agent-yes 1.237.0 → 1.238.0-beta.570.1

package/dist/{SUPPORTED_CLIS-C0RwjYrz.js → SUPPORTED_CLIS-BNmF8R13.js}

@@ -1,11 +1,11 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-XfEBINhH.js";
-import "./ts-Dd1FK7sR.js";
+import "./versionChecker-DtCBEDW3.js";
+import "./ts-CV60LDBN.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CDrJz9Xo.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CL_aDyc-.js";
 
 export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-CDrJz9Xo.js → SUPPORTED_CLIS-CL_aDyc-.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-Dd1FK7sR.js";
+import { t as CLIS_CONFIG } from "./ts-CV60LDBN.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-CDrJz9Xo.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-CL_aDyc-.js.map

package/dist/{agentShare-Cl_J3dfx.js → agentShare-DpmG7r_b.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { N as resolveOne } from "./subcommands-DFr-5FOL.js";
+import { N as resolveOne } from "./subcommands-DHVf6p7P.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import { a as startShare } from "./share-B9u8-I3y.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-Cl_J3dfx.js.map
+//# sourceMappingURL=agentShare-DpmG7r_b.js.map

package/dist/{callback-D0_AeyN1.js → callback-Bj7Mef_Y.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { N as resolveOne } from "./subcommands-DFr-5FOL.js";
+import { N as resolveOne } from "./subcommands-DHVf6p7P.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-DAYcemCC.js";
 import { randomBytes } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-QejbNTr-.js");
+		const { resolveLocalServeUrl } = await import("./serve-nBi1Qrz7.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-D0_AeyN1.js.map
+//# sourceMappingURL=callback-Bj7Mef_Y.js.map

package/dist/{callback-CFbkvqTh.js → callback-DBNd0LVA.js}

@@ -3,10 +3,10 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import "./subcommands-DFr-5FOL.js";
+import "./subcommands-DHVf6p7P.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import "./callbackCore-DAYcemCC.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-D0_AeyN1.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-Bj7Mef_Y.js";
 
 export { cmdCallback };

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-XfEBINhH.js";
-import { n as getRustBinary } from "./rustBinary-Bb9qJZ5w.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DtCBEDW3.js";
+import { n as getRustBinary } from "./rustBinary-CwBgqXIl.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-ymJWO2iv.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-CU0jP5lx.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -339,7 +339,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-C0RwjYrz.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BNmF8R13.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-XfEBINhH.js";
-import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-Dd1FK7sR.js";
+import "./versionChecker-DtCBEDW3.js";
+import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-CV60LDBN.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";

package/dist/{notifyDaemon-D_8TRVHt.js → notifyDaemon-CGgMpWK3.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { $ as daemonLockDir, A as renderLogTailLines, G as appendEvent, K as gcInboxes, Q as shouldStealLock, S as listRecords, X as liveWatchers, Y as listInboxParents, Z as readInbox, _ as isPidAlive, c as deriveLiveState, et as daemonLockOwnerPath, q as hostId, tt as notifyDir } from "./subcommands-DFr-5FOL.js";
+import { $ as daemonLockDir, A as renderLogTailLines, G as appendEvent, K as gcInboxes, Q as shouldStealLock, S as listRecords, X as liveWatchers, Y as listInboxParents, Z as readInbox, _ as isPidAlive, c as deriveLiveState, et as daemonLockOwnerPath, q as hostId, tt as notifyDir } from "./subcommands-DHVf6p7P.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -589,4 +589,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-D_8TRVHt.js.map
+//# sourceMappingURL=notifyDaemon-CGgMpWK3.js.map

package/dist/{rustBinary-Bb9qJZ5w.js → rustBinary-CwBgqXIl.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-XfEBINhH.js";
+import { r as getInstalledPackage } from "./versionChecker-DtCBEDW3.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-Bb9qJZ5w.js.map
+//# sourceMappingURL=rustBinary-CwBgqXIl.js.map

package/dist/{schedule-B8Erb3y6.js → schedule-4kGSyhxx.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-XfEBINhH.js";
-import "./ts-Dd1FK7sR.js";
+import "./versionChecker-DtCBEDW3.js";
+import "./ts-CV60LDBN.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CDrJz9Xo.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CL_aDyc-.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-B7HaQ-MI.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-Bf88NPqj.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-B8Erb3y6.js.map
+//# sourceMappingURL=schedule-4kGSyhxx.js.map

package/dist/{serve-QejbNTr-.js → serve-nBi1Qrz7.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-XfEBINhH.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-Bb9qJZ5w.js";
-import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-Dd1FK7sR.js";
+import { r as getInstalledPackage } from "./versionChecker-DtCBEDW3.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-CwBgqXIl.js";
+import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-CV60LDBN.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
@@ -11,12 +11,12 @@ import { r as recordInbox } from "./messageLog-C-YIzhRj.js";
 import { t as pgidForWrapper } from "./reaper-DP49VCKx.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CDrJz9Xo.js";
-import { A as renderLogTailLines, D as readPtysize, E as readNotes, J as isTransientLockMkdirError, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, R as snapshotStatus, S as listRecords, W as writeToIpc, b as isUserTyping, f as extractNeedsInput, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, nt as TYPING_BADGE, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-DFr-5FOL.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CL_aDyc-.js";
+import { A as renderLogTailLines, D as readPtysize, E as readNotes, J as isTransientLockMkdirError, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, R as snapshotStatus, S as listRecords, W as writeToIpc, b as isUserTyping, f as extractNeedsInput, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, nt as TYPING_BADGE, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-DHVf6p7P.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-DAYcemCC.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-D0_AeyN1.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-Bj7Mef_Y.js";
 import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-B7HaQ-MI.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-Bf88NPqj.js";
 import { r as spawnRejectionReason } from "./spawnGate-Bo_LFgt9.js";
@@ -31,6 +31,17 @@ import { createHash, createHmac, randomBytes, timingSafeEqual } from "crypto";
 
 //#region ts/termToken.ts
 const PREFIX = "ayt1";
+const CAPS_READONLY = ["tail", "size"];
+const CAPS_INTERACTIVE = [
+	"tail",
+	"size",
+	"send",
+	"resize"
+];
+/** Derive caps for a legacy `{w}` token (pre-caps format): w=1 ⇒ interactive. */
+function legacyCaps(w) {
+	return w === 1 ? [...CAPS_INTERACTIVE] : [...CAPS_READONLY];
+}
 /** Dedicated HMAC key derived from the master token (so the token isn't signed with the raw master). */
 function keyFor(masterToken) {
 	return createHash("sha256").update("ay/term/token/v1\n" + masterToken).digest();
@@ -39,11 +50,17 @@ function keyFor(masterToken) {
 function isTermToken(tok) {
 	return typeof tok === "string" && tok.startsWith(PREFIX + ".");
 }
-/** Mint a scoped token bound to `scope.pid`, signed with the master token. */
+/**
+* Mint a scoped token bound to `scope.pid` (the subject), signed with the master
+* token. `caps` is authoritative; if omitted it derives from `canSend` (terminal
+* back-compat). Emits the caps-format payload `{s, c, x}` (verified alongside the
+* legacy `{p, w, x}`).
+*/
 function mintTermToken(masterToken, scope) {
+	const caps = scope.caps ?? (scope.canSend ? [...CAPS_INTERACTIVE] : [...CAPS_READONLY]);
 	const body = `${PREFIX}.${Buffer.from(JSON.stringify({
-		p: scope.pid,
-		w: scope.canSend ? 1 : 0,
+		s: scope.pid,
+		c: caps,
 		x: Math.floor(scope.exp)
 	})).toString("base64url")}`;
 	return `${body}.${createHmac("sha256", keyFor(masterToken)).update(body).digest().toString("base64url")}`;
@@ -72,11 +89,14 @@ function verifyTermToken(masterToken, tok, nowSec = Math.floor(Date.now() / 1e3)
 	} catch {
 		return null;
 	}
-	if (typeof obj.p !== "string" || !obj.p) return null;
+	const sub = typeof obj.s === "string" && obj.s ? obj.s : obj.p;
+	if (typeof sub !== "string" || !sub) return null;
 	if (typeof obj.x !== "number" || !Number.isFinite(obj.x) || obj.x <= nowSec) return null;
+	const caps = Array.isArray(obj.c) ? obj.c.filter((x) => typeof x === "string") : legacyCaps(obj.w);
 	return {
-		pid: obj.p,
-		canSend: obj.w === 1,
+		pid: sub,
+		canSend: caps.includes("send"),
+		caps,
 		exp: obj.x
 	};
 }
@@ -473,7 +493,7 @@ function authorizeRequest(req, expectedToken) {
 	return null;
 }
 function isTermCorsPath(p) {
-	return /^\/api\/(tail|size)\/.+$/.test(p) || p === "/api/send";
+	return /^\/api\/(tail|size)\/.+$/.test(p) || p === "/api/send" || /^\/api\/resize\/.+$/.test(p) || p.startsWith("/api/widget/");
 }
 function withTermCors(req, res) {
 	if (!res) return res;
@@ -511,17 +531,13 @@ async function scopedKeywordOk(keyword, scope) {
 */
 async function scopedGate(scope, method, p) {
 	const forbid = (m) => new Response(m, { status: 403 });
+	const needs = (cap) => scope.caps.includes(cap) ? null : forbid(`scoped token lacks '${cap}'`);
 	const m = /^\/api\/(?:tail|size)\/(.+)$/.exec(p);
-	if (method === "GET" && m) return await scopedKeywordOk(decodeURIComponent(m[1]), scope) ? null : forbid("scoped token: not bound to this agent");
-	if (method === "POST" && p === "/api/send") {
-		if (!scope.canSend) return forbid("scoped token is read-only");
-		return null;
-	}
+	if (method === "GET" && m) return needs("tail") ?? (await scopedKeywordOk(decodeURIComponent(m[1]), scope) ? null : forbid("scoped token: not bound to this agent"));
+	if (method === "POST" && p === "/api/send") return needs("send");
 	const rz = /^\/api\/resize\/(.+)$/.exec(p);
-	if (method === "POST" && rz) {
-		if (!scope.canSend) return forbid("scoped token is read-only");
-		return await scopedKeywordOk(decodeURIComponent(rz[1]), scope) ? null : forbid("scoped token: not bound to this agent");
-	}
+	if (method === "POST" && rz) return needs("resize") ?? (await scopedKeywordOk(decodeURIComponent(rz[1]), scope) ? null : forbid("scoped token: not bound to this agent"));
+	if (p.startsWith("/api/widget/")) return needs("read");
 	return forbid("scoped token: route not permitted");
 }
 /**
@@ -529,23 +545,57 @@ async function scopedGate(scope, method, p) {
 * master token file, resolve the keyword to a concrete pid, and sign. Used by
 * `ay term mint`. Throws if there's no serve token or the agent can't be resolved.
 */
-async function mintScopedTermToken(keyword, opts) {
+const TERMINAL_CAPS = new Set([
+	"tail",
+	"size",
+	"send",
+	"resize"
+]);
+async function mintScopedTermToken(target, opts) {
 	const master = await loadTokenReadOnly();
 	if (!master) throw new Error("no serve token at ~/.agent-yes/.serve-token — run `ay serve` once on this host to create it");
-	const rec = await resolveOne(keyword, defaultOpts({ all: true }));
-	const pid = String(rec.pid);
+	const caps = opts.caps ?? (opts.canSend ? [
+		"tail",
+		"size",
+		"send",
+		"resize"
+	] : ["tail", "size"]);
+	let sub = target;
+	if (target !== "*" && caps.some((c) => TERMINAL_CAPS.has(c))) {
+		const rec = await resolveOne(target, defaultOpts({ all: true }));
+		sub = String(rec.pid);
+	}
 	const exp = Math.floor(Date.now() / 1e3) + Math.max(1, Math.floor(opts.ttlSec));
 	return {
 		token: mintTermToken(master, {
-			pid,
-			canSend: opts.canSend,
+			pid: sub,
+			caps,
 			exp
 		}),
-		pid,
+		sub,
+		pid: sub,
 		exp,
-		canSend: opts.canSend
+		caps
 	};
 }
+const widgetViewers = /* @__PURE__ */ new Map();
+const widgetPushers = /* @__PURE__ */ new Map();
+const widgetWaiters = /* @__PURE__ */ new Map();
+let widgetCmdSeq = 0;
+const WIDGET_TTL_MS = 3e4;
+function widgetNewId() {
+	return "v_" + randomBytes(4).toString("hex");
+}
+function widgetLive() {
+	const now = Date.now();
+	for (const [id, v] of widgetViewers) if (now - v.lastSeen >= WIDGET_TTL_MS) widgetViewers.delete(id);
+	return [...widgetViewers.values()];
+}
+/** Resolve a `<viewer>` selector: exact id, then id-prefix / url / title substring. */
+function widgetResolve(sel) {
+	if (widgetViewers.has(sel) && Date.now() - widgetViewers.get(sel).lastSeen < WIDGET_TTL_MS) return sel;
+	return widgetLive().find((v) => v.id.startsWith(sel) || v.url.includes(sel) || v.title.includes(sel))?.id ?? null;
+}
 const defaultOpts = (overrides = {}) => ({
 	all: false,
 	active: false,
@@ -971,6 +1021,23 @@ async function resolveLocalServeUrl() {
 	const port = portFromArgs(daemonArgs);
 	return port ? `http://127.0.0.1:${port}` : null;
 }
+/**
+* Best-effort HTTP base URL of the LOCAL running daemon, for CLI→daemon calls
+* (`ay widget`). More robust than resolveLocalServeUrl for UNMANAGED daemons: it
+* also reads the portless proxy backend port (~/.portless/routes.json) and the
+* PORT env, so a daemon started outside oxmgr (e.g. a portless wrapper that injects
+* PORT) is still found without the caller having to pass --base. Null if nothing
+* local is discoverable.
+*/
+async function resolveDaemonHttpBase() {
+	const managed = await resolveLocalServeUrl();
+	if (managed) return managed;
+	const pport = await portlessAppPort();
+	if (pport) return `http://127.0.0.1:${pport}`;
+	const envPort = process.env.AGENT_YES_SERVE_PORT || process.env.PORT;
+	if (envPort && /^\d+$/.test(envPort)) return `http://127.0.0.1:${envPort}`;
+	return null;
+}
 async function warnStrayServeProcesses() {
 	const stray = await listStrayServeProcesses();
 	if (stray.length === 0) return;
@@ -2179,7 +2246,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-Dun8gGiV.js");
+			const ws = await import("./ws-Bue4UzPC.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2199,7 +2266,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-Dun8gGiV.js");
+			const ws = await import("./ws-Bue4UzPC.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2273,6 +2340,136 @@ Options:
 				return new Response(e.message, { status: 404 });
 			}
 		}
+		const scopedSub = authResult.kind === "scoped" ? authResult.scope.pid : null;
+		const boundOk = (vid) => !scopedSub || scopedSub === "*" || scopedSub === vid;
+		if (req.method === "POST" && p === "/api/widget/register") {
+			let b;
+			try {
+				b = await req.json();
+			} catch {
+				return new Response("invalid JSON body", { status: 400 });
+			}
+			const id = scopedSub && scopedSub !== "*" ? scopedSub : typeof b.id === "string" && b.id ? b.id : widgetNewId();
+			widgetViewers.set(id, {
+				id,
+				url: String(b.url ?? ""),
+				title: String(b.title ?? ""),
+				caps: Array.isArray(b.caps) ? b.caps.filter((c) => typeof c === "string") : [],
+				lastSeen: Date.now()
+			});
+			return Response.json({ viewerId: id });
+		}
+		if (req.method === "GET" && p === "/api/widget/list") {
+			const now = Date.now();
+			return Response.json(widgetLive().map((v) => ({
+				id: v.id,
+				url: v.url,
+				title: v.title,
+				caps: v.caps,
+				age: Math.round((now - v.lastSeen) / 1e3)
+			})));
+		}
+		const pollM = /^\/api\/widget\/poll\/(.+)$/.exec(p);
+		if (req.method === "GET" && pollM) {
+			const vid = decodeURIComponent(pollM[1]);
+			if (!boundOk(vid)) return new Response("token not bound to this viewer", { status: 403 });
+			const enc = new TextEncoder();
+			let hb = null;
+			const stream = new ReadableStream({
+				start(controller) {
+					const push = (obj) => {
+						try {
+							controller.enqueue(enc.encode(`data: ${JSON.stringify(obj)}\n\n`));
+						} catch {}
+					};
+					widgetPushers.set(vid, push);
+					const touch = () => {
+						const v = widgetViewers.get(vid);
+						if (v) v.lastSeen = Date.now();
+					};
+					touch();
+					hb = setInterval(() => {
+						try {
+							controller.enqueue(enc.encode(": ping\n\n"));
+							touch();
+						} catch {}
+					}, 15e3);
+					const cleanup = () => {
+						if (hb) clearInterval(hb);
+						if (widgetPushers.get(vid) === push) widgetPushers.delete(vid);
+					};
+					req.signal.addEventListener("abort", cleanup);
+				},
+				cancel() {
+					if (hb) clearInterval(hb);
+				}
+			});
+			return new Response(stream, { headers: {
+				"Content-Type": "text/event-stream",
+				"Cache-Control": "no-cache",
+				Connection: "keep-alive"
+			} });
+		}
+		if (req.method === "POST" && p === "/api/widget/result") {
+			let b;
+			try {
+				b = await req.json();
+			} catch {
+				return new Response("invalid JSON body", { status: 400 });
+			}
+			const resolve = b.cmdId ? widgetWaiters.get(b.cmdId) : void 0;
+			if (resolve) {
+				widgetWaiters.delete(b.cmdId);
+				resolve({
+					ok: b.ok === true,
+					data: b.data,
+					error: b.error
+				});
+			}
+			return Response.json({ ok: true });
+		}
+		if (req.method === "POST" && p === "/api/widget/read") {
+			let b;
+			try {
+				b = await req.json();
+			} catch {
+				return new Response("invalid JSON body", { status: 400 });
+			}
+			if (!b.viewer || !b.kind) return new Response("missing viewer/kind", { status: 400 });
+			if (authResult.kind === "scoped" && b.kind === "screenshot" && !authResult.scope.caps.includes("screenshot")) return new Response("scoped token lacks 'screenshot'", { status: 403 });
+			const vid = widgetResolve(b.viewer);
+			if (!vid) return new Response(`no online viewer matching "${b.viewer}"`, { status: 404 });
+			if (!boundOk(vid)) return new Response("token not bound to this viewer", { status: 403 });
+			const push = widgetPushers.get(vid);
+			if (!push) return new Response("viewer offline", { status: 409 });
+			const cmdId = `c${++widgetCmdSeq}_${Date.now()}`;
+			const result = await new Promise((resolve) => {
+				const timer = setTimeout(() => {
+					widgetWaiters.delete(cmdId);
+					resolve({
+						ok: false,
+						error: "timeout"
+					});
+				}, 1e4);
+				widgetWaiters.set(cmdId, (r) => {
+					clearTimeout(timer);
+					resolve(r);
+				});
+				push({
+					cmdId,
+					kind: b.kind,
+					args: b.args ?? {}
+				});
+			});
+			const v = widgetViewers.get(vid);
+			return Response.json({
+				viewer: vid,
+				url: v?.url ?? "",
+				ts: Math.floor(Date.now() / 1e3),
+				kind: b.kind,
+				...result.ok ? { data: result.data } : { error: result.error ?? "failed" }
+			});
+		}
 		const tailM = /^\/api\/tail\/(.+)$/.exec(p);
 		if (req.method === "GET" && tailM) {
 			const keyword = decodeURIComponent(tailM[1]);
@@ -2791,7 +2988,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-Cl_J3dfx.js");
+				const { createScopedShare } = await import("./agentShare-DpmG7r_b.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -2806,12 +3003,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-Cl_J3dfx.js");
+			const { listShares } = await import("./agentShare-DpmG7r_b.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-Cl_J3dfx.js");
+			const { revokeShare } = await import("./agentShare-DpmG7r_b.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3113,7 +3310,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-Cl_J3dfx.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-DpmG7r_b.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3125,5 +3322,5 @@ Options:
 }
 
 //#endregion
-export { cmdServe, mintScopedTermToken, resolveLocalServeUrl };
-//# sourceMappingURL=serve-QejbNTr-.js.map
+export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
+//# sourceMappingURL=serve-nBi1Qrz7.js.map

package/dist/{setup-Dzi5Cc3g.js → setup-C-FQZTeR.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-QejbNTr-.js");
+	const { cmdServe } = await import("./serve-nBi1Qrz7.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-Dzi5Cc3g.js.map
+//# sourceMappingURL=setup-C-FQZTeR.js.map

package/dist/{subcommands-ymJWO2iv.js → subcommands-CU0jP5lx.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { A as renderLogTailLines, B as stopTipForCli, C as matchKeyword, D as readPtysize, E as readNotes, F as resolveResumeArgs, H as waitForLogQuiet, I as restartHintLines, L as runSubcommand, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, P as resolveReadWindow, R as snapshotStatus, S as listRecords, T as readAgentPtysize, U as writeKeysPaced, V as submitAndConfirm, W as writeToIpc, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stdinActivityPath } from "./subcommands-DFr-5FOL.js";
+import { A as renderLogTailLines, B as stopTipForCli, C as matchKeyword, D as readPtysize, E as readNotes, F as resolveResumeArgs, H as waitForLogQuiet, I as restartHintLines, L as runSubcommand, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, P as resolveReadWindow, R as snapshotStatus, S as listRecords, T as readAgentPtysize, U as writeKeysPaced, V as submitAndConfirm, W as writeToIpc, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stdinActivityPath } from "./subcommands-DHVf6p7P.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";