agent-yes 1.193.0 → 1.194.0

package/dist/{SUPPORTED_CLIS-eK4A0Nql.js → SUPPORTED_CLIS--WH2XfM2.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-Cg0IpitM.js";
+import { t as CLIS_CONFIG } from "./ts-6JcbtJh1.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-eK4A0Nql.js.map
+//# sourceMappingURL=SUPPORTED_CLIS--WH2XfM2.js.map

package/dist/SUPPORTED_CLIS-NfXUfiWY.js

@@ -0,0 +1,8 @@
+import "./ts-6JcbtJh1.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-DDNKcQRx.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS--WH2XfM2.js";
+
+export { SUPPORTED_CLIS };

package/dist/{agentShare-C2PSaiaa.js → agentShare-BEXN8bNT.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { j as resolveOne } from "./subcommands-CYAk7q_c.js";
+import { j as resolveOne } from "./subcommands-Ba0V9EEH.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -228,4 +228,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-C2PSaiaa.js.map
+//# sourceMappingURL=agentShare-BEXN8bNT.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-C_ztEPMs.js";
-import { n as getRustBinary } from "./rustBinary-BEEvKYm_.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DDNKcQRx.js";
+import { n as getRustBinary } from "./rustBinary-cTIMKGQp.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-B9-HhxcS.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-LP1Z8g-h.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -327,7 +327,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-wAOAd_rx.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-NfXUfiWY.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-Cg0IpitM.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-6JcbtJh1.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-C_ztEPMs.js";
+import "./versionChecker-DDNKcQRx.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 

package/dist/{notifyDaemon-pJJzfvcJ.js → notifyDaemon-Deisyrbn.js}

@@ -1,7 +1,7 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-CYAk7q_c.js";
+import { G as hostId, J as readInbox, K as listInboxParents, O as renderLogTailLines, Q as notifyDir, S as listRecords, U as appendEvent, W as gcInboxes, X as daemonLockDir, Y as shouldStealLock, Z as daemonLockOwnerPath, _ as isPidAlive, c as deriveLiveState, q as liveWatchers } from "./subcommands-Ba0V9EEH.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -588,4 +588,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-pJJzfvcJ.js.map
+//# sourceMappingURL=notifyDaemon-Deisyrbn.js.map

package/dist/{rustBinary-BEEvKYm_.js → rustBinary-cTIMKGQp.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-C_ztEPMs.js";
+import { r as getInstalledPackage } from "./versionChecker-DDNKcQRx.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-BEEvKYm_.js.map
+//# sourceMappingURL=rustBinary-cTIMKGQp.js.map

package/dist/{schedule-BuWv8206.js → schedule-MQZjDaY6.js}

@@ -1,9 +1,9 @@
-import "./ts-Cg0IpitM.js";
+import "./ts-6JcbtJh1.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-C_ztEPMs.js";
+import "./versionChecker-DDNKcQRx.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-eK4A0Nql.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS--WH2XfM2.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-_GtAZtsi.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-DZRjxpNp.js";
 import { createHash } from "node:crypto";
@@ -150,4 +150,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-BuWv8206.js.map
+//# sourceMappingURL=schedule-MQZjDaY6.js.map

package/dist/{serve-BrCvRObJ.js → serve-hA23xPpg.js}

@@ -1,13 +1,13 @@
-import "./ts-Cg0IpitM.js";
+import "./ts-6JcbtJh1.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-C_ztEPMs.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-BEEvKYm_.js";
+import { r as getInstalledPackage } from "./versionChecker-DDNKcQRx.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-cTIMKGQp.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { t as pgidForWrapper } from "./reaper-CWF2_ATd.js";
 import "./configShared-0MnIQ652.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-eK4A0Nql.js";
-import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-CYAk7q_c.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS--WH2XfM2.js";
+import { $ as TYPING_BADGE, D as recentReadEdges, E as readPtysize, H as writeToIpc, I as snapshotStatus, O as renderLogTailLines, S as listRecords, T as readNotes, b as isUserTyping, f as extractNeedsInput, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-Ba0V9EEH.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -1893,7 +1893,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-C2PSaiaa.js");
+				const { createScopedShare } = await import("./agentShare-BEXN8bNT.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -1908,12 +1908,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-C2PSaiaa.js");
+			const { listShares } = await import("./agentShare-BEXN8bNT.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-C2PSaiaa.js");
+			const { revokeShare } = await import("./agentShare-BEXN8bNT.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -1990,6 +1990,7 @@ Options:
 		if (req.method === "GET" && p === "/rtc.js") return serveUiFile("rtc.js", "text/javascript; charset=utf-8");
 		if (req.method === "GET" && p === "/e2e.js") return serveUiFile("e2e.js", "text/javascript; charset=utf-8");
 		if (req.method === "GET" && p === "/qrcode.js") return serveUiFile("qrcode.js", "text/javascript; charset=utf-8");
+		if (req.method === "GET" && p === "/sw.js") return serveUiFile("sw.js", "text/javascript; charset=utf-8");
 		if (req.method === "GET" && p === "/manifest.webmanifest") return serveUiFile("manifest.webmanifest", "application/manifest+json");
 		if (req.method === "GET" && p === "/icon.svg") return serveUiFile("icon.svg", "image/svg+xml");
 		if (req.method === "GET" && p === "/favicon.ico") return new Response(null, { status: 204 });
@@ -2094,7 +2095,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-C2PSaiaa.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-BEXN8bNT.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		resolve();
 	};
@@ -2107,4 +2108,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-BrCvRObJ.js.map
+//# sourceMappingURL=serve-hA23xPpg.js.map

package/dist/{setup-CL-giduA.js → setup-C6grPf1R.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-BrCvRObJ.js");
+	const { cmdServe } = await import("./serve-hA23xPpg.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-CL-giduA.js.map
+//# sourceMappingURL=setup-C6grPf1R.js.map

package/dist/{subcommands-CYAk7q_c.js → subcommands-Ba0V9EEH.js}

@@ -1147,15 +1147,15 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-BrCvRObJ.js");
+				const { cmdServe } = await import("./serve-hA23xPpg.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-CL-giduA.js");
+				const { cmdSetup } = await import("./setup-C6grPf1R.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-BuWv8206.js");
+				const { cmdSchedule } = await import("./schedule-MQZjDaY6.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -4004,7 +4004,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-pJJzfvcJ.js");
+		const { ensureDaemon } = await import("./notifyDaemon-Deisyrbn.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4078,7 +4078,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-pJJzfvcJ.js");
+	const daemon = await import("./notifyDaemon-Deisyrbn.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4105,4 +4105,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { TYPING_BADGE as $, renderRawLogLines as A, waitForLogQuiet as B, matchKeyword as C, recentReadEdges as D, readPtysize as E, runSubcommand as F, hostId as G, writeToIpc as H, snapshotStatus as I, readInbox as J, listInboxParents as K, stdinActivityPath as L, resolveReadWindow as M, resolveResumeArgs as N, renderLogTailLines as O, restartHintLines as P, notifyDir as Q, stopTipForCli as R, listRecords as S, readNotes as T, appendEvent as U, writeKeysPaced as V, gcInboxes as W, daemonLockDir as X, shouldStealLock as Y, daemonLockOwnerPath as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, resolveOne as j, renderRawLog as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, liveWatchers as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, submitAndConfirm as z };
-//# sourceMappingURL=subcommands-CYAk7q_c.js.map
+//# sourceMappingURL=subcommands-Ba0V9EEH.js.map

package/dist/{subcommands-B9-HhxcS.js → subcommands-LP1Z8g-h.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-CYAk7q_c.js";
+import { A as renderRawLogLines, B as waitForLogQuiet, C as matchKeyword, D as recentReadEdges, E as readPtysize, F as runSubcommand, H as writeToIpc, I as snapshotStatus, L as stdinActivityPath, M as resolveReadWindow, N as resolveResumeArgs, O as renderLogTailLines, P as restartHintLines, R as stopTipForCli, S as listRecords, T as readNotes, V as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as resolveOne, k as renderRawLog, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as submitAndConfirm } from "./subcommands-Ba0V9EEH.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";

package/dist/{ts-Cg0IpitM.js → ts-6JcbtJh1.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-C_ztEPMs.js";
+import { r as getInstalledPackage } from "./versionChecker-DDNKcQRx.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CNMl13dC.js";
 import { t as PidStore } from "./pidStore-BIvsBQ8X.js";
@@ -1824,4 +1824,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-Cg0IpitM.js.map
+//# sourceMappingURL=ts-6JcbtJh1.js.map

package/dist/{versionChecker-C_ztEPMs.js → versionChecker-DDNKcQRx.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.193.0";
+var version = "1.194.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-C_ztEPMs.js.map
+//# sourceMappingURL=versionChecker-DDNKcQRx.js.map

package/lab/ui/index.html

@@ -392,6 +392,60 @@
         padding-bottom: 10px;
         margin-bottom: 4px;
       }
+      /* P2P preview overlay — full-window iframe of the exposed app. */
+      .preview-overlay {
+        position: fixed;
+        inset: 0;
+        z-index: 70;
+        display: flex;
+        flex-direction: column;
+        background: var(--bg);
+      }
+      .preview-overlay[hidden] {
+        display: none;
+      }
+      .preview-bar {
+        display: flex;
+        align-items: center;
+        gap: 10px;
+        padding: 6px 10px;
+        border-bottom: 1px solid var(--line);
+        background: var(--panel, var(--bg));
+        flex: 0 0 auto;
+      }
+      .preview-bar .preview-badge {
+        font-size: 11px;
+        font-weight: 600;
+        color: #3fb950;
+        border: 1px solid #3fb95055;
+        border-radius: 6px;
+        padding: 2px 7px;
+        white-space: nowrap;
+      }
+      .preview-bar .preview-title {
+        flex: 1;
+        min-width: 0;
+        overflow: hidden;
+        text-overflow: ellipsis;
+        white-space: nowrap;
+        opacity: 0.8;
+        font-size: 13px;
+      }
+      .preview-bar button {
+        border: 1px solid var(--line);
+        background: transparent;
+        color: var(--fg);
+        border-radius: 6px;
+        padding: 3px 9px;
+        cursor: pointer;
+        font-size: 13px;
+      }
+      .preview-frame {
+        flex: 1 1 auto;
+        border: 0;
+        width: 100%;
+        background: #fff;
+      }
       /* Share modal — QR + link for a single-agent view-only share. */
       .modal-backdrop {
         position: fixed;
@@ -1960,6 +2014,19 @@
       </div>
     </div>
 
+    <!-- P2P preview: the exposed app rendered in-console over the machine's
+         WebRTC tunnel (Service Worker proxies /w/p/<src>/<port>/*, no relay). -->
+    <div class="preview-overlay" id="previewOverlay" hidden>
+      <div class="preview-bar">
+        <span class="preview-badge" title="served over a direct P2P WebRTC tunnel — traffic does not go through agent-yes.com">⚡ P2P · no relay</span>
+        <span class="preview-title" id="previewTitle"></span>
+        <button id="previewReload" type="button" title="reload">↻</button>
+        <button id="previewPop" type="button" title="open in a new tab">↗</button>
+        <button id="previewClose" type="button" title="close">✕</button>
+      </div>
+      <iframe class="preview-frame" id="previewFrame" title="preview"></iframe>
+    </div>
+
     <!-- Cmd/Ctrl+K omnibox: search agents by title (instant) then output (tail),
          or spawn a new agent in the highlighted agent's cwd with the typed prompt. -->
     <div class="omni" id="omni" style="display: none">
@@ -2176,6 +2243,15 @@
             started_at: a.startedAt,
           }));
         return {
+          // Marker + raw tunnel access for the P2P preview: only a codehost
+          // (`ch`) source can proxy a local port over its WebRTC DataChannel via
+          // the daemon's `preview` plugin (/__codehost/port/<PORT>/*), so the
+          // viewer's preview traffic stays peer-to-peer, off the edge relay.
+          ch: true,
+          peerId,
+          previewFetch(port, method, path, init) {
+            return chRoom.room.fetch(peerId, method, "/__codehost/port/" + port + path, init || {});
+          },
           async fetchJSON(path) {
             let res;
             try {
@@ -2432,6 +2508,43 @@
       const sources = new Map(); // id -> { id, room, host, kind, tx, client, live, devices, serverCount }
       const srcFor = (e) => (e && sources.get(e._src)) || sources.get(LOCAL) || null;
       const txFor = (e) => srcFor(e)?.tx || localTx;
+
+      // Preview bridge: the Service Worker (which can't own the RTCPeerConnection)
+      // forwards each /w/p/<src>/<port>/* request here; we run it over that
+      // source's codehost tunnel (previewFetch → the daemon's `preview` plugin →
+      // 127.0.0.1:<port>) and stream the response back through the message port.
+      // This keeps the viewer's preview traffic peer-to-peer, off the edge relay.
+      if ("serviceWorker" in navigator) {
+        navigator.serviceWorker.addEventListener("message", (event) => {
+          const msg = event.data;
+          if (!msg || msg.type !== "ay-preview-fetch") return;
+          const port = event.ports[0];
+          const tx = sources.get(msg.src)?.tx;
+          if (!tx || !tx.ch || !tx.previewFetch) {
+            port.postMessage({ type: "error", message: "no P2P preview for this machine" });
+            return;
+          }
+          const init = { headers: msg.headers };
+          if (msg.body) init.body = new Uint8Array(msg.body);
+          tx.previewFetch(msg.port, msg.method, msg.path, init)
+            .then(async (res) => {
+              const headers = {};
+              res.headers.forEach((v, k) => (headers[k] = v));
+              port.postMessage({ type: "head", status: res.status, statusText: res.statusText, headers });
+              if (res.body) {
+                const reader = res.body.getReader();
+                for (;;) {
+                  const { done, value } = await reader.read();
+                  if (done) break;
+                  const buf = value.buffer.slice(value.byteOffset, value.byteOffset + value.byteLength);
+                  port.postMessage({ type: "body", chunk: buf }, [buf]);
+                }
+              }
+              port.postMessage({ type: "end" });
+            })
+            .catch((err) => port.postMessage({ type: "error", message: String(err) }));
+        });
+      }
       // Every machine belonging to a room (for an ay-share room, the room itself).
       const roomSources = (name) => [...sources.values()].filter((s) => (s.room || s.id) === name);
       const roomLive = (name) =>
@@ -3397,6 +3510,23 @@
           btn.textContent = orig;
         }, 1200);
       }
+      // In-console P2P preview: an iframe served from /w/p/<src>/<port>/, which
+      // the Service Worker proxies over the machine's WebRTC tunnel (no relay).
+      function openPreview(src, port) {
+        // Scope-relative so it works at both /w/ (agent-yes.com) and / (ay serve).
+        const url = new URL("p/" + encodeURIComponent(src) + "/" + port + "/", location.href).pathname;
+        const frame = $("previewFrame");
+        if (!frame) return window.open(url, "_blank");
+        $("previewTitle").textContent = "localhost:" + port;
+        frame.src = url;
+        $("previewOverlay").hidden = false;
+      }
+      function closePreview() {
+        const ov = $("previewOverlay");
+        if (ov) ov.hidden = true;
+        const frame = $("previewFrame");
+        if (frame) frame.src = "about:blank"; // tear down the app + its tunnel
+      }
       async function doExpose() {
         const tx = exposePendingTx || localTx;
         const port = exposePendingPort;
@@ -3435,7 +3565,7 @@
               return;
             }
             if (Array.isArray(arr))
-              for (const ex of arr) rows.push({ ...ex, _srcName: s.name || s.id, _tx: tx });
+              for (const ex of arr) rows.push({ ...ex, _srcName: s.name || s.id, _src: s.id, _tx: tx });
           }),
         );
         list.textContent = "";
@@ -3470,8 +3600,19 @@
         meta.appendChild(host);
         row.appendChild(meta);
 
+        // Preview here: render the app P2P over this machine's WebRTC tunnel
+        // (no edge relay), in an in-console iframe. Only offered for a codehost
+        // (ch) source, which has the `preview` plugin.
+        if (ex._tx && ex._tx.ch) {
+          const preview = document.createElement("button");
+          preview.className = "primary";
+          preview.textContent = "Preview";
+          preview.title = "view in-console over a direct P2P tunnel (no relay)";
+          preview.onclick = () => openPreview(ex._src, ex.port);
+          row.appendChild(preview);
+        }
+
         const openBtn = document.createElement("button");
-        openBtn.className = "primary";
         openBtn.textContent = "Open";
         // Re-mint a fresh claim so the owner (or a guest) gets a usable link.
         openBtn.onclick = async () => {
@@ -3574,6 +3715,15 @@
         $("exposeModal")?.addEventListener("click", (e) => {
           if (e.target === $("exposeModal")) closeExposeModal();
         });
+        $("previewClose")?.addEventListener("click", closePreview);
+        $("previewReload")?.addEventListener("click", () => {
+          const f = $("previewFrame");
+          if (f) f.src = f.src;
+        });
+        $("previewPop")?.addEventListener("click", () => {
+          const f = $("previewFrame");
+          if (f && f.src && f.src !== "about:blank") window.open(f.src, "_blank");
+        });
       })();
       (function shareModalBoot() {
         $("shareClose")?.addEventListener("click", closeShareModal);

package/lab/ui/sw.js

@@ -6,7 +6,60 @@
 // fallback when offline, which is what makes the installed app launchable with no
 // network. WebSocket signaling and cross-origin CDN scripts are not GET fetches we
 // own, so they pass straight through.
-const CACHE = "agent-yes-w-v2";
+const CACHE = "agent-yes-w-v3";
+// Preview proxy: <scope>p/<encSrc>/<port>/* renders a machine's local dev
+// server INSIDE the console's existing WebRTC tunnel (peer-to-peer, off the
+// edge relay). We can't own the RTCPeerConnection here, so we forward each
+// request to the controlling page (which does), streaming the response back.
+// Scope-relative so it works at both /w/ (agent-yes.com) and / (ay serve --http).
+const BASE = new URL("./", self.location.href).pathname; // "/w/" or "/"
+const PREVIEW = new RegExp("^" + BASE.replace(/[.*+?^${}()|[\]\\]/g, "\\$&") + "p/([^/]+)/(\\d{1,5})(/.*)?$");
+
+async function pickClient() {
+  const all = await self.clients.matchAll({ type: "window", includeUncontrolled: true });
+  // Prefer a real console tab (not the preview iframe itself).
+  return all.find((c) => !new URL(c.url).pathname.startsWith(BASE + "p/")) || all[0] || null;
+}
+
+async function proxyPreview(request, src, port, rest) {
+  const client = await pickClient();
+  if (!client) return new Response("open the agent-yes console to preview", { status: 502 });
+  const headers = {};
+  request.headers.forEach((v, k) => (headers[k] = v));
+  const body =
+    request.method === "GET" || request.method === "HEAD"
+      ? undefined
+      : new Uint8Array(await request.arrayBuffer());
+  return new Promise((resolve) => {
+    const mc = new MessageChannel();
+    let resolved = false;
+    mc.port1.onmessage = (ev) => {
+      const msg = ev.data;
+      if (msg.type === "head") {
+        const stream = new ReadableStream({
+          start(controller) {
+            mc.port1.onmessage = (e2) => {
+              const m2 = e2.data;
+              if (m2.type === "body") controller.enqueue(new Uint8Array(m2.chunk));
+              else if (m2.type === "end") controller.close();
+              else if (m2.type === "error") controller.error(new Error(m2.message));
+            };
+          },
+        });
+        resolved = true;
+        resolve(new Response(stream, { status: msg.status, statusText: msg.statusText, headers: msg.headers }));
+      } else if (msg.type === "error" && !resolved) {
+        resolved = true;
+        resolve(new Response("preview tunnel error: " + msg.message, { status: 502 }));
+      }
+    };
+    client.postMessage(
+      { type: "ay-preview-fetch", src, port: Number(port), method: request.method, path: rest, headers, body },
+      [mc.port2, ...(body ? [body.buffer] : [])],
+    );
+  });
+}
+
 const SHELL = [
   "./",
   "./index.html",
@@ -35,23 +88,52 @@ self.addEventListener("activate", (e) => {
 
 self.addEventListener("fetch", (e) => {
   const req = e.request;
-  if (req.method !== "GET") return;
   const url = new URL(req.url);
-  // Only the same-origin /w/ shell; let everything else (CDN, signaling) be.
-  if (url.origin !== self.location.origin || !url.pathname.startsWith("/w/")) return;
-  e.respondWith(
-    (async () => {
-      try {
-        const res = await fetch(req);
-        if (res && res.ok) {
-          const c = await caches.open(CACHE);
-          c.put(req, res.clone());
-        }
-        return res;
-      } catch {
-        const cached = await caches.match(req);
-        return cached || (await caches.match("./index.html")) || Response.error();
-      }
-    })(),
-  );
+  if (url.origin !== self.location.origin) return; // CDN / signaling pass through
+  // Preview proxy (any method): a request is a preview request if its own path
+  // is under <base>p/<src>/<port>/ (the iframe navigation + relative URLs), OR
+  // it comes from a preview-iframe CLIENT (an app's absolute-path subresource
+  // like Vite's /@vite/client — which resolves to the origin root, not our
+  // prefix). Either way we proxy it to that machine's port over the tunnel.
+  const own = PREVIEW.exec(url.pathname);
+  if (own) {
+    const rest = (own[3] || "/") + url.search;
+    e.respondWith(proxyPreview(req, decodeURIComponent(own[1]), own[2], rest));
+    return;
+  }
+  e.respondWith(maybePreviewFromClient(e, req, url));
 });
+
+// If the request came from a preview iframe, proxy it to that iframe's port
+// (appPath = the request's own path); otherwise fall back to the shell handler.
+async function maybePreviewFromClient(e, req, url) {
+  const clientId = e.clientId || e.resultingClientId;
+  if (clientId) {
+    const client = await self.clients.get(clientId).catch(() => null);
+    const cm = client && PREVIEW.exec(new URL(client.url).pathname);
+    if (cm) {
+      return proxyPreview(req, decodeURIComponent(cm[1]), cm[2], url.pathname + url.search);
+    }
+  }
+  return shellFetch(req, url);
+}
+
+async function shellFetch(req, url) {
+  const p = url.pathname;
+  // Pass through non-GET, the API (SSE/POST — never cache), and anything off the
+  // shell. Only cache the static console shell for offline launch.
+  const isApi = p === "/api" || p.startsWith("/api/");
+  if (req.method !== "GET" || isApi || !p.startsWith(BASE)) return fetch(req);
+  // Network-first for the same-origin shell; cache is the offline fallback.
+  try {
+    const res = await fetch(req);
+    if (res && res.ok) {
+      const c = await caches.open(CACHE);
+      c.put(req, res.clone());
+    }
+    return res;
+  } catch {
+    const cached = await caches.match(req);
+    return cached || (await caches.match("./index.html")) || Response.error();
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.193.0",
+  "version": "1.194.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.ts

@@ -2887,6 +2887,11 @@ export async function cmdServe(rest: string[]): Promise<number> {
       return serveUiFile("e2e.js", "text/javascript; charset=utf-8");
     if (req.method === "GET" && p === "/qrcode.js")
       return serveUiFile("qrcode.js", "text/javascript; charset=utf-8");
+    // The PWA / preview Service Worker. Without it, --http never registers a SW
+    // (so the in-console P2P preview can't proxy). Served at the console root so
+    // its scope covers /p/<src>/<port>/*.
+    if (req.method === "GET" && p === "/sw.js")
+      return serveUiFile("sw.js", "text/javascript; charset=utf-8");
     if (req.method === "GET" && p === "/manifest.webmanifest")
       return serveUiFile("manifest.webmanifest", "application/manifest+json");
     if (req.method === "GET" && p === "/icon.svg")

package/dist/SUPPORTED_CLIS-wAOAd_rx.js

@@ -1,8 +0,0 @@
-import "./ts-Cg0IpitM.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-C_ztEPMs.js";
-import "./pidStore-BIvsBQ8X.js";
-import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-eK4A0Nql.js";
-
-export { SUPPORTED_CLIS };