agent-yes 1.205.0 → 1.207.0

package/dist/{serve-IvOlaL-7.js → serve-B-ZCy67S.js}

@@ -1,15 +1,15 @@
-import "./ts-Dm6jjLwC.js";
+import "./ts-DZWZvbLM.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-BomfUpSo.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-Tgn948GR.js";
+import { r as getInstalledPackage } from "./versionChecker-C2CV9VOX.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-CuBIr-zX.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtHb5b71.js";
 import "./pidStore-BIvsBQ8X.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-CoNr7tS8.js";
 import { r as recordInbox } from "./messageLog-CxrKJj77.js";
 import { t as pgidForWrapper } from "./reaper-BUHCyxdF.js";
 import "./configShared-aKTg-sa5.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C8-qh98a.js";
-import { A as renderRawLog, D as recentMessageEdges, E as readPtysize, L as snapshotStatus, M as resolveOne, O as recentReadEdges, S as listRecords, T as readNotes, U as writeToIpc, b as isUserTyping, f as extractNeedsInput, k as renderLogTailLines, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, q as isTransientLockMkdirError, tt as TYPING_BADGE, u as extractBadges } from "./subcommands-Bs7wJRBB.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-B1CDJwYn.js";
+import { A as renderRawLog, D as recentMessageEdges, E as readPtysize, L as snapshotStatus, M as resolveOne, O as recentReadEdges, S as listRecords, T as readNotes, U as writeToIpc, b as isUserTyping, f as extractNeedsInput, k as renderLogTailLines, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, q as isTransientLockMkdirError, tt as TYPING_BADGE, u as extractBadges } from "./subcommands-6AQ8egRn.js";
 import "./e2e-jb0Hp43q.js";
 import "./webrtcLink-B7REGtK2.js";
 import "./remotes-Cim0dBU7.js";
@@ -43,6 +43,26 @@ import { existsSync, renameSync, watch, writeFileSync } from "node:fs";
 */
 const isTerminalReply = (s) => /^(?:\x1b\[(?:\??\d+(?:;\d+)*R|\?[\d;]*c|>[\d;]*c|\d*n))+$/.test(s);
 
+//#endregion
+//#region ts/statusText.ts
+/**
+* Extract a short "what is the agent doing right now?" line from the rendered
+* terminal screen. Claude Code paints this as a spinner/status line, e.g.
+* "✶ Verifying calendar meetings with real data… (6m 30s · ↓ 19.5k tokens)".
+*/
+const SPINNER_PREFIX = /^[\u2800-\u28ff✶✻✢✳✽✦✧✩✷✸✹✺✼·•●◐◓◒◑]\s+/u;
+const CONTROL = /[\x00-\x1f\x7f-\x9f]/g;
+function parseStatusText(lines) {
+	for (let i = lines.length - 1; i >= 0; i--) {
+		const line = lines[i]?.replace(CONTROL, "").trim();
+		if (!line || line.length < 3) continue;
+		if (!SPINNER_PREFIX.test(line)) continue;
+		if (/^(?:[•·]\s*)?(?:esc|ctrl|enter|return|shift|tab)\b/i.test(line)) continue;
+		return line.slice(0, 220).trim();
+	}
+	return null;
+}
+
 //#endregion
 //#region ts/serveLock.ts
 /**
@@ -187,6 +207,48 @@ async function acquireWebrtcHostLock(opts) {
 	}
 }
 
+//#endregion
+//#region ts/sizeNego.ts
+/** Reject junk caps (a viewer mid-layout can report 0×0 or absurd numbers). */
+const CAP_MIN_COLS = 20;
+const CAP_MIN_ROWS = 5;
+const CAP_MAX_COLS = 500;
+const CAP_MAX_ROWS = 200;
+/** Never negotiate below this — TUIs (claude, codex) break down when the grid
+* gets absurdly narrow, so a tiny watch-sized viewer can't wedge the agent. */
+const NEGO_FLOOR_COLS = 40;
+const NEGO_FLOOR_ROWS = 10;
+/** Parse a presence-reported cap into a sane SizeCap, or null if unusable. */
+function sanitizeCap(cap) {
+	if (typeof cap !== "object" || cap === null) return null;
+	const c = Math.floor(Number(cap.cols) || 0);
+	const r = Math.floor(Number(cap.rows) || 0);
+	if (c < CAP_MIN_COLS || c > CAP_MAX_COLS) return null;
+	if (r < CAP_MIN_ROWS || r > CAP_MAX_ROWS) return null;
+	return {
+		cols: c,
+		rows: r
+	};
+}
+/**
+* Elementwise minimum over the live viewers' capacities, clamped to the floor.
+* Returns null when no viewer reports a capacity — meaning "withdraw the
+* negotiated size, let the real tty size rule again".
+*/
+function negotiateSize(caps) {
+	let cols = Infinity;
+	let rows = Infinity;
+	for (const cap of caps) {
+		if (cap.cols < cols) cols = cap.cols;
+		if (cap.rows < rows) rows = cap.rows;
+	}
+	if (!Number.isFinite(cols) || !Number.isFinite(rows)) return null;
+	return {
+		cols: Math.max(NEGO_FLOOR_COLS, cols),
+		rows: Math.max(NEGO_FLOOR_ROWS, rows)
+	};
+}
+
 //#endregion
 //#region ts/strayServe.ts
 const MANAGEMENT_COMMAND_RE = /\b(?:install|uninstall|status|logs|restart)\b/;
@@ -236,7 +298,49 @@ async function listStrayServeProcesses() {
 
 //#endregion
 //#region ts/serve.ts
-const DEFAULT_PORT = 7432;
+const DEFAULT_PORT = 0;
+const PORTLESS_APP_NAME = "agent-yes";
+const PORTLESS_CHILD_ENV = "AGENT_YES_PORTLESS_CHILD";
+function portlessConsoleUrl(token) {
+	return portlessConsoleUrlForOrigin(process.env.PORTLESS_URL?.replace(/\/$/, "") || `https://${PORTLESS_APP_NAME}.localhost`, token);
+}
+function portlessConsoleUrlForOrigin(origin, token) {
+	return `${origin}${token ? `/#k=${encodeURIComponent(token)}` : "/"}`;
+}
+async function resolvedPortlessConsoleUrl(token) {
+	if (process.env.PORTLESS_URL) return portlessConsoleUrl(token);
+	try {
+		const port = Number((await readFile(path.join(homedir(), ".portless", "proxy.port"), "utf-8")).trim());
+		if (Number.isInteger(port) && port > 0) return portlessConsoleUrlForOrigin(`https://${PORTLESS_APP_NAME}.localhost${port === 443 ? "" : `:${port}`}`, token);
+	} catch {}
+	return portlessConsoleUrl(token);
+}
+async function runWithPortless(rest) {
+	const portless = Bun.which("portless");
+	if (!portless) {
+		process.stderr.write("ay serve: Portless is required for local HTTPS. Install it with: npm install -g portless\n");
+		return 1;
+	}
+	const script = process.argv[1];
+	const self = script && /\.[cm]?[jt]s$/.test(script) ? [process.execPath, script] : [process.execPath];
+	return await Bun.spawn([
+		portless,
+		PORTLESS_APP_NAME,
+		...self,
+		"serve",
+		...rest
+	], {
+		stdio: [
+			"inherit",
+			"inherit",
+			"inherit"
+		],
+		env: {
+			...liveEnv(),
+			[PORTLESS_CHILD_ENV]: "1"
+		}
+	}).exited ?? 1;
+}
 /**
 * Normalize a user-supplied GitHub-ish source into the standard
 * `<owner>/<repo>/tree/<branch>` path that codehost/provision's `parseSpec`
@@ -325,7 +429,7 @@ function loginShellEnv() {
 		const delim = "_AY_SHELL_ENV_DELIM_";
 		const out = Bun.spawnSync([
 			shell,
-			"-ilc",
+			"-lc",
 			`printf %s "${delim}"; env -0; printf %s "${delim}"`
 		], {
 			stdin: "ignore",
@@ -710,7 +814,18 @@ async function readDaemonServeArgs(mgr) {
 }
 function portFromArgs(args) {
 	const m = /--port[=\s](\d+)/.exec(args.join(" "));
-	return m ? Number(m[1]) : DEFAULT_PORT;
+	return m ? Number(m[1]) : null;
+}
+function argsUsePortless(args) {
+	return (args.some((a) => a.startsWith("--http") || a.startsWith("--share")) || !args.some((a) => a.startsWith("--webrtc"))) && portFromArgs(args) === null;
+}
+async function portlessAppPort() {
+	try {
+		const route = JSON.parse(await readFile(path.join(homedir(), ".portless", "routes.json"), "utf-8")).find((r) => r.hostname === `${PORTLESS_APP_NAME}.localhost`);
+		return typeof route?.port === "number" ? route.port : null;
+	} catch {
+		return null;
+	}
 }
 async function warnStrayServeProcesses() {
 	const stray = await listStrayServeProcesses();
@@ -731,6 +846,7 @@ function explicitWebrtcUrl(args) {
 	}
 }
 async function fetchDaemonVersion(port, token) {
+	if (port === null) return null;
 	try {
 		const r = await fetch(`http://127.0.0.1:${port}/api/version`, {
 			headers: { Authorization: `Bearer ${token}` },
@@ -818,7 +934,7 @@ async function cmdServeDaemon(sub, args) {
 		let shareLink = null;
 		let shareLinkMinted = false;
 		if (webrtcDaemon) try {
-			const { loadOrCreateShareRoom, shareLinkFromRoomUrl } = await import("./share-Ciw1mWVN.js");
+			const { loadOrCreateShareRoom, shareLinkFromRoomUrl } = await import("./share-_QYjPN7q.js");
 			const explicit = explicitWebrtcUrl(effArgs);
 			shareLink = shareLinkFromRoomUrl(explicit ?? await loadOrCreateShareRoom());
 			shareLinkMinted = !explicit;
@@ -833,7 +949,7 @@ async function cmdServeDaemon(sub, args) {
 		};
 		if (priorArgs !== null) {
 			const sameConfig = JSON.stringify(effArgs) === JSON.stringify(priorArgs);
-			const runningVer = await fetchDaemonVersion(portFromArgs(effArgs), token);
+			const runningVer = await fetchDaemonVersion(argsUsePortless(effArgs) ? await portlessAppPort() : portFromArgs(effArgs), token);
 			if (runningVer === current && sameConfig) {
 				await ensureBootAutostart(mgr);
 				process.stdout.write(`'${DAEMON_NAME}' already running v${current} (up to date)\n`);
@@ -900,7 +1016,8 @@ async function cmdServeDaemon(sub, args) {
 		}).exited;
 		if (code === 0) {
 			const onBoot = await ensureBootAutostart(mgr);
-			const port = portFromArgs(effArgs);
+			const port = argsUsePortless(effArgs) ? await portlessAppPort() : portFromArgs(effArgs);
+			const localUrl = argsUsePortless(effArgs) ? await resolvedPortlessConsoleUrl(token) : null;
 			const httpish = effArgs.some((a) => a.startsWith("--http") || a.startsWith("--share")) || !effArgs.some((a) => a.startsWith("--webrtc"));
 			process.stdout.write(`\n${priorArgs !== null ? `rolled '${DAEMON_NAME}' forward to` : `installed '${DAEMON_NAME}' as a daemon via ${mgr.id} —`} v${current}\n`);
 			if (mgr.id === "oxmgr" && process.platform === "win32") process.stdout.write(onBoot ? `start-on-login: enabled (Task Scheduler ONLOGON runs \`oxmgr daemon run\`)\n` : `start-on-login: not registered — run \`oxmgr service install\` to enable\n`);
@@ -909,8 +1026,11 @@ async function cmdServeDaemon(sub, args) {
 			else process.stdout.write(onBoot ? `start-on-boot: enabled (pm2 startup registered with the system init)\n` : `start-on-boot: not registered — run \`pm2 startup\` (may need sudo) to enable\n`);
 			process.stdout.write(`token: ${token}\n\n`);
 			if (httpish) {
-				process.stdout.write(`  ay ls   ${token}@<host>:${port}\n`);
-				process.stdout.write(`  ay remote add <alias> http://${token}@<host>:${port}\n`);
+				if (argsUsePortless(effArgs)) process.stdout.write(`  web console: ${localUrl}\n`);
+				else if (port !== null) {
+					process.stdout.write(`  ay ls   ${token}@<host>:${port}\n`);
+					process.stdout.write(`  ay remote add <alias> http://${token}@<host>:${port}\n`);
+				}
 			}
 			process.stdout.write(`  ay serve logs                # view server logs\n`);
 			process.stdout.write(`  ay serve uninstall           # remove daemon\n`);
@@ -941,7 +1061,9 @@ async function cmdServeStatus(args) {
 	const daemonArgs = mgr ? await readDaemonServeArgs(mgr) : null;
 	const installed = daemonArgs !== null;
 	const a = daemonArgs ?? [];
-	const port = portFromArgs(a);
+	const local = argsUsePortless(a);
+	const port = local ? await portlessAppPort() : portFromArgs(a);
+	const localUrl = local ? await resolvedPortlessConsoleUrl(token ?? void 0) : null;
 	const webrtcish = a.some((x) => x.startsWith("--webrtc") || x.startsWith("--share"));
 	const httpish = a.some((x) => x.startsWith("--http") || x.startsWith("--share")) || !a.some((x) => x.startsWith("--webrtc"));
 	const mode = httpish && webrtcish ? "http+webrtc" : webrtcish ? "webrtc" : "http";
@@ -953,6 +1075,7 @@ async function cmdServeStatus(args) {
 			installed,
 			mode,
 			port: httpish ? port : null,
+			localUrl: httpish ? localUrl : null,
 			reachable: runningVersion !== null,
 			runningVersion,
 			currentVersion: current,
@@ -968,18 +1091,23 @@ async function cmdServeStatus(args) {
 	w(`manager:      ${mgr ? mgr.id : "none — install pm2 or oxmgr to daemonize"}`);
 	if (installed) {
 		w(`installed:    yes (via ${mgr.id})`);
-		w(`mode:         ${mode}${httpish ? `  (port ${port})` : ""}`);
+		w(`mode:         ${mode}${httpish ? local ? `  (${localUrl})` : `  (port ${port})` : ""}`);
 		if (a.length) w(`args:         ${a.join(" ")}`);
 	} else w(`installed:    no — start a daemon with:  ay serve install [--share]`);
-	if (runningVersion !== null) w(`http api:     reachable on 127.0.0.1:${port} — v${runningVersion} (${runningVersion === current ? "up to date" : `outdated (current v${current})`})`);
-	else if (mode === "webrtc") w(`http api:     none (webrtc-only)`);
-	else w(`http api:     not reachable on 127.0.0.1:${port} (not running)`);
+	if (runningVersion !== null) {
+		const tag = runningVersion === current ? "up to date" : `outdated (current v${current})`;
+		w(`http api:     reachable ${local ? `via ${localUrl}` : `on 127.0.0.1:${port}`} — v${runningVersion} (${tag})`);
+	} else if (mode === "webrtc") w(`http api:     none (webrtc-only)`);
+	else w(`http api:     not reachable ${local ? `via ${localUrl}` : `on 127.0.0.1:${port}`} (not running)`);
 	w(`token:        ${token ?? "(none yet — created on first serve)"}`);
 	if (shareLink) w(`share link:   ${shareLink}`);
 	if (token && httpish) {
 		w();
-		w(`connect:  ay ls   ${token}@<host>:${port}`);
-		w(`          ay remote add <alias> http://${token}@<host>:${port}`);
+		if (local) w(`console:  ${localUrl}`);
+		else if (port !== null) {
+			w(`connect:  ay ls   ${token}@<host>:${port}`);
+			w(`          ay remote add <alias> http://${token}@<host>:${port}`);
+		}
 	}
 	return 0;
 }
@@ -1000,7 +1128,13 @@ Modes (default: --http):
   --share [URL]     Legacy alias for --http --webrtc
 
 Options:
-  --port N          Port to listen on (default: ${DEFAULT_PORT})\n  --host HOST       Interface to bind (default: 127.0.0.1; use 0.0.0.0 to expose)\n  --token TOKEN     Auth token (auto-generated and saved if omitted)\n  -d, --daemon      Install these flags as a background daemon (pm2/oxmgr)\n                    (same as: ay serve install <flags>)\n  --allow-spawn     Deprecated no-op — the console can always spawn agents\n  --tls-cert FILE   TLS certificate PEM\n  --tls-key  FILE   TLS private key PEM\n\nSubcommands:\n  ay serve install    install as background daemon (oxmgr; pm2 fallback on Windows without the winfix build)\n  ay serve status     show daemon/server status (add --json for scripts)\n  ay serve uninstall  remove daemon\n  ay serve logs       view daemon logs\n\nOnce running, connect from another machine:\n  ay ls   <token>@<host>:${DEFAULT_PORT}\n  ay remote add <alias> http://<token>@<host>:${DEFAULT_PORT}\n`);
+  --port N          Bypass Portless and listen on a fixed HTTP port
+  --host HOST       Interface to bind (default: 127.0.0.1; use 0.0.0.0 to expose)
+  --token TOKEN     Auth token (auto-generated and saved if omitted)
+  -d, --daemon      Install these flags as a background daemon (pm2/oxmgr)
+                    (same as: ay serve install <flags>)
+  --local           Explicitly use Portless (the default for HTTP mode)
+                    ${portlessConsoleUrl()}\n  --allow-spawn     Deprecated no-op — the console can always spawn agents\n  --tls-cert FILE   TLS certificate PEM\n  --tls-key  FILE   TLS private key PEM\n\nSubcommands:\n  ay serve install    install as background daemon (oxmgr; pm2 fallback on Windows without the winfix build)\n  ay serve status     show daemon/server status (add --json for scripts)\n  ay serve uninstall  remove daemon\n  ay serve logs       view daemon logs\n\nOnce running, connect from another machine:\n  ay ls   <token>@<host>:<port>\n  ay remote add <alias> http://<token>@<host>:<port>\n`);
 		return 0;
 	}
 	const sub = rest[0];
@@ -1020,8 +1154,7 @@ Options:
 	if (sub === "install" || sub === "uninstall" || sub === "logs") return cmdServeDaemon(sub, rest.slice(1));
 	const argv = await yargs(rest).usage("Usage: ay serve [options]").option("port", {
 		type: "number",
-		default: DEFAULT_PORT,
-		description: "Port to listen on"
+		description: "Bypass Portless and listen on a fixed port"
 	}).option("host", {
 		type: "string",
 		default: "127.0.0.1",
@@ -1049,6 +1182,10 @@ Options:
 		type: "boolean",
 		default: false,
 		description: "Install as a background daemon (same as: ay serve install <flags>)"
+	}).option("local", {
+		type: "boolean",
+		default: false,
+		description: `Use Portless at ${portlessConsoleUrl()} (default for HTTP mode)`
 	}).option("allow-spawn", {
 		type: "boolean",
 		default: false,
@@ -1059,13 +1196,22 @@ Options:
 		description: "If another ay serve already hosts this home's WebRTC room, stop it and take the room"
 	}).help(false).version(false).exitProcess(false).parseAsync();
 	if (argv.daemon) return cmdServeDaemon("install", rest.filter((a) => a !== "--daemon" && a !== "-d"));
+	const wantWebrtc = argv.webrtc !== void 0 || argv.share !== void 0;
+	const wantHttp = argv.http === true || argv.share !== void 0 || argv.webrtc === void 0;
+	const fixedPort = typeof argv.port === "number";
+	const usePortless = wantHttp && !fixedPort;
+	if (argv.local === true && fixedPort) {
+		process.stderr.write("ay serve: --local and --port cannot be used together\n");
+		return 1;
+	}
+	if (usePortless && process.env[PORTLESS_CHILD_ENV] !== "1" && process.env.PORTLESS !== "0") return runWithPortless(rest);
 	const stray = argv._.map(String);
 	if (stray.length) {
 		const hint = stray.includes("share") ? " (did you mean --share?)" : "";
 		process.stderr.write(`ay serve: ignoring unknown argument${stray.length > 1 ? "s" : ""}: ${stray.join(" ")}${hint}\n`);
 	}
 	delete process.env.AGENT_YES_PID;
-	const port = argv.port ?? DEFAULT_PORT;
+	const port = argv.port ?? (Number(process.env.PORT) || DEFAULT_PORT);
 	const host = argv.host ?? "127.0.0.1";
 	const tokenFlag = typeof argv.token === "string" ? argv.token : void 0;
 	const certPath = typeof argv["tls-cert"] === "string" ? argv["tls-cert"] : void 0;
@@ -1076,8 +1222,6 @@ Options:
 	}
 	const useHttps = !!(certPath && keyPath);
 	const scheme = useHttps ? "https" : "http";
-	const wantWebrtc = argv.webrtc !== void 0 || argv.share !== void 0;
-	const wantHttp = argv.http === true || argv.share !== void 0 || argv.webrtc === void 0;
 	let releaseHostLock = null;
 	if (wantWebrtc && process.env.AGENT_YES_NO_SERVE_LOCK !== "1") {
 		const lock = await acquireWebrtcHostLock({ takeover: argv.takeover === true });
@@ -1177,6 +1321,25 @@ Options:
 			return [];
 		}
 	};
+	const statusTextCache = /* @__PURE__ */ new Map();
+	const logStatusText = async (logFile) => {
+		if (!logFile) return null;
+		try {
+			const { size, mtimeMs } = await stat(logFile);
+			const hit = statusTextCache.get(logFile);
+			if (hit && hit.size === size && hit.mtimeMs === mtimeMs) return hit.statusText;
+			const lines = await renderLogTailLines(logFile, 40);
+			const statusText = lines ? parseStatusText(lines) : null;
+			statusTextCache.set(logFile, {
+				size,
+				mtimeMs,
+				statusText
+			});
+			return statusText;
+		} catch {
+			return null;
+		}
+	};
 	const niCache = /* @__PURE__ */ new Map();
 	const logNeedsInput = async (logFile, cli) => {
 		if (!logFile) return null;
@@ -1338,6 +1501,7 @@ Options:
 			status: status === "exited" ? status : r.unresponsive ? "stuck" : question ? "needs_input" : status,
 			question,
 			title: await logTitle(r.log_file),
+			status_text: status === "exited" ? null : await logStatusText(r.log_file),
 			git: status === "exited" ? null : await gitStatus(r.cwd),
 			tasks: status === "exited" ? null : await logTasks(r.log_file),
 			badges: status === "exited" ? [] : await logBadges(r.log_file).then(async (b) => await isUserTyping(r.pid) ? [...b, TYPING_BADGE.id] : b)
@@ -1345,6 +1509,53 @@ Options:
 	};
 	const presence = /* @__PURE__ */ new Map();
 	const PRESENCE_TTL_MS = 12e3;
+	const negoApplied = /* @__PURE__ */ new Map();
+	const negoTimers = /* @__PURE__ */ new Map();
+	const NEGO_DEBOUNCE_MS = 350;
+	const winsizePathFor = (pid) => path.join(process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"), "winsize", String(pid));
+	const liveCapsFor = (pid) => {
+		const now = Date.now();
+		const caps = [];
+		for (const v of presence.values()) if (now - v.ts <= PRESENCE_TTL_MS && String(v.agent) === String(pid) && v.cap) caps.push(v.cap);
+		return caps;
+	};
+	const applyNego = async (pid) => {
+		negoTimers.delete(pid);
+		const eff = negotiateSize(liveCapsFor(pid));
+		const file = winsizePathFor(pid);
+		const prev = negoApplied.get(pid);
+		try {
+			if (eff) {
+				if (prev && prev.cols === eff.cols && prev.rows === eff.rows) return;
+				const content = `${eff.cols} ${eff.rows} ${Date.now()}\n`;
+				await mkdir(path.dirname(file), { recursive: true });
+				await writeFile(file, content);
+				negoApplied.set(pid, {
+					...eff,
+					content
+				});
+			} else {
+				if (!prev) return;
+				negoApplied.delete(pid);
+				try {
+					if (await readFile(file, "utf-8") !== prev.content) return;
+					await unlink(file);
+				} catch {
+					return;
+				}
+			}
+			try {
+				process.kill(pid, "SIGWINCH");
+			} catch {}
+		} catch {}
+	};
+	const scheduleNego = (pid) => {
+		if (!Number.isFinite(pid) || pid <= 0 || negoTimers.has(pid)) return;
+		negoTimers.set(pid, setTimeout(() => void applyNego(pid), NEGO_DEBOUNCE_MS));
+	};
+	setInterval(() => {
+		for (const pid of negoApplied.keys()) scheduleNego(pid);
+	}, 5e3);
 	const apiFetch = async (req) => {
 		if (!checkAuth(req, token)) return new Response("Unauthorized", { status: 401 });
 		const url = new URL(req.url);
@@ -1657,7 +1868,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-CSkP2mkD.js");
+			const ws = await import("./ws-CGNmxCPD.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -1677,7 +1888,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-CSkP2mkD.js");
+			const ws = await import("./ws-CGNmxCPD.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -1742,7 +1953,8 @@ Options:
 				return Response.json({
 					pid: record.pid,
 					cols: size?.cols ?? null,
-					rows: size?.rows ?? null
+					rows: size?.rows ?? null,
+					nego: true
 				});
 			} catch (e) {
 				return new Response(e.message, { status: 404 });
@@ -2023,6 +2235,7 @@ Options:
 			}
 			const viewer = String(b.viewer ?? "").slice(0, 64);
 			if (!viewer) return new Response("missing viewer", { status: 400 });
+			const prevAgent = presence.get(viewer)?.agent;
 			if (b.agent == null) presence.delete(viewer);
 			else presence.set(viewer, {
 				viewer,
@@ -2030,8 +2243,11 @@ Options:
 				cols: Math.max(0, Math.floor(Number(b.cols) || 0)),
 				rows: Math.max(0, Math.floor(Number(b.rows) || 0)),
 				sel: typeof b.sel === "string" ? b.sel.slice(0, 200) : null,
+				cap: sanitizeCap(b.cap),
 				ts: Date.now()
 			});
+			if (b.agent != null) scheduleNego(Number(b.agent));
+			if (prevAgent != null && String(prevAgent) !== String(b.agent ?? "")) scheduleNego(Number(prevAgent));
 			return new Response(null, { status: 204 });
 		}
 		if (req.method === "GET" && p === "/api/presence") {
@@ -2233,7 +2449,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-99IGGOkv.js");
+				const { createScopedShare } = await import("./agentShare-DdEbHtAn.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -2248,12 +2464,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-99IGGOkv.js");
+			const { listShares } = await import("./agentShare-DdEbHtAn.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-99IGGOkv.js");
+			const { revokeShare } = await import("./agentShare-DdEbHtAn.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -2369,17 +2585,18 @@ Options:
 			throw e;
 		}
 		if (server) {
+			const listenPort = server.port;
 			const uiHost = host === "0.0.0.0" || host === "::" ? "127.0.0.1" : host;
-			process.stdout.write(`ay serve  ${scheme}://${host}:${port}\n`);
+			process.stdout.write(`ay serve  ${scheme}://${host}:${listenPort}\n`);
 			process.stdout.write(`token:    ${token}\n\n`);
 			process.stdout.write(`web console (token in the # is eaten on open):\n`);
-			process.stdout.write(`  ${scheme}://${uiHost}:${port}/#k=${token}\n\n`);
+			process.stdout.write(`  ${usePortless ? portlessConsoleUrl(token) : `${scheme}://${uiHost}:${listenPort}/#k=${token}`}\n\n`);
 			process.stdout.write(`connect from another machine:\n`);
-			process.stdout.write(`  ay ls   ${token}@<host>:${port}\n`);
-			process.stdout.write(`  ay tail ${token}@<host>:${port}:<keyword>\n`);
-			process.stdout.write(`  ay send ${token}@<host>:${port}:<keyword> "message"\n\n`);
+			process.stdout.write(`  ay ls   ${token}@<host>:${listenPort}\n`);
+			process.stdout.write(`  ay tail ${token}@<host>:${listenPort}:<keyword>\n`);
+			process.stdout.write(`  ay send ${token}@<host>:${listenPort}:<keyword> "message"\n\n`);
 			process.stdout.write(`save as alias:\n`);
-			process.stdout.write(`  ay remote add <alias> ${scheme}://${token}@<host>:${port}\n\n`);
+			process.stdout.write(`  ay remote add <alias> ${scheme}://${token}@<host>:${listenPort}\n\n`);
 			if (!useHttps) process.stdout.write("for HTTPS: ay serve --tls-cert cert.pem --tls-key key.pem\n  openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes -subj '/CN=localhost'\n\n");
 		}
 	}
@@ -2388,7 +2605,7 @@ Options:
 		const webrtcVal = argv.webrtc ?? argv.share;
 		const explicitUrl = typeof webrtcVal === "string" && webrtcVal.startsWith("webrtc://") ? webrtcVal : void 0;
 		try {
-			const { startShare, loadOrCreateShareRoom } = await import("./share-Ciw1mWVN.js");
+			const { startShare, loadOrCreateShareRoom } = await import("./share-_QYjPN7q.js");
 			const linkFile = path.join(process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"), ".share-link");
 			const announce = async (room, link, rotated) => {
 				const lead = rotated ? "the room was rejected by signaling (stale generation) — rotated to a fresh link" : "shared over WebRTC — open this link (the token is eaten from the URL on open)";
@@ -2438,7 +2655,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-99IGGOkv.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-DdEbHtAn.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -2451,4 +2668,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-IvOlaL-7.js.map
+//# sourceMappingURL=serve-B-ZCy67S.js.map

package/dist/{setup-BaKdS-3i.js → setup-D6UBzk4-.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-IvOlaL-7.js");
+	const { cmdServe } = await import("./serve-B-ZCy67S.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-BaKdS-3i.js.map
+//# sourceMappingURL=setup-D6UBzk4-.js.map

package/dist/{share-Ciw1mWVN.js → share-_QYjPN7q.js}

@@ -1,4 +1,4 @@
 import "./e2e-jb0Hp43q.js";
-import { n as shareLinkFromRoomUrl, r as startShare, t as loadOrCreateShareRoom } from "./share-BfIU8t_h.js";
+import { n as shareLinkFromRoomUrl, r as startShare, t as loadOrCreateShareRoom } from "./share-vchIyVd8.js";
 
 export { loadOrCreateShareRoom, shareLinkFromRoomUrl, startShare };