agent-yes 1.238.0 → 1.238.2

package/dist/{SUPPORTED_CLIS-NpYW9OaR.js → SUPPORTED_CLIS-C2CFOND-.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-EvHuyNA9.js";
+import { t as CLIS_CONFIG } from "./ts-Cnhsw8GN.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-NpYW9OaR.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-C2CFOND-.js.map

package/dist/{SUPPORTED_CLIS-CtgC_d_l.js → SUPPORTED_CLIS-DmflHNKL.js}

@@ -1,11 +1,11 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DNLNn_SL.js";
-import "./ts-EvHuyNA9.js";
+import "./versionChecker-CBzYImFt.js";
+import "./ts-Cnhsw8GN.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-NpYW9OaR.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C2CFOND-.js";
 
 export { SUPPORTED_CLIS };

package/dist/{agentShare-549Zwi_B.js → agentShare-CyDqjBM_.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { N as resolveOne } from "./subcommands-BdBCxZVu.js";
+import { P as resolveOne } from "./subcommands-CuvZqZTM.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import { a as startShare } from "./share-B9u8-I3y.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-549Zwi_B.js.map
+//# sourceMappingURL=agentShare-CyDqjBM_.js.map

package/dist/{callback-B-ojDckO.js → callback-Bb5dBd02.js}

@@ -3,10 +3,10 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import "./subcommands-BdBCxZVu.js";
+import "./subcommands-CuvZqZTM.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import "./callbackCore-DAYcemCC.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-BNJMOVlW.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-D-kUTlR6.js";
 
 export { cmdCallback };

package/dist/{callback-BNJMOVlW.js → callback-D-kUTlR6.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { N as resolveOne } from "./subcommands-BdBCxZVu.js";
+import { P as resolveOne } from "./subcommands-CuvZqZTM.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-DAYcemCC.js";
 import { randomBytes } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-BLxmap1e.js");
+		const { resolveLocalServeUrl } = await import("./serve-CuMtnSLs.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-BNJMOVlW.js.map
+//# sourceMappingURL=callback-D-kUTlR6.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DNLNn_SL.js";
-import { n as getRustBinary } from "./rustBinary-DSorJMBV.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CBzYImFt.js";
+import { n as getRustBinary } from "./rustBinary-CCi6Sqh5.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-A0uOpmco.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-z2YriUNK.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -294,6 +294,13 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		const code = await runSubcommand(process.argv);
 		process.exit(code ?? 0);
 	}
+	{
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DmflHNKL.js");
+		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
+			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
+			process.exit(1);
+		}
+	}
 }
 {
 	const { detectCwdDeprecation, SUPPRESS_CWD_WARN_ENV } = await import("./cwdDeprecation-Cd8Ykm2t.js");
@@ -339,7 +346,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CtgC_d_l.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DmflHNKL.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DNLNn_SL.js";
-import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-EvHuyNA9.js";
+import "./versionChecker-CBzYImFt.js";
+import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-Cnhsw8GN.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";

package/dist/{notifyDaemon-CjBVeWRg.js → notifyDaemon-BjyUCpbx.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { $ as daemonLockDir, A as renderLogTailLines, G as appendEvent, K as gcInboxes, Q as shouldStealLock, S as listRecords, X as liveWatchers, Y as listInboxParents, Z as readInbox, _ as isPidAlive, c as deriveLiveState, et as daemonLockOwnerPath, q as hostId, tt as notifyDir } from "./subcommands-BdBCxZVu.js";
+import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-CuvZqZTM.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -589,4 +589,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-CjBVeWRg.js.map
+//# sourceMappingURL=notifyDaemon-BjyUCpbx.js.map

package/dist/{rustBinary-DSorJMBV.js → rustBinary-CCi6Sqh5.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-DNLNn_SL.js";
+import { r as getInstalledPackage } from "./versionChecker-CBzYImFt.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-DSorJMBV.js.map
+//# sourceMappingURL=rustBinary-CCi6Sqh5.js.map

package/dist/{schedule-Bw3SL5Hv.js → schedule-CHSe24Je.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DNLNn_SL.js";
-import "./ts-EvHuyNA9.js";
+import "./versionChecker-CBzYImFt.js";
+import "./ts-Cnhsw8GN.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-NpYW9OaR.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C2CFOND-.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-B7HaQ-MI.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-Bf88NPqj.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-Bw3SL5Hv.js.map
+//# sourceMappingURL=schedule-CHSe24Je.js.map

package/dist/{serve-BLxmap1e.js → serve-CuMtnSLs.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DNLNn_SL.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-DSorJMBV.js";
-import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-EvHuyNA9.js";
+import { r as getInstalledPackage } from "./versionChecker-CBzYImFt.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-CCi6Sqh5.js";
+import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-Cnhsw8GN.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
@@ -11,12 +11,12 @@ import { r as recordInbox } from "./messageLog-C-YIzhRj.js";
 import { t as pgidForWrapper } from "./reaper-DP49VCKx.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-NpYW9OaR.js";
-import { A as renderLogTailLines, D as readPtysize, E as readNotes, J as isTransientLockMkdirError, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, R as snapshotStatus, S as listRecords, W as writeToIpc, b as isUserTyping, f as extractNeedsInput, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, nt as TYPING_BADGE, o as controlCodeFromName, p as extractTaskCounts, u as extractBadges } from "./subcommands-BdBCxZVu.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C2CFOND-.js";
+import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-CuvZqZTM.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-DAYcemCC.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-BNJMOVlW.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-D-kUTlR6.js";
 import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-B7HaQ-MI.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-Bf88NPqj.js";
 import { r as spawnRejectionReason } from "./spawnGate-Bo_LFgt9.js";
@@ -1021,6 +1021,23 @@ async function resolveLocalServeUrl() {
 	const port = portFromArgs(daemonArgs);
 	return port ? `http://127.0.0.1:${port}` : null;
 }
+/**
+* Best-effort HTTP base URL of the LOCAL running daemon, for CLI→daemon calls
+* (`ay widget`). More robust than resolveLocalServeUrl for UNMANAGED daemons: it
+* also reads the portless proxy backend port (~/.portless/routes.json) and the
+* PORT env, so a daemon started outside oxmgr (e.g. a portless wrapper that injects
+* PORT) is still found without the caller having to pass --base. Null if nothing
+* local is discoverable.
+*/
+async function resolveDaemonHttpBase() {
+	const managed = await resolveLocalServeUrl();
+	if (managed) return managed;
+	const pport = await portlessAppPort();
+	if (pport) return `http://127.0.0.1:${pport}`;
+	const envPort = process.env.AGENT_YES_SERVE_PORT || process.env.PORT;
+	if (envPort && /^\d+$/.test(envPort)) return `http://127.0.0.1:${envPort}`;
+	return null;
+}
 async function warnStrayServeProcesses() {
 	const stray = await listStrayServeProcesses();
 	if (stray.length === 0) return;
@@ -2229,7 +2246,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-3prv2in5.js");
+			const ws = await import("./ws-53rrEEbz.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2249,7 +2266,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-3prv2in5.js");
+			const ws = await import("./ws-53rrEEbz.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2971,7 +2988,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-549Zwi_B.js");
+				const { createScopedShare } = await import("./agentShare-CyDqjBM_.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -2986,12 +3003,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-549Zwi_B.js");
+			const { listShares } = await import("./agentShare-CyDqjBM_.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-549Zwi_B.js");
+			const { revokeShare } = await import("./agentShare-CyDqjBM_.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3293,7 +3310,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-549Zwi_B.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-CyDqjBM_.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3305,5 +3322,5 @@ Options:
 }
 
 //#endregion
-export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveLocalServeUrl };
-//# sourceMappingURL=serve-BLxmap1e.js.map
+export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
+//# sourceMappingURL=serve-CuMtnSLs.js.map

package/dist/{setup-DlFVw_1n.js → setup-wPtsNZZ5.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-BLxmap1e.js");
+	const { cmdServe } = await import("./serve-CuMtnSLs.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-DlFVw_1n.js.map
+//# sourceMappingURL=setup-wPtsNZZ5.js.map

package/dist/{subcommands-BdBCxZVu.js → subcommands-CuvZqZTM.js}

@@ -1212,6 +1212,20 @@ function isSubcommand(name, managerCommands = true) {
 	return SUBCOMMANDS.has(name) || managerCommands && MANAGER_SUBCOMMANDS.has(name);
 }
 /**
+* Footgun guard for the MANAGER entry (`ay`/`agent-yes`): true when the first arg
+* is a bare word (not a flag) that is neither a subcommand nor a known CLI — a
+* typo, or a newer subcommand run on an older build. The caller should error
+* rather than silently spawn an agent with the word as a prompt (taku 2026-07-26:
+* bare `ay <prompt>` is too dangerous; a spawn must name a CLI — `ay <cli> …` or
+* `--cli`). Never fires for cli-bound aliases (cy/claude-yes/…), where the first
+* word is legitimately the prompt, nor for flags or an empty invocation.
+*/
+function isUnknownManagerToken(rawArg, managerCommands, supportedClis) {
+	if (!managerCommands || !rawArg || rawArg.startsWith("-")) return false;
+	if (isSubcommand(rawArg, managerCommands)) return false;
+	return !supportedClis.includes(rawArg);
+}
+/**
 * Top-level entry. Returns the desired process exit code, or null if argv
 * is not a subcommand invocation.
 */
@@ -1253,31 +1267,31 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-w7drEaJc.js");
+				const { cmdTerm } = await import("./terminal-CBbBQMcT.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-Coav85Lx.js");
+				const { cmdWidget } = await import("./widget-j4TWqwpU.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-Coav85Lx.js");
+				const { cmdMint } = await import("./widget-j4TWqwpU.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-BLxmap1e.js");
+				const { cmdServe } = await import("./serve-CuMtnSLs.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-DlFVw_1n.js");
+				const { cmdSetup } = await import("./setup-wPtsNZZ5.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-3prv2in5.js");
+				const { cmdWs } = await import("./ws-53rrEEbz.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-Bw3SL5Hv.js");
+				const { cmdSchedule } = await import("./schedule-CHSe24Je.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1289,7 +1303,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-B-ojDckO.js");
+				const { cmdCallback } = await import("./callback-Bb5dBd02.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -4327,7 +4341,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-CjBVeWRg.js");
+		const { ensureDaemon } = await import("./notifyDaemon-BjyUCpbx.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4401,7 +4415,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-CjBVeWRg.js");
+	const daemon = await import("./notifyDaemon-BjyUCpbx.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4427,5 +4441,5 @@ async function cmdNotifyd(rest) {
 }
 
 //#endregion
-export { daemonLockDir as $, renderLogTailLines as A, stopTipForCli as B, matchKeyword as C, readPtysize as D, readNotes as E, resolveResumeArgs as F, appendEvent as G, waitForLogQuiet as H, restartHintLines as I, isTransientLockMkdirError as J, gcInboxes as K, runSubcommand as L, renderRawLogLines as M, resolveOne as N, recentMessageEdges as O, resolveReadWindow as P, shouldStealLock as Q, snapshotStatus as R, listRecords as S, readAgentPtysize as T, writeKeysPaced as U, submitAndConfirm as V, writeToIpc as W, liveWatchers as X, listInboxParents as Y, readInbox as Z, isPidAlive as _, cmdHelp as a, isUserTyping as b, deriveLiveState as c, extractMenu as d, daemonLockOwnerPath as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderRawLog as j, recentReadEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, TYPING_BADGE as nt, controlCodeFromName as o, extractTaskCounts as p, hostId as q, TYPING_WINDOW_MS as r, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, notifyDir as tt, extractBadges as u, isSlashCommand as v, menuSelectKeys as w, lastStdinAt as x, isSubcommand as y, stdinActivityPath as z };
-//# sourceMappingURL=subcommands-BdBCxZVu.js.map
+export { shouldStealLock as $, recentReadEdges as A, stdinActivityPath as B, listRecords as C, readNotes as D, readAgentPtysize as E, resolveReadWindow as F, writeToIpc as G, submitAndConfirm as H, resolveResumeArgs as I, hostId as J, appendEvent as K, restartHintLines as L, renderRawLog as M, renderRawLogLines as N, readPtysize as O, resolveOne as P, readInbox as Q, runSubcommand as R, lastStdinAt as S, menuSelectKeys as T, waitForLogQuiet as U, stopTipForCli as V, writeKeysPaced as W, listInboxParents as X, isTransientLockMkdirError as Y, liveWatchers as Z, isPidAlive as _, cmdHelp as a, isUnknownManagerToken as b, deriveLiveState as c, extractMenu as d, daemonLockDir as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderLogTailLines as j, recentMessageEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, notifyDir as nt, controlCodeFromName as o, extractTaskCounts as p, gcInboxes as q, TYPING_WINDOW_MS as r, TYPING_BADGE as rt, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, daemonLockOwnerPath as tt, extractBadges as u, isSlashCommand as v, matchKeyword as w, isUserTyping as x, isSubcommand as y, snapshotStatus as z };
+//# sourceMappingURL=subcommands-CuvZqZTM.js.map

package/dist/subcommands-z2YriUNK.js

@@ -0,0 +1,10 @@
+import "./logger-CDIsZ-Pp.js";
+import "./globalPidIndex-D9DOSd-c.js";
+import "./messageLog-C-YIzhRj.js";
+import "./e2e-CEIdJGZ7.js";
+import "./configShared-9wVlbPyC.js";
+import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-CuvZqZTM.js";
+import "./webrtcLink-VQhWmKOw.js";
+import "./remotes-Bem6WIyU.js";
+
+export { cmdHelp, isSubcommand, isUnknownManagerToken, runSubcommand };

package/dist/{terminal-w7drEaJc.js → terminal-CBbBQMcT.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-BLxmap1e.js");
+	const { mintScopedTermToken } = await import("./serve-CuMtnSLs.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-w7drEaJc.js.map
+//# sourceMappingURL=terminal-CBbBQMcT.js.map

package/dist/{ts-EvHuyNA9.js → ts-Cnhsw8GN.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DNLNn_SL.js";
+import { r as getInstalledPackage } from "./versionChecker-CBzYImFt.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-DBoONoM-.js";
@@ -2027,4 +2027,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, AgentContext as c, answerAsk as i, CLAUDE_SESSION_PIN_ENV as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-EvHuyNA9.js.map
+//# sourceMappingURL=ts-Cnhsw8GN.js.map

package/dist/{versionChecker-DNLNn_SL.js → versionChecker-CBzYImFt.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.238.0";
+var version = "1.238.2";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-DNLNn_SL.js.map
+//# sourceMappingURL=versionChecker-CBzYImFt.js.map

package/dist/{widget-Coav85Lx.js → widget-j4TWqwpU.js}

@@ -28,8 +28,8 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveLocalServeUrl, loadTokenReadOnly } = await import("./serve-BLxmap1e.js");
-	const base = typeof flags.base === "string" ? flags.base : await resolveLocalServeUrl();
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-CuMtnSLs.js");
+	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
 	if (!token) throw new Error("no serve token — pass --token or run `ay serve` once");
@@ -153,7 +153,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-BLxmap1e.js");
+	const { mintScopedTermToken } = await import("./serve-CuMtnSLs.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -169,4 +169,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-Coav85Lx.js.map
+//# sourceMappingURL=widget-j4TWqwpU.js.map

package/dist/{ws-3prv2in5.js → ws-53rrEEbz.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { S as listRecords } from "./subcommands-BdBCxZVu.js";
+import { C as listRecords } from "./subcommands-CuvZqZTM.js";
 import "./webrtcLink-VQhWmKOw.js";
 import "./remotes-Bem6WIyU.js";
 import { i as getProvisionRoot } from "./workspaceConfig-B7HaQ-MI.js";
@@ -418,4 +418,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
-//# sourceMappingURL=ws-3prv2in5.js.map
+//# sourceMappingURL=ws-53rrEEbz.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.238.0",
+  "version": "1.238.2",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/cli.ts

@@ -28,7 +28,9 @@ import { buildRustArgs } from "./buildRustArgs.ts";
   const managerCommands = !invokedCliName(process.argv);
   // Intercept bare -h/--help so we show TS subcommands, not just Rust agent-runner options.
   const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-  const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands.ts");
+  const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import(
+    "./subcommands.ts"
+  );
   if (isHelpFlag && process.argv.length === 3) {
     await cmdHelp(managerCommands);
     process.exit(0);
@@ -37,6 +39,21 @@ import { buildRustArgs } from "./buildRustArgs.ts";
     const code = await runSubcommand(process.argv);
     process.exit(code ?? 0);
   }
+  // Footgun guard: on the manager entry, a bare first word that is neither a
+  // subcommand nor a known CLI is a typo or a newer subcommand on an older build
+  // — error instead of silently spawning an agent with it as the prompt (taku
+  // 2026-07-26). A spawn must name a CLI: `ay <cli> …` or `ay --cli <cli> …`.
+  {
+    const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS.ts");
+    if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
+      process.stderr.write(
+        `ay: unknown subcommand or CLI '${rawArg}'.\n` +
+          `    See 'ay help' for subcommands. To run an agent, name a CLI:\n` +
+          `    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`,
+      );
+      process.exit(1);
+    }
+  }
 }
 
 // Deprecation: `--cwd <dir>` on an agent run. Runs AFTER the subcommand fast

package/ts/serve.ts

@@ -988,6 +988,26 @@ export async function resolveLocalServeUrl(): Promise<string | null> {
   return port ? `http://127.0.0.1:${port}` : null;
 }
 
+/**
+ * Best-effort HTTP base URL of the LOCAL running daemon, for CLI→daemon calls
+ * (`ay widget`). More robust than resolveLocalServeUrl for UNMANAGED daemons: it
+ * also reads the portless proxy backend port (~/.portless/routes.json) and the
+ * PORT env, so a daemon started outside oxmgr (e.g. a portless wrapper that injects
+ * PORT) is still found without the caller having to pass --base. Null if nothing
+ * local is discoverable.
+ */
+export async function resolveDaemonHttpBase(): Promise<string | null> {
+  const managed = await resolveLocalServeUrl();
+  if (managed) return managed;
+  // Unmanaged portless run: the real loopback backend is in the portless routes.
+  const pport = await portlessAppPort();
+  if (pport) return `http://127.0.0.1:${pport}`;
+  // Last resort: an explicit port in the environment.
+  const envPort = process.env.AGENT_YES_SERVE_PORT || process.env.PORT;
+  if (envPort && /^\d+$/.test(envPort)) return `http://127.0.0.1:${envPort}`;
+  return null;
+}
+
 async function warnStrayServeProcesses(): Promise<void> {
   const stray = await listStrayServeProcesses();
   if (stray.length === 0) return;

package/ts/subcommands.spec.ts

@@ -113,6 +113,29 @@ describe("subcommands.isSubcommand", () => {
   });
 });
 
+describe("subcommands.isUnknownManagerToken (footgun guard)", () => {
+  const CLIS = ["claude", "codex", "gemini"];
+  it("flags a bare non-cli non-subcommand word on the manager entry", async () => {
+    const { isUnknownManagerToken } = await loadModule();
+    // `ay frobnicate` / a newer subcommand on an older build — neither a
+    // subcommand nor a CLI here → error (rather than spawn it as a prompt).
+    expect(isUnknownManagerToken("frobnicate", true, CLIS)).toBe(true);
+    expect(isUnknownManagerToken("xyzzy", true, CLIS)).toBe(true);
+  });
+  it("allows a known CLI, a subcommand, a flag, and empty", async () => {
+    const { isUnknownManagerToken } = await loadModule();
+    expect(isUnknownManagerToken("claude", true, CLIS)).toBe(false); // `ay claude …`
+    expect(isUnknownManagerToken("ls", true, CLIS)).toBe(false); // subcommand
+    expect(isUnknownManagerToken("--cli", true, CLIS)).toBe(false); // flag → explicit spawn
+    expect(isUnknownManagerToken(undefined, true, CLIS)).toBe(false); // bare `ay`
+  });
+  it("never fires for a cli-bound alias (first word is the prompt)", async () => {
+    const { isUnknownManagerToken } = await loadModule();
+    // `cy widget ls` → managerCommands=false → "widget ls" is a prompt to claude.
+    expect(isUnknownManagerToken("widget", false, CLIS)).toBe(false);
+  });
+});
+
 describe("subcommands.cmdHelp", () => {
   const capture = async (managerCommands?: boolean) => {
     const { cmdHelp } = await loadModule();

package/ts/subcommands.ts

@@ -425,6 +425,25 @@ export function isSubcommand(name: string | undefined, managerCommands = true):
   return SUBCOMMANDS.has(name) || (managerCommands && MANAGER_SUBCOMMANDS.has(name));
 }
 
+/**
+ * Footgun guard for the MANAGER entry (`ay`/`agent-yes`): true when the first arg
+ * is a bare word (not a flag) that is neither a subcommand nor a known CLI — a
+ * typo, or a newer subcommand run on an older build. The caller should error
+ * rather than silently spawn an agent with the word as a prompt (taku 2026-07-26:
+ * bare `ay <prompt>` is too dangerous; a spawn must name a CLI — `ay <cli> …` or
+ * `--cli`). Never fires for cli-bound aliases (cy/claude-yes/…), where the first
+ * word is legitimately the prompt, nor for flags or an empty invocation.
+ */
+export function isUnknownManagerToken(
+  rawArg: string | undefined,
+  managerCommands: boolean,
+  supportedClis: readonly string[],
+): boolean {
+  if (!managerCommands || !rawArg || rawArg.startsWith("-")) return false;
+  if (isSubcommand(rawArg, managerCommands)) return false;
+  return !supportedClis.includes(rawArg);
+}
+
 /**
  * Top-level entry. Returns the desired process exit code, or null if argv
  * is not a subcommand invocation.

package/ts/widget.ts

@@ -42,8 +42,8 @@ function parseFlags(
 async function daemonTarget(
   flags: Record<string, string | boolean>,
 ): Promise<{ base: string; token: string }> {
-  const { resolveLocalServeUrl, loadTokenReadOnly } = await import("./serve.ts");
-  const base = typeof flags.base === "string" ? flags.base : await resolveLocalServeUrl();
+  const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve.ts");
+  const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
   if (!base)
     throw new Error(
       "no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)",

package/dist/subcommands-A0uOpmco.js

@@ -1,10 +0,0 @@
-import "./logger-CDIsZ-Pp.js";
-import "./globalPidIndex-D9DOSd-c.js";
-import "./messageLog-C-YIzhRj.js";
-import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { A as renderLogTailLines, B as stopTipForCli, C as matchKeyword, D as readPtysize, E as readNotes, F as resolveResumeArgs, H as waitForLogQuiet, I as restartHintLines, L as runSubcommand, M as renderRawLogLines, N as resolveOne, O as recentMessageEdges, P as resolveReadWindow, R as snapshotStatus, S as listRecords, T as readAgentPtysize, U as writeKeysPaced, V as submitAndConfirm, W as writeToIpc, _ as isPidAlive, a as cmdHelp, b as isUserTyping, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderRawLog, k as recentReadEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as menuSelectKeys, x as lastStdinAt, y as isSubcommand, z as stdinActivityPath } from "./subcommands-BdBCxZVu.js";
-import "./webrtcLink-VQhWmKOw.js";
-import "./remotes-Bem6WIyU.js";
-
-export { cmdHelp, isSubcommand, runSubcommand };