agent-yes 1.241.0 → 1.243.0-beta.579.1

package/dist/{SUPPORTED_CLIS-BXTRXVhU.js → SUPPORTED_CLIS-GdCVJMMr.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-CyUQ58Ht.js";
+import { t as CLIS_CONFIG } from "./ts-CvwjBKbN.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-BXTRXVhU.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-GdCVJMMr.js.map

package/dist/{SUPPORTED_CLIS-D2o95DmW.js → SUPPORTED_CLIS-S4ojAM-G.js}

@@ -1,11 +1,11 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BzfCavve.js";
-import "./ts-CyUQ58Ht.js";
+import "./versionChecker-Clt46j3c.js";
+import "./ts-CvwjBKbN.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BXTRXVhU.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-GdCVJMMr.js";
 
 export { SUPPORTED_CLIS };

package/dist/{agentShare-B7pv4n5U.js → agentShare-BoBeAnvX.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { P as resolveOne } from "./subcommands-BPTVjPEs.js";
+import { P as resolveOne } from "./subcommands-3_ufv34d.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { a as startShare } from "./share-BGl3wutJ.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-B7pv4n5U.js.map
+//# sourceMappingURL=agentShare-BoBeAnvX.js.map

package/dist/{browser-D2s9Nzi0.js → browser-C5pEBVVH.js}

@@ -13009,6 +13009,8 @@ var AyTerminal = class {
 	badgeEl;
 	started = false;
 	writable = false;
+	capViewerId = "";
+	capTimer = null;
 	constructor(info) {
 		const o = typeof info === "string" || typeof info === "number" ? { pid: info } : info;
 		if (o.pid === void 0 || o.pid === null || o.pid === "") throw new Error("AyTerminal: need a pid/keyword");
@@ -13019,6 +13021,48 @@ var AyTerminal = class {
 		this.controls = o.controls ?? "auto";
 		this.token = o.token ?? discoverToken();
 		this.title = o.title ?? `#${this.pid}`;
+		this.capViewerId = `wterm-${this.pid}-${Math.random().toString(36).slice(2, 8)}`;
+	}
+	/**
+	* Report this panel's readable capacity as a size cap (interactive only), so the
+	* daemon's negotiation (3a/3b) can shrink the shared PTY to what the panel shows —
+	* the "drag the widget to resize the agent" behavior, but through the same
+	* smallest-client-wins negotiation as every other viewer (bounded by the operator's
+	* local terminal + the 40×10 floor), NOT a raw /api/resize that scrambled everyone.
+	* Debounced so a drag doesn't spam. Read-only widgets never report (pure observers).
+	*/
+	reportCap(cols, rows) {
+		if (this.readOnly || !this.capViewerId) return;
+		const g = globalThis;
+		clearTimeout(this.capTimer);
+		this.capTimer = setTimeout(() => {
+			g.fetch(this.url("/api/presence"), {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					viewer: this.capViewerId,
+					agent: this.pid,
+					cap: {
+						cols,
+						rows
+					}
+				})
+			}).catch(() => {});
+		}, 250);
+	}
+	/** Withdraw this widget's size cap (closed/minimized) → the daemon re-negotiates without it. */
+	withdrawCap() {
+		if (this.readOnly || !this.capViewerId) return;
+		const g = globalThis;
+		clearTimeout(this.capTimer);
+		g.fetch(this.url("/api/presence"), {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({
+				viewer: this.capViewerId,
+				agent: null
+			})
+		}).catch(() => {});
 	}
 	/** URL to a daemon API path with the token appended as a query param (EventSource can't set headers). */
 	url(path) {
@@ -13097,6 +13141,7 @@ var AyTerminal = class {
 	}
 	/** Tear down the stream, the terminal, and the mounted widget. */
 	close() {
+		this.withdrawCap();
 		this.es?.close();
 		this.es = void 0;
 		this.term?.dispose();
@@ -13141,6 +13186,11 @@ var AyTerminal = class {
 			if (!xt || !xt.offsetWidth || !xt.offsetHeight) return;
 			const s = Math.min(1, wrap.clientWidth / xt.offsetWidth, wrap.clientHeight / xt.offsetHeight);
 			inner.style.transform = `scale(${s})`;
+			if (!this.readOnly && this.term?.cols) {
+				const capCols = Math.max(1, Math.floor(wrap.clientWidth * this.term.cols / xt.offsetWidth));
+				const capRows = Math.max(1, Math.floor(wrap.clientHeight * this.term.rows / xt.offsetHeight));
+				this.reportCap(capCols, capRows);
+			}
 		};
 		if (inline) try {
 			const cs = g.getComputedStyle?.(target);
@@ -13172,6 +13222,7 @@ var AyTerminal = class {
 			panel.classList.toggle("open", on);
 			toggle.style.display = on ? "none" : "";
 			if (on) reflow();
+			else this.withdrawCap();
 		};
 		toggle.addEventListener("click", () => showPanel(true));
 		root.getElementById("min")?.addEventListener("click", () => showPanel(false));
@@ -13435,4 +13486,4 @@ const XTERM_CSS = `
 
 //#endregion
 export { AyTerminal as t };
-//# sourceMappingURL=browser-D2s9Nzi0.js.map
+//# sourceMappingURL=browser-C5pEBVVH.js.map

package/dist/{callback-LzenuKtz.js → callback-CXGpMnF9.js}

@@ -3,10 +3,10 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import "./subcommands-BPTVjPEs.js";
+import "./subcommands-3_ufv34d.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import "./callbackCore-Dd28_cBM.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-KOcQklM_.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-ClxIRUe8.js";
 
 export { cmdCallback };

package/dist/{callback-KOcQklM_.js → callback-ClxIRUe8.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { P as resolveOne } from "./subcommands-BPTVjPEs.js";
+import { P as resolveOne } from "./subcommands-3_ufv34d.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Dd28_cBM.js";
 import { randomBytes } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-DpzVMaXc.js");
+		const { resolveLocalServeUrl } = await import("./serve-CqU8xkLF.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-KOcQklM_.js.map
+//# sourceMappingURL=callback-ClxIRUe8.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-BzfCavve.js";
-import { n as getRustBinary } from "./rustBinary-CFpO-1Si.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-Clt46j3c.js";
+import { n as getRustBinary } from "./rustBinary-BQfAGsP1.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-BHQFZh43.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-DMN0ow0k.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-D2o95DmW.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-S4ojAM-G.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -346,7 +346,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-D2o95DmW.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-S4ojAM-G.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BzfCavve.js";
-import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-CyUQ58Ht.js";
+import "./versionChecker-Clt46j3c.js";
+import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-CvwjBKbN.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";

package/dist/{notifyDaemon-CeDkisCv.js → notifyDaemon-B5MzTdlN.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-BPTVjPEs.js";
+import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-3_ufv34d.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -589,4 +589,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-CeDkisCv.js.map
+//# sourceMappingURL=notifyDaemon-B5MzTdlN.js.map

package/dist/{rustBinary-CFpO-1Si.js → rustBinary-BQfAGsP1.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-BzfCavve.js";
+import { r as getInstalledPackage } from "./versionChecker-Clt46j3c.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-CFpO-1Si.js.map
+//# sourceMappingURL=rustBinary-BQfAGsP1.js.map

package/dist/{schedule-DJJre7xc.js → schedule-YeMh-VJF.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BzfCavve.js";
-import "./ts-CyUQ58Ht.js";
+import "./versionChecker-Clt46j3c.js";
+import "./ts-CvwjBKbN.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BXTRXVhU.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-GdCVJMMr.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-DOHygA2x.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BtL6Oo1o.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-DJJre7xc.js.map
+//# sourceMappingURL=schedule-YeMh-VJF.js.map

package/dist/{serve-DpzVMaXc.js → serve-CqU8xkLF.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-BzfCavve.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-CFpO-1Si.js";
-import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-CyUQ58Ht.js";
+import { r as getInstalledPackage } from "./versionChecker-Clt46j3c.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-BQfAGsP1.js";
+import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-CvwjBKbN.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
@@ -11,17 +11,17 @@ import { r as recordInbox } from "./messageLog-C-YIzhRj.js";
 import { t as pgidForWrapper } from "./reaper-DP49VCKx.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BXTRXVhU.js";
-import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-BPTVjPEs.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-GdCVJMMr.js";
+import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-3_ufv34d.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Dd28_cBM.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-KOcQklM_.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-ClxIRUe8.js";
 import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-DOHygA2x.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BtL6Oo1o.js";
 import { r as spawnRejectionReason } from "./spawnGate-BxgS_GlF.js";
 import yargs from "yargs";
-import { appendFile, mkdir, open, readFile, rename, rm, stat, unlink, writeFile } from "fs/promises";
+import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
 import path from "path";
 import { execFileSync } from "node:child_process";
@@ -493,7 +493,7 @@ function authorizeRequest(req, expectedToken) {
 	return null;
 }
 function isTermCorsPath(p) {
-	return /^\/api\/(tail|size)\/.+$/.test(p) || p === "/api/send" || /^\/api\/resize\/.+$/.test(p) || p.startsWith("/api/widget/");
+	return /^\/api\/(tail|size)\/.+$/.test(p) || p === "/api/send" || p === "/api/presence" || /^\/api\/resize\/.+$/.test(p) || p.startsWith("/api/widget/");
 }
 function withTermCors(req, res) {
 	if (!res) return res;
@@ -537,6 +537,7 @@ async function scopedGate(scope, method, p) {
 	if (method === "POST" && p === "/api/send") return needs("send");
 	const rz = /^\/api\/resize\/(.+)$/.exec(p);
 	if (method === "POST" && rz) return needs("resize") ?? (await scopedKeywordOk(decodeURIComponent(rz[1]), scope) ? null : forbid("scoped token: not bound to this agent"));
+	if (method === "POST" && p === "/api/presence") return needs("resize");
 	if (p.startsWith("/api/widget/")) return needs("read");
 	return forbid("scoped token: route not permitted");
 }
@@ -1720,6 +1721,46 @@ Options:
 	};
 	const presence = /* @__PURE__ */ new Map();
 	const PRESENCE_TTL_MS = 12e3;
+	const CAP_TTL_MS = 12e3;
+	const daemonTag = `d${process.pid}`;
+	const capsDir = (pid) => path.join(agentYesHome(), "caps", String(pid));
+	const capFile = (pid, key) => path.join(capsDir(pid), key.replace(/[^\w.:-]/g, "_"));
+	const publishCap = async (pid, viewer, cap, role) => {
+		try {
+			await mkdir(capsDir(pid), { recursive: true });
+			await writeFile(capFile(pid, `${daemonTag}:${viewer}`), `${cap.cols} ${cap.rows} ${Date.now()} ${role}\n`);
+		} catch {}
+	};
+	const withdrawCap = async (pid, viewer) => {
+		await unlink(capFile(pid, `${daemonTag}:${viewer}`)).catch(() => {});
+	};
+	const readSharedCaps = async (pid) => {
+		let files;
+		try {
+			files = await readdir(capsDir(pid));
+		} catch {
+			return [];
+		}
+		const now = Date.now();
+		const caps = [];
+		for (const f of files) {
+			const fp = path.join(capsDir(pid), f);
+			try {
+				const parts = (await readFile(fp, "utf-8")).trim().split(/\s+/);
+				const ts = Number(parts[2]);
+				if (!Number.isFinite(ts) || now - ts > CAP_TTL_MS) {
+					await unlink(fp).catch(() => {});
+					continue;
+				}
+				const cap = sanitizeCap({
+					cols: Number(parts[0]),
+					rows: Number(parts[1])
+				});
+				if (cap) caps.push(cap);
+			} catch {}
+		}
+		return caps;
+	};
 	const negoApplied = /* @__PURE__ */ new Map();
 	const negoTimers = /* @__PURE__ */ new Map();
 	const negoCapsGoneAt = /* @__PURE__ */ new Map();
@@ -1740,24 +1781,29 @@ Options:
 		}
 	};
 	const winsizePathFor = (pid) => path.join(process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"), "winsize", String(pid));
-	const liveCapsFor = (pid) => {
-		const now = Date.now();
-		const caps = [];
-		for (const v of presence.values()) if (now - v.ts <= PRESENCE_TTL_MS && String(v.agent) === String(pid) && v.cap) caps.push(v.cap);
-		return caps;
-	};
 	const applyNego = async (pid) => {
 		negoTimers.delete(pid);
-		const eff = negotiateSize(liveCapsFor(pid));
+		const caps = await readSharedCaps(pid);
+		const eff = negotiateSize(caps);
 		const file = winsizePathFor(pid);
 		const prev = negoApplied.get(pid);
 		try {
 			if (eff) {
 				negoCapsGoneAt.delete(pid);
 				if (prev && Math.abs(prev.cols - eff.cols) <= 1 && Math.abs(prev.rows - eff.rows) <= 1) return;
+				try {
+					const curr = (await readFile(file, "utf-8")).trim().split(/\s+/);
+					if (Number(curr[0]) === eff.cols && Number(curr[1]) === eff.rows) {
+						negoApplied.set(pid, {
+							cols: eff.cols,
+							rows: eff.rows,
+							content: ""
+						});
+						return;
+					}
+				} catch {}
 				const content = `${eff.cols} ${eff.rows} ${Date.now()}\n`;
-				const srcViewers = [...presence.values()].filter((v) => Date.now() - v.ts <= PRESENCE_TTL_MS && String(v.agent) === String(pid) && v.cap).map((v) => v.viewer).join(",");
-				process.stderr.write(`[api/resize] pid=${pid} ${eff.cols}x${eff.rows} src=presence-nego caps=${liveCapsFor(pid).length} viewers=${srcViewers || "-"}\n`);
+				process.stderr.write(`[api/resize] pid=${pid} ${eff.cols}x${eff.rows} src=presence-nego daemon=${daemonTag} caps=${caps.length}\n`);
 				await mkdir(path.dirname(file), { recursive: true });
 				await writeFile(file, content);
 				negoApplied.set(pid, {
@@ -2248,7 +2294,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-G1j8No5N.js");
+			const ws = await import("./ws-CkSYDYiN.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2268,7 +2314,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-G1j8No5N.js");
+			const ws = await import("./ws-CkSYDYiN.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2778,7 +2824,9 @@ Options:
 			}
 			const viewer = String(b.viewer ?? "").slice(0, 64);
 			if (!viewer) return new Response("missing viewer", { status: 400 });
+			if (authResult.kind === "scoped" && b.agent != null && String(b.agent) !== authResult.scope.pid) return new Response("scoped token: not bound to this agent", { status: 403 });
 			const prevAgent = presence.get(viewer)?.agent;
+			const cap = sanitizeCap(b.cap);
 			if (b.agent == null) presence.delete(viewer);
 			else presence.set(viewer, {
 				viewer,
@@ -2786,10 +2834,15 @@ Options:
 				cols: Math.max(0, Math.floor(Number(b.cols) || 0)),
 				rows: Math.max(0, Math.floor(Number(b.rows) || 0)),
 				sel: typeof b.sel === "string" ? b.sel.slice(0, 200) : null,
-				cap: sanitizeCap(b.cap),
+				cap,
 				ts: Date.now()
 			});
-			if (b.agent != null) scheduleNego(Number(b.agent));
+			if (prevAgent != null && String(prevAgent) !== String(b.agent ?? "")) await withdrawCap(Number(prevAgent), viewer);
+			if (b.agent != null) {
+				if (cap) await publishCap(Number(b.agent), viewer, cap, "viewer");
+				else await withdrawCap(Number(b.agent), viewer);
+				scheduleNego(Number(b.agent));
+			}
 			if (prevAgent != null && String(prevAgent) !== String(b.agent ?? "")) scheduleNego(Number(prevAgent));
 			return new Response(null, { status: 204 });
 		}
@@ -2992,7 +3045,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-B7pv4n5U.js");
+				const { createScopedShare } = await import("./agentShare-BoBeAnvX.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3007,12 +3060,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-B7pv4n5U.js");
+			const { listShares } = await import("./agentShare-BoBeAnvX.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-B7pv4n5U.js");
+			const { revokeShare } = await import("./agentShare-BoBeAnvX.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3314,7 +3367,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-B7pv4n5U.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-BoBeAnvX.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3327,4 +3380,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-DpzVMaXc.js.map
+//# sourceMappingURL=serve-CqU8xkLF.js.map

package/dist/{setup-C0_DmU6X.js → setup-CGkSgbE8.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-DpzVMaXc.js");
+	const { cmdServe } = await import("./serve-CqU8xkLF.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-C0_DmU6X.js.map
+//# sourceMappingURL=setup-CGkSgbE8.js.map

package/dist/{subcommands-BPTVjPEs.js → subcommands-3_ufv34d.js}

@@ -1267,31 +1267,31 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-Byuiy9nW.js");
+				const { cmdTerm } = await import("./terminal-D6idrXwY.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-Bx7xH9AE.js");
+				const { cmdWidget } = await import("./widget-BPCw2Vhm.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-Bx7xH9AE.js");
+				const { cmdMint } = await import("./widget-BPCw2Vhm.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-DpzVMaXc.js");
+				const { cmdServe } = await import("./serve-CqU8xkLF.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-C0_DmU6X.js");
+				const { cmdSetup } = await import("./setup-CGkSgbE8.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-G1j8No5N.js");
+				const { cmdWs } = await import("./ws-CkSYDYiN.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-DJJre7xc.js");
+				const { cmdSchedule } = await import("./schedule-YeMh-VJF.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1303,7 +1303,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-LzenuKtz.js");
+				const { cmdCallback } = await import("./callback-CXGpMnF9.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -4342,7 +4342,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-CeDkisCv.js");
+		const { ensureDaemon } = await import("./notifyDaemon-B5MzTdlN.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4416,7 +4416,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-CeDkisCv.js");
+	const daemon = await import("./notifyDaemon-B5MzTdlN.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4443,4 +4443,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { shouldStealLock as $, recentReadEdges as A, stdinActivityPath as B, listRecords as C, readNotes as D, readAgentPtysize as E, resolveReadWindow as F, writeToIpc as G, submitAndConfirm as H, resolveResumeArgs as I, hostId as J, appendEvent as K, restartHintLines as L, renderRawLog as M, renderRawLogLines as N, readPtysize as O, resolveOne as P, readInbox as Q, runSubcommand as R, lastStdinAt as S, menuSelectKeys as T, waitForLogQuiet as U, stopTipForCli as V, writeKeysPaced as W, listInboxParents as X, isTransientLockMkdirError as Y, liveWatchers as Z, isPidAlive as _, cmdHelp as a, isUnknownManagerToken as b, deriveLiveState as c, extractMenu as d, daemonLockDir as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderLogTailLines as j, recentMessageEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, notifyDir as nt, controlCodeFromName as o, extractTaskCounts as p, gcInboxes as q, TYPING_WINDOW_MS as r, TYPING_BADGE as rt, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, daemonLockOwnerPath as tt, extractBadges as u, isSlashCommand as v, matchKeyword as w, isUserTyping as x, isSubcommand as y, snapshotStatus as z };
-//# sourceMappingURL=subcommands-BPTVjPEs.js.map
+//# sourceMappingURL=subcommands-3_ufv34d.js.map

package/dist/{subcommands-BHQFZh43.js → subcommands-DMN0ow0k.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-BPTVjPEs.js";
+import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-3_ufv34d.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 

package/dist/{terminal-Byuiy9nW.js → terminal-D6idrXwY.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-DpzVMaXc.js");
+	const { mintScopedTermToken } = await import("./serve-CqU8xkLF.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-Byuiy9nW.js.map
+//# sourceMappingURL=terminal-D6idrXwY.js.map

package/dist/terminal.js

@@ -1,3 +1,3 @@
-import { t as AyTerminal } from "./browser-D2s9Nzi0.js";
+import { t as AyTerminal } from "./browser-C5pEBVVH.js";
 
 export { AyTerminal, AyTerminal as default };

package/dist/{ts-CyUQ58Ht.js → ts-CvwjBKbN.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-BzfCavve.js";
+import { r as getInstalledPackage } from "./versionChecker-Clt46j3c.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-DBoONoM-.js";
@@ -2027,4 +2027,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, AgentContext as c, answerAsk as i, CLAUDE_SESSION_PIN_ENV as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-CyUQ58Ht.js.map
+//# sourceMappingURL=ts-CvwjBKbN.js.map

package/dist/{versionChecker-BzfCavve.js → versionChecker-Clt46j3c.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.241.0";
+var version = "1.243.0-beta.579.1";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-BzfCavve.js.map
+//# sourceMappingURL=versionChecker-Clt46j3c.js.map

package/dist/{widget-Bx7xH9AE.js → widget-BPCw2Vhm.js}

@@ -28,7 +28,7 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DpzVMaXc.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-CqU8xkLF.js");
 	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
@@ -186,7 +186,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-DpzVMaXc.js");
+	const { mintScopedTermToken } = await import("./serve-CqU8xkLF.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -202,4 +202,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-Bx7xH9AE.js.map
+//# sourceMappingURL=widget-BPCw2Vhm.js.map

package/dist/widgets.js

@@ -2,7 +2,7 @@ import "./e2e-CEIdJGZ7.js";
 import "./channels-BiGUYTuz.js";
 import "./peer-B5JKF4BP.js";
 import { t as AyChannel } from "./browser-B3dOptjL.js";
-import { t as AyTerminal } from "./browser-D2s9Nzi0.js";
+import { t as AyTerminal } from "./browser-C5pEBVVH.js";
 import { AyWidget } from "./widget.js";
 
 export { AyChannel, AyTerminal, AyWidget };

package/dist/{ws-G1j8No5N.js → ws-CkSYDYiN.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { C as listRecords } from "./subcommands-BPTVjPEs.js";
+import { C as listRecords } from "./subcommands-3_ufv34d.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { i as getProvisionRoot } from "./workspaceConfig-DOHygA2x.js";
@@ -418,4 +418,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
-//# sourceMappingURL=ws-G1j8No5N.js.map
+//# sourceMappingURL=ws-CkSYDYiN.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.241.0",
+  "version": "1.243.0-beta.579.1",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.ts

@@ -1,4 +1,4 @@
-import { appendFile, mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
+import { appendFile, mkdir, open, readdir, readFile, stat, unlink, writeFile } from "fs/promises";
 import { existsSync, renameSync, watch, writeFileSync } from "node:fs";
 import { execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -244,6 +244,7 @@ function isTermCorsPath(p: string): boolean {
   return (
     /^\/api\/(tail|size)\/.+$/.test(p) ||
     p === "/api/send" ||
+    p === "/api/presence" ||
     /^\/api\/resize\/.+$/.test(p) ||
     p.startsWith("/api/widget/")
   );
@@ -320,6 +321,12 @@ async function scopedGate(
         : forbid("scoped token: not bound to this agent"))
     );
   }
+  // A viewer reporting its size CAP (3c widget drag-resize) participates in the
+  // resize negotiation, so it needs the resize cap; the presence handler binds the
+  // reported `agent` to the token's pid.
+  if (method === "POST" && p === "/api/presence") {
+    return needs("resize");
+  }
   // Widget sensor routes: require the 'read' cap; the widget-route handlers do the
   // fine-grained viewer-binding (and the 'screenshot' cap check for that kind).
   if (p.startsWith("/api/widget/")) {
@@ -2092,6 +2099,63 @@ export async function cmdServe(rest: string[]): Promise<number> {
   >();
   const PRESENCE_TTL_MS = 12_000;
 
+  // ── Shared cap store (3a: multi-daemon size negotiation) ────────────────────
+  // Presence is in-memory PER DAEMON, so multiple `ay serve` processes (the HTTP
+  // daemon + each `--webrtc share` daemon) used to negotiate independently and
+  // fight over the single winsize file (cross-process last-writer-wins). Instead
+  // every daemon publishes each viewer's size cap to a SHARED on-disk store —
+  // ~/.agent-yes/caps/<pid>/<daemon>:<viewer> — and negotiation reads the WHOLE
+  // store (all daemons' viewers + the local-tty cap, 3b). Deterministic min +
+  // read-before-write means every daemon converges on the same winsize instead of
+  // clobbering each other. Lock-free: one writer per file (a daemon owns its own
+  // viewers' entries), short TTL prunes tabs that vanished without a clean clear.
+  const CAP_TTL_MS = 12_000;
+  const daemonTag = `d${process.pid}`; // unique per daemon process
+  const capsDir = (pid: number) => path.join(agentYesHome(), "caps", String(pid));
+  const capFile = (pid: number, key: string) =>
+    path.join(capsDir(pid), key.replace(/[^\w.:-]/g, "_"));
+  const publishCap = async (pid: number, viewer: string, cap: SizeCap, role: string) => {
+    try {
+      await mkdir(capsDir(pid), { recursive: true });
+      await writeFile(
+        capFile(pid, `${daemonTag}:${viewer}`),
+        `${cap.cols} ${cap.rows} ${Date.now()} ${role}\n`,
+      );
+    } catch {
+      /* best-effort */
+    }
+  };
+  const withdrawCap = async (pid: number, viewer: string) => {
+    await unlink(capFile(pid, `${daemonTag}:${viewer}`)).catch(() => {});
+  };
+  // Read every live cap for a pid across ALL daemons; prune expired files.
+  const readSharedCaps = async (pid: number): Promise<SizeCap[]> => {
+    let files: string[];
+    try {
+      files = await readdir(capsDir(pid));
+    } catch {
+      return [];
+    }
+    const now = Date.now();
+    const caps: SizeCap[] = [];
+    for (const f of files) {
+      const fp = path.join(capsDir(pid), f);
+      try {
+        const parts = (await readFile(fp, "utf-8")).trim().split(/\s+/);
+        const ts = Number(parts[2]);
+        if (!Number.isFinite(ts) || now - ts > CAP_TTL_MS) {
+          await unlink(fp).catch(() => {}); // stale (its writer vanished) — prune
+          continue;
+        }
+        const cap = sanitizeCap({ cols: Number(parts[0]), rows: Number(parts[1]) });
+        if (cap) caps.push(cap);
+      } catch {
+        /* unreadable/racing — skip */
+      }
+    }
+    return caps;
+  };
+
   // ── PTY size negotiation — tmux's "smallest client wins" ──────────────────
   // Writable viewers report their readable capacity (`cap`) alongside their
   // presence; we resize the agent's PTY to the elementwise min across live caps
@@ -2137,17 +2201,12 @@ export async function cmdServe(rest: string[]): Promise<number> {
       "winsize",
       String(pid),
     );
-  const liveCapsFor = (pid: number): SizeCap[] => {
-    const now = Date.now();
-    const caps: SizeCap[] = [];
-    for (const v of presence.values())
-      if (now - v.ts <= PRESENCE_TTL_MS && String(v.agent) === String(pid) && v.cap)
-        caps.push(v.cap);
-    return caps;
-  };
   const applyNego = async (pid: number) => {
     negoTimers.delete(pid);
-    const eff = negotiateSize(liveCapsFor(pid));
+    // Negotiate over the SHARED cap store — every daemon's viewers (+ the local
+    // tty cap, 3b) — so all daemons compute the same min and converge.
+    const caps = await readSharedCaps(pid);
+    const eff = negotiateSize(caps);
     const file = winsizePathFor(pid);
     const prev = negoApplied.get(pid);
     try {
@@ -2158,20 +2217,25 @@ export async function cmdServe(rest: string[]): Promise<number> {
         // SIGWINCH reflow on every re-visit is exactly the churn users notice.
         if (prev && Math.abs(prev.cols - eff.cols) <= 1 && Math.abs(prev.rows - eff.rows) <= 1)
           return;
+        // Cross-daemon convergence: if the winsize file ALREADY holds this size (a
+        // sibling daemon negotiated the same min), do NOT rewrite/re-SIGWINCH — else
+        // two daemons thrash the PTY with same-size, different-timestamp writes.
+        try {
+          const curr = (await readFile(file, "utf-8")).trim().split(/\s+/);
+          if (Number(curr[0]) === eff.cols && Number(curr[1]) === eff.rows) {
+            negoApplied.set(pid, { cols: eff.cols, rows: eff.rows, content: "" });
+            return;
+          }
+        } catch {
+          /* no winsize file yet — fall through and write it */
+        }
         const content = `${eff.cols} ${eff.rows} ${Date.now()}\n`;
-        // Log this presence-negotiated resize (mirrors the POST /api/resize log) so
-        // resize-fights are traceable across ALL channels, not just direct HTTP — a
-        // remote console reporting a big viewport cap resizes the shared PTY THROUGH
-        // HERE, which otherwise leaves no trace and looks like "nobody pushed".
-        const srcViewers = [...presence.values()]
-          .filter(
-            (v) => Date.now() - v.ts <= PRESENCE_TTL_MS && String(v.agent) === String(pid) && v.cap,
-          )
-          .map((v) => v.viewer)
-          .join(",");
+        // Trace the negotiated resize + this daemon's identity (multi-daemon topology:
+        // the HTTP daemon and each --webrtc share daemon each negotiate off the shared
+        // store; the trace shows which one wrote, so a resize-fight is diagnosable).
         process.stderr.write(
           `[api/resize] pid=${pid} ${eff.cols}x${eff.rows} src=presence-nego ` +
-            `caps=${liveCapsFor(pid).length} viewers=${srcViewers || "-"}\n`,
+            `daemon=${daemonTag} caps=${caps.length}\n`,
         );
         await mkdir(path.dirname(file), { recursive: true });
         await writeFile(file, content);
@@ -3583,9 +3647,17 @@ export async function cmdServe(rest: string[]): Promise<number> {
       }
       const viewer = String(b.viewer ?? "").slice(0, 64);
       if (!viewer) return new Response("missing viewer", { status: 400 });
+      // A scoped token may only report presence/caps for the agent it's bound to.
+      if (
+        authResult.kind === "scoped" &&
+        b.agent != null &&
+        String(b.agent) !== authResult.scope.pid
+      )
+        return new Response("scoped token: not bound to this agent", { status: 403 });
       // The agent this viewer WAS on — if the entry moves (agent switch) or
       // clears, that agent's negotiated size must be recomputed (grow-back).
       const prevAgent = presence.get(viewer)?.agent;
+      const cap = sanitizeCap(b.cap);
       if (b.agent == null) presence.delete(viewer);
       else
         presence.set(viewer, {
@@ -3594,10 +3666,19 @@ export async function cmdServe(rest: string[]): Promise<number> {
           cols: Math.max(0, Math.floor(Number(b.cols) || 0)),
           rows: Math.max(0, Math.floor(Number(b.rows) || 0)),
           sel: typeof b.sel === "string" ? b.sel.slice(0, 200) : null,
-          cap: sanitizeCap(b.cap),
+          cap,
           ts: Date.now(),
         });
-      if (b.agent != null) scheduleNego(Number(b.agent));
+      // Mirror this viewer's SIZE cap into the shared cap store so sibling daemons
+      // negotiate off it too. A cleared/agent-switched/cap-less viewer withdraws its
+      // cap (from the old agent) so its size stops counting immediately, not on TTL.
+      if (prevAgent != null && String(prevAgent) !== String(b.agent ?? ""))
+        await withdrawCap(Number(prevAgent), viewer);
+      if (b.agent != null) {
+        if (cap) await publishCap(Number(b.agent), viewer, cap, "viewer");
+        else await withdrawCap(Number(b.agent), viewer);
+        scheduleNego(Number(b.agent));
+      }
       if (prevAgent != null && String(prevAgent) !== String(b.agent ?? ""))
         scheduleNego(Number(prevAgent));
       return new Response(null, { status: 204 });

package/ts/terminal/browser.ts

@@ -57,6 +57,8 @@ export class AyTerminal {
   private badgeEl?: any; // the interactive/read-only header badge (flipped on a 403)
   private started = false;
   private writable = false; // flips false on the first /api/send 403 (token is read-only)
+  private capViewerId = ""; // stable presence id for this widget's size cap (interactive)
+  private capTimer: any = null; // debounce for cap reports on drag-resize
 
   constructor(info: string | number | AyTerminalInfo) {
     const o: AyTerminalInfo =
@@ -70,6 +72,44 @@ export class AyTerminal {
     this.controls = o.controls ?? "auto";
     this.token = o.token ?? discoverToken();
     this.title = o.title ?? `#${this.pid}`;
+    this.capViewerId = `wterm-${this.pid}-${Math.random().toString(36).slice(2, 8)}`;
+  }
+
+  /**
+   * Report this panel's readable capacity as a size cap (interactive only), so the
+   * daemon's negotiation (3a/3b) can shrink the shared PTY to what the panel shows —
+   * the "drag the widget to resize the agent" behavior, but through the same
+   * smallest-client-wins negotiation as every other viewer (bounded by the operator's
+   * local terminal + the 40×10 floor), NOT a raw /api/resize that scrambled everyone.
+   * Debounced so a drag doesn't spam. Read-only widgets never report (pure observers).
+   */
+  private reportCap(cols: number, rows: number): void {
+    if (this.readOnly || !this.capViewerId) return;
+    const g = globalThis as any;
+    clearTimeout(this.capTimer);
+    this.capTimer = setTimeout(() => {
+      void g
+        .fetch(this.url("/api/presence"), {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({ viewer: this.capViewerId, agent: this.pid, cap: { cols, rows } }),
+        })
+        .catch(() => {});
+    }, 250);
+  }
+
+  /** Withdraw this widget's size cap (closed/minimized) → the daemon re-negotiates without it. */
+  private withdrawCap(): void {
+    if (this.readOnly || !this.capViewerId) return;
+    const g = globalThis as any;
+    clearTimeout(this.capTimer);
+    void g
+      .fetch(this.url("/api/presence"), {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ viewer: this.capViewerId, agent: null }),
+      })
+      .catch(() => {});
   }
 
   /** URL to a daemon API path with the token appended as a query param (EventSource can't set headers). */
@@ -170,6 +210,7 @@ export class AyTerminal {
 
   /** Tear down the stream, the terminal, and the mounted widget. */
   close(): void {
+    this.withdrawCap(); // stop counting this panel's size in the shared negotiation
     this.es?.close();
     this.es = undefined;
     this.term?.dispose();
@@ -220,6 +261,15 @@ export class AyTerminal {
       if (!xt || !xt.offsetWidth || !xt.offsetHeight) return;
       const s = Math.min(1, wrap.clientWidth / xt.offsetWidth, wrap.clientHeight / xt.offsetHeight);
       inner.style.transform = `scale(${s})`;
+      // 3c: an interactive panel reports how many cols/rows it can show as a size
+      // cap (derived from the wrap vs the native grid's pixel size), so dragging the
+      // widget renegotiates the shared PTY — through the daemon's min, bounded by the
+      // operator's local cap + floor, never a raw resize.
+      if (!this.readOnly && this.term?.cols) {
+        const capCols = Math.max(1, Math.floor((wrap.clientWidth * this.term.cols) / xt.offsetWidth));
+        const capRows = Math.max(1, Math.floor((wrap.clientHeight * this.term.rows) / xt.offsetHeight));
+        this.reportCap(capCols, capRows);
+      }
     };
 
     if (inline) {
@@ -263,7 +313,10 @@ export class AyTerminal {
     const showPanel = (on: boolean) => {
       panel.classList.toggle("open", on);
       toggle.style.display = on ? "none" : "";
+      // Minimizing hides the panel → withdraw its size cap so it stops constraining
+      // the shared PTY; opening re-reports via reflow.
       if (on) reflow();
+      else this.withdrawCap();
     };
     toggle.addEventListener("click", () => showPanel(true));
     root.getElementById("min")?.addEventListener("click", () => showPanel(false));