agent-yes 1.244.2 → 1.244.3-beta.583.1

package/dist/{SUPPORTED_CLIS-76JVIvo2.js → SUPPORTED_CLIS-BX6n7wgh.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-DE2iV6rV.js";
+import { t as CLIS_CONFIG } from "./ts-DWtqCoKd.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-76JVIvo2.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-BX6n7wgh.js.map

package/dist/{SUPPORTED_CLIS-wtZAWIqV.js → SUPPORTED_CLIS-DP4rEjQn.js}

@@ -1,11 +1,11 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-Ba8m9VTm.js";
-import "./ts-DE2iV6rV.js";
+import "./versionChecker-D5YX0jkS.js";
+import "./ts-DWtqCoKd.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-76JVIvo2.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BX6n7wgh.js";
 
 export { SUPPORTED_CLIS };

package/dist/{agentShare-BokFN5yh.js → agentShare-CZX8swiZ.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { P as resolveOne } from "./subcommands-DHzOWlWy.js";
+import { P as resolveOne } from "./subcommands-D33eq_nw.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { a as startShare } from "./share-BGl3wutJ.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-BokFN5yh.js.map
+//# sourceMappingURL=agentShare-CZX8swiZ.js.map

package/dist/{browser-CNdIibfn.js → browser-DV0CLEwt.js}

@@ -13013,6 +13013,7 @@ var AyTerminal = class {
 	capTimer = null;
 	capHeartbeat = null;
 	lastCap = null;
+	panelEl;
 	constructor(info) {
 		const o = typeof info === "string" || typeof info === "number" ? { pid: info } : info;
 		if (o.pid === void 0 || o.pid === null || o.pid === "") throw new Error("AyTerminal: need a pid/keyword");
@@ -13076,10 +13077,22 @@ var AyTerminal = class {
 			this.sendCap(this.lastCap.cols, this.lastCap.rows);
 		}, 5e3);
 	}
-	/** True while this widget's terminal grid is actually rendered (panel open & visible). */
+	/**
+	* True while this widget's panel is actually on-screen. Checks the PANEL element
+	* itself — its computed `display` and bounding rect — NOT the xterm grid: xterm
+	* keeps a non-zero `cols/rows` (and its `.xterm` node a cached box) even when an
+	* ancestor is `display:none`, so measuring the grid falsely reads "visible" while
+	* collapsed (grocy's ③). The panel's own `display:none`/0×0 rect is unambiguous.
+	*/
 	isPanelVisible() {
-		const el = this.term?.element;
-		return !!(el && el.offsetWidth && el.offsetHeight);
+		const p = this.panelEl;
+		if (!p) return false;
+		const g = globalThis;
+		try {
+			if (g.getComputedStyle?.(p)?.display === "none") return false;
+		} catch {}
+		const r = p.getBoundingClientRect?.();
+		return !!(r && r.width > 0 && r.height > 0);
 	}
 	/** Withdraw this widget's size cap (closed/minimized) → the daemon re-negotiates without it. */
 	withdrawCap() {
@@ -13215,8 +13228,13 @@ var AyTerminal = class {
 		const wrap = root.getElementById("wrap");
 		const titleEl = root.getElementById("title");
 		this.badgeEl = root.getElementById("badge");
+		this.panelEl = panel;
 		if (this.transparent) panel.classList.add("transparent");
 		const reflow = () => {
+			if (!this.readOnly && !this.isPanelVisible()) {
+				if (this.capHeartbeat || this.lastCap) this.withdrawCap();
+				return;
+			}
 			const xt = inner.querySelector(".xterm");
 			if (!xt || !xt.offsetWidth || !xt.offsetHeight) {
 				if (!this.readOnly && (this.capHeartbeat || this.lastCap)) this.withdrawCap();
@@ -13238,6 +13256,9 @@ var AyTerminal = class {
 		try {
 			new g.ResizeObserver(() => reflow()).observe(wrap);
 		} catch {}
+		try {
+			new g.IntersectionObserver(() => reflow()).observe(panel);
+		} catch {}
 		g.addEventListener?.("resize", reflow);
 		(async () => {
 			await this.start(inner);
@@ -13524,4 +13545,4 @@ const XTERM_CSS = `
 
 //#endregion
 export { AyTerminal as t };
-//# sourceMappingURL=browser-CNdIibfn.js.map
+//# sourceMappingURL=browser-DV0CLEwt.js.map

package/dist/{callback-CvbnQmfJ.js → callback-CGfVdTEu.js}

@@ -3,10 +3,10 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import "./subcommands-DHzOWlWy.js";
+import "./subcommands-D33eq_nw.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import "./callbackCore-Dd28_cBM.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-CfpP3G3E.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-D4o-uhJ4.js";
 
 export { cmdCallback };

package/dist/{callback-CfpP3G3E.js → callback-D4o-uhJ4.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { P as resolveOne } from "./subcommands-DHzOWlWy.js";
+import { P as resolveOne } from "./subcommands-D33eq_nw.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Dd28_cBM.js";
 import { randomBytes } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-CeFGSWkZ.js");
+		const { resolveLocalServeUrl } = await import("./serve-DPkqCb2w.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-CfpP3G3E.js.map
+//# sourceMappingURL=callback-D4o-uhJ4.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-Ba8m9VTm.js";
-import { n as getRustBinary } from "./rustBinary-CK3EucYy.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-D5YX0jkS.js";
+import { n as getRustBinary } from "./rustBinary-vHEy7gil.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-CPRjp_FY.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-hy7ih8Z2.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-wtZAWIqV.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DP4rEjQn.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -346,7 +346,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-wtZAWIqV.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DP4rEjQn.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-Ba8m9VTm.js";
-import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-DE2iV6rV.js";
+import "./versionChecker-D5YX0jkS.js";
+import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-DWtqCoKd.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";

package/dist/{notifyDaemon-2Wt04RUC.js → notifyDaemon-BtZ9JXNc.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-DHzOWlWy.js";
+import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-D33eq_nw.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -589,4 +589,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-2Wt04RUC.js.map
+//# sourceMappingURL=notifyDaemon-BtZ9JXNc.js.map

package/dist/{rustBinary-CK3EucYy.js → rustBinary-vHEy7gil.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-Ba8m9VTm.js";
+import { r as getInstalledPackage } from "./versionChecker-D5YX0jkS.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-CK3EucYy.js.map
+//# sourceMappingURL=rustBinary-vHEy7gil.js.map

package/dist/{schedule-D_gxvnkf.js → schedule-QWsOlF5S.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-Ba8m9VTm.js";
-import "./ts-DE2iV6rV.js";
+import "./versionChecker-D5YX0jkS.js";
+import "./ts-DWtqCoKd.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-76JVIvo2.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BX6n7wgh.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-DOHygA2x.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BtL6Oo1o.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-D_gxvnkf.js.map
+//# sourceMappingURL=schedule-QWsOlF5S.js.map

package/dist/{serve-CeFGSWkZ.js → serve-DPkqCb2w.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-Ba8m9VTm.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-CK3EucYy.js";
-import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-DE2iV6rV.js";
+import { r as getInstalledPackage } from "./versionChecker-D5YX0jkS.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-vHEy7gil.js";
+import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-DWtqCoKd.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
@@ -11,12 +11,12 @@ import { r as recordInbox } from "./messageLog-C-YIzhRj.js";
 import { t as pgidForWrapper } from "./reaper-DP49VCKx.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-76JVIvo2.js";
-import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-DHzOWlWy.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BX6n7wgh.js";
+import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-D33eq_nw.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Dd28_cBM.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-CfpP3G3E.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-D4o-uhJ4.js";
 import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-DOHygA2x.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BtL6Oo1o.js";
 import { r as spawnRejectionReason } from "./spawnGate-BxgS_GlF.js";
@@ -2294,7 +2294,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-CZEJdPBM.js");
+			const ws = await import("./ws-D4iUZSx3.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2314,7 +2314,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-CZEJdPBM.js");
+			const ws = await import("./ws-D4iUZSx3.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2769,19 +2769,38 @@ Options:
 			if (!cols || !rows) return new Response("missing cols/rows", { status: 400 });
 			try {
 				const record = await resolveOne(keyword, defaultOpts());
-				process.stderr.write(`[api/resize] pid=${record.pid} ${cols}x${rows} src=api-resize auth=${authResult.kind} origin=${req.headers.get("origin") ?? "-"} ref=${req.headers.get("referer") ?? "-"} ua=${(req.headers.get("user-agent") ?? "-").slice(0, 80)}\n`);
-				const ayHome = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
-				const winsizeDir = path.join(ayHome, "winsize");
-				await mkdir(winsizeDir, { recursive: true });
-				await writeFile(path.join(winsizeDir, String(record.pid)), `${cols} ${rows} ${Date.now()}\n`);
-				try {
-					process.kill(record.pid, "SIGWINCH");
-				} catch {}
+				const originTrace = `auth=${authResult.kind} origin=${req.headers.get("origin") ?? "-"} ref=${req.headers.get("referer") ?? "-"} ua=${(req.headers.get("user-agent") ?? "-").slice(0, 80)}`;
+				if (body.force === true && authResult.kind === "master") {
+					process.stderr.write(`[api/resize] pid=${record.pid} ${cols}x${rows} src=api-resize-FORCED ${originTrace}\n`);
+					const file = winsizePathFor(record.pid);
+					await mkdir(path.dirname(file), { recursive: true });
+					await writeFile(file, `${cols} ${rows} ${Date.now()}\n`);
+					try {
+						process.kill(record.pid, "SIGWINCH");
+					} catch {}
+					return Response.json({
+						ok: true,
+						pid: record.pid,
+						cols,
+						rows,
+						forced: true
+					});
+				}
+				const cap = sanitizeCap({
+					cols,
+					rows
+				});
+				if (!cap) return new Response("missing cols/rows", { status: 400 });
+				const viewer = (body.viewer ? String(body.viewer).slice(0, 64) : "") || (authResult.kind === "scoped" ? `api:${authResult.scope.pid}` : "api-resize");
+				process.stderr.write(`[api/resize] pid=${record.pid} ${cols}x${rows} src=api-resize-cap viewer=${viewer} ${originTrace}\n`);
+				await publishCap(record.pid, viewer, cap, "viewer");
+				scheduleNego(record.pid);
 				return Response.json({
 					ok: true,
 					pid: record.pid,
 					cols,
-					rows
+					rows,
+					mode: "cap"
 				});
 			} catch (e) {
 				return new Response(e.message, { status: 404 });
@@ -3045,7 +3064,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-BokFN5yh.js");
+				const { createScopedShare } = await import("./agentShare-CZX8swiZ.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3060,12 +3079,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-BokFN5yh.js");
+			const { listShares } = await import("./agentShare-CZX8swiZ.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-BokFN5yh.js");
+			const { revokeShare } = await import("./agentShare-CZX8swiZ.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3367,7 +3386,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-BokFN5yh.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-CZX8swiZ.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3380,4 +3399,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-CeFGSWkZ.js.map
+//# sourceMappingURL=serve-DPkqCb2w.js.map

package/dist/{setup-BMZ5CUKG.js → setup-BiJ3zr48.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-CeFGSWkZ.js");
+	const { cmdServe } = await import("./serve-DPkqCb2w.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-BMZ5CUKG.js.map
+//# sourceMappingURL=setup-BiJ3zr48.js.map

package/dist/{subcommands-DHzOWlWy.js → subcommands-D33eq_nw.js}

@@ -1267,31 +1267,31 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-DmqEOsjR.js");
+				const { cmdTerm } = await import("./terminal-BYQofNj7.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-CtAC5BHV.js");
+				const { cmdWidget } = await import("./widget-MTX-ryLQ.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-CtAC5BHV.js");
+				const { cmdMint } = await import("./widget-MTX-ryLQ.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-CeFGSWkZ.js");
+				const { cmdServe } = await import("./serve-DPkqCb2w.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-BMZ5CUKG.js");
+				const { cmdSetup } = await import("./setup-BiJ3zr48.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-CZEJdPBM.js");
+				const { cmdWs } = await import("./ws-D4iUZSx3.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-D_gxvnkf.js");
+				const { cmdSchedule } = await import("./schedule-QWsOlF5S.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1303,7 +1303,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-CvbnQmfJ.js");
+				const { cmdCallback } = await import("./callback-CGfVdTEu.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -4342,7 +4342,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-2Wt04RUC.js");
+		const { ensureDaemon } = await import("./notifyDaemon-BtZ9JXNc.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4416,7 +4416,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-2Wt04RUC.js");
+	const daemon = await import("./notifyDaemon-BtZ9JXNc.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4443,4 +4443,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { shouldStealLock as $, recentReadEdges as A, stdinActivityPath as B, listRecords as C, readNotes as D, readAgentPtysize as E, resolveReadWindow as F, writeToIpc as G, submitAndConfirm as H, resolveResumeArgs as I, hostId as J, appendEvent as K, restartHintLines as L, renderRawLog as M, renderRawLogLines as N, readPtysize as O, resolveOne as P, readInbox as Q, runSubcommand as R, lastStdinAt as S, menuSelectKeys as T, waitForLogQuiet as U, stopTipForCli as V, writeKeysPaced as W, listInboxParents as X, isTransientLockMkdirError as Y, liveWatchers as Z, isPidAlive as _, cmdHelp as a, isUnknownManagerToken as b, deriveLiveState as c, extractMenu as d, daemonLockDir as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderLogTailLines as j, recentMessageEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, notifyDir as nt, controlCodeFromName as o, extractTaskCounts as p, gcInboxes as q, TYPING_WINDOW_MS as r, TYPING_BADGE as rt, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, daemonLockOwnerPath as tt, extractBadges as u, isSlashCommand as v, matchKeyword as w, isUserTyping as x, isSubcommand as y, snapshotStatus as z };
-//# sourceMappingURL=subcommands-DHzOWlWy.js.map
+//# sourceMappingURL=subcommands-D33eq_nw.js.map

package/dist/{subcommands-CPRjp_FY.js → subcommands-hy7ih8Z2.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-DHzOWlWy.js";
+import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-D33eq_nw.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 

package/dist/{terminal-DmqEOsjR.js → terminal-BYQofNj7.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-CeFGSWkZ.js");
+	const { mintScopedTermToken } = await import("./serve-DPkqCb2w.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-DmqEOsjR.js.map
+//# sourceMappingURL=terminal-BYQofNj7.js.map

package/dist/terminal.js

@@ -1,3 +1,3 @@
-import { t as AyTerminal } from "./browser-CNdIibfn.js";
+import { t as AyTerminal } from "./browser-DV0CLEwt.js";
 
 export { AyTerminal, AyTerminal as default };

package/dist/{ts-DE2iV6rV.js → ts-DWtqCoKd.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-Ba8m9VTm.js";
+import { r as getInstalledPackage } from "./versionChecker-D5YX0jkS.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-DBoONoM-.js";
@@ -2027,4 +2027,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, AgentContext as c, answerAsk as i, CLAUDE_SESSION_PIN_ENV as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-DE2iV6rV.js.map
+//# sourceMappingURL=ts-DWtqCoKd.js.map

package/dist/{versionChecker-Ba8m9VTm.js → versionChecker-D5YX0jkS.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.244.2";
+var version = "1.244.3-beta.583.1";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-Ba8m9VTm.js.map
+//# sourceMappingURL=versionChecker-D5YX0jkS.js.map

package/dist/{widget-CtAC5BHV.js → widget-MTX-ryLQ.js}

@@ -28,7 +28,7 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-CeFGSWkZ.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DPkqCb2w.js");
 	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
@@ -186,7 +186,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-CeFGSWkZ.js");
+	const { mintScopedTermToken } = await import("./serve-DPkqCb2w.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -202,4 +202,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-CtAC5BHV.js.map
+//# sourceMappingURL=widget-MTX-ryLQ.js.map

package/dist/widgets.js

@@ -2,7 +2,7 @@ import "./e2e-CEIdJGZ7.js";
 import "./channels-BiGUYTuz.js";
 import "./peer-B5JKF4BP.js";
 import { t as AyChannel } from "./browser-B3dOptjL.js";
-import { t as AyTerminal } from "./browser-CNdIibfn.js";
+import { t as AyTerminal } from "./browser-DV0CLEwt.js";
 import { AyWidget } from "./widget.js";
 
 export { AyChannel, AyTerminal, AyWidget };

package/dist/{ws-CZEJdPBM.js → ws-D4iUZSx3.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
 import "./configShared-9wVlbPyC.js";
-import { C as listRecords } from "./subcommands-DHzOWlWy.js";
+import { C as listRecords } from "./subcommands-D33eq_nw.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { i as getProvisionRoot } from "./workspaceConfig-DOHygA2x.js";
@@ -418,4 +418,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
-//# sourceMappingURL=ws-CZEJdPBM.js.map
+//# sourceMappingURL=ws-D4iUZSx3.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.244.2",
+  "version": "1.244.3-beta.583.1",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.ts

@@ -3547,13 +3547,25 @@ export async function cmdServe(rest: string[]): Promise<number> {
       }
     }
 
-    // POST /api/resize/:keyword  body {cols, rows} — drive the agent's PTY size.
-    // Mirrors `ay attach`: write ~/.agent-yes/winsize/<pid> then SIGWINCH; the
-    // agent's resize listener picks it up and reflows its TUI to that width.
+    // POST /api/resize/:keyword  body {cols, rows, force?, viewer?} — size the agent.
+    //
+    // DEFAULT (3d): report {cols,rows} as a size CAP into the negotiation (publishCap
+    // + scheduleNego) — the smallest-client-wins path every other viewer uses — NOT a
+    // raw winsize write. A raw write is last-writer-wins: a secondary view (console
+    // tab, widget) sizing the shared PTY to its own window clobbered the agent's
+    // terminal and every other viewer. As a cap, this caller's size is just one input
+    // to the min; a one-shot cap fades on TTL if not renewed (a live viewer renews via
+    // its presence heartbeat, so its size stays without any raw push).
+    //
+    // FORCE escape hatch — TRIPLE-LOCKED: master token AND body.force===true, traced
+    // src=api-resize-FORCED. The operator's diagnostic override for when negotiation
+    // misbehaves (kept deliberately usable). A scoped token can NEVER force — force:true
+    // from a scoped token silently falls through to a cap report (no raw write, no
+    // privilege leak).
     const resizeM = /^\/api\/resize\/(.+)$/.exec(p);
     if (req.method === "POST" && resizeM) {
       const keyword = decodeURIComponent(resizeM[1]!);
-      let body: { cols?: number; rows?: number };
+      let body: { cols?: number; rows?: number; force?: boolean; viewer?: string };
       try {
         body = (await req.json()) as typeof body;
       } catch {
@@ -3564,28 +3576,37 @@ export async function cmdServe(rest: string[]): Promise<number> {
       if (!cols || !rows) return new Response("missing cols/rows", { status: 400 });
       try {
         const record = await resolveOne(keyword, defaultOpts());
-        // Trace the SOURCE of every PTY resize: a secondary/observer view (a console
-        // tab, a widget) that force-resizes the shared PTY to its own window can
-        // clobber the agent's terminal (last-writer-wins), and without this it's
-        // impossible to tell who did it. Logs auth kind + origin/referer/UA.
+        const originTrace =
+          `auth=${authResult.kind} origin=${req.headers.get("origin") ?? "-"} ` +
+          `ref=${req.headers.get("referer") ?? "-"} ` +
+          `ua=${(req.headers.get("user-agent") ?? "-").slice(0, 80)}`;
+        // FORCE: master + force:true → raw winsize write that BYPASSES negotiation.
+        if (body.force === true && authResult.kind === "master") {
+          process.stderr.write(
+            `[api/resize] pid=${record.pid} ${cols}x${rows} src=api-resize-FORCED ${originTrace}\n`,
+          );
+          const file = winsizePathFor(record.pid);
+          await mkdir(path.dirname(file), { recursive: true });
+          await writeFile(file, `${cols} ${rows} ${Date.now()}\n`);
+          try {
+            process.kill(record.pid, "SIGWINCH");
+          } catch {
+            /* agent gone */
+          }
+          return Response.json({ ok: true, pid: record.pid, cols, rows, forced: true });
+        }
+        // DEFAULT: report a cap into the negotiation (no raw clobber).
+        const cap = sanitizeCap({ cols, rows });
+        if (!cap) return new Response("missing cols/rows", { status: 400 });
+        const viewer =
+          (body.viewer ? String(body.viewer).slice(0, 64) : "") ||
+          (authResult.kind === "scoped" ? `api:${authResult.scope.pid}` : "api-resize");
         process.stderr.write(
-          `[api/resize] pid=${record.pid} ${cols}x${rows} src=api-resize auth=${authResult.kind} ` +
-            `origin=${req.headers.get("origin") ?? "-"} ref=${req.headers.get("referer") ?? "-"} ` +
-            `ua=${(req.headers.get("user-agent") ?? "-").slice(0, 80)}\n`,
-        );
-        const ayHome = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
-        const winsizeDir = path.join(ayHome, "winsize");
-        await mkdir(winsizeDir, { recursive: true });
-        await writeFile(
-          path.join(winsizeDir, String(record.pid)),
-          `${cols} ${rows} ${Date.now()}\n`,
+          `[api/resize] pid=${record.pid} ${cols}x${rows} src=api-resize-cap viewer=${viewer} ${originTrace}\n`,
         );
-        try {
-          process.kill(record.pid, "SIGWINCH");
-        } catch {
-          /* agent gone */
-        }
-        return Response.json({ ok: true, pid: record.pid, cols, rows });
+        await publishCap(record.pid, viewer, cap, "viewer");
+        scheduleNego(record.pid);
+        return Response.json({ ok: true, pid: record.pid, cols, rows, mode: "cap" });
       } catch (e) {
         return new Response((e as Error).message, { status: 404 });
       }

package/ts/terminal/browser.ts

@@ -61,6 +61,7 @@ export class AyTerminal {
   private capTimer: any = null; // debounce for cap reports on drag-resize
   private capHeartbeat: any = null; // keeps the cap renewed while the panel is open
   private lastCap: { cols: number; rows: number } | null = null;
+  private panelEl?: any; // the #panel element — the thing that goes display:none on collapse
 
   constructor(info: string | number | AyTerminalInfo) {
     const o: AyTerminalInfo =
@@ -135,10 +136,24 @@ export class AyTerminal {
     }, 5000);
   }
 
-  /** True while this widget's terminal grid is actually rendered (panel open & visible). */
+  /**
+   * True while this widget's panel is actually on-screen. Checks the PANEL element
+   * itself — its computed `display` and bounding rect — NOT the xterm grid: xterm
+   * keeps a non-zero `cols/rows` (and its `.xterm` node a cached box) even when an
+   * ancestor is `display:none`, so measuring the grid falsely reads "visible" while
+   * collapsed (grocy's ③). The panel's own `display:none`/0×0 rect is unambiguous.
+   */
   private isPanelVisible(): boolean {
-    const el = this.term?.element as any; // the .xterm root
-    return !!(el && el.offsetWidth && el.offsetHeight);
+    const p = this.panelEl;
+    if (!p) return false;
+    const g = globalThis as any;
+    try {
+      if (g.getComputedStyle?.(p)?.display === "none") return false;
+    } catch {
+      /* no getComputedStyle — fall through to the rect check */
+    }
+    const r = p.getBoundingClientRect?.();
+    return !!(r && r.width > 0 && r.height > 0);
   }
 
   /** Withdraw this widget's size cap (closed/minimized) → the daemon re-negotiates without it. */
@@ -294,6 +309,7 @@ export class AyTerminal {
     const wrap = root.getElementById("wrap")!;
     const titleEl = root.getElementById("title")!;
     this.badgeEl = root.getElementById("badge");
+    this.panelEl = panel; // used by isPanelVisible() to detect collapse
     if (this.transparent) panel.classList.add("transparent");
 
     // Reflow: read-only CSS-scales the native grid to fit; interactive fits the
@@ -305,13 +321,18 @@ export class AyTerminal {
     // agent's own/other viewers' TUI (taku's "xterm looks weird"). Interactive only
     // adds keystroke input (start(), /api/send), not a resize.
     const reflow = () => {
+      // Collapsed/hidden interactive panel → withdraw our cap and DON'T re-arm the
+      // heartbeat. Gate on the PANEL's own visibility (isPanelVisible), because the
+      // wrap ResizeObserver does NOT reliably fire when an ancestor goes display:none,
+      // and the xterm grid stays non-zero while hidden — so neither a grid measure nor
+      // the ResizeObserver alone catches a collapse (grocy's ③). Guard on an active cap
+      // so transient 0-size layout ticks on mount don't spam the daemon.
+      if (!this.readOnly && !this.isPanelVisible()) {
+        if (this.capHeartbeat || this.lastCap) this.withdrawCap();
+        return;
+      }
       const xt = inner.querySelector(".xterm") as any;
       if (!xt || !xt.offsetWidth || !xt.offsetHeight) {
-        // The panel just went invisible (minimized/collapsed/hidden — the wrap
-        // ResizeObserver fires this on collapse). Withdraw our cap so a hidden panel
-        // stops constraining the shared PTY, no matter WHICH gesture hid it (the wired
-        // min button, a page hiding the host, a max/min quirk). Guard on an active cap
-        // so transient 0-size layout ticks on mount don't spam the daemon.
         if (!this.readOnly && (this.capHeartbeat || this.lastCap)) this.withdrawCap();
         return;
       }
@@ -351,6 +372,16 @@ export class AyTerminal {
     } catch {
       /* no ResizeObserver — fall back to the window listener below */
     }
+    // Reflow on VISIBILITY changes too. A ResizeObserver does NOT reliably fire when
+    // an element (or an ancestor — e.g. a page hiding our host) goes display:none, so
+    // a collapse can slip past it and leave the cap pinned (grocy's ③). An
+    // IntersectionObserver DOES fire when the panel leaves/enters the viewport or is
+    // hidden — that reflow then sees isPanelVisible() false and withdraws the cap.
+    try {
+      new g.IntersectionObserver(() => reflow()).observe(panel);
+    } catch {
+      /* no IntersectionObserver — the 5s heartbeat self-check still catches it */
+    }
     g.addEventListener?.("resize", reflow);
 
     void (async () => {