agent-yes 1.203.1 → 1.205.0

package/dist/{SUPPORTED_CLIS-Cu4aeSNQ.js → SUPPORTED_CLIS-C8-qh98a.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-C7l18XR8.js";
+import { t as CLIS_CONFIG } from "./ts-Dm6jjLwC.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-Cu4aeSNQ.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-C8-qh98a.js.map

package/dist/SUPPORTED_CLIS-D3XTFfS7.js

@@ -0,0 +1,9 @@
+import "./ts-Dm6jjLwC.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-BomfUpSo.js";
+import "./pidStore-BIvsBQ8X.js";
+import "./globalPidIndex-CoNr7tS8.js";
+import "./messageLog-CxrKJj77.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C8-qh98a.js";
+
+export { SUPPORTED_CLIS };

package/dist/{agentShare-D6AxUbf4.js → agentShare-99IGGOkv.js}

@@ -2,7 +2,7 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./messageLog-CxrKJj77.js";
 import "./configShared-aKTg-sa5.js";
-import { M as resolveOne } from "./subcommands-B0s3sP4A.js";
+import { M as resolveOne } from "./subcommands-Bs7wJRBB.js";
 import "./e2e-jb0Hp43q.js";
 import "./webrtcLink-B7REGtK2.js";
 import "./remotes-Cim0dBU7.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-D6AxUbf4.js.map
+//# sourceMappingURL=agentShare-99IGGOkv.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CHLdtpqI.js";
-import { n as getRustBinary } from "./rustBinary-Cb0U4_4s.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-BomfUpSo.js";
+import { n as getRustBinary } from "./rustBinary-Tgn948GR.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-DdAdp0Sp.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-DyDHZ5YI.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -327,7 +327,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-Bb6ATd-k.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-D3XTFfS7.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-C7l18XR8.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-Dm6jjLwC.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CHLdtpqI.js";
+import "./versionChecker-BomfUpSo.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./messageLog-CxrKJj77.js";

package/dist/{notifyDaemon-KLsuGTfs.js → notifyDaemon-DK1HOMjj.js}

@@ -2,7 +2,7 @@ import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./messageLog-CxrKJj77.js";
 import "./configShared-aKTg-sa5.js";
-import { $ as notifyDir, G as gcInboxes, J as liveWatchers, K as hostId, Q as daemonLockOwnerPath, S as listRecords, W as appendEvent, X as shouldStealLock, Y as readInbox, Z as daemonLockDir, _ as isPidAlive, c as deriveLiveState, k as renderLogTailLines, q as listInboxParents } from "./subcommands-B0s3sP4A.js";
+import { $ as daemonLockOwnerPath, G as gcInboxes, J as listInboxParents, K as hostId, Q as daemonLockDir, S as listRecords, W as appendEvent, X as readInbox, Y as liveWatchers, Z as shouldStealLock, _ as isPidAlive, c as deriveLiveState, et as notifyDir, k as renderLogTailLines } from "./subcommands-Bs7wJRBB.js";
 import "./e2e-jb0Hp43q.js";
 import "./webrtcLink-B7REGtK2.js";
 import "./remotes-Cim0dBU7.js";
@@ -589,4 +589,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-KLsuGTfs.js.map
+//# sourceMappingURL=notifyDaemon-DK1HOMjj.js.map

package/dist/{rustBinary-Cb0U4_4s.js → rustBinary-Tgn948GR.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-CHLdtpqI.js";
+import { r as getInstalledPackage } from "./versionChecker-BomfUpSo.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-Cb0U4_4s.js.map
+//# sourceMappingURL=rustBinary-Tgn948GR.js.map

package/dist/{schedule-hC-cPypM.js → schedule-CBoM67Vy.js}

@@ -1,10 +1,10 @@
-import "./ts-C7l18XR8.js";
+import "./ts-Dm6jjLwC.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CHLdtpqI.js";
+import "./versionChecker-BomfUpSo.js";
 import "./pidStore-BIvsBQ8X.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./messageLog-CxrKJj77.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-Cu4aeSNQ.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C8-qh98a.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-CjaRvTjf.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CwNJuwH5.js";
 import { createHash } from "node:crypto";
@@ -151,4 +151,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-hC-cPypM.js.map
+//# sourceMappingURL=schedule-CBoM67Vy.js.map

package/dist/{serve-CFTBba3Y.js → serve-IvOlaL-7.js}

@@ -1,14 +1,15 @@
-import "./ts-C7l18XR8.js";
+import "./ts-Dm6jjLwC.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-CHLdtpqI.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-Cb0U4_4s.js";
+import { r as getInstalledPackage } from "./versionChecker-BomfUpSo.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-Tgn948GR.js";
+import { t as agentYesHome$1 } from "./agentYesHome-CtHb5b71.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { r as recordInbox } from "./messageLog-CxrKJj77.js";
 import { t as pgidForWrapper } from "./reaper-BUHCyxdF.js";
 import "./configShared-aKTg-sa5.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-Cu4aeSNQ.js";
-import { A as renderRawLog, D as recentMessageEdges, E as readPtysize, L as snapshotStatus, M as resolveOne, O as recentReadEdges, S as listRecords, T as readNotes, U as writeToIpc, b as isUserTyping, et as TYPING_BADGE, f as extractNeedsInput, k as renderLogTailLines, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-B0s3sP4A.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C8-qh98a.js";
+import { A as renderRawLog, D as recentMessageEdges, E as readPtysize, L as snapshotStatus, M as resolveOne, O as recentReadEdges, S as listRecords, T as readNotes, U as writeToIpc, b as isUserTyping, f as extractNeedsInput, k as renderLogTailLines, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, q as isTransientLockMkdirError, tt as TYPING_BADGE, u as extractBadges } from "./subcommands-Bs7wJRBB.js";
 import "./e2e-jb0Hp43q.js";
 import "./webrtcLink-B7REGtK2.js";
 import "./remotes-Cim0dBU7.js";
@@ -16,7 +17,7 @@ import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as ge
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CwNJuwH5.js";
 import { r as spawnRejectionReason } from "./spawnGate-CXjEz6Pf.js";
 import yargs from "yargs";
-import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
+import { mkdir, open, readFile, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
 import path from "path";
 import { execFileSync } from "node:child_process";
@@ -42,6 +43,197 @@ import { existsSync, renameSync, watch, writeFileSync } from "node:fs";
 */
 const isTerminalReply = (s) => /^(?:\x1b\[(?:\??\d+(?:;\d+)*R|\?[\d;]*c|>[\d;]*c|\d*n))+$/.test(s);
 
+//#endregion
+//#region ts/serveLock.ts
+/**
+* Singleton lock for the WebRTC host role: one `ay serve` host per
+* ~/.agent-yes. Two hosts sharing the persisted room (~/.agent-yes/.share-room)
+* fight over every viewer connection — the exact outage seen live: an orphaned
+* `ay serve --webrtc` from a previous manager era plus a manual run left the
+* managed daemon crash-looping (12 watchdog restarts) and the share link
+* unloadable. The lock makes the loser fail FAST with a pointer to the owner
+* instead of silently contending.
+*
+* mkdir-based (atomic on every platform), owner JSON alongside, heartbeat
+* refresh while held. A stale owner — dead pid, or a heartbeat older than
+* SERVE_LOCK_STALE_MS (a SIGKILLed host can't clean up) — is stolen, so a
+* crashed host never wedges the next start.
+*/
+const SERVE_LOCK_STALE_MS = 2e4;
+const SERVE_LOCK_BEAT_MS = 5e3;
+const SERVE_LOCK_GRACE_MS = 12e3;
+function lockDir() {
+	return path.join(agentYesHome$1(), "webrtc-host.lock");
+}
+function ownerPath() {
+	return path.join(lockDir(), "owner.json");
+}
+function pidAlive(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (e) {
+		return e.code === "EPERM";
+	}
+}
+async function readOwner() {
+	try {
+		const o = JSON.parse(await readFile(ownerPath(), "utf-8"));
+		return typeof o?.pid === "number" ? o : null;
+	} catch {
+		return null;
+	}
+}
+/** Pure staleness decision, exported for tests. */
+function isOwnerStale(owner, now, alive, staleMs = SERVE_LOCK_STALE_MS) {
+	if (!owner) return true;
+	if (!alive(owner.pid)) return true;
+	return now - owner.beat_at > staleMs;
+}
+async function stampOwner(startedAt) {
+	const tmp = `${ownerPath()}.${process.pid}.tmp`;
+	try {
+		await writeFile(tmp, JSON.stringify({
+			pid: process.pid,
+			started_at: startedAt,
+			beat_at: Date.now()
+		}));
+		await rename(tmp, ownerPath());
+		return true;
+	} catch {
+		await rm(tmp, { force: true }).catch(() => {});
+		return false;
+	}
+}
+/**
+* Acquire the host lock, retrying for up to `graceMs`. Returns fast on a live
+* owner once the grace expires (never blocks a daemon boot forever). With
+* `takeover`, a live owner is SIGTERM'd (then SIGKILL'd) and the lock stolen.
+*/
+async function acquireWebrtcHostLock(opts) {
+	const graceMs = opts?.graceMs ?? SERVE_LOCK_GRACE_MS;
+	const staleMs = opts?.staleMs ?? SERVE_LOCK_STALE_MS;
+	const beatMs = opts?.beatMs ?? SERVE_LOCK_BEAT_MS;
+	const startedAt = Date.now();
+	const deadline = startedAt + graceMs;
+	let tookOver = false;
+	for (;;) try {
+		await mkdir(lockDir(), { recursive: false });
+		if (!await stampOwner(startedAt)) {
+			await rm(lockDir(), {
+				recursive: true,
+				force: true
+			}).catch(() => {});
+			return {
+				ok: false,
+				owner: null
+			};
+		}
+		const beat = setInterval(() => {
+			(async () => {
+				if ((await readOwner())?.pid !== process.pid) {
+					clearInterval(beat);
+					return;
+				}
+				await stampOwner(startedAt);
+			})();
+		}, beatMs);
+		if (typeof beat.unref === "function") beat.unref();
+		return {
+			ok: true,
+			release: async () => {
+				clearInterval(beat);
+				if ((await readOwner())?.pid === process.pid) await rm(lockDir(), {
+					recursive: true,
+					force: true
+				}).catch(() => {});
+			}
+		};
+	} catch (e) {
+		const code = e.code;
+		if (!isTransientLockMkdirError(code)) throw e;
+		if (code !== "EEXIST") {
+			await new Promise((r) => setTimeout(r, 25));
+			continue;
+		}
+		const owner = await readOwner();
+		if (isOwnerStale(owner, Date.now(), pidAlive, staleMs)) {
+			await rm(lockDir(), {
+				recursive: true,
+				force: true
+			}).catch(() => {});
+			continue;
+		}
+		if (opts?.takeover && owner && !tookOver) {
+			tookOver = true;
+			try {
+				process.kill(owner.pid, "SIGTERM");
+			} catch {}
+			await new Promise((r) => setTimeout(r, opts?.takeoverWaitMs ?? 2e3));
+			if (pidAlive(owner.pid)) try {
+				process.kill(owner.pid, "SIGKILL");
+			} catch {}
+			await rm(lockDir(), {
+				recursive: true,
+				force: true
+			}).catch(() => {});
+			continue;
+		}
+		if (Date.now() >= deadline) return {
+			ok: false,
+			owner
+		};
+		await new Promise((r) => setTimeout(r, 250));
+	}
+}
+
+//#endregion
+//#region ts/strayServe.ts
+const MANAGEMENT_COMMAND_RE = /\b(?:install|uninstall|status|logs|restart)\b/;
+function isServeCommand(command) {
+	return /\bay(?:\.js)?\s+serve\b/.test(command) || /\bagent-yes(?:\.js)?\s+serve\b/.test(command) || /\bagent-yes\.js\s+serve\b/.test(command);
+}
+function parseStrayServeProcesses(psOutput, opts) {
+	const ignoredPids = new Set([opts.selfPid, opts.parentPid]);
+	const processes = [];
+	for (const line of psOutput.split(/\r?\n/)) {
+		const match = /^\s*(\d+)\s+(.+?)\s*$/.exec(line);
+		if (!match) continue;
+		const pid = Number(match[1]);
+		const command = match[2];
+		if (!Number.isFinite(pid) || ignoredPids.has(pid)) continue;
+		if (!isServeCommand(command)) continue;
+		if (MANAGEMENT_COMMAND_RE.test(command)) continue;
+		processes.push({
+			pid,
+			command
+		});
+	}
+	return processes;
+}
+async function listStrayServeProcesses() {
+	if (process.platform === "win32") return [];
+	try {
+		const ps = Bun.spawn([
+			"ps",
+			"-axo",
+			"pid=,command="
+		], {
+			stdout: "pipe",
+			stderr: "ignore",
+			env: liveEnv()
+		});
+		const output = await new Response(ps.stdout).text();
+		if (await ps.exited !== 0) return [];
+		return parseStrayServeProcesses(output, {
+			selfPid: process.pid,
+			parentPid: process.ppid
+		});
+	} catch {
+		return [];
+	}
+}
+
 //#endregion
 //#region ts/serve.ts
 const DEFAULT_PORT = 7432;
@@ -520,6 +712,12 @@ function portFromArgs(args) {
 	const m = /--port[=\s](\d+)/.exec(args.join(" "));
 	return m ? Number(m[1]) : DEFAULT_PORT;
 }
+async function warnStrayServeProcesses() {
+	const stray = await listStrayServeProcesses();
+	if (stray.length === 0) return;
+	const pids = stray.map((p) => p.pid);
+	process.stderr.write(`warning: ${stray.length} unmanaged ay serve process(es) running (pid ${pids.join(", ")}) — they will fight the daemon for the WebRTC room; stop them: kill ${pids.join(" ")}\n`);
+}
 function explicitWebrtcUrl(args) {
 	for (let i = 0; i < args.length; i++) {
 		const a = args[i];
@@ -598,6 +796,7 @@ async function cmdServeDaemon(sub, args) {
 			}
 		}
 		if (removed === 0 && failed === 0) process.stdout.write(`no '${DAEMON_NAME}' daemon registered with any manager\n`);
+		await warnStrayServeProcesses();
 		return failed ? 1 : 0;
 	}
 	let mgr = resolveDaemonManager();
@@ -653,6 +852,7 @@ async function cmdServeDaemon(sub, args) {
 				DAEMON_NAME
 			]);
 		}
+		await warnStrayServeProcesses();
 		const serveArgv = ayServeArgv(effArgs);
 		const spawnHidden = findSpawnHiddenLauncher();
 		const managedArgv = spawnHidden ? [spawnHidden, ...serveArgv] : serveArgv;
@@ -853,6 +1053,10 @@ Options:
 		type: "boolean",
 		default: false,
 		description: "Deprecated no-op — the console can always spawn agents"
+	}).option("takeover", {
+		type: "boolean",
+		default: false,
+		description: "If another ay serve already hosts this home's WebRTC room, stop it and take the room"
 	}).help(false).version(false).exitProcess(false).parseAsync();
 	if (argv.daemon) return cmdServeDaemon("install", rest.filter((a) => a !== "--daemon" && a !== "-d"));
 	const stray = argv._.map(String);
@@ -874,6 +1078,17 @@ Options:
 	const scheme = useHttps ? "https" : "http";
 	const wantWebrtc = argv.webrtc !== void 0 || argv.share !== void 0;
 	const wantHttp = argv.http === true || argv.share !== void 0 || argv.webrtc === void 0;
+	let releaseHostLock = null;
+	if (wantWebrtc && process.env.AGENT_YES_NO_SERVE_LOCK !== "1") {
+		const lock = await acquireWebrtcHostLock({ takeover: argv.takeover === true });
+		if (!lock.ok) {
+			const o = lock.owner;
+			const since = o ? new Date(o.started_at).toLocaleString() : "unknown";
+			process.stderr.write(`ay serve: another instance${o ? ` (pid ${o.pid}, started ${since})` : ""} already hosts this home's WebRTC room\n  ay serve status              # inspect it\n  ay serve --webrtc --takeover # stop it and take the room\n  AGENT_YES_NO_SERVE_LOCK=1    # opt out (multi-room setups only)\n`);
+			return 1;
+		}
+		releaseHostLock = lock.release;
+	}
 	if (wantHttp && host !== "127.0.0.1" && host !== "localhost") process.stderr.write("ay serve: warning: binding to non-loopback — ensure your network is trusted or use Tailscale/VPN\n");
 	const token = await loadOrCreateToken(tokenFlag);
 	const titleCache = /* @__PURE__ */ new Map();
@@ -1442,7 +1657,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-B1eASck9.js");
+			const ws = await import("./ws-CSkP2mkD.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -1462,7 +1677,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-B1eASck9.js");
+			const ws = await import("./ws-CSkP2mkD.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2018,7 +2233,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-D6AxUbf4.js");
+				const { createScopedShare } = await import("./agentShare-99IGGOkv.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -2033,12 +2248,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-D6AxUbf4.js");
+			const { listShares } = await import("./agentShare-99IGGOkv.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-D6AxUbf4.js");
+			const { revokeShare } = await import("./agentShare-99IGGOkv.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -2201,7 +2416,10 @@ Options:
 			await announce(room, link, false);
 		} catch (e) {
 			process.stderr.write(`ay serve --webrtc failed: ${e.message}\n`);
-			if (!wantHttp) return 1;
+			if (!wantHttp) {
+				await releaseHostLock?.().catch(() => {});
+				return 1;
+			}
 		}
 	}
 	let heartbeat;
@@ -2220,9 +2438,9 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-D6AxUbf4.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-99IGGOkv.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
-		resolve();
+		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
 	await new Promise((resolve) => {
 		process.on("SIGINT", () => shutdown(resolve));
@@ -2233,4 +2451,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-CFTBba3Y.js.map
+//# sourceMappingURL=serve-IvOlaL-7.js.map

package/dist/{setup-CyFHjoSl.js → setup-BaKdS-3i.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-CFTBba3Y.js");
+	const { cmdServe } = await import("./serve-IvOlaL-7.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-CyFHjoSl.js.map
+//# sourceMappingURL=setup-BaKdS-3i.js.map

package/dist/{subcommands-B0s3sP4A.js → subcommands-Bs7wJRBB.js}

@@ -1237,19 +1237,19 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-CFTBba3Y.js");
+				const { cmdServe } = await import("./serve-IvOlaL-7.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-CyFHjoSl.js");
+				const { cmdSetup } = await import("./setup-BaKdS-3i.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-B1eASck9.js");
+				const { cmdWs } = await import("./ws-CSkP2mkD.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-hC-cPypM.js");
+				const { cmdSchedule } = await import("./schedule-CBoM67Vy.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -4269,7 +4269,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-KLsuGTfs.js");
+		const { ensureDaemon } = await import("./notifyDaemon-DK1HOMjj.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4343,7 +4343,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-KLsuGTfs.js");
+	const daemon = await import("./notifyDaemon-DK1HOMjj.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4369,5 +4369,5 @@ async function cmdNotifyd(rest) {
 }
 
 //#endregion
-export { notifyDir as $, renderRawLog as A, submitAndConfirm as B, matchKeyword as C, recentMessageEdges as D, readPtysize as E, restartHintLines as F, gcInboxes as G, writeKeysPaced as H, runSubcommand as I, liveWatchers as J, hostId as K, snapshotStatus as L, resolveOne as M, resolveReadWindow as N, recentReadEdges as O, resolveResumeArgs as P, daemonLockOwnerPath as Q, stdinActivityPath as R, listRecords as S, readNotes as T, writeToIpc as U, waitForLogQuiet as V, appendEvent as W, shouldStealLock as X, readInbox as Y, daemonLockDir as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, TYPING_BADGE as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderRawLogLines as j, renderLogTailLines as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, listInboxParents as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, stopTipForCli as z };
-//# sourceMappingURL=subcommands-B0s3sP4A.js.map
+export { daemonLockOwnerPath as $, renderRawLog as A, submitAndConfirm as B, matchKeyword as C, recentMessageEdges as D, readPtysize as E, restartHintLines as F, gcInboxes as G, writeKeysPaced as H, runSubcommand as I, listInboxParents as J, hostId as K, snapshotStatus as L, resolveOne as M, resolveReadWindow as N, recentReadEdges as O, resolveResumeArgs as P, daemonLockDir as Q, stdinActivityPath as R, listRecords as S, readNotes as T, writeToIpc as U, waitForLogQuiet as V, appendEvent as W, readInbox as X, liveWatchers as Y, shouldStealLock as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, notifyDir as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderRawLogLines as j, renderLogTailLines as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, controlCodeFromName as o, extractTaskCounts as p, isTransientLockMkdirError as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, TYPING_BADGE as tt, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, stopTipForCli as z };
+//# sourceMappingURL=subcommands-Bs7wJRBB.js.map

package/dist/{subcommands-DdAdp0Sp.js → subcommands-DyDHZ5YI.js}

@@ -2,7 +2,7 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./messageLog-CxrKJj77.js";
 import "./configShared-aKTg-sa5.js";
-import { A as renderRawLog, B as submitAndConfirm, C as matchKeyword, D as recentMessageEdges, E as readPtysize, F as restartHintLines, H as writeKeysPaced, I as runSubcommand, L as snapshotStatus, M as resolveOne, N as resolveReadWindow, O as recentReadEdges, P as resolveResumeArgs, R as stdinActivityPath, S as listRecords, T as readNotes, U as writeToIpc, V as waitForLogQuiet, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLogLines, k as renderLogTailLines, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stopTipForCli } from "./subcommands-B0s3sP4A.js";
+import { A as renderRawLog, B as submitAndConfirm, C as matchKeyword, D as recentMessageEdges, E as readPtysize, F as restartHintLines, H as writeKeysPaced, I as runSubcommand, L as snapshotStatus, M as resolveOne, N as resolveReadWindow, O as recentReadEdges, P as resolveResumeArgs, R as stdinActivityPath, S as listRecords, T as readNotes, U as writeToIpc, V as waitForLogQuiet, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLogLines, k as renderLogTailLines, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stopTipForCli } from "./subcommands-Bs7wJRBB.js";
 import "./e2e-jb0Hp43q.js";
 import "./webrtcLink-B7REGtK2.js";
 import "./remotes-Cim0dBU7.js";

package/dist/{ts-C7l18XR8.js → ts-Dm6jjLwC.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-CHLdtpqI.js";
+import { r as getInstalledPackage } from "./versionChecker-BomfUpSo.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CNMl13dC.js";
 import { t as PidStore } from "./pidStore-BIvsBQ8X.js";
@@ -1901,4 +1901,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-C7l18XR8.js.map
+//# sourceMappingURL=ts-Dm6jjLwC.js.map

package/dist/{versionChecker-CHLdtpqI.js → versionChecker-BomfUpSo.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.203.1";
+var version = "1.205.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-CHLdtpqI.js.map
+//# sourceMappingURL=versionChecker-BomfUpSo.js.map

package/dist/{ws-B1eASck9.js → ws-CSkP2mkD.js}

@@ -2,7 +2,7 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-CoNr7tS8.js";
 import "./messageLog-CxrKJj77.js";
 import "./configShared-aKTg-sa5.js";
-import { S as listRecords } from "./subcommands-B0s3sP4A.js";
+import { S as listRecords } from "./subcommands-Bs7wJRBB.js";
 import "./e2e-jb0Hp43q.js";
 import "./webrtcLink-B7REGtK2.js";
 import "./remotes-Cim0dBU7.js";
@@ -418,4 +418,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
-//# sourceMappingURL=ws-B1eASck9.js.map
+//# sourceMappingURL=ws-CSkP2mkD.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.203.1",
+  "version": "1.205.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.ts

@@ -39,6 +39,7 @@ import {
 import { TYPING_BADGE } from "./badges.ts";
 import { isTerminalReply } from "./terminalReply.ts";
 import { ensureNodeRuntime, liveEnv } from "./nodeRuntime.ts";
+import { acquireWebrtcHostLock, type ServeLockOwner } from "./serveLock.ts";
 import { type MailParty, recordInbox } from "./messageLog.ts";
 import { updateGlobalPidStatus } from "./globalPidIndex.ts";
 import { spawnRejectionReason } from "./spawnGate.ts";
@@ -46,6 +47,7 @@ import { findSpawnHiddenLauncher } from "./rustBinary.ts";
 import { pgidForWrapper } from "./reaper.ts";
 import { SUPPORTED_CLIS } from "./SUPPORTED_CLIS.ts";
 import { getInstalledPackage } from "./versionChecker.ts";
+import { listStrayServeProcesses } from "./strayServe.ts";
 import {
   getProvisionHook,
   getProvisionRoot,
@@ -707,6 +709,17 @@ function portFromArgs(args: string[]): number {
   return m ? Number(m[1]) : DEFAULT_PORT;
 }
 
+async function warnStrayServeProcesses(): Promise<void> {
+  const stray = await listStrayServeProcesses();
+  if (stray.length === 0) return;
+  const pids = stray.map((p) => p.pid);
+  process.stderr.write(
+    `warning: ${stray.length} unmanaged ay serve process(es) running (pid ${pids.join(
+      ", ",
+    )}) — they will fight the daemon for the WebRTC room; stop them: kill ${pids.join(" ")}\n`,
+  );
+}
+
 // An explicit webrtc:// URL passed to --webrtc/--share in the daemon's serve args,
 // or undefined for a bare flag (which mints a persisted room instead). Mirrors how
 // cmdServe resolves argv.webrtc/argv.share, but over the raw arg list install holds
@@ -785,6 +798,7 @@ async function cmdServeDaemon(sub: string, args: string[]): Promise<number> {
     }
     if (removed === 0 && failed === 0)
       process.stdout.write(`no '${DAEMON_NAME}' daemon registered with any manager\n`);
+    await warnStrayServeProcesses();
     return failed ? 1 : 0;
   }
 
@@ -893,6 +907,7 @@ async function cmdServeDaemon(sub: string, args: string[]): Promise<number> {
       await spawnExit([mgr.bin, "stop", DAEMON_NAME]);
       await spawnExit([mgr.bin, "delete", DAEMON_NAME]);
     }
+    await warnStrayServeProcesses();
 
     // oxmgr takes the command as one string; pm2 takes the binary plus its
     // args after `--`. Both auto-restart on crash by default (pm2) / via the
@@ -1207,6 +1222,11 @@ export async function cmdServe(rest: string[]): Promise<number> {
       default: false,
       description: "Deprecated no-op — the console can always spawn agents",
     })
+    .option("takeover", {
+      type: "boolean",
+      default: false,
+      description: "If another ay serve already hosts this home's WebRTC room, stop it and take the room",
+    })
     .help(false)
     .version(false)
     .exitProcess(false);
@@ -1259,6 +1279,31 @@ export async function cmdServe(rest: string[]): Promise<number> {
   const wantWebrtc = argv.webrtc !== undefined || argv.share !== undefined;
   const wantHttp = argv.http === true || argv.share !== undefined || argv.webrtc === undefined;
 
+  // Singleton WebRTC host per ~/.agent-yes: a second host joining the SAME
+  // persisted room (~/.agent-yes/.share-room) fights the first over every
+  // viewer connection — seen live as an unloadable share link plus the managed
+  // daemon crash-looping under the health watchdog while an orphaned manual
+  // `ay serve --webrtc` held the room. Fail fast with a pointer to the owner
+  // instead of contending. HTTP-only serves skip this (port collisions already
+  // fail naturally with EADDRINUSE). AGENT_YES_NO_SERVE_LOCK=1 opts out for
+  // exotic multi-room setups (explicit webrtc:// URLs to different rooms).
+  let releaseHostLock: (() => Promise<void>) | null = null;
+  if (wantWebrtc && process.env.AGENT_YES_NO_SERVE_LOCK !== "1") {
+    const lock = await acquireWebrtcHostLock({ takeover: argv.takeover === true });
+    if (!lock.ok) {
+      const o: ServeLockOwner | null = lock.owner;
+      const since = o ? new Date(o.started_at).toLocaleString() : "unknown";
+      process.stderr.write(
+        `ay serve: another instance${o ? ` (pid ${o.pid}, started ${since})` : ""} already hosts this home's WebRTC room\n` +
+          `  ay serve status              # inspect it\n` +
+          `  ay serve --webrtc --takeover # stop it and take the room\n` +
+          `  AGENT_YES_NO_SERVE_LOCK=1    # opt out (multi-room setups only)\n`,
+      );
+      return 1;
+    }
+    releaseHostLock = lock.release;
+  }
+
   if (wantHttp && host !== "127.0.0.1" && host !== "localhost") {
     process.stderr.write(
       "ay serve: warning: binding to non-loopback — ensure your network is trusted or use Tailscale/VPN\n",
@@ -3243,7 +3288,12 @@ export async function cmdServe(rest: string[]): Promise<number> {
       await announce(room, link, false);
     } catch (e) {
       process.stderr.write(`ay serve --webrtc failed: ${(e as Error).message}\n`);
-      if (!wantHttp) return 1; // nothing else is running
+      if (!wantHttp) {
+        // Release promptly so the manager's instant respawn doesn't have to
+        // wait out the stale window to reclaim the host lock.
+        await releaseHostLock?.().catch(() => {});
+        return 1; // nothing else is running
+      }
     }
   }
 
@@ -3275,7 +3325,12 @@ export async function cmdServe(rest: string[]): Promise<number> {
     // Close any scoped single-agent share rooms so viewers get an immediate drop.
     void import("./agentShare.ts").then((m) => m.revokeAllShares()).catch(() => {});
     server?.stop();
-    resolve();
+    // Gate exit on the lock release: resolve() ends cmdServe and the process,
+    // and an un-awaited rm would race that exit — leaving a lock the next host
+    // (a manager's instant respawn) must wait a full stale window to steal.
+    void Promise.resolve(releaseHostLock?.())
+      .catch(() => {})
+      .then(resolve);
   };
   await new Promise<void>((resolve) => {
     process.on("SIGINT", () => shutdown(resolve));

package/ts/serveLock.spec.ts

@@ -0,0 +1,219 @@
+import { mkdtemp, readFile, rm } from "fs/promises";
+import { tmpdir } from "os";
+import path from "path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import {
+  acquireWebrtcHostLock,
+  isOwnerStale,
+  SERVE_LOCK_STALE_MS,
+  type ServeLockOwner,
+} from "./serveLock.ts";
+
+// Guards the single-WebRTC-host invariant: two `ay serve --webrtc` in one home
+// fight over the persisted room (live outage: orphan host + crash-looping
+// managed daemon + unloadable share link). The loser must fail FAST with the
+// owner's identity, and a dead/stale owner must never wedge the next start.
+describe("acquireWebrtcHostLock", () => {
+  let home: string;
+  let savedHome: string | undefined;
+  const releases: Array<() => Promise<void>> = [];
+
+  beforeEach(async () => {
+    home = await mkdtemp(path.join(tmpdir(), "ay-serve-lock-"));
+    savedHome = process.env.AGENT_YES_HOME;
+    process.env.AGENT_YES_HOME = home;
+  });
+
+  afterEach(async () => {
+    for (const r of releases.splice(0)) await r().catch(() => {});
+    if (savedHome === undefined) delete process.env.AGENT_YES_HOME;
+    else process.env.AGENT_YES_HOME = savedHome;
+    await rm(home, { recursive: true, force: true });
+  });
+
+  it("acquires, stamps an owner, and a second acquire fails fast with that owner", async () => {
+    const first = await acquireWebrtcHostLock({ graceMs: 0 });
+    expect(first.ok).toBe(true);
+    if (first.ok) releases.push(first.release);
+
+    const owner = JSON.parse(
+      await readFile(path.join(home, "webrtc-host.lock", "owner.json"), "utf-8"),
+    ) as ServeLockOwner;
+    expect(owner.pid).toBe(process.pid);
+
+    const second = await acquireWebrtcHostLock({ graceMs: 0 });
+    expect(second.ok).toBe(false);
+    if (!second.ok) expect(second.owner?.pid).toBe(process.pid);
+  });
+
+  it("release frees the lock for the next acquire", async () => {
+    const first = await acquireWebrtcHostLock({ graceMs: 0 });
+    expect(first.ok).toBe(true);
+    if (first.ok) await first.release();
+
+    const second = await acquireWebrtcHostLock({ graceMs: 0 });
+    expect(second.ok).toBe(true);
+    if (second.ok) releases.push(second.release);
+  });
+
+  it("steals a stale lock whose heartbeat went quiet (SIGKILLed host)", async () => {
+    // Forge an owner: alive pid but ancient beat — a host whose interval died.
+    const lockDir = path.join(home, "webrtc-host.lock");
+    const { mkdir, writeFile } = await import("fs/promises");
+    await mkdir(lockDir, { recursive: true });
+    await writeFile(
+      path.join(lockDir, "owner.json"),
+      JSON.stringify({
+        pid: process.pid,
+        started_at: Date.now() - 60_000,
+        beat_at: Date.now() - SERVE_LOCK_STALE_MS - 1_000,
+      }),
+    );
+    const got = await acquireWebrtcHostLock({ graceMs: 0 });
+    expect(got.ok).toBe(true);
+    if (got.ok) releases.push(got.release);
+  });
+
+  it("steals a lock whose owner pid is dead", async () => {
+    // A freshly-exited child pid is reliably dead. Spawn the current runtime
+    // (bun or node — both take -e) so this also runs on Windows, via
+    // node:child_process (not Bun.spawn) for the node vitest matrix.
+    const { spawnSync } = await import("node:child_process");
+    const deadPid = spawnSync(process.execPath, ["-e", "0"]).pid!;
+
+    const lockDir = path.join(home, "webrtc-host.lock");
+    const { mkdir, writeFile } = await import("fs/promises");
+    await mkdir(lockDir, { recursive: true });
+    await writeFile(
+      path.join(lockDir, "owner.json"),
+      JSON.stringify({ pid: deadPid, started_at: Date.now(), beat_at: Date.now() }),
+    );
+    const got = await acquireWebrtcHostLock({ graceMs: 0 });
+    expect(got.ok).toBe(true);
+    if (got.ok) releases.push(got.release);
+  });
+});
+
+describe("isOwnerStale", () => {
+  const now = 1_000_000;
+  const owner = (beatAgo: number): ServeLockOwner => ({
+    pid: 4242,
+    started_at: now - 60_000,
+    beat_at: now - beatAgo,
+  });
+
+  it("absent/torn owner is stale (mkdir won but the write died)", () => {
+    expect(isOwnerStale(null, now, () => true)).toBe(true);
+  });
+
+  it("dead pid is stale regardless of heartbeat", () => {
+    expect(isOwnerStale(owner(0), now, () => false)).toBe(true);
+  });
+
+  it("live pid with a fresh beat is NOT stale", () => {
+    expect(isOwnerStale(owner(SERVE_LOCK_STALE_MS - 1), now, () => true)).toBe(false);
+  });
+
+  it("live pid with a quiet heartbeat past the window is stale", () => {
+    expect(isOwnerStale(owner(SERVE_LOCK_STALE_MS + 1), now, () => true)).toBe(true);
+  });
+});
+
+// Coverage for the held-lock lifecycle: heartbeat refresh, thief detection,
+// live-owner takeover, and the bounded grace wait.
+describe("acquireWebrtcHostLock — held-lock lifecycle", () => {
+  let home: string;
+  let savedHome: string | undefined;
+  const releases: Array<() => Promise<void>> = [];
+
+  beforeEach(async () => {
+    home = await mkdtemp(path.join(tmpdir(), "ay-serve-lock2-"));
+    savedHome = process.env.AGENT_YES_HOME;
+    process.env.AGENT_YES_HOME = home;
+  });
+
+  afterEach(async () => {
+    for (const r of releases.splice(0)) await r().catch(() => {});
+    if (savedHome === undefined) delete process.env.AGENT_YES_HOME;
+    else process.env.AGENT_YES_HOME = savedHome;
+    await rm(home, { recursive: true, force: true });
+  });
+
+  const ownerFile = () => path.join(home, "webrtc-host.lock", "owner.json");
+  const readOwnerFile = async () => JSON.parse(await readFile(ownerFile(), "utf-8")) as ServeLockOwner;
+
+  it("heartbeats refresh beat_at while held", async () => {
+    const got = await acquireWebrtcHostLock({ graceMs: 0, beatMs: 40 });
+    expect(got.ok).toBe(true);
+    if (got.ok) releases.push(got.release);
+    const before = (await readOwnerFile()).beat_at;
+    await new Promise((r) => setTimeout(r, 150));
+    const after = (await readOwnerFile()).beat_at;
+    expect(after).toBeGreaterThan(before);
+  });
+
+  it("heartbeat stops itself once a thief owns the file (never clobbers the thief)", async () => {
+    const got = await acquireWebrtcHostLock({ graceMs: 0, beatMs: 40 });
+    expect(got.ok).toBe(true);
+    if (got.ok) releases.push(got.release);
+    const { writeFile: wf } = await import("fs/promises");
+    const thief: ServeLockOwner = { pid: process.pid + 1, started_at: Date.now(), beat_at: 42 };
+    await wf(ownerFile(), JSON.stringify(thief));
+    await new Promise((r) => setTimeout(r, 150));
+    expect((await readOwnerFile()).pid).toBe(thief.pid); // our beat backed off
+    expect((await readOwnerFile()).beat_at).toBe(42);
+  });
+
+  it("takeover stops a live owner and takes the room", async () => {
+    const { spawn } = await import("node:child_process");
+    // Long-lived victim via the current runtime — /bin/sh doesn't exist on win32.
+    const victim = spawn(process.execPath, ["-e", "setTimeout(() => {}, 30000)"], {
+      stdio: "ignore",
+    });
+    const victimPid = victim.pid!;
+    const { mkdir: mkd, writeFile: wf } = await import("fs/promises");
+    await mkd(path.join(home, "webrtc-host.lock"), { recursive: true });
+    await wf(
+      ownerFile(),
+      JSON.stringify({ pid: victimPid, started_at: Date.now(), beat_at: Date.now() }),
+    );
+
+    const got = await acquireWebrtcHostLock({ takeover: true, graceMs: 0, takeoverWaitMs: 100 });
+    expect(got.ok).toBe(true);
+    if (got.ok) releases.push(got.release);
+    expect((await readOwnerFile()).pid).toBe(process.pid);
+    // The victim was killed (SIGTERM or the escalation SIGKILL).
+    await new Promise((r) => setTimeout(r, 100));
+    expect(victim.exitCode !== null || victim.signalCode !== null).toBe(true);
+  });
+
+  it.skipIf(process.platform === "win32")(
+    "escalates to SIGKILL when the owner ignores SIGTERM",
+    async () => {
+    const { spawn } = await import("node:child_process");
+    const stubborn = spawn("/bin/sh", ["-c", "trap '' TERM; sleep 30"], { stdio: "ignore" });
+    const pid = stubborn.pid!;
+    await new Promise((r) => setTimeout(r, 100)); // let the trap install
+    const { mkdir: mkd, writeFile: wf } = await import("fs/promises");
+    await mkd(path.join(home, "webrtc-host.lock"), { recursive: true });
+    await wf(ownerFile(), JSON.stringify({ pid, started_at: Date.now(), beat_at: Date.now() }));
+
+    const got = await acquireWebrtcHostLock({ takeover: true, graceMs: 0, takeoverWaitMs: 200 });
+    expect(got.ok).toBe(true);
+    if (got.ok) releases.push(got.release);
+    await new Promise((r) => setTimeout(r, 100));
+    expect(stubborn.signalCode).toBe("SIGKILL");
+    },
+  );
+
+  it("waits out the grace window against a live owner, then reports it", async () => {
+    const holder = await acquireWebrtcHostLock({ graceMs: 0 });
+    expect(holder.ok).toBe(true);
+    if (holder.ok) releases.push(holder.release);
+    const t0 = Date.now();
+    const got = await acquireWebrtcHostLock({ graceMs: 300 });
+    expect(got.ok).toBe(false);
+    if (!got.ok) expect(got.owner?.pid).toBe(process.pid);
+    expect(Date.now() - t0).toBeGreaterThanOrEqual(250); // actually waited a beat
+  });
+});

package/ts/serveLock.ts

@@ -0,0 +1,172 @@
+import { mkdir, readFile, rm, writeFile, rename } from "fs/promises";
+import path from "path";
+import { agentYesHome } from "./agentYesHome.ts";
+import { isTransientLockMkdirError } from "./notifyStore.ts";
+
+/**
+ * Singleton lock for the WebRTC host role: one `ay serve` host per
+ * ~/.agent-yes. Two hosts sharing the persisted room (~/.agent-yes/.share-room)
+ * fight over every viewer connection — the exact outage seen live: an orphaned
+ * `ay serve --webrtc` from a previous manager era plus a manual run left the
+ * managed daemon crash-looping (12 watchdog restarts) and the share link
+ * unloadable. The lock makes the loser fail FAST with a pointer to the owner
+ * instead of silently contending.
+ *
+ * mkdir-based (atomic on every platform), owner JSON alongside, heartbeat
+ * refresh while held. A stale owner — dead pid, or a heartbeat older than
+ * SERVE_LOCK_STALE_MS (a SIGKILLed host can't clean up) — is stolen, so a
+ * crashed host never wedges the next start.
+ */
+
+export const SERVE_LOCK_STALE_MS = 20_000;
+export const SERVE_LOCK_BEAT_MS = 5_000;
+// Riding out a manager roll-forward: stop-old/start-new overlap briefly, so a
+// new host retries for a grace window before declaring the lock busy.
+export const SERVE_LOCK_GRACE_MS = 12_000;
+
+export type ServeLockOwner = { pid: number; started_at: number; beat_at: number };
+
+export type ServeLockResult =
+  | { ok: true; release: () => Promise<void> }
+  | { ok: false; owner: ServeLockOwner | null };
+
+function lockDir(): string {
+  return path.join(agentYesHome(), "webrtc-host.lock");
+}
+function ownerPath(): string {
+  return path.join(lockDir(), "owner.json");
+}
+
+function pidAlive(pid: number): boolean {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    // EPERM = alive but not ours; only ESRCH means gone.
+    return (e as NodeJS.ErrnoException).code === "EPERM";
+  }
+}
+
+async function readOwner(): Promise<ServeLockOwner | null> {
+  try {
+    const o = JSON.parse(await readFile(ownerPath(), "utf-8")) as ServeLockOwner;
+    return typeof o?.pid === "number" ? o : null;
+  } catch {
+    return null;
+  }
+}
+
+/** Pure staleness decision, exported for tests. */
+export function isOwnerStale(
+  owner: ServeLockOwner | null,
+  now: number,
+  alive: (pid: number) => boolean,
+  staleMs = SERVE_LOCK_STALE_MS,
+): boolean {
+  if (!owner) return true; // torn/absent owner: mkdir won but write died
+  if (!alive(owner.pid)) return true;
+  return now - owner.beat_at > staleMs;
+}
+
+// Atomic owner stamp (temp + rename) so a concurrent reader never parses a
+// torn file as "no owner" while we in fact hold the lock.
+async function stampOwner(startedAt: number): Promise<boolean> {
+  const tmp = `${ownerPath()}.${process.pid}.tmp`;
+  try {
+    await writeFile(
+      tmp,
+      JSON.stringify({ pid: process.pid, started_at: startedAt, beat_at: Date.now() }),
+    );
+    await rename(tmp, ownerPath());
+    return true;
+  } catch {
+    await rm(tmp, { force: true }).catch(() => {});
+    return false;
+  }
+}
+
+/**
+ * Acquire the host lock, retrying for up to `graceMs`. Returns fast on a live
+ * owner once the grace expires (never blocks a daemon boot forever). With
+ * `takeover`, a live owner is SIGTERM'd (then SIGKILL'd) and the lock stolen.
+ */
+export async function acquireWebrtcHostLock(opts?: {
+  takeover?: boolean;
+  graceMs?: number;
+  staleMs?: number;
+  /** Heartbeat cadence override — tests only. */
+  beatMs?: number;
+  /** SIGTERM→SIGKILL escalation wait for --takeover — tests only. */
+  takeoverWaitMs?: number;
+}): Promise<ServeLockResult> {
+  const graceMs = opts?.graceMs ?? SERVE_LOCK_GRACE_MS;
+  const staleMs = opts?.staleMs ?? SERVE_LOCK_STALE_MS;
+  const beatMs = opts?.beatMs ?? SERVE_LOCK_BEAT_MS;
+  const startedAt = Date.now();
+  const deadline = startedAt + graceMs;
+  let tookOver = false;
+  for (;;) {
+    try {
+      await mkdir(lockDir(), { recursive: false });
+      if (!(await stampOwner(startedAt))) {
+        await rm(lockDir(), { recursive: true, force: true }).catch(() => {});
+        return { ok: false, owner: null };
+      }
+      // Heartbeat while held; stops itself if a thief replaced our owner file.
+      const beat = setInterval(() => {
+        void (async () => {
+          const o = await readOwner();
+          if (o?.pid !== process.pid) {
+            clearInterval(beat);
+            return;
+          }
+          await stampOwner(startedAt);
+        })();
+      }, beatMs);
+      if (typeof beat.unref === "function") beat.unref();
+      return {
+        ok: true,
+        release: async () => {
+          clearInterval(beat);
+          if ((await readOwner())?.pid === process.pid)
+            await rm(lockDir(), { recursive: true, force: true }).catch(() => {});
+        },
+      };
+    } catch (e) {
+      const code = (e as NodeJS.ErrnoException).code;
+      if (!isTransientLockMkdirError(code)) throw e;
+      if (code !== "EEXIST") {
+        // win32 mkdir-vs-rm race: dir mid-delete, just retry.
+        await new Promise((r) => setTimeout(r, 25));
+        continue;
+      }
+      const owner = await readOwner();
+      if (isOwnerStale(owner, Date.now(), pidAlive, staleMs)) {
+        await rm(lockDir(), { recursive: true, force: true }).catch(() => {});
+        continue; // re-prove via mkdir — two stealers can't both win
+      }
+      if (opts?.takeover && owner && !tookOver) {
+        tookOver = true; // one shot: never kill a second, newer owner
+        try {
+          process.kill(owner.pid, "SIGTERM");
+        } catch {
+          /* already gone */
+        }
+        // Give it a moment to shut down cleanly (it releases the lock), then
+        // escalate; the loop's stale check mops up whatever remains.
+        await new Promise((r) => setTimeout(r, opts?.takeoverWaitMs ?? 2_000));
+        if (pidAlive(owner.pid)) {
+          try {
+            process.kill(owner.pid, "SIGKILL");
+          } catch {
+            /* gone */
+          }
+        }
+        await rm(lockDir(), { recursive: true, force: true }).catch(() => {});
+        continue;
+      }
+      if (Date.now() >= deadline) return { ok: false, owner };
+      await new Promise((r) => setTimeout(r, 250));
+    }
+  }
+}

package/ts/strayServe.spec.ts

@@ -0,0 +1,50 @@
+import { describe, expect, it } from "vitest";
+import { parseStrayServeProcesses } from "./strayServe.ts";
+
+describe("parseStrayServeProcesses", () => {
+  it("finds foreground ay serve processes", () => {
+    const rows = parseStrayServeProcesses(
+      [
+        "  101 /Users/me/.bun/bin/bun /Users/me/.bun/bin/ay serve --webrtc",
+        "  102 bun /repo/dist/agent-yes.js serve --share",
+      ].join("\n"),
+      { selfPid: 999, parentPid: 998 },
+    );
+
+    expect(rows).toEqual([
+      { pid: 101, command: "/Users/me/.bun/bin/bun /Users/me/.bun/bin/ay serve --webrtc" },
+      { pid: 102, command: "bun /repo/dist/agent-yes.js serve --share" },
+    ]);
+  });
+
+  it("excludes management commands and this process family", () => {
+    const rows = parseStrayServeProcesses(
+      [
+        "  200 ay serve install --webrtc",
+        "  201 ay serve uninstall",
+        "  202 ay serve status",
+        "  203 ay serve logs",
+        "  204 ay serve restart",
+        "  300 ay serve --webrtc",
+        "  301 ay serve --webrtc",
+        "  302 ay serve --webrtc",
+      ].join("\n"),
+      { selfPid: 300, parentPid: 301 },
+    );
+
+    expect(rows).toEqual([{ pid: 302, command: "ay serve --webrtc" }]);
+  });
+
+  it("ignores unrelated commands", () => {
+    const rows = parseStrayServeProcesses(
+      [
+        "  401 ay send serve --webrtc",
+        "  402 agent-yes status",
+        "  403 node ./dist/cli.js share",
+      ].join("\n"),
+      { selfPid: 999, parentPid: 998 },
+    );
+
+    expect(rows).toEqual([]);
+  });
+});

package/ts/strayServe.ts

@@ -0,0 +1,56 @@
+import { liveEnv } from "./nodeRuntime.ts";
+
+export type StrayServeProcess = { pid: number; command: string };
+
+const MANAGEMENT_COMMAND_RE = /\b(?:install|uninstall|status|logs|restart)\b/;
+
+function isServeCommand(command: string): boolean {
+  return (
+    /\bay(?:\.js)?\s+serve\b/.test(command) ||
+    /\bagent-yes(?:\.js)?\s+serve\b/.test(command) ||
+    /\bagent-yes\.js\s+serve\b/.test(command)
+  );
+}
+
+export function parseStrayServeProcesses(
+  psOutput: string,
+  opts: { selfPid: number; parentPid: number },
+): StrayServeProcess[] {
+  const ignoredPids = new Set([opts.selfPid, opts.parentPid]);
+  const processes: StrayServeProcess[] = [];
+
+  for (const line of psOutput.split(/\r?\n/)) {
+    const match = /^\s*(\d+)\s+(.+?)\s*$/.exec(line);
+    if (!match) continue;
+
+    const pid = Number(match[1]);
+    const command = match[2]!;
+    if (!Number.isFinite(pid) || ignoredPids.has(pid)) continue;
+    if (!isServeCommand(command)) continue;
+    if (MANAGEMENT_COMMAND_RE.test(command)) continue;
+
+    processes.push({ pid, command });
+  }
+
+  return processes;
+}
+
+export async function listStrayServeProcesses(): Promise<StrayServeProcess[]> {
+  if (process.platform === "win32") return [];
+
+  try {
+    const ps = Bun.spawn(["ps", "-axo", "pid=,command="], {
+      stdout: "pipe",
+      stderr: "ignore",
+      env: liveEnv(),
+    });
+    const output = await new Response(ps.stdout).text();
+    if ((await ps.exited) !== 0) return [];
+    return parseStrayServeProcesses(output, {
+      selfPid: process.pid,
+      parentPid: process.ppid,
+    });
+  } catch {
+    return [];
+  }
+}

package/dist/SUPPORTED_CLIS-Bb6ATd-k.js

@@ -1,9 +0,0 @@
-import "./ts-C7l18XR8.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CHLdtpqI.js";
-import "./pidStore-BIvsBQ8X.js";
-import "./globalPidIndex-CoNr7tS8.js";
-import "./messageLog-CxrKJj77.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-Cu4aeSNQ.js";
-
-export { SUPPORTED_CLIS };