agent-yes 1.196.0 → 1.196.1

package/dist/SUPPORTED_CLIS-CFTeu8hj.js

@@ -0,0 +1,8 @@
+import "./ts-CHkgLvsJ.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-BGywS-RN.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DOwI2CmP.js";
+
+export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-CxLCQtAU.js → SUPPORTED_CLIS-DOwI2CmP.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-CP17kUI1.js";
+import { t as CLIS_CONFIG } from "./ts-CHkgLvsJ.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-CxLCQtAU.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-DOwI2CmP.js.map

package/dist/{agentShare-Bi95Xy0S.js → agentShare-bCHRyHSj.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { M as resolveOne } from "./subcommands-s74ViJcI.js";
+import { M as resolveOne } from "./subcommands-RnI0AkSK.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -228,4 +228,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-Bi95Xy0S.js.map
+//# sourceMappingURL=agentShare-bCHRyHSj.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DTssk7cU.js";
-import { n as getRustBinary } from "./rustBinary-D_ifX2Vd.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-BGywS-RN.js";
+import { n as getRustBinary } from "./rustBinary-BYJrF4jm.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-Cz8xpc5X.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-CRW8on1l.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -327,7 +327,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-Ca2ffDRy.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CFTeu8hj.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-CP17kUI1.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-CHkgLvsJ.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DTssk7cU.js";
+import "./versionChecker-BGywS-RN.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 

package/dist/{notifyDaemon-BdOeFIVl.js → notifyDaemon-lPJrVB96.js}

@@ -1,7 +1,7 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { $ as notifyDir, G as gcInboxes, J as liveWatchers, K as hostId, Q as daemonLockOwnerPath, S as listRecords, W as appendEvent, X as shouldStealLock, Y as readInbox, Z as daemonLockDir, _ as isPidAlive, c as deriveLiveState, k as renderLogTailLines, q as listInboxParents } from "./subcommands-s74ViJcI.js";
+import { $ as notifyDir, G as gcInboxes, J as liveWatchers, K as hostId, Q as daemonLockOwnerPath, S as listRecords, W as appendEvent, X as shouldStealLock, Y as readInbox, Z as daemonLockDir, _ as isPidAlive, c as deriveLiveState, k as renderLogTailLines, q as listInboxParents } from "./subcommands-RnI0AkSK.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -588,4 +588,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-BdOeFIVl.js.map
+//# sourceMappingURL=notifyDaemon-lPJrVB96.js.map

package/dist/{rustBinary-D_ifX2Vd.js → rustBinary-BYJrF4jm.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-DTssk7cU.js";
+import { r as getInstalledPackage } from "./versionChecker-BGywS-RN.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-D_ifX2Vd.js.map
+//# sourceMappingURL=rustBinary-BYJrF4jm.js.map

package/dist/{schedule-rvMgc0tA.js → schedule-BVTk2aWT.js}

@@ -1,9 +1,9 @@
-import "./ts-CP17kUI1.js";
+import "./ts-CHkgLvsJ.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DTssk7cU.js";
+import "./versionChecker-BGywS-RN.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CxLCQtAU.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DOwI2CmP.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-_GtAZtsi.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-DZRjxpNp.js";
 import { createHash } from "node:crypto";
@@ -150,4 +150,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-rvMgc0tA.js.map
+//# sourceMappingURL=schedule-BVTk2aWT.js.map

package/dist/{serve-D0-LoTfw.js → serve-sTUSkXkr.js}

@@ -1,13 +1,13 @@
-import "./ts-CP17kUI1.js";
+import "./ts-CHkgLvsJ.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DTssk7cU.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-D_ifX2Vd.js";
+import { r as getInstalledPackage } from "./versionChecker-BGywS-RN.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-BYJrF4jm.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { t as pgidForWrapper } from "./reaper-CWF2_ATd.js";
 import "./configShared-0MnIQ652.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CxLCQtAU.js";
-import { A as renderRawLog, D as recentMessageEdges, E as readPtysize, L as snapshotStatus, M as resolveOne, O as recentReadEdges, S as listRecords, T as readNotes, U as writeToIpc, b as isUserTyping, et as TYPING_BADGE, f as extractNeedsInput, k as renderLogTailLines, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, tt as recordInbox, u as extractBadges } from "./subcommands-s74ViJcI.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DOwI2CmP.js";
+import { A as renderRawLog, D as recentMessageEdges, E as readPtysize, L as snapshotStatus, M as resolveOne, O as recentReadEdges, S as listRecords, T as readNotes, U as writeToIpc, b as isUserTyping, et as TYPING_BADGE, f as extractNeedsInput, k as renderLogTailLines, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, tt as recordInbox, u as extractBadges } from "./subcommands-RnI0AkSK.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";
@@ -340,21 +340,26 @@ async function resolveActiveManager() {
 	}
 	return firstRunnable ?? resolveDaemonManager();
 }
-async function installAndVerify(pkg) {
-	const bun = Bun.which("bun");
-	const npm = Bun.which("npm");
-	const installer = bun ? [
+function installerArgv(pkg, bun, npm) {
+	if (bun) return [
 		bun,
 		"add",
 		"-g",
+		...pkg === "oxmgr" ? ["--trust"] : [],
 		pkg
-	] : npm ? [
+	];
+	if (npm) return [
 		npm,
 		"install",
 		"-g",
 		pkg
-	] : null;
+	];
+	return null;
+}
+async function installAndVerify(pkg) {
+	const installer = installerArgv(pkg, Bun.which("bun"), Bun.which("npm"));
 	if (!installer) return null;
+	await ensureNodeRuntime();
 	process.stderr.write(`ay serve install: installing ${pkg}…\n`);
 	const code = await Bun.spawn(installer, {
 		stdio: [
@@ -1923,7 +1928,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-Bi95Xy0S.js");
+				const { createScopedShare } = await import("./agentShare-bCHRyHSj.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -1938,12 +1943,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-Bi95Xy0S.js");
+			const { listShares } = await import("./agentShare-bCHRyHSj.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-Bi95Xy0S.js");
+			const { revokeShare } = await import("./agentShare-bCHRyHSj.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -2125,7 +2130,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-Bi95Xy0S.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-bCHRyHSj.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		resolve();
 	};
@@ -2138,4 +2143,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-D0-LoTfw.js.map
+//# sourceMappingURL=serve-sTUSkXkr.js.map

package/dist/{setup-BC1VjTOf.js → setup-B03A9bDx.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-D0-LoTfw.js");
+	const { cmdServe } = await import("./serve-sTUSkXkr.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-BC1VjTOf.js.map
+//# sourceMappingURL=setup-B03A9bDx.js.map

package/dist/{subcommands-Cz8xpc5X.js → subcommands-CRW8on1l.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./configShared-0MnIQ652.js";
-import { A as renderRawLog, B as submitAndConfirm, C as matchKeyword, D as recentMessageEdges, E as readPtysize, F as restartHintLines, H as writeKeysPaced, I as runSubcommand, L as snapshotStatus, M as resolveOne, N as resolveReadWindow, O as recentReadEdges, P as resolveResumeArgs, R as stdinActivityPath, S as listRecords, T as readNotes, U as writeToIpc, V as waitForLogQuiet, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLogLines, k as renderLogTailLines, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stopTipForCli } from "./subcommands-s74ViJcI.js";
+import { A as renderRawLog, B as submitAndConfirm, C as matchKeyword, D as recentMessageEdges, E as readPtysize, F as restartHintLines, H as writeKeysPaced, I as runSubcommand, L as snapshotStatus, M as resolveOne, N as resolveReadWindow, O as recentReadEdges, P as resolveResumeArgs, R as stdinActivityPath, S as listRecords, T as readNotes, U as writeToIpc, V as waitForLogQuiet, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLogLines, k as renderLogTailLines, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stopTipForCli } from "./subcommands-RnI0AkSK.js";
 import "./e2e-BeKjLhmO.js";
 import "./webrtcLink-BG0Xc4-W.js";
 import "./remotes-oSmwSYaV.js";

package/dist/{subcommands-s74ViJcI.js → subcommands-RnI0AkSK.js}

@@ -1271,15 +1271,15 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-D0-LoTfw.js");
+				const { cmdServe } = await import("./serve-sTUSkXkr.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-BC1VjTOf.js");
+				const { cmdSetup } = await import("./setup-B03A9bDx.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-rvMgc0tA.js");
+				const { cmdSchedule } = await import("./schedule-BVTk2aWT.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -4297,7 +4297,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-BdOeFIVl.js");
+		const { ensureDaemon } = await import("./notifyDaemon-lPJrVB96.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4371,7 +4371,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-BdOeFIVl.js");
+	const daemon = await import("./notifyDaemon-lPJrVB96.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4398,4 +4398,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { notifyDir as $, renderRawLog as A, submitAndConfirm as B, matchKeyword as C, recentMessageEdges as D, readPtysize as E, restartHintLines as F, gcInboxes as G, writeKeysPaced as H, runSubcommand as I, liveWatchers as J, hostId as K, snapshotStatus as L, resolveOne as M, resolveReadWindow as N, recentReadEdges as O, resolveResumeArgs as P, daemonLockOwnerPath as Q, stdinActivityPath as R, listRecords as S, readNotes as T, writeToIpc as U, waitForLogQuiet as V, appendEvent as W, shouldStealLock as X, readInbox as Y, daemonLockDir as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, TYPING_BADGE as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderRawLogLines as j, renderLogTailLines as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, listInboxParents as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, recordInbox as tt, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, stopTipForCli as z };
-//# sourceMappingURL=subcommands-s74ViJcI.js.map
+//# sourceMappingURL=subcommands-RnI0AkSK.js.map

package/dist/{ts-CP17kUI1.js → ts-CHkgLvsJ.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DTssk7cU.js";
+import { r as getInstalledPackage } from "./versionChecker-BGywS-RN.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CNMl13dC.js";
 import { t as PidStore } from "./pidStore-BIvsBQ8X.js";
@@ -1824,4 +1824,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-CP17kUI1.js.map
+//# sourceMappingURL=ts-CHkgLvsJ.js.map

package/dist/{versionChecker-DTssk7cU.js → versionChecker-BGywS-RN.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.196.0";
+var version = "1.196.1";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-DTssk7cU.js.map
+//# sourceMappingURL=versionChecker-BGywS-RN.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.196.0",
+  "version": "1.196.1",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.spec.ts

@@ -1,6 +1,6 @@
 import { readFile } from "fs/promises";
 import { describe, expect, it } from "vitest";
-import { isNoNodeExecError, oxmgrVersionHasWindowsFix } from "./serve.ts";
+import { installerArgv, isNoNodeExecError, oxmgrVersionHasWindowsFix } from "./serve.ts";
 
 // Guards the Windows daemon-manager selection: on Windows we only PREFER oxmgr
 // when the installed build carries the daemon-socket-inheritance fix. Stock
@@ -90,3 +90,31 @@ describe("manager spawns pass a live env snapshot", () => {
     }
   });
 });
+
+// Guards the oxmgr bootstrap: bun blocks untrusted postinstalls, and oxmgr's
+// native binary only arrives via its postinstall — without --trust the install
+// "succeeds" but leaves a launcher that dies with "oxmgr binary is missing"
+// (the real reason bootstrap used to fall back to pm2 on fresh boxes).
+describe("installerArgv", () => {
+  it("trusts oxmgr's postinstall under bun", () => {
+    expect(installerArgv("oxmgr", "/x/bun", null)).toEqual([
+      "/x/bun",
+      "add",
+      "-g",
+      "--trust",
+      "oxmgr",
+    ]);
+  });
+
+  it("keeps pm2 untrusted under bun (pure JS, no required scripts)", () => {
+    expect(installerArgv("pm2", "/x/bun", "/x/npm")).toEqual(["/x/bun", "add", "-g", "pm2"]);
+  });
+
+  it("falls back to npm without a trust flag (npm runs scripts by default)", () => {
+    expect(installerArgv("oxmgr", null, "/x/npm")).toEqual(["/x/npm", "install", "-g", "oxmgr"]);
+  });
+
+  it("returns null with neither installer", () => {
+    expect(installerArgv("pm2", null, null)).toBeNull();
+  });
+});

package/ts/serve.ts

@@ -471,16 +471,37 @@ async function resolveActiveManager(): Promise<DaemonManager | null> {
   return firstRunnable ?? resolveDaemonManager();
 }
 
+// The install command for one PM package. oxmgr gets `--trust` under bun: its
+// native binary arrives via the package's postinstall (scripts/install.js
+// downloads the platform build), and bun BLOCKS lifecycle scripts of untrusted
+// packages by default — which leaves a JS launcher that dies with "oxmgr binary
+// is missing" and was the real reason bootstrap kept falling back to pm2 on
+// fresh boxes. Re-adding with --trust also heals such a blocked install. pm2 is
+// pure JS with no required scripts, so it stays untrusted. npm runs lifecycle
+// scripts by default — no flag needed.
+export function installerArgv(
+  pkg: "oxmgr" | "pm2",
+  bun: string | null,
+  npm: string | null,
+): string[] | null {
+  if (bun) return [bun, "add", "-g", ...(pkg === "oxmgr" ? ["--trust"] : []), pkg];
+  if (npm) return [npm, "install", "-g", pkg];
+  return null;
+}
+
 // Install one PM package globally via the SAME JS package manager that installed
 // `ay` (bun preferred, npm fallback — no Rust toolchain required, so a fresh
 // Linux box with only bun from setup.sh works), then confirm the resulting
 // binary actually execs. Returns a runnable manager, or null if the install
 // failed or the binary can't run here (caller then tries the next candidate).
 async function installAndVerify(pkg: "oxmgr" | "pm2"): Promise<DaemonManager | null> {
-  const bun = Bun.which("bun");
-  const npm = Bun.which("npm");
-  const installer = bun ? [bun, "add", "-g", pkg] : npm ? [npm, "install", "-g", pkg] : null;
+  const installer = installerArgv(pkg, Bun.which("bun"), Bun.which("npm"));
   if (!installer) return null;
+  // The node→bun shim must exist BEFORE the install, not just before the probe:
+  // oxmgr's postinstall itself runs `node scripts/install.js` to fetch the
+  // native binary, so on a bun-only box a missing shim silently skips the
+  // download even when the script is trusted.
+  await ensureNodeRuntime();
   process.stderr.write(`ay serve install: installing ${pkg}…\n`);
   const code =
     (await Bun.spawn(installer, {

package/dist/SUPPORTED_CLIS-Ca2ffDRy.js

@@ -1,8 +0,0 @@
-import "./ts-CP17kUI1.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DTssk7cU.js";
-import "./pidStore-BIvsBQ8X.js";
-import "./globalPidIndex-CoNr7tS8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CxLCQtAU.js";
-
-export { SUPPORTED_CLIS };