agent-yes 1.236.0 → 1.237.0

package/dist/{subcommands-_Ci82sb1.js → subcommands-DFr-5FOL.js}

@@ -1,11 +1,11 @@
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
-import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidIndex-Ca4sTr1b.js";
-import { a as recordOutbox, i as recordMessage, n as readMailbox, t as partyMatches } from "./messageLog-zVGWLX7w.js";
-import { t as loadSharedCliDefaults } from "./configShared-BXz2vi4Q.js";
-import { n as isWebrtcSpec } from "./webrtcLink-CEYNs0pt.js";
-import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-BDdfhL6N.js";
+import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
+import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidIndex-D9DOSd-c.js";
+import { a as recordOutbox, i as recordMessage, n as readMailbox, t as partyMatches } from "./messageLog-C-YIzhRj.js";
+import { t as loadSharedCliDefaults } from "./configShared-9wVlbPyC.js";
+import { n as isWebrtcSpec } from "./webrtcLink-VQhWmKOw.js";
+import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-Bem6WIyU.js";
 import ms from "ms";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from "fs/promises";
@@ -1176,6 +1176,7 @@ const SUBCOMMANDS = new Set([
 	"todo",
 	"ch",
 	"channels",
+	"term",
 	"serve",
 	"schedule",
 	"remote",
@@ -1241,44 +1242,48 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "todo": {
-				const { runTodoSubcommand } = await import("./todoCli-CAMVVz9u.js");
+				const { runTodoSubcommand } = await import("./todoCli-CNNR9Czu.js");
 				return runTodoSubcommand(rest);
 			}
 			case "ch":
 			case "channels": {
-				const { cmdCh } = await import("./channels-DHXLnU4r.js");
+				const { cmdCh } = await import("./channels-CMNMFJlY.js");
 				return cmdCh(rest);
 			}
+			case "term": {
+				const { cmdTerm } = await import("./terminal-vNeFNLT8.js");
+				return cmdTerm(rest);
+			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-DEEwIlVV.js");
+				const { cmdServe } = await import("./serve-QejbNTr-.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-QfDtv5tw.js");
+				const { cmdSetup } = await import("./setup-Dzi5Cc3g.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-C7B4xWQl.js");
+				const { cmdWs } = await import("./ws-Dun8gGiV.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-CXHdiUHa.js");
+				const { cmdSchedule } = await import("./schedule-B8Erb3y6.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
-				const { cmdRemote } = await import("./remotes-CF1LJLxY.js");
+				const { cmdRemote } = await import("./remotes-BClMgQZW.js");
 				return cmdRemote(rest);
 			}
 			case "expose": {
-				const { cmdExpose } = await import("./expose-ByT4ef7C.js");
+				const { cmdExpose } = await import("./expose-DROTwbyU.js");
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-Dtk0wMsl.js");
+				const { cmdCallback } = await import("./callback-CFbkvqTh.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
-				await (await import("./reaper-pJpMYKmj.js")).sweep();
+				await (await import("./reaper-IhkB_RO0.js")).sweep();
 				return 0;
 			case "help": return cmdHelp(managerCommands);
 			default: return null;
@@ -1312,7 +1317,7 @@ async function cmdHelp(managerCommands = true) {
 	const wsLines = managerCommands ? "  ay ws ls [--status]                 list <owner>/<repo>/tree/<branch> workspaces\n  ay ws new <owner>/<repo>[@branch]   clone/refresh a workspace (ay ws help for more)\n" : ``;
 	const self = process.env.AGENT_YES_PID ? await resolveSender() : null;
 	const agentSection = self ? await buildAgentContextSection(self) : "";
-	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay send <keyword> <msg>             send a message (keyword '.' = agent in this cwd)\n  ay msgs [keyword] [--in|--out]      inter-agent message log (sent + received)\n  ay ch mk|join|send|read|tail <topic>  local-first E2E channels: AI ↔ humans on a topic (ay ch help)\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n" + wsLines + "\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay expose <port>                    share localhost:<port> at https://<id>.agent-yes.com (private link)\n  ay callback --expires 7d           mint an embeddable message-me widget for one agent\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent:\n  ay [claude|codex|gemini|...] [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
+	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay send <keyword> <msg>             send a message (keyword '.' = agent in this cwd)\n  ay msgs [keyword] [--in|--out]      inter-agent message log (sent + received)\n  ay ch mk|join|send|read|tail <topic>  local-first E2E channels: AI ↔ humans on a topic (ay ch help)\n  ay term embed <pid>                 <script> to embed a live read-only agent terminal in a page (ay term help)\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n" + wsLines + "\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay expose <port>                    share localhost:<port> at https://<id>.agent-yes.com (private link)\n  ay callback --expires 7d           mint an embeddable message-me widget for one agent\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent:\n  ay [claude|codex|gemini|...] [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
 	return 0;
 }
 function matchKeyword(record, keyword) {
@@ -1692,7 +1697,7 @@ async function fetchRemoteRecordsRaw(url, token, opts) {
 		let base = url;
 		let bearer = token;
 		if (isWebrtcSpec(url)) {
-			const { startWebrtcBridge } = await import("./webrtcRemote-CNC_bMH6.js");
+			const { startWebrtcBridge } = await import("./webrtcRemote-DJDtCTpj.js");
 			bridge = await startWebrtcBridge(url);
 			base = bridge.baseUrl;
 			bearer = bridge.token;
@@ -4312,7 +4317,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-Cxb0-5a0.js");
+		const { ensureDaemon } = await import("./notifyDaemon-D_8TRVHt.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4386,7 +4391,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-Cxb0-5a0.js");
+	const daemon = await import("./notifyDaemon-D_8TRVHt.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4413,4 +4418,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { daemonLockDir as $, renderLogTailLines as A, stopTipForCli as B, matchKeyword as C, readPtysize as D, readNotes as E, resolveResumeArgs as F, appendEvent as G, waitForLogQuiet as H, restartHintLines as I, isTransientLockMkdirError as J, gcInboxes as K, runSubcommand as L, renderRawLogLines as M, resolveOne as N, recentMessageEdges as O, resolveReadWindow as P, shouldStealLock as Q, snapshotStatus as R, listRecords as S, readAgentPtysize as T, writeKeysPaced as U, submitAndConfirm as V, writeToIpc as W, liveWatchers as X, listInboxParents as Y, readInbox as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, daemonLockOwnerPath as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderRawLog as j, recentReadEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, TYPING_BADGE as nt, controlCodeFromName as o, extractTaskCounts as p, hostId as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, notifyDir as tt, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, stdinActivityPath as z };
-//# sourceMappingURL=subcommands-_Ci82sb1.js.map
+//# sourceMappingURL=subcommands-DFr-5FOL.js.map

package/dist/{subcommands-m2DRpvHt.js → subcommands-ymJWO2iv.js}

@@ -1,10 +1,10 @@
 import "./logger-CDIsZ-Pp.js";
-import "./globalPidIndex-Ca4sTr1b.js";
-import "./messageLog-zVGWLX7w.js";
-import "./e2e-CYlKpfxa.js";
-import "./configShared-BXz2vi4Q.js";
-import { A as renderLogTailLines, B as stopTipForCli, C as matchKeyword, D as readPtysize, E as readNotes, F as resolveResumeArgs, H as waitForLogQuiet, I as restartHintLines, L as runSubcommand, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, P as resolveReadWindow, R as snapshotStatus, S as listRecords, T as readAgentPtysize, U as writeKeysPaced, V as submitAndConfirm, W as writeToIpc, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stdinActivityPath } from "./subcommands-_Ci82sb1.js";
-import "./webrtcLink-CEYNs0pt.js";
-import "./remotes-BDdfhL6N.js";
+import "./globalPidIndex-D9DOSd-c.js";
+import "./messageLog-C-YIzhRj.js";
+import "./e2e-CEIdJGZ7.js";
+import "./configShared-9wVlbPyC.js";
+import { A as renderLogTailLines, B as stopTipForCli, C as matchKeyword, D as readPtysize, E as readNotes, F as resolveResumeArgs, H as waitForLogQuiet, I as restartHintLines, L as runSubcommand, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, P as resolveReadWindow, R as snapshotStatus, S as listRecords, T as readAgentPtysize, U as writeKeysPaced, V as submitAndConfirm, W as writeToIpc, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stdinActivityPath } from "./subcommands-DFr-5FOL.js";
+import "./webrtcLink-VQhWmKOw.js";
+import "./remotes-Bem6WIyU.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/terminal-vNeFNLT8.js

@@ -0,0 +1,138 @@
+//#region ts/terminal.ts
+function parseFlags(args, known) {
+	const flags = {};
+	const positional = [];
+	for (let i = 0; i < args.length; i++) {
+		const a = args[i];
+		if (!a.startsWith("-") || a === "-") {
+			positional.push(a);
+			continue;
+		}
+		const eq = a.indexOf("=");
+		const name = eq === -1 ? a.replace(/^--?/, "") : a.slice(a.startsWith("--") ? 2 : 1, eq);
+		const kind = known[name];
+		if (!kind) throw new Error(`unknown flag ${a}`);
+		if (kind === "bool") {
+			if (eq !== -1) throw new Error(`--${name} takes no value`);
+			flags[name] = true;
+		} else {
+			const v = eq !== -1 ? a.slice(eq + 1) : args[++i];
+			if (v === void 0) throw new Error(`${a} requires a value`);
+			flags[name] = v;
+		}
+	}
+	return {
+		flags,
+		positional
+	};
+}
+/**
+* The embed `<script>` snippet — a script (NOT an iframe) that loads the AyTerminal
+* browser lib and mounts a read-only terminal in the page. Three modes trade off
+* where the serve token lives: never in the file (`discover` — the safe default,
+* the widget reads #k= / window.AY_TERM_TOKEN / localStorage), injected at runtime
+* (`placeholder`), or baked in (`live`, loud warning — a serve token is full-fleet
+* read+write until scoped read-only tokens land).
+*/
+function buildTermEmbedSnippet(host, pid, mode) {
+	const imp = `  import AyTerminal from "https://${host}/w/terminal.js";\n`;
+	const originArg = mode.origin ? `origin: ${JSON.stringify(mode.origin)}, ` : "";
+	const roArg = mode.interactive ? `readOnly: false, ` : "";
+	const tokenArg = mode.kind === "live" ? `token: ${JSON.stringify(mode.token)}, ` : mode.kind === "placeholder" ? `token: window.AY_TERM_TOKEN, ` : "";
+	return `<!-- ay terminal: ${mode.interactive ? "interactive" : "read-only"} view of #${pid} — ${mode.kind === "live" ? `this snippet embeds a LIVE token — do NOT commit it to a public or deploy-bound file.` : mode.kind === "placeholder" ? `set window.AY_TERM_TOKEN at runtime; do NOT commit it.` : `no token in this file; the widget reads it from the page (#k= / window.AY_TERM_TOKEN / localStorage).`} Add <div id="ay-term" style="width:720px;height:420px"></div> where you want the terminal, or omit it to float in the corner. -->\n<script type="module">\n${imp}  new AyTerminal({ ${originArg}${roArg}${tokenArg}pid: ${JSON.stringify(pid)} }).mount(document.getElementById("ay-term") ?? undefined);\n<\/script>\n`;
+}
+function cmdTermEmbed(args) {
+	const { flags, positional } = parseFlags(args, {
+		host: "value",
+		origin: "value",
+		token: "value",
+		placeholder: "bool",
+		interactive: "bool"
+	});
+	const pid = positional[0];
+	if (!pid || positional.length > 1) throw new Error("usage: ay term embed <pid|keyword> [--host H] [--origin URL] [--token TOK | --placeholder] [--interactive]");
+	if (flags.token && flags.placeholder) throw new Error("--token and --placeholder are mutually exclusive");
+	const host = typeof flags.host === "string" ? flags.host : "agent-yes.com";
+	const origin = typeof flags.origin === "string" ? flags.origin : void 0;
+	const interactive = flags.interactive === true;
+	const mode = flags.placeholder ? {
+		kind: "placeholder",
+		origin,
+		interactive
+	} : typeof flags.token === "string" ? {
+		kind: "live",
+		token: flags.token,
+		origin,
+		interactive
+	} : {
+		kind: "discover",
+		origin,
+		interactive
+	};
+	process.stdout.write(buildTermEmbedSnippet(host, pid, mode));
+	if (mode.kind === "discover") process.stderr.write("\n  Token-free snippet — the widget reads the serve token from the page (#k= hash,\n  window.AY_TERM_TOKEN, or the console's localStorage[\"ay.localToken\"]). Ideal when the\n  page is served by the daemon itself (ay serve --http) with a #k=<token> link.\n");
+	else if (mode.kind === "placeholder") process.stderr.write("\n  Placeholder — the token is NOT in the snippet; set window.AY_TERM_TOKEN at runtime\n  (server-rendered / env), so a committed file carries no secret.\n");
+	else process.stderr.write("\n  ⚠ This snippet embeds a LIVE serve token — full-fleet READ+WRITE for this daemon.\n    Anyone who reads the page source gets it. Do NOT commit it to a public or\n    deploy-bound file. Prefer --placeholder (runtime-injected) or the token-free\n    default. Scoped read-only embed tokens are future work (need per-author signing).\n");
+	if (interactive) process.stderr.write(`\n  ⚠ INTERACTIVE: keystrokes in the widget go to the agent's stdin. This needs a token\n    that grants /api/send for #${pid} (the widget reverts to read-only on a 403). Prefer a\n    scoped, short-TTL, single-session interactive token (future: ay term mint --interactive)\n    over the master token — the master token is full-fleet RCE.\n`);
+	else process.stderr.write("\n  Read-only mirror: it renders the agent's PTY but never types into it. Add --interactive\n  (with a send-granting token) to let viewers type to the agent.\n");
+	process.stderr.write(`  terminal.js must load from https://${host}/w/terminal.js.\n`);
+	if (!origin) process.stderr.write("  Same-origin: /api/tail sends no CORS headers, so the page must be served by the\n  daemon (ay serve --http). For an arbitrary-origin page, pass --origin <daemon-url>\n  (the daemon must be reachable + allow it); the WebRTC --share transport for any\n  origin is a later phase.\n");
+	return 0;
+}
+/** Parse a TTL like "900", "30s", "15m", "2h" → seconds. */
+function parseTtlSec(s) {
+	const m = /^(\d+)(s|m|h)?$/.exec(s.trim());
+	if (!m) throw new Error(`bad --ttl "${s}" (use e.g. 900, 30s, 15m, 2h)`);
+	const mult = m[2] === "h" ? 3600 : m[2] === "m" ? 60 : 1;
+	return Number(m[1]) * mult;
+}
+async function cmdTermMint(args) {
+	const { flags, positional } = parseFlags(args, {
+		ttl: "value",
+		ro: "bool",
+		interactive: "bool",
+		json: "bool"
+	});
+	const pid = positional[0];
+	if (!pid || positional.length > 1) throw new Error("usage: ay term mint <pid|keyword> [--ttl 15m] [--ro | --interactive] [--json]");
+	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
+	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
+	const canSend = flags.interactive === true;
+	const { mintScopedTermToken } = await import("./serve-QejbNTr-.js");
+	const r = await mintScopedTermToken(pid, {
+		ttlSec,
+		canSend
+	});
+	if (flags.json === true) {
+		process.stdout.write(JSON.stringify(r) + "\n");
+		return 0;
+	}
+	process.stdout.write(r.token + "\n");
+	const mins = Math.round(ttlSec / 60);
+	process.stderr.write(`\n  Scoped ${canSend ? "INTERACTIVE (read+write)" : "read-only"} token for #${r.pid}, expires in ~${mins}m (${(/* @__PURE__ */ new Date(r.exp * 1e3)).toISOString()}).\n  It grants ONLY ${canSend ? "read+write of" : "read of"} #${r.pid} — no other agent, no spawn.\n  Safe to embed in a page (this is NOT the master token):\n    ay term embed ${r.pid} --token <token> ${canSend ? "--interactive " : ""}--origin <daemon-url>\n  Short TTL is the backstop (serverless — no central revoke); re-mint when it lapses.\n`);
+	return 0;
+}
+function termHelp() {
+	process.stdout.write("ay term — embed a live, read-only agent terminal in a web page\n\nUsage:\n  ay term embed <pid|keyword> [--host H] [--origin URL] [--token TOK | --placeholder] [--interactive]\n  ay term mint  <pid|keyword> [--ttl 15m] [--ro | --interactive] [--json]\n\n  embed   print a <script> snippet that mounts a read-only xterm mirror of the agent\n          into <div id=\"ay-term\">, or a floating panel if that div is absent.\n  mint    mint a scoped, short-TTL token bound to ONE agent (read-only by default;\n          --interactive also grants that agent's stdin) — safe to embed in a page,\n          unlike the master serve token. Prints the token on stdout.\n\nFlags (embed):\n  --host H        CDN host serving terminal.js (default agent-yes.com)\n  --origin URL    daemon origin if the page is NOT served by the daemon (same-origin default)\n  --token TOK     bake a LIVE serve token into the snippet (⚠ full-fleet r/w; avoid committing)\n  --placeholder   read the token from window.AY_TERM_TOKEN at runtime (no secret in the file)\n  --interactive   wire the keyboard to the agent's stdin (needs a send-granting token; ⚠ opt-in)\n");
+	return 0;
+}
+async function cmdTerm(args) {
+	const sub = args[0];
+	const rest = args.slice(1);
+	switch (sub) {
+		case "embed": return cmdTermEmbed(rest);
+		case "mint": return cmdTermMint(rest);
+		case void 0:
+		case "help":
+		case "--help":
+		case "-h": return termHelp();
+		default:
+			process.stderr.write(`ay term: unknown subcommand "${sub}"\n\n`);
+			termHelp();
+			return 1;
+	}
+}
+
+//#endregion
+export { cmdTerm };
+//# sourceMappingURL=terminal-vNeFNLT8.js.map

package/dist/terminal.js

@@ -0,0 +1,3 @@
+import { t as AyTerminal } from "./browser-BRMyG4JA.js";
+
+export { AyTerminal, AyTerminal as default };

package/dist/{todoAutomation-x6guaQXc.js → todoAutomation-Buo457VO.js}

@@ -1,4 +1,4 @@
-import { t as JsonlStore } from "./JsonlStore-CWOA3aDH.js";
+import { t as JsonlStore } from "./JsonlStore-CPGIR0Wy.js";
 import path from "path";
 import { lock } from "proper-lockfile";
 
@@ -958,4 +958,4 @@ function reconcileTodos(tasks, agents, registeredGates) {
 
 //#endregion
 export { isKnownKind as _, renderTree as a, statesOf as b, monitorHint as c, openStore as d, DONE_STATE as f, initialState as g, canTransition as h, renderDigest as i, CycleError as l, ORPHANED_STATE as m, buildTreeJSON as n, unblockedTasks as o, LIFECYCLES as p, openBlockers as r, describeBlock as s, reconcileTodos as t, TodoStore as u, nextStates as v, removeControlCharacters as x, requiredGate as y };
-//# sourceMappingURL=todoAutomation-x6guaQXc.js.map
+//# sourceMappingURL=todoAutomation-Buo457VO.js.map

package/dist/{todoCli-CAMVVz9u.js → todoCli-CNNR9Czu.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { _ as isKnownKind, a as renderTree, d as openStore, i as renderDigest, l as CycleError, n as buildTreeJSON, o as unblockedTasks, p as LIFECYCLES, s as describeBlock, t as reconcileTodos, x as removeControlCharacters } from "./todoAutomation-x6guaQXc.js";
-import "./JsonlStore-CWOA3aDH.js";
-import { i as readGlobalPids } from "./globalPidIndex-Ca4sTr1b.js";
+import { _ as isKnownKind, a as renderTree, d as openStore, i as renderDigest, l as CycleError, n as buildTreeJSON, o as unblockedTasks, p as LIFECYCLES, s as describeBlock, t as reconcileTodos, x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
+import "./JsonlStore-CPGIR0Wy.js";
+import { i as readGlobalPids } from "./globalPidIndex-D9DOSd-c.js";
 import yargs from "yargs";
 
 //#region ts/todoCli.ts
@@ -456,4 +456,4 @@ async function runTodoSubcommand(rest0) {
 
 //#endregion
 export { runTodoSubcommand };
-//# sourceMappingURL=todoCli-CAMVVz9u.js.map
+//# sourceMappingURL=todoCli-CNNR9Czu.js.map

package/dist/{tray-CF8xRQqt.js → tray-D5qFaqlS.js}

@@ -1,4 +1,4 @@
-import { n as getRunningAgentCount } from "./runningLock-BFk3Mo8K.js";
+import { n as getRunningAgentCount } from "./runningLock-DBoONoM-.js";
 import { existsSync } from "fs";
 import { mkdir, readFile, unlink, writeFile } from "fs/promises";
 import { homedir } from "os";
@@ -187,4 +187,4 @@ async function startTray() {
 
 //#endregion
 export { ensureTray, startTray };
-//# sourceMappingURL=tray-CF8xRQqt.js.map
+//# sourceMappingURL=tray-D5qFaqlS.js.map

package/dist/{ts-D1FDmhc-.js → ts-Dd1FK7sR.js}

@@ -1,12 +1,13 @@
+import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DJEtU1JU.js";
-import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
-import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-x6guaQXc.js";
-import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-BFk3Mo8K.js";
-import { i as readGlobalPids } from "./globalPidIndex-Ca4sTr1b.js";
-import { t as PidStore } from "./pidStore-Hjba3K6Q.js";
-import { r as recordInbox } from "./messageLog-zVGWLX7w.js";
-import { n as register, r as sweep } from "./reaper-iQXyufgp.js";
+import { r as getInstalledPackage } from "./versionChecker-XfEBINhH.js";
+import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
+import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
+import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-DBoONoM-.js";
+import { i as readGlobalPids } from "./globalPidIndex-D9DOSd-c.js";
+import { t as PidStore } from "./pidStore-6EZd5DUv.js";
+import { r as recordInbox } from "./messageLog-C-YIzhRj.js";
+import { n as register, r as sweep } from "./reaper-DP49VCKx.js";
 import { arch, platform } from "process";
 import { execSync } from "child_process";
 import { closeSync, constants, createReadStream, existsSync, mkdirSync, openSync } from "fs";
@@ -26,24 +27,6 @@ import { readFile as readFile$1 } from "node:fs/promises";
 import path$1 from "node:path";
 import { existsSync as existsSync$1 } from "node:fs";
 
-//#region \0rolldown/runtime.js
-var __defProp = Object.defineProperty;
-var __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-var __exportAll = (all, no_symbols) => {
-	let target = {};
-	for (var name in all) {
-		__defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	}
-	if (!no_symbols) {
-		__defProp(target, Symbol.toStringTag, { value: "Module" });
-	}
-	return target;
-};
-
-//#endregion
 //#region ts/xterm-proxy.ts
 const { Terminal } = xterm;
 /**
@@ -1285,7 +1268,7 @@ async function answerAsk(projectRoot, taskId, answer) {
 
 //#endregion
 //#region ts/index.ts
-const config = await import("./agent-yes.config-BhjzWavn.js").then((mod) => mod.default || mod);
+const config = await import("./agent-yes.config-DPtMM0S-.js").then((mod) => mod.default || mod);
 const CLIS_CONFIG = config.clis;
 /**
 * Main function to run agent-cli with automatic yes/no responses
@@ -2044,4 +2027,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, AgentContext as c, answerAsk as i, CLAUDE_SESSION_PIN_ENV as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-D1FDmhc-.js.map
+//# sourceMappingURL=ts-Dd1FK7sR.js.map

package/dist/{versionChecker-DJEtU1JU.js → versionChecker-XfEBINhH.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.236.0";
+var version = "1.237.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-DJEtU1JU.js.map
+//# sourceMappingURL=versionChecker-XfEBINhH.js.map

package/dist/{webrtcLink-CEYNs0pt.js → webrtcLink-VQhWmKOw.js}

@@ -1,4 +1,4 @@
-import { u as parseSecret } from "./e2e-CYlKpfxa.js";
+import { u as parseSecret } from "./e2e-CEIdJGZ7.js";
 
 //#region ts/webrtcLink.ts
 const SIGNAL_SUBPROTOCOL = "ay-signal-1";
@@ -42,4 +42,4 @@ function isWebrtcSpec(spec) {
 
 //#endregion
 export { isWebrtcSpec as n, parseWebrtcLink as r, SIGNAL_SUBPROTOCOL as t };
-//# sourceMappingURL=webrtcLink-CEYNs0pt.js.map
+//# sourceMappingURL=webrtcLink-VQhWmKOw.js.map

package/dist/{webrtcRemote-CNC_bMH6.js → webrtcRemote-DJDtCTpj.js}

@@ -1,5 +1,5 @@
-import { a as computeTranscriptHash, c as open, d as randomHex, f as seal, l as packEnvelope, n as FLAG_CONFIRM, o as deriveAuthToken, p as unpackEnvelope, s as deriveDirKeys } from "./e2e-CYlKpfxa.js";
-import { n as isWebrtcSpec, r as parseWebrtcLink, t as SIGNAL_SUBPROTOCOL } from "./webrtcLink-CEYNs0pt.js";
+import { a as computeTranscriptHash, c as open, d as randomHex, f as seal, l as packEnvelope, n as FLAG_CONFIRM, o as deriveAuthToken, p as unpackEnvelope, s as deriveDirKeys } from "./e2e-CEIdJGZ7.js";
+import { n as isWebrtcSpec, r as parseWebrtcLink, t as SIGNAL_SUBPROTOCOL } from "./webrtcLink-VQhWmKOw.js";
 import { RTCPeerConnection } from "node-datachannel/polyfill";
 
 //#region ts/webrtcRemote.ts
@@ -256,4 +256,4 @@ async function startWebrtcBridge(link) {
 
 //#endregion
 export { startWebrtcBridge };
-//# sourceMappingURL=webrtcRemote-CNC_bMH6.js.map
+//# sourceMappingURL=webrtcRemote-DJDtCTpj.js.map

package/dist/widgets.js

@@ -0,0 +1,7 @@
+import "./e2e-CEIdJGZ7.js";
+import "./channels-BiGUYTuz.js";
+import "./peer-B5JKF4BP.js";
+import { t as AyChannel } from "./browser-B3dOptjL.js";
+import { t as AyTerminal } from "./browser-BRMyG4JA.js";
+
+export { AyChannel, AyTerminal };

package/dist/{workspaceConfig-CuGjX2_R.js → workspaceConfig-B7HaQ-MI.js}

@@ -1,4 +1,4 @@
-import { t as agentYesHome } from "./agentYesHome-CtHb5b71.js";
+import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { lstatSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import path from "path";
@@ -193,4 +193,4 @@ function resolveSpawnCwd(input) {
 
 //#endregion
 export { getSpawnHook as a, hasProvisionHook as c, resolveSpawnCwd as d, setWorkspaceRoot as f, getProvisionRoot as i, hasSpawnHook as l, getMinFreeMb as n, getSpawnWaitMs as o, getProvisionHook as r, getWorkspaceRoot as s, getMaxAgents as t, isProvisionAllowed as u };
-//# sourceMappingURL=workspaceConfig-CuGjX2_R.js.map
+//# sourceMappingURL=workspaceConfig-B7HaQ-MI.js.map

package/dist/{ws-C7B4xWQl.js → ws-Dun8gGiV.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./globalPidIndex-Ca4sTr1b.js";
-import "./messageLog-zVGWLX7w.js";
-import "./e2e-CYlKpfxa.js";
-import "./configShared-BXz2vi4Q.js";
-import { S as listRecords } from "./subcommands-_Ci82sb1.js";
-import "./webrtcLink-CEYNs0pt.js";
-import "./remotes-BDdfhL6N.js";
-import { i as getProvisionRoot } from "./workspaceConfig-CuGjX2_R.js";
+import "./globalPidIndex-D9DOSd-c.js";
+import "./messageLog-C-YIzhRj.js";
+import "./e2e-CEIdJGZ7.js";
+import "./configShared-9wVlbPyC.js";
+import { S as listRecords } from "./subcommands-DFr-5FOL.js";
+import "./webrtcLink-VQhWmKOw.js";
+import "./remotes-Bem6WIyU.js";
+import { i as getProvisionRoot } from "./workspaceConfig-B7HaQ-MI.js";
 import { existsSync } from "fs";
 import { lstat, opendir } from "fs/promises";
 import path from "path";
@@ -418,4 +418,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
-//# sourceMappingURL=ws-C7B4xWQl.js.map
+//# sourceMappingURL=ws-Dun8gGiV.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.236.0",
+  "version": "1.237.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",
@@ -62,6 +62,8 @@
     "ts/*.ts",
     "ts/channels/*.ts",
     "!ts/channels/*.spec.ts",
+    "ts/terminal/*.ts",
+    "!ts/terminal/*.spec.ts",
     "!dist/**/*.map",
     "dist/**/*.js",
     "lab/ui/console-logic.js",
@@ -87,6 +89,14 @@
     "./channels": {
       "types": "./ts/channels/browser.ts",
       "import": "./dist/channels.js"
+    },
+    "./terminal": {
+      "types": "./ts/terminal/browser.ts",
+      "import": "./dist/terminal.js"
+    },
+    "./widgets": {
+      "types": "./ts/widgets.ts",
+      "import": "./dist/widgets.js"
     }
   },
   "publishConfig": {
@@ -134,6 +144,8 @@
   },
   "devDependencies": {
     "@google/generative-ai": "^0.24.1",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/xterm": "^6.0.0",
     "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",
     "@types/bun": "^1.3.6",