 +228,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-BY9WWDBm.js.map
+//# sourceMappingURL=agentShare-C2PSaiaa.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CaOEu_WC.js";
-import { n as getRustBinary } from "./rustBinary-CeRekAdR.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-C_ztEPMs.js";
+import { n as getRustBinary } from "./rustBinary-BEEvKYm_.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-BnEmKfiM.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-B9-HhxcS.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -327,7 +327,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-wrXQttpW.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-wAOAd_rx.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-Cp_21mny.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-Cg0IpitM.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CaOEu_WC.js";
+import "./versionChecker-C_ztEPMs.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 

package/dist/{notifyDaemon-BPcU9HOC.js → notifyDaemon-pJJzfvcJ.js}

@@ -1,7 +1,7 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-Cq1mzI8Z.js";
+import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-CYAk7q_c.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -588,4 +588,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-BPcU9HOC.js.map
+//# sourceMappingURL=notifyDaemon-pJJzfvcJ.js.map

package/dist/{rustBinary-CeRekAdR.js → rustBinary-BEEvKYm_.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-CaOEu_WC.js";
+import { r as getInstalledPackage } from "./versionChecker-C_ztEPMs.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-CeRekAdR.js.map
+//# sourceMappingURL=rustBinary-BEEvKYm_.js.map

package/dist/{schedule-DCVkaHCo.js → schedule-BuWv8206.js}

@@ -1,9 +1,9 @@
-import "./ts-Cp_21mny.js";
+import "./ts-Cg0IpitM.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CaOEu_WC.js";
+import "./versionChecker-C_ztEPMs.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CryNU1fs.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-eK4A0Nql.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-_GtAZtsi.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-DZRjxpNp.js";
 import { createHash } from "node:crypto";
@@ -150,4 +150,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-DCVkaHCo.js.map
+//# sourceMappingURL=schedule-BuWv8206.js.map

package/dist/{serve-Dxxm6cs6.js → serve-BrCvRObJ.js}

@@ -1,13 +1,13 @@
-import "./ts-Cp_21mny.js";
+import "./ts-Cg0IpitM.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-CaOEu_WC.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-CeRekAdR.js";
+import { r as getInstalledPackage } from "./versionChecker-C_ztEPMs.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-BEEvKYm_.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { t as pgidForWrapper } from "./reaper-CWF2_ATd.js";
 import "./configShared-0MnIQ652.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CryNU1fs.js";
-import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-Cq1mzI8Z.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-eK4A0Nql.js";
+import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-CYAk7q_c.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -1893,7 +1893,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-BY9WWDBm.js");
+				const { createScopedShare } = await import("./agentShare-C2PSaiaa.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -1908,12 +1908,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-BY9WWDBm.js");
+			const { listShares } = await import("./agentShare-C2PSaiaa.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-BY9WWDBm.js");
+			const { revokeShare } = await import("./agentShare-C2PSaiaa.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -2094,7 +2094,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-BY9WWDBm.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-C2PSaiaa.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		resolve();
 	};
@@ -2107,4 +2107,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-Dxxm6cs6.js.map
+//# sourceMappingURL=serve-BrCvRObJ.js.map

package/dist/{setup-CnHHrqP9.js → setup-CL-giduA.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-Dxxm6cs6.js");
+	const { cmdServe } = await import("./serve-BrCvRObJ.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-CnHHrqP9.js.map
+//# sourceMappingURL=setup-CL-giduA.js.map

package/dist/{subcommands-BnEmKfiM.js → subcommands-B9-HhxcS.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-Cq1mzI8Z.js";
+import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-CYAk7q_c.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";

package/dist/{subcommands-Cq1mzI8Z.js → subcommands-CYAk7q_c.js}

@@ -1147,15 +1147,15 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-Dxxm6cs6.js");
+				const { cmdServe } = await import("./serve-BrCvRObJ.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-CnHHrqP9.js");
+				const { cmdSetup } = await import("./setup-CL-giduA.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-DCVkaHCo.js");
+				const { cmdSchedule } = await import("./schedule-BuWv8206.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -2730,7 +2730,7 @@ async function cmdSpawn(rest) {
 * (`send`, `key`, `select`): refuse a self-targeting loop, and require that THIS
 * sender actually looked at THIS target recently — an agent is blocked, an
 * interactive human is only warned — unless `force`. Returns the sender context
-* so a caller can reuse it (e.g. `send`'s `[ay-msg …]` header). Extracted from
+* so a caller can reuse it (e.g. `send`'s `<ay-msg …>` header). Extracted from
 * cmdSend so the action commands enforce the identical guard.
 */
 async function enforceSendGuards(record, force) {
@@ -2931,8 +2931,8 @@ async function cmdSend(rest) {
 	let suffix = "";
 	if (sender.agent && !isSlashCommand(body)) {
 		const nonce = randomBytes$1(4).toString("hex");
-		prefix = `[ay-msg ${nonce} from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${replyTarget} "..."]\n`;
-		suffix = `\n[/ay-msg ${nonce}]`;
+		prefix = `<ay-msg ${nonce} from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${replyTarget} "...">\n`;
+		suffix = `\n</ay-msg ${nonce}>`;
 	}
 	const fullBody = prefix + body + suffix;
 	const noWait = Boolean(argv.noWait) || process.env.AGENT_YES_SEND_NO_WAIT === "1";
@@ -4004,7 +4004,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-BPcU9HOC.js");
+		const { ensureDaemon } = await import("./notifyDaemon-pJJzfvcJ.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4078,7 +4078,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-BPcU9HOC.js");
+	const daemon = await import("./notifyDaemon-pJJzfvcJ.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4105,4 +4105,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { TYPING_BADGE as $, renderRawLogLines as A, waitForLogQuiet as B, matchKeyword as C, recentReadEdges as D, readPtysize as E, runSubcommand as F, hostId as G, writeToIpc as H, snapshotStatus as I, readInbox as J, listInboxParents as K, stdinActivityPath as L, resolveReadWindow as M, resolveResumeArgs as N, renderLogTailLines as O, restartHintLines as P, notifyDir as Q, stopTipForCli as R, listRecords as S, readNotes as T, appendEvent as U, writeKeysPaced as V, gcInboxes as W, daemonLockDir as X, shouldStealLock as Y, daemonLockOwnerPath as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, resolveOne as j, renderRawLog as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, liveWatchers as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, submitAndConfirm as z };
-//# sourceMappingURL=subcommands-Cq1mzI8Z.js.map
+//# sourceMappingURL=subcommands-CYAk7q_c.js.map

package/dist/{ts-Cp_21mny.js → ts-Cg0IpitM.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-CaOEu_WC.js";
+import { r as getInstalledPackage } from "./versionChecker-C_ztEPMs.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CNMl13dC.js";
 import { t as PidStore } from "./pidStore-BIvsBQ8X.js";
@@ -1824,4 +1824,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-Cp_21mny.js.map
+//# sourceMappingURL=ts-Cg0IpitM.js.map

package/dist/{versionChecker-CaOEu_WC.js → versionChecker-C_ztEPMs.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.192.2";
+var version = "1.193.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-CaOEu_WC.js.map
+//# sourceMappingURL=versionChecker-C_ztEPMs.js.map

package/lab/ui/index.html

@@ -1947,6 +1947,7 @@
           </p>
           <div class="srow">
             <button class="primary" id="exposeGo" type="button">Expose &amp; open</button>
+            <button id="exposeCopy" type="button">Copy link</button>
             <button id="exposeCancel" type="button">Cancel</button>
           </div>
         </div>
@@ -3364,11 +3365,9 @@
 
       // Agree → mint the exposure on its host and open the claim link (which sets
       // the 8h cookie and redirects to the app), then refresh the manager list.
-      async function doExpose() {
-        const tx = exposePendingTx || localTx;
-        const port = exposePendingPort;
-        $("exposePrompt").hidden = true;
-        if (!port) return;
+      // Create (or reuse) the exposure and mint a fresh single-use claim link.
+      // Returns the {url, claim, …} info, or null on failure (with a message).
+      async function exposeNow(port, tx) {
         let info = null;
         try {
           const r = await tx.post("/api/expose", { port });
@@ -3377,11 +3376,48 @@
         if (!info || !info.claim) {
           $("exposeEmpty").hidden = false;
           $("exposeEmpty").textContent = "Couldn't expose port " + port + " (is `ay serve` reachable?).";
-          return;
+          return null;
         }
+        return info;
+      }
+      async function copyText(s) {
+        try {
+          await navigator.clipboard.writeText(s);
+          return true;
+        } catch {
+          return false;
+        }
+      }
+      // Briefly show "Copied!" on a button, then restore its label.
+      function flashCopied(btn) {
+        if (!btn) return;
+        const orig = btn.textContent;
+        btn.textContent = "Copied!";
+        setTimeout(() => {
+          btn.textContent = orig;
+        }, 1200);
+      }
+      async function doExpose() {
+        const tx = exposePendingTx || localTx;
+        const port = exposePendingPort;
+        $("exposePrompt").hidden = true;
+        if (!port) return;
+        const info = await exposeNow(port, tx);
+        if (!info) return;
         window.open(info.claim, "_blank", "noopener,noreferrer");
         refreshExposeList();
       }
+      async function doExposeCopy() {
+        const tx = exposePendingTx || localTx;
+        const port = exposePendingPort;
+        if (!port) return;
+        const info = await exposeNow(port, tx);
+        if (!info) return;
+        await copyText(info.claim);
+        flashCopied($("exposeCopy"));
+        $("exposePrompt").hidden = true;
+        refreshExposeList();
+      }
 
       // Gather active exposures from every live host and render the manager rows.
       async function refreshExposeList() {
@@ -3449,6 +3485,21 @@
         };
         row.appendChild(openBtn);
 
+        const copyBtn = document.createElement("button");
+        copyBtn.textContent = "Copy";
+        // Mint a fresh single-use claim link and copy it (to share access).
+        copyBtn.onclick = async () => {
+          let link = ex.url;
+          try {
+            const r = await ex._tx.post("/api/expose", { port: ex.port });
+            const info = r.ok ? JSON.parse(r.text) : null;
+            if (info && info.claim) link = info.claim;
+          } catch {}
+          await copyText(link);
+          flashCopied(copyBtn);
+        };
+        row.appendChild(copyBtn);
+
         const revoke = document.createElement("button");
         revoke.className = "danger";
         revoke.textContent = "Revoke";
@@ -3514,6 +3565,7 @@
       (function exposeModalBoot() {
         $("portsbtn")?.addEventListener("click", () => openExposeManager(true));
         $("exposeGo")?.addEventListener("click", doExpose);
+        $("exposeCopy")?.addEventListener("click", doExposeCopy);
         $("exposeCancel")?.addEventListener("click", () => {
           $("exposePrompt").hidden = true;
           $("exposeTitle").textContent = "Exposed ports";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.192.2",
+  "version": "1.193.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/subcommands.ts

@@ -2654,7 +2654,7 @@ async function cmdSpawn(rest: string[]): Promise<number> {
  * (`send`, `key`, `select`): refuse a self-targeting loop, and require that THIS
  * sender actually looked at THIS target recently — an agent is blocked, an
  * interactive human is only warned — unless `force`. Returns the sender context
- * so a caller can reuse it (e.g. `send`'s `[ay-msg …]` header). Extracted from
+ * so a caller can reuse it (e.g. `send`'s `<ay-msg …>` header). Extracted from
  * cmdSend so the action commands enforce the identical guard.
  */
 async function enforceSendGuards(
@@ -2966,15 +2966,19 @@ async function cmdSend(rest: string[]): Promise<number> {
   // The header/footer pair shares a random nonce so the recipient can trust the
   // block's boundaries: text INSIDE the body can't forge a matching open/close
   // marker (the nonce is generated here, after the body was authored), so a
-  // spoofed "[from …]" line or a premature "[/ay-msg]" embedded in a message
+  // spoofed "[from …]" line or a premature "</ay-msg …>" embedded in a message.
+  // XML-style tags (not [brackets]): LLM recipients pattern-match <tag>…</tag>
+  // pairs as structural containers far more reliably, and the closing tag keeps
+  // the nonce because nonce-match — not tag syntax — is what makes it forgery-
+  // proof, so strict-XML validity is deliberately sacrificed for that.
   // can't impersonate another sender or truncate/extend the trusted region.
   const replyTarget = sender.agent?.agent_id || sender.agent?.pid;
   let prefix = "";
   let suffix = "";
   if (sender.agent && !isSlashCommand(body)) {
     const nonce = randomBytes(4).toString("hex");
-    prefix = `[ay-msg ${nonce} from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${replyTarget} "..."]\n`;
-    suffix = `\n[/ay-msg ${nonce}]`;
+    prefix = `<ay-msg ${nonce} from ${sender.agent.cli} #${sender.agent.pid} @ ${shortenPath(sender.agent.cwd)} — reply: ay send ${replyTarget} "...">\n`;
+    suffix = `\n</ay-msg ${nonce}>`;
   }
 
   const fullBody = prefix + body + suffix;

package/dist/SUPPORTED_CLIS-wrXQttpW.js

@@ -1,8 +0,0 @@
-import "./ts-Cp_21mny.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CaOEu_WC.js";
-import "./pidStore-BIvsBQ8X.js";
-import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CryNU1fs.js";
-
-export { SUPPORTED_CLIS };