agent-yes 1.232.0 → 1.233.0

package/dist/{SUPPORTED_CLIS-D6J7QvLL.js → SUPPORTED_CLIS-RkOZNL1b.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-Bb3CeS6-.js";
+import { t as CLIS_CONFIG } from "./ts-DFQbSTC9.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-D6J7QvLL.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-RkOZNL1b.js.map

package/dist/{SUPPORTED_CLIS-BP1BBtWO.js → SUPPORTED_CLIS-buOGuqV8.js}

@@ -1,11 +1,11 @@
-import "./ts-Bb3CeS6-.js";
+import "./ts-DFQbSTC9.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-SHk3Fuvm.js";
+import "./versionChecker-B2jX7H2o.js";
 import "./todoAutomation-x6guaQXc.js";
 import "./JsonlStore-CWOA3aDH.js";
 import "./globalPidIndex-Ca4sTr1b.js";
 import "./pidStore-Hjba3K6Q.js";
 import "./messageLog-zVGWLX7w.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-D6J7QvLL.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-RkOZNL1b.js";
 
 export { SUPPORTED_CLIS };

package/dist/{agentShare-CDMFg0Rj.js → agentShare-CRCyd-8k.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-Ca4sTr1b.js";
 import "./messageLog-zVGWLX7w.js";
 import "./e2e-CYlKpfxa.js";
 import "./configShared-BXz2vi4Q.js";
-import { N as resolveOne } from "./subcommands-CXCoOuN6.js";
+import { N as resolveOne } from "./subcommands-BtMmBJnC.js";
 import "./webrtcLink-CEYNs0pt.js";
 import "./remotes-BM3Zm8Wh.js";
 import { a as startShare } from "./share-D4K0JnHg.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-CDMFg0Rj.js.map
+//# sourceMappingURL=agentShare-CRCyd-8k.js.map

package/dist/{callback-sBpq-n_6.js → callback-l6t5RRxK.js}

@@ -3,10 +3,10 @@ import "./globalPidIndex-Ca4sTr1b.js";
 import "./messageLog-zVGWLX7w.js";
 import "./e2e-CYlKpfxa.js";
 import "./configShared-BXz2vi4Q.js";
-import "./subcommands-CXCoOuN6.js";
+import "./subcommands-BtMmBJnC.js";
 import "./webrtcLink-CEYNs0pt.js";
 import "./remotes-BM3Zm8Wh.js";
 import "./callbackCore-Me97qn68.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-B1kcLI1k.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-uKj5PzZf.js";
 
 export { cmdCallback };

package/dist/{callback-B1kcLI1k.js → callback-uKj5PzZf.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
-import { N as resolveOne } from "./subcommands-CXCoOuN6.js";
+import { N as resolveOne } from "./subcommands-BtMmBJnC.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Me97qn68.js";
 import { randomBytes } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-Bv_twI1k.js");
+		const { resolveLocalServeUrl } = await import("./serve-BIVtKYUa.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-B1kcLI1k.js.map
+//# sourceMappingURL=callback-uKj5PzZf.js.map

package/dist/{channels-Boi4aNiY.js → channels-Ddj0hWZB.js}

@@ -467,19 +467,49 @@ async function cmdChPipe(cwd, args) {
 	rl.close();
 	return 0;
 }
+/**
+* The embed `<script>` snippet — a script (NOT an iframe) that loads the AyChannel
+* browser lib and mounts the floating widget in the page, so the console's
+* `frame-ancestors` CSP is irrelevant. Three modes trade off where the secret lives:
+* baked in (`live`), injected at runtime (`placeholder`), or never present because
+* the channel is derived from the (public) page URL (`from-url`) — the last is the
+* safe default for a STATIC public page, since no token ever lands in the file.
+*/
+function buildEmbedSnippet(host, topic, mode) {
+	const imp = `  import AyChannel from "https://${host}/w/channels.js";\n`;
+	if (mode.kind === "from-url") return `<!-- ay channel: ${topic} — channel derived from the page URL; no secret in this file -->\n<script type="module">\n${imp}  AyChannel.fromTopic(location.href).then((c) => c.mount());\n<\/script>\n`;
+	if (mode.kind === "placeholder") return `<!-- ay channel: ${topic} — set window.AY_CH_LINK to the invite at runtime; do NOT commit the secret -->\n<script type="module">\n${imp}  new AyChannel(window.AY_CH_LINK).mount();\n<\/script>\n`;
+	return `<!-- ay channel: ${topic} — this snippet contains a LIVE secret; anyone who reads it can join -->\n<script type="module">\n${imp}  new AyChannel(${JSON.stringify(mode.link)}).mount();\n<\/script>\n`;
+}
 async function cmdChEmbed(cwd, args) {
-	const { flags, positional } = parseFlags(args, { host: "value" });
+	const { flags, positional } = parseFlags(args, {
+		host: "value",
+		placeholder: "bool",
+		"from-url": "bool"
+	});
 	const topic = positional[0];
-	if (!topic || positional.length > 1) throw new Error("usage: ay ch embed <topic> [--host <console-host>]");
+	if (!topic || positional.length > 1) throw new Error("usage: ay ch embed <topic> [--host H] [--placeholder | --from-url]");
+	if (flags.placeholder && flags["from-url"]) throw new Error("--placeholder and --from-url are mutually exclusive");
 	const { entry } = await resolveChannel(await readRegistry(cwd), topic);
 	if (!entry) throw new Error(`join "${topic}" before embedding: ay ch join <link>`);
-	const consoleHost = typeof flags.host === "string" ? flags.host : "agent-yes.com";
-	const link = formatChannelLink({
+	const host = typeof flags.host === "string" ? flags.host : "agent-yes.com";
+	const invite = formatChannelLink({
 		sighost: entry.sighost,
 		room: entry.room,
 		s: entry.s
 	});
-	process.stdout.write(`<!-- ay channel: ${topic} — anyone who can read this snippet can join -->\n<script type="module">\n  import AyChannel from "https://${consoleHost}/w/channels.js";\n  new AyChannel(${JSON.stringify(link)}).mount();\n<\/script>\n`);
+	const mode = flags["from-url"] ? { kind: "from-url" } : flags.placeholder ? { kind: "placeholder" } : {
+		kind: "live",
+		link: invite
+	};
+	process.stdout.write(buildEmbedSnippet(host, topic, mode));
+	if (mode.kind === "from-url") process.stderr.write("\n  URL-derived: no secret in the snippet — the channel is computed from the page URL,\n  so a committed/static file carries no token (ideal for static public pages like\n  Cloudflare Pages). Anyone who opens the same URL joins — that IS the membership.\n");
+	else if (mode.kind === "placeholder") process.stderr.write(`
+  Placeholder: the invite is NOT in the snippet — set window.AY_CH_LINK at runtime
+  (server-rendered / env), so a committed file carries no secret. This needs a
+  runtime; on a STATIC host use --from-url instead. Invite to inject: ${invite}\n`);
+	else process.stderr.write("\n  ⚠ This snippet embeds a LIVE channel secret (read+write). Anyone who can read the\n    page source can join. Do NOT commit it to a public or deploy-bound file. For a\n    static public page use --from-url (no secret in the file); for a server-rendered\n    page use --placeholder. Prefer a dedicated random-secret channel you can abandon.\n");
+	process.stderr.write(`  channels.js must load from https://${host}/w/channels.js — if it 404s (not yet on the\n  CDN), self-host the bundle (lab/ui/cf/public/w/channels.js) and pass --host <origin>,\n  pinning a version. The embed is a <script>, not an iframe.\n`);
 	return 0;
 }
 /** The page bookmarklet: derive a channel from the page URL and mount the widget. */
@@ -499,7 +529,7 @@ async function cmdChBookmarklet(_cwd, args) {
 	return 0;
 }
 function chHelp() {
-	process.stdout.write("ay ch - local-first E2E channels for AI ↔ humans (per-cwd, no server storage)\n\n  ay ch mk <topic> [--name N] [--role R]   create a channel, print an invite link\n  ay ch join <link> [--as <topic>]         join a channel from an invite link\n  ay ch ls [--json]                        list channels in this project (+message counts)\n  ay ch rm <topic>                         delete the local replica (peers unaffected)\n  ay ch send <topic> <text…>               post a message\n  ay ch read <topic> [-n N] [--json]       print the thread (last N)\n  ay ch head <topic> [-n N]                first N messages\n  ay ch tail <topic> [-n N] [-f]           last N (96), -f to follow\n  ay ch sync <topic> [--quiet]             hold the WebRTC mesh: live send/receive (Ctrl-C to stop)\n  ay ch pipe <topic>                       sync + bridge stdin→send and inbound→stdout\n  ay ch embed <topic> [--host H]           print an HTML snippet embedding a floating chat widget\n  ay ch bookmarklet [--host H]             print a bookmarklet: any page joins a channel by its URL\n\n  URL-topic: 'ay ch mk <name> --topic <string>' derives the SAME channel a\n             bookmarklet on that URL joins (topic = public membership)\n  identity: --name defaults to $AY_CH_NAME/OS user; --role to agent (in an agent) or human\n  storage:  <cwd>/.agent-yes/ch-<id>.jsonl  (a full CRDT replica; cwd-scoped)\n  live:     run 'ay ch sync <topic>' (foreground/backgrounded) to join the mesh; then\n            'ay ch send/tail' compose with it through the shared replica file — no daemon\n");
+	process.stdout.write("ay ch - local-first E2E channels for AI ↔ humans (per-cwd, no server storage)\n\n  ay ch mk <topic> [--name N] [--role R]   create a channel, print an invite link\n  ay ch join <link> [--as <topic>]         join a channel from an invite link\n  ay ch ls [--json]                        list channels in this project (+message counts)\n  ay ch rm <topic>                         delete the local replica (peers unaffected)\n  ay ch send <topic> <text…>               post a message\n  ay ch read <topic> [-n N] [--json]       print the thread (last N)\n  ay ch head <topic> [-n N]                first N messages\n  ay ch tail <topic> [-n N] [-f]           last N (96), -f to follow\n  ay ch sync <topic> [--quiet]             hold the WebRTC mesh: live send/receive (Ctrl-C to stop)\n  ay ch pipe <topic>                       sync + bridge stdin→send and inbound→stdout\n  ay ch embed <topic> [--host H] [--from-url|--placeholder]  HTML snippet for a chat widget\n                                           (--from-url keeps NO secret in the file — best for static pages)\n  ay ch bookmarklet [--host H]             print a bookmarklet: any page joins a channel by its URL\n\n  URL-topic: 'ay ch mk <name> --topic <string>' derives the SAME channel a\n             bookmarklet on that URL joins (topic = public membership)\n  identity: --name defaults to $AY_CH_NAME/OS user; --role to agent (in an agent) or human\n  storage:  <cwd>/.agent-yes/ch-<id>.jsonl  (a full CRDT replica; cwd-scoped)\n  live:     run 'ay ch sync <topic>' (foreground/backgrounded) to join the mesh; then\n            'ay ch send/tail' compose with it through the shared replica file — no daemon\n");
 	return 0;
 }
 /** `ay ch <sub> …` dispatcher (called from runSubcommand). */
@@ -537,4 +567,4 @@ async function cmdCh(args) {
 
 //#endregion
 export { cmdCh };
-//# sourceMappingURL=channels-Boi4aNiY.js.map
+//# sourceMappingURL=channels-Ddj0hWZB.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-SHk3Fuvm.js";
-import { n as getRustBinary } from "./rustBinary-D8_DgkiI.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-B2jX7H2o.js";
+import { n as getRustBinary } from "./rustBinary-C1_q6UMV.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-CFC5HMmx.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-BGio-axk.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -331,7 +331,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BP1BBtWO.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-buOGuqV8.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-Bb3CeS6-.js";
+import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-DFQbSTC9.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-SHk3Fuvm.js";
+import "./versionChecker-B2jX7H2o.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-x6guaQXc.js";
 import "./JsonlStore-CWOA3aDH.js";
 import "./globalPidIndex-Ca4sTr1b.js";

package/dist/{notifyDaemon-BNCj9i2N.js → notifyDaemon-mfrH4egL.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-Ca4sTr1b.js";
 import "./messageLog-zVGWLX7w.js";
 import "./e2e-CYlKpfxa.js";
 import "./configShared-BXz2vi4Q.js";
-import { $ as daemonLockDir, A as renderLogTailLines, G as appendEvent, K as gcInboxes, Q as shouldStealLock, S as listRecords, X as liveWatchers, Y as listInboxParents, Z as readInbox, _ as isPidAlive, c as deriveLiveState, et as daemonLockOwnerPath, q as hostId, tt as notifyDir } from "./subcommands-CXCoOuN6.js";
+import { $ as daemonLockDir, A as renderLogTailLines, G as appendEvent, K as gcInboxes, Q as shouldStealLock, S as listRecords, X as liveWatchers, Y as listInboxParents, Z as readInbox, _ as isPidAlive, c as deriveLiveState, et as daemonLockOwnerPath, q as hostId, tt as notifyDir } from "./subcommands-BtMmBJnC.js";
 import "./webrtcLink-CEYNs0pt.js";
 import "./remotes-BM3Zm8Wh.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -589,4 +589,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-BNCj9i2N.js.map
+//# sourceMappingURL=notifyDaemon-mfrH4egL.js.map

package/dist/{rustBinary-D8_DgkiI.js → rustBinary-C1_q6UMV.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-SHk3Fuvm.js";
+import { r as getInstalledPackage } from "./versionChecker-B2jX7H2o.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-D8_DgkiI.js.map
+//# sourceMappingURL=rustBinary-C1_q6UMV.js.map

package/dist/{schedule-BVVQtiaS.js → schedule-C2uGzgPW.js}

@@ -1,12 +1,12 @@
-import "./ts-Bb3CeS6-.js";
+import "./ts-DFQbSTC9.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-SHk3Fuvm.js";
+import "./versionChecker-B2jX7H2o.js";
 import "./todoAutomation-x6guaQXc.js";
 import "./JsonlStore-CWOA3aDH.js";
 import "./globalPidIndex-Ca4sTr1b.js";
 import "./pidStore-Hjba3K6Q.js";
 import "./messageLog-zVGWLX7w.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-D6J7QvLL.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-RkOZNL1b.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-DWLYPDdx.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BF_kAOwO.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-BVVQtiaS.js.map
+//# sourceMappingURL=schedule-C2uGzgPW.js.map

package/dist/{serve-Bv_twI1k.js → serve-BIVtKYUa.js}

@@ -1,7 +1,7 @@
-import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-Bb3CeS6-.js";
+import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-DFQbSTC9.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-SHk3Fuvm.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-D8_DgkiI.js";
+import { r as getInstalledPackage } from "./versionChecker-B2jX7H2o.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-C1_q6UMV.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtHb5b71.js";
 import { x as removeControlCharacters } from "./todoAutomation-x6guaQXc.js";
 import "./JsonlStore-CWOA3aDH.js";
@@ -11,12 +11,12 @@ import { r as recordInbox } from "./messageLog-zVGWLX7w.js";
 import { t as pgidForWrapper } from "./reaper-iQXyufgp.js";
 import "./e2e-CYlKpfxa.js";
 import "./configShared-BXz2vi4Q.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-D6J7QvLL.js";
-import { A as renderLogTailLines, D as readPtysize, E as readNotes, J as isTransientLockMkdirError, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, R as snapshotStatus, S as listRecords, W as writeToIpc, b as isUserTyping, f as extractNeedsInput, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, nt as TYPING_BADGE, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-CXCoOuN6.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-RkOZNL1b.js";
+import { A as renderLogTailLines, D as readPtysize, E as readNotes, J as isTransientLockMkdirError, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, R as snapshotStatus, S as listRecords, W as writeToIpc, b as isUserTyping, f as extractNeedsInput, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, nt as TYPING_BADGE, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-BtMmBJnC.js";
 import "./webrtcLink-CEYNs0pt.js";
 import "./remotes-BM3Zm8Wh.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Me97qn68.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-B1kcLI1k.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-uKj5PzZf.js";
 import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-DWLYPDdx.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BF_kAOwO.js";
 import { r as spawnRejectionReason } from "./spawnGate-CRMR19Ql.js";
@@ -2038,7 +2038,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-DDYVVQwl.js");
+			const ws = await import("./ws-BfqIvOJs.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2058,7 +2058,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-DDYVVQwl.js");
+			const ws = await import("./ws-BfqIvOJs.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2647,7 +2647,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-CDMFg0Rj.js");
+				const { createScopedShare } = await import("./agentShare-CRCyd-8k.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -2662,12 +2662,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-CDMFg0Rj.js");
+			const { listShares } = await import("./agentShare-CRCyd-8k.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-CDMFg0Rj.js");
+			const { revokeShare } = await import("./agentShare-CRCyd-8k.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -2969,7 +2969,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-CDMFg0Rj.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-CRCyd-8k.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -2982,4 +2982,4 @@ Options:
 
 //#endregion
 export { cmdServe, resolveLocalServeUrl };
-//# sourceMappingURL=serve-Bv_twI1k.js.map
+//# sourceMappingURL=serve-BIVtKYUa.js.map

package/dist/{setup-BmoiDPZn.js → setup-QTTCy8Mg.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-Bv_twI1k.js");
+	const { cmdServe } = await import("./serve-BIVtKYUa.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-BmoiDPZn.js.map
+//# sourceMappingURL=setup-QTTCy8Mg.js.map

package/dist/{subcommands-CFC5HMmx.js → subcommands-BGio-axk.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-Ca4sTr1b.js";
 import "./messageLog-zVGWLX7w.js";
 import "./e2e-CYlKpfxa.js";
 import "./configShared-BXz2vi4Q.js";
-import { A as renderLogTailLines, B as stopTipForCli, C as matchKeyword, D as readPtysize, E as readNotes, F as resolveResumeArgs, H as waitForLogQuiet, I as restartHintLines, L as runSubcommand, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, P as resolveReadWindow, R as snapshotStatus, S as listRecords, T as readAgentPtysize, U as writeKeysPaced, V as submitAndConfirm, W as writeToIpc, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stdinActivityPath } from "./subcommands-CXCoOuN6.js";
+import { A as renderLogTailLines, B as stopTipForCli, C as matchKeyword, D as readPtysize, E as readNotes, F as resolveResumeArgs, H as waitForLogQuiet, I as restartHintLines, L as runSubcommand, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, P as resolveReadWindow, R as snapshotStatus, S as listRecords, T as readAgentPtysize, U as writeKeysPaced, V as submitAndConfirm, W as writeToIpc, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stdinActivityPath } from "./subcommands-BtMmBJnC.js";
 import "./webrtcLink-CEYNs0pt.js";
 import "./remotes-BM3Zm8Wh.js";
 

package/dist/{subcommands-CXCoOuN6.js → subcommands-BtMmBJnC.js}

@@ -1246,23 +1246,23 @@ async function runSubcommand(argv) {
 			}
 			case "ch":
 			case "channels": {
-				const { cmdCh } = await import("./channels-Boi4aNiY.js");
+				const { cmdCh } = await import("./channels-Ddj0hWZB.js");
 				return cmdCh(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-Bv_twI1k.js");
+				const { cmdServe } = await import("./serve-BIVtKYUa.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-BmoiDPZn.js");
+				const { cmdSetup } = await import("./setup-QTTCy8Mg.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-DDYVVQwl.js");
+				const { cmdWs } = await import("./ws-BfqIvOJs.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-BVVQtiaS.js");
+				const { cmdSchedule } = await import("./schedule-C2uGzgPW.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1274,7 +1274,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-sBpq-n_6.js");
+				const { cmdCallback } = await import("./callback-l6t5RRxK.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -4312,7 +4312,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-BNCj9i2N.js");
+		const { ensureDaemon } = await import("./notifyDaemon-mfrH4egL.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4386,7 +4386,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-BNCj9i2N.js");
+	const daemon = await import("./notifyDaemon-mfrH4egL.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4413,4 +4413,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { daemonLockDir as $, renderLogTailLines as A, stopTipForCli as B, matchKeyword as C, readPtysize as D, readNotes as E, resolveResumeArgs as F, appendEvent as G, waitForLogQuiet as H, restartHintLines as I, isTransientLockMkdirError as J, gcInboxes as K, runSubcommand as L, renderRawLogLines as M, resolveOne as N, recentMessageEdges as O, resolveReadWindow as P, shouldStealLock as Q, snapshotStatus as R, listRecords as S, readAgentPtysize as T, writeKeysPaced as U, submitAndConfirm as V, writeToIpc as W, liveWatchers as X, listInboxParents as Y, readInbox as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, daemonLockOwnerPath as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderRawLog as j, recentReadEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, TYPING_BADGE as nt, controlCodeFromName as o, extractTaskCounts as p, hostId as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, notifyDir as tt, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, stdinActivityPath as z };
-//# sourceMappingURL=subcommands-CXCoOuN6.js.map
+//# sourceMappingURL=subcommands-BtMmBJnC.js.map

package/dist/{ts-Bb3CeS6-.js → ts-DFQbSTC9.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-SHk3Fuvm.js";
+import { r as getInstalledPackage } from "./versionChecker-B2jX7H2o.js";
 import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
 import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-x6guaQXc.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-BFk3Mo8K.js";
@@ -2044,4 +2044,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, AgentContext as c, answerAsk as i, CLAUDE_SESSION_PIN_ENV as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-Bb3CeS6-.js.map
+//# sourceMappingURL=ts-DFQbSTC9.js.map

package/dist/{versionChecker-SHk3Fuvm.js → versionChecker-B2jX7H2o.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.232.0";
+var version = "1.233.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-SHk3Fuvm.js.map
+//# sourceMappingURL=versionChecker-B2jX7H2o.js.map

package/dist/{ws-DDYVVQwl.js → ws-BfqIvOJs.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-Ca4sTr1b.js";
 import "./messageLog-zVGWLX7w.js";
 import "./e2e-CYlKpfxa.js";
 import "./configShared-BXz2vi4Q.js";
-import { S as listRecords } from "./subcommands-CXCoOuN6.js";
+import { S as listRecords } from "./subcommands-BtMmBJnC.js";
 import "./webrtcLink-CEYNs0pt.js";
 import "./remotes-BM3Zm8Wh.js";
 import { i as getProvisionRoot } from "./workspaceConfig-DWLYPDdx.js";
@@ -418,4 +418,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
-//# sourceMappingURL=ws-DDYVVQwl.js.map
+//# sourceMappingURL=ws-BfqIvOJs.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.232.0",
+  "version": "1.233.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/channels.spec.ts

@@ -4,6 +4,7 @@ import path from "path";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import {
   buildBookmarklet,
+  buildEmbedSnippet,
   cmdCh,
   defaultName,
   defaultRole,
@@ -65,7 +66,9 @@ describe("formatMessage", () => {
   });
   it("shows (deleted) and reaction counts", () => {
     expect(formatMessage({ ...base, deleted: true, text: "" })).toContain("(deleted)");
-    expect(formatMessage({ ...base, reactions: [{ emoji: "👍", by: ["a", "b"] }] })).toContain("👍2");
+    expect(formatMessage({ ...base, reactions: [{ emoji: "👍", by: ["a", "b"] }] })).toContain(
+      "👍2",
+    );
     expect(formatMessage({ ...base, reactions: [{ emoji: "🎉", by: ["a"] }] })).toContain("🎉");
   });
 });
@@ -168,6 +171,39 @@ describe("ay ch CLI (local-only)", () => {
     expect(bm).toContain("location.href"); // default topic = full page URL
   });
 
+  it("embed modes trade off where the secret lives", async () => {
+    await capture(() => cmdCh(["mk", "pub"]));
+    // default (live): the secret IS in the file
+    expect((await capture(() => cmdCh(["embed", "pub"]))).out).toContain("e1.");
+    // --placeholder: no secret; runtime-injected global
+    const ph = (await capture(() => cmdCh(["embed", "pub", "--placeholder"]))).out;
+    expect(ph).not.toContain("e1.");
+    expect(ph).toContain("window.AY_CH_LINK");
+    // --from-url: no secret; derived from the page URL (safe for static pages)
+    const fu = (await capture(() => cmdCh(["embed", "pub", "--from-url"]))).out;
+    expect(fu).not.toContain("e1.");
+    expect(fu).toContain("AyChannel.fromTopic(location.href)");
+    // the two secret-less modes are mutually exclusive
+    await expect(cmdCh(["embed", "pub", "--from-url", "--placeholder"])).rejects.toThrow(
+      /mutually/,
+    );
+  });
+
+  it("buildEmbedSnippet: always a <script> (never an iframe), across modes", () => {
+    const live = buildEmbedSnippet("agent-yes.com", "t", {
+      kind: "live",
+      link: "ay://ch/h/r#e1.dead",
+    });
+    expect(live).toContain("<script");
+    expect(live).not.toContain("<iframe");
+    expect(live).toContain("ay://ch/h/r#e1.dead");
+    const fu = buildEmbedSnippet("self.example", "t", { kind: "from-url" });
+    expect(fu).toContain("self.example/w/channels.js");
+    expect(fu).toContain("fromTopic(location.href)");
+    expect(fu).not.toContain("e1.");
+    expect(buildEmbedSnippet("h", "t", { kind: "placeholder" })).toContain("window.AY_CH_LINK");
+  });
+
   it("prints help for no subcommand and rejects unknown ones", async () => {
     expect((await capture(() => cmdCh([]))).out).toContain("ay ch -");
     const bad = await capture(() => cmdCh(["frobnicate"]));

package/ts/channels.ts

@@ -541,26 +541,94 @@ async function cmdChPipe(cwd: string, args: string[]): Promise<number> {
   return 0;
 }
 
+export type EmbedMode =
+  | { kind: "live"; link: string } // the invite (with secret) is baked into the file
+  | { kind: "placeholder" } // page injects window.AY_CH_LINK at runtime (server-rendered)
+  | { kind: "from-url" }; // channel derived from the page URL — NO secret in the file
+
+/**
+ * The embed `<script>` snippet — a script (NOT an iframe) that loads the AyChannel
+ * browser lib and mounts the floating widget in the page, so the console's
+ * `frame-ancestors` CSP is irrelevant. Three modes trade off where the secret lives:
+ * baked in (`live`), injected at runtime (`placeholder`), or never present because
+ * the channel is derived from the (public) page URL (`from-url`) — the last is the
+ * safe default for a STATIC public page, since no token ever lands in the file.
+ */
+export function buildEmbedSnippet(host: string, topic: string, mode: EmbedMode): string {
+  const imp = `  import AyChannel from "https://${host}/w/channels.js";\n`;
+  if (mode.kind === "from-url") {
+    return (
+      `<!-- ay channel: ${topic} — channel derived from the page URL; no secret in this file -->\n` +
+      `<script type="module">\n${imp}` +
+      `  AyChannel.fromTopic(location.href).then((c) => c.mount());\n` +
+      `</script>\n`
+    );
+  }
+  if (mode.kind === "placeholder") {
+    return (
+      `<!-- ay channel: ${topic} — set window.AY_CH_LINK to the invite at runtime; do NOT commit the secret -->\n` +
+      `<script type="module">\n${imp}` +
+      `  new AyChannel(window.AY_CH_LINK).mount();\n` +
+      `</script>\n`
+    );
+  }
+  return (
+    `<!-- ay channel: ${topic} — this snippet contains a LIVE secret; anyone who reads it can join -->\n` +
+    `<script type="module">\n${imp}` +
+    `  new AyChannel(${JSON.stringify(mode.link)}).mount();\n` +
+    `</script>\n`
+  );
+}
+
 async function cmdChEmbed(cwd: string, args: string[]): Promise<number> {
-  const { flags, positional } = parseFlags(args, { host: "value" });
+  const { flags, positional } = parseFlags(args, {
+    host: "value",
+    placeholder: "bool",
+    "from-url": "bool",
+  });
   const topic = positional[0];
   if (!topic || positional.length > 1)
-    throw new Error("usage: ay ch embed <topic> [--host <console-host>]");
+    throw new Error("usage: ay ch embed <topic> [--host H] [--placeholder | --from-url]");
+  if (flags.placeholder && flags["from-url"])
+    throw new Error("--placeholder and --from-url are mutually exclusive");
   const reg = await readRegistry(cwd);
   const { entry } = await resolveChannel(reg, topic);
   if (!entry) throw new Error(`join "${topic}" before embedding: ay ch join <link>`);
-  const consoleHost = typeof flags.host === "string" ? flags.host : "agent-yes.com";
-  const link = formatChannelLink({ sighost: entry.sighost, room: entry.room, s: entry.s });
-  // A self-contained snippet: loads the AyChannel browser lib and mounts the
-  // floating chat widget. Anyone who can read the page source holds the secret S
-  // and can therefore join — that IS the channel's membership model (secret =
-  // access), so only embed on a page whose audience you mean to let in.
-  process.stdout.write(
-    `<!-- ay channel: ${topic} — anyone who can read this snippet can join -->\n` +
-      `<script type="module">\n` +
-      `  import AyChannel from "https://${consoleHost}/w/channels.js";\n` +
-      `  new AyChannel(${JSON.stringify(link)}).mount();\n` +
-      `</script>\n`,
+  const host = typeof flags.host === "string" ? flags.host : "agent-yes.com";
+  const invite = formatChannelLink({ sighost: entry.sighost, room: entry.room, s: entry.s });
+  const mode: EmbedMode = flags["from-url"]
+    ? { kind: "from-url" }
+    : flags.placeholder
+      ? { kind: "placeholder" }
+      : { kind: "live", link: invite };
+
+  // stdout: only the snippet (safe to pipe/paste). stderr: the guidance.
+  process.stdout.write(buildEmbedSnippet(host, topic, mode));
+
+  if (mode.kind === "from-url") {
+    process.stderr.write(
+      `\n  URL-derived: no secret in the snippet — the channel is computed from the page URL,\n` +
+        `  so a committed/static file carries no token (ideal for static public pages like\n` +
+        `  Cloudflare Pages). Anyone who opens the same URL joins — that IS the membership.\n`,
+    );
+  } else if (mode.kind === "placeholder") {
+    process.stderr.write(
+      `\n  Placeholder: the invite is NOT in the snippet — set window.AY_CH_LINK at runtime\n` +
+        `  (server-rendered / env), so a committed file carries no secret. This needs a\n` +
+        `  runtime; on a STATIC host use --from-url instead. Invite to inject: ${invite}\n`,
+    );
+  } else {
+    process.stderr.write(
+      `\n  ⚠ This snippet embeds a LIVE channel secret (read+write). Anyone who can read the\n` +
+        `    page source can join. Do NOT commit it to a public or deploy-bound file. For a\n` +
+        `    static public page use --from-url (no secret in the file); for a server-rendered\n` +
+        `    page use --placeholder. Prefer a dedicated random-secret channel you can abandon.\n`,
+    );
+  }
+  process.stderr.write(
+    `  channels.js must load from https://${host}/w/channels.js — if it 404s (not yet on the\n` +
+      `  CDN), self-host the bundle (lab/ui/cf/public/w/channels.js) and pass --host <origin>,\n` +
+      `  pinning a version. The embed is a <script>, not an iframe.\n`,
   );
   return 0;
 }
@@ -611,7 +679,8 @@ function chHelp(): number {
       `  ay ch tail <topic> [-n N] [-f]           last N (96), -f to follow\n` +
       `  ay ch sync <topic> [--quiet]             hold the WebRTC mesh: live send/receive (Ctrl-C to stop)\n` +
       `  ay ch pipe <topic>                       sync + bridge stdin→send and inbound→stdout\n` +
-      `  ay ch embed <topic> [--host H]           print an HTML snippet embedding a floating chat widget\n` +
+      `  ay ch embed <topic> [--host H] [--from-url|--placeholder]  HTML snippet for a chat widget\n` +
+      `                                           (--from-url keeps NO secret in the file — best for static pages)\n` +
       `  ay ch bookmarklet [--host H]             print a bookmarklet: any page joins a channel by its URL\n` +
       `\n` +
       `  URL-topic: 'ay ch mk <name> --topic <string>' derives the SAME channel a\n` +