agent-yes 1.246.3 → 1.246.5-beta.590.1

package/dist/{SUPPORTED_CLIS-BYeEVEgZ.js → SUPPORTED_CLIS-BJhYxHeR.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-zcVmOocL.js";
+import { t as CLIS_CONFIG } from "./ts-dKF7iP5r.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-BYeEVEgZ.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-BJhYxHeR.js.map

package/dist/SUPPORTED_CLIS-CRTn0Nx8.js

@@ -0,0 +1,11 @@
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-BRz6S-vY.js";
+import "./ts-dKF7iP5r.js";
+import "./todoAutomation-Buo457VO.js";
+import "./JsonlStore-CPGIR0Wy.js";
+import "./globalPidIndex-D9DOSd-c.js";
+import "./pidStore-vnX0bgra.js";
+import "./messageLog-C-YIzhRj.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BJhYxHeR.js";
+
+export { SUPPORTED_CLIS };

package/dist/{agent-yes.config-DPtMM0S-.js → agent-yes.config-C8e9rNLW.js}

@@ -1,8 +1,8 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { n as normalizeAgentYesConfig, t as loadSharedCliDefaults } from "./configShared-9wVlbPyC.js";
+import { n as normalizeAgentYesConfig, t as loadSharedCliDefaults } from "./configShared-IBbnn9b8.js";
+import path from "node:path";
 import os from "node:os";
 import { access, mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
 import { parse } from "yaml";
 
 //#region ts/defineConfig.ts
@@ -226,4 +226,4 @@ async function getDefaultConfig() {
 
 //#endregion
 export { agent_yes_config_default as default };
-//# sourceMappingURL=agent-yes.config-DPtMM0S-.js.map
+//# sourceMappingURL=agent-yes.config-C8e9rNLW.js.map

package/dist/{agentShare-B9X9pO6m.js → agentShare-DPI4N4xI.js}

@@ -2,8 +2,8 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { P as resolveOne } from "./subcommands-9m9D3C03.js";
+import "./configShared-IBbnn9b8.js";
+import { P as resolveOne } from "./subcommands-8KoxlZi3.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { a as startShare } from "./share-BGl3wutJ.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-B9X9pO6m.js.map
+//# sourceMappingURL=agentShare-DPI4N4xI.js.map

package/dist/{callback-CRF0mUus.js → callback-BKdjxKoV.js}

@@ -1,10 +1,10 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { P as resolveOne } from "./subcommands-9m9D3C03.js";
+import { P as resolveOne } from "./subcommands-8KoxlZi3.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Dd28_cBM.js";
 import { randomBytes } from "node:crypto";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
 
 //#region ts/callback.ts
 function callbacksPath() {
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-di_OIfsC.js");
+		const { resolveLocalServeUrl } = await import("./serve-D_OiHSTd.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-CRF0mUus.js.map
+//# sourceMappingURL=callback-BKdjxKoV.js.map

package/dist/{callback-BqFaWi9L.js → callback-llWDd9ft.js}

@@ -2,11 +2,11 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import "./subcommands-9m9D3C03.js";
+import "./configShared-IBbnn9b8.js";
+import "./subcommands-8KoxlZi3.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import "./callbackCore-Dd28_cBM.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-CRF0mUus.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-BKdjxKoV.js";
 
 export { cmdCallback };

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DAyhKwPF.js";
-import { n as getRustBinary } from "./rustBinary-4znAUQBB.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-BRz6S-vY.js";
+import { n as getRustBinary } from "./rustBinary-CvqZkbf_.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-CustPguh.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-DNvEvOOs.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CfuM53rz.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CRTn0Nx8.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -323,7 +323,7 @@ if (config.tray) {
 	ensureTray();
 }
 if (!config.showVersion && !config.appendPrompt && !config.tray) {
-	const { waitForSpawnCapacity } = await import("./spawnGate-Dc3odVqo.js");
+	const { waitForSpawnCapacity } = await import("./spawnGate-Djr4KlF5.js");
 	await waitForSpawnCapacity({
 		onWait: (reason, waitedMs) => {
 			if (config.verbose || waitedMs === 0) console.error(`[agent-yes] spawn gate: ${reason} — waiting…`);
@@ -346,7 +346,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CfuM53rz.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CRTn0Nx8.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);
@@ -411,7 +411,7 @@ if (config.showVersion) {
 	process.exit(0);
 }
 if (config.appendPrompt) {
-	const { PidStore } = await import("./pidStore-bCVS2Ldt.js");
+	const { PidStore } = await import("./pidStore-Bg7wdjxY.js");
 	const ipcPath = await PidStore.findActiveFifo(process.cwd());
 	if (!ipcPath) {
 		console.error("No active agent with IPC found in current directory.");

package/dist/{configShared-9wVlbPyC.js → configShared-IBbnn9b8.js}

@@ -1,5 +1,5 @@
-import { access, readFile } from "node:fs/promises";
 import path from "node:path";
+import { access, readFile } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 import { parse } from "yaml";
 
@@ -69,4 +69,4 @@ async function loadSharedCliDefaults(fromUrl = import.meta.url) {
 
 //#endregion
 export { normalizeAgentYesConfig as n, loadSharedCliDefaults as t };
-//# sourceMappingURL=configShared-9wVlbPyC.js.map
+//# sourceMappingURL=configShared-IBbnn9b8.js.map

package/dist/{expose-Ct28jckQ.js → expose-BU3f7VfC.js}

@@ -1,7 +1,7 @@
 import { createHash, randomBytes } from "node:crypto";
-import { homedir } from "node:os";
-import path from "node:path";
 import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { homedir } from "node:os";
 
 //#region node_modules/codehost/src/tunnel/protocol.ts
 let Op = /* @__PURE__ */ function(Op) {
@@ -546,4 +546,4 @@ async function cmdExpose(args) {
 
 //#endregion
 export { cmdExpose, ensureExposure, listExposures, stopExposure };
-//# sourceMappingURL=expose-Ct28jckQ.js.map
+//# sourceMappingURL=expose-BU3f7VfC.js.map

package/dist/index.js

@@ -1,10 +1,10 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DAyhKwPF.js";
-import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-zcVmOocL.js";
+import "./versionChecker-BRz6S-vY.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-dKF7iP5r.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
-import "./pidStore-6EZd5DUv.js";
+import "./pidStore-vnX0bgra.js";
 import "./messageLog-C-YIzhRj.js";
 
 export { AgentContext, CLIS_CONFIG, CycleError, DONE_STATE, LIFECYCLES, ORPHANED_STATE, TodoStore, answerAsk, canTransition, config, agentYes as default, describeBlock, hasTodoStore, initialState, isKnownKind, listAsks, listAsksForProject, monitorHint, nextStates, openBlockers, openStore, reconcileTodos, removeControlCharacters, renderDigest, renderTree, requiredGate, statesOf, unblockedTasks };

package/dist/{notifyDaemon-CTCu7uSw.js → notifyDaemon-C3p8yn0R.js}

@@ -2,8 +2,8 @@ import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-9m9D3C03.js";
+import "./configShared-IBbnn9b8.js";
+import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-8KoxlZi3.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -589,4 +589,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-CTCu7uSw.js.map
+//# sourceMappingURL=notifyDaemon-C3p8yn0R.js.map

package/dist/{pidStore-bCVS2Ldt.js → pidStore-Bg7wdjxY.js}

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
-import { t as PidStore } from "./pidStore-6EZd5DUv.js";
+import { t as PidStore } from "./pidStore-vnX0bgra.js";
 
 export { PidStore };

package/dist/{pidStore-6EZd5DUv.js → pidStore-vnX0bgra.js}

@@ -24,7 +24,7 @@ var PidStore = class PidStore {
 			logger.warn("[pidStore] Failed to initialize:", error);
 		}
 	}
-	async registerProcess({ pid, cli, args, prompt, cwd, wrapperPid, parentPid }) {
+	async registerProcess({ pid, cli, args, prompt, cwd, wrapperPid, parentPid, permissions }) {
 		const now = Date.now();
 		const argsJson = JSON.stringify(args);
 		const logFile = this.getRawLogPath(pid);
@@ -36,6 +36,7 @@ var PidStore = class PidStore {
 			pid,
 			cli,
 			args: argsJson,
+			permissions,
 			prompt,
 			cwd,
 			logFile,
@@ -67,7 +68,8 @@ var PidStore = class PidStore {
 			started_at: now,
 			wrapper_pid: wrapperPid ?? null,
 			parent_pid: parentPid ?? null,
-			agent_id: agentId
+			agent_id: agentId,
+			permissions: permissions ?? null
 		}).then(() => maybeCompactGlobalPids()).catch(() => null);
 		return result;
 	}
@@ -188,4 +190,4 @@ pid-db/
 
 //#endregion
 export { PidStore as t };
-//# sourceMappingURL=pidStore-6EZd5DUv.js.map
+//# sourceMappingURL=pidStore-vnX0bgra.js.map

package/dist/{rustBinary-4znAUQBB.js → rustBinary-CvqZkbf_.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-DAyhKwPF.js";
+import { r as getInstalledPackage } from "./versionChecker-BRz6S-vY.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-4znAUQBB.js.map
+//# sourceMappingURL=rustBinary-CvqZkbf_.js.map

package/dist/{schedule-Cg5bJdAF.js → schedule-e8gyu89f.js}

@@ -1,13 +1,13 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DAyhKwPF.js";
-import "./ts-zcVmOocL.js";
+import "./versionChecker-BRz6S-vY.js";
+import "./ts-dKF7iP5r.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
-import "./pidStore-6EZd5DUv.js";
+import "./pidStore-vnX0bgra.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BYeEVEgZ.js";
-import { d as resolveSpawnCwd } from "./workspaceConfig-DOHygA2x.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BJhYxHeR.js";
+import { f as resolveSpawnCwd } from "./workspaceConfig-CpilQzMY.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BtL6Oo1o.js";
 import { createHash } from "node:crypto";
 
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-Cg5bJdAF.js.map
+//# sourceMappingURL=schedule-e8gyu89f.js.map

package/dist/{serve-di_OIfsC.js → serve-D_OiHSTd.js}

@@ -1,25 +1,25 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DAyhKwPF.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-4znAUQBB.js";
-import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-zcVmOocL.js";
+import { r as getInstalledPackage } from "./versionChecker-BRz6S-vY.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-CvqZkbf_.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-dKF7iP5r.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-D9DOSd-c.js";
-import "./pidStore-6EZd5DUv.js";
+import "./pidStore-vnX0bgra.js";
 import { r as recordInbox } from "./messageLog-C-YIzhRj.js";
 import { t as pgidForWrapper } from "./reaper-DP49VCKx.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BYeEVEgZ.js";
-import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-9m9D3C03.js";
+import "./configShared-IBbnn9b8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BJhYxHeR.js";
+import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-8KoxlZi3.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Dd28_cBM.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-CRF0mUus.js";
-import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-DOHygA2x.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-BKdjxKoV.js";
+import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-CpilQzMY.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BtL6Oo1o.js";
-import { r as spawnRejectionReason } from "./spawnGate-BxgS_GlF.js";
+import { r as spawnRejectionReason } from "./spawnGate-BFJPdHCQ.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -2151,7 +2151,11 @@ Options:
 				size: await sizeOf(r.pid),
 				inputs: [textIn, envIn],
 				outputs: [textOut],
-				renderHints: await hintsOf(r)
+				renderHints: await hintsOf(r),
+				configPublic: {
+					permissions: r.permissions ?? null,
+					permissionBadge: permissionBadge(r.permissions)
+				}
 			})));
 			nodes.push({
 				id: envNodeId,
@@ -2181,7 +2185,8 @@ Options:
 						kill: true,
 						spawn: true,
 						spawnHook: hasSpawnHook(),
-						provision: hasProvisionHook()
+						provision: hasProvisionHook(),
+						skipPermissions: allowsSkipPermissions()
 					}
 				}
 			});
@@ -2296,11 +2301,12 @@ Options:
 				kill: true,
 				spawn: true,
 				spawnHook: hasSpawnHook(),
-				provision: hasProvisionHook()
+				provision: hasProvisionHook(),
+				skipPermissions: allowsSkipPermissions()
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-CzHpujvz.js");
+			const ws = await import("./ws-CdMDHB2O.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2320,7 +2326,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-CzHpujvz.js");
+			const ws = await import("./ws-CdMDHB2O.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2888,6 +2894,8 @@ Options:
 			const cli = String(body.cli ?? "claude");
 			if (!SUPPORTED_CLIS.includes(cli)) return new Response(`unsupported cli: ${cli}`, { status: 400 });
 			const prompt = String(body.prompt ?? "");
+			const wantsSkipPermissions = body.yes === true;
+			if (wantsSkipPermissions && !allowsSkipPermissions()) return new Response("this environment does not permit skip-permissions agents (caps.skipPermissions=false) — spawn without `yes`, or set \"allowSkipPermissions\": true in ~/.agent-yes/config.json (or AGENT_YES_ALLOW_SKIP_PERMISSIONS=1) on the host", { status: 403 });
 			const reject = await spawnRejectionReason();
 			if (reject) return new Response(reject, { status: 429 });
 			let cwd;
@@ -2983,6 +2991,7 @@ Options:
 			const ayBin = Bun.which("ay") ?? process.argv[1];
 			const agentArgv = [
 				...process.platform === "win32" && ayBin.toLowerCase().endsWith(".exe") ? [ayBin] : [process.execPath, ayBin],
+				...wantsSkipPermissions ? ["-y"] : [],
 				cli,
 				...prompt ? ["--", prompt] : []
 			];
@@ -3070,7 +3079,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-B9X9pO6m.js");
+				const { createScopedShare } = await import("./agentShare-DPI4N4xI.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3085,12 +3094,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-B9X9pO6m.js");
+			const { listShares } = await import("./agentShare-DPI4N4xI.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-B9X9pO6m.js");
+			const { revokeShare } = await import("./agentShare-DPI4N4xI.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3104,7 +3113,7 @@ Options:
 			const port = Number(body.port);
 			if (!Number.isInteger(port) || port < 1 || port > 65535) return new Response("valid port required", { status: 400 });
 			try {
-				const { ensureExposure } = await import("./expose-Ct28jckQ.js");
+				const { ensureExposure } = await import("./expose-BU3f7VfC.js");
 				const h = await ensureExposure(port, body.relay);
 				return Response.json({
 					id: h.id,
@@ -3118,12 +3127,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/exposes") {
-			const { listExposures } = await import("./expose-Ct28jckQ.js");
+			const { listExposures } = await import("./expose-BU3f7VfC.js");
 			return Response.json(listExposures());
 		}
 		const unexposeM = /^\/api\/expose\/(\d+)$/.exec(p);
 		if (req.method === "DELETE" && unexposeM) {
-			const { stopExposure } = await import("./expose-Ct28jckQ.js");
+			const { stopExposure } = await import("./expose-BU3f7VfC.js");
 			const ok = stopExposure(Number(unexposeM[1]));
 			return new Response(ok ? "revoked" : "no such exposure", { status: ok ? 200 : 404 });
 		}
@@ -3392,7 +3401,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-B9X9pO6m.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-DPI4N4xI.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3405,4 +3414,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-di_OIfsC.js.map
+//# sourceMappingURL=serve-D_OiHSTd.js.map

package/dist/{setup-CjrHOYZs.js → setup-C8PDI1dj.js}

@@ -1,4 +1,4 @@
-import { f as setWorkspaceRoot, s as getWorkspaceRoot } from "./workspaceConfig-DOHygA2x.js";
+import { c as getWorkspaceRoot, p as setWorkspaceRoot } from "./workspaceConfig-CpilQzMY.js";
 import { existsSync } from "node:fs";
 import { stdin, stdout } from "node:process";
 import { createInterface } from "node:readline/promises";
@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-di_OIfsC.js");
+	const { cmdServe } = await import("./serve-D_OiHSTd.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-CjrHOYZs.js.map
+//# sourceMappingURL=setup-C8PDI1dj.js.map

package/dist/{spawnGate-BxgS_GlF.js → spawnGate-BFJPdHCQ.js}

@@ -1,5 +1,5 @@
 import { i as readGlobalPids } from "./globalPidIndex-D9DOSd-c.js";
-import { n as getMinFreeMb, o as getSpawnWaitMs, t as getMaxAgents } from "./workspaceConfig-DOHygA2x.js";
+import { n as getMaxAgents, r as getMinFreeMb, s as getSpawnWaitMs } from "./workspaceConfig-CpilQzMY.js";
 import { readFile } from "fs/promises";
 
 //#region ts/spawnGate.ts
@@ -104,4 +104,4 @@ async function waitForSpawnCapacity(opts) {
 
 //#endregion
 export { waitForSpawnCapacity as i, spawnGateEnabled as n, spawnRejectionReason as r, memAvailableMb as t };
-//# sourceMappingURL=spawnGate-BxgS_GlF.js.map
+//# sourceMappingURL=spawnGate-BFJPdHCQ.js.map

package/dist/{spawnGate-Dc3odVqo.js → spawnGate-Djr4KlF5.js}

@@ -1,5 +1,5 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
-import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-BxgS_GlF.js";
+import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-BFJPdHCQ.js";
 
 export { waitForSpawnCapacity };

package/dist/{subcommands-9m9D3C03.js → subcommands-8KoxlZi3.js}

@@ -3,7 +3,7 @@ import { n as logger } from "./logger-CDIsZ-Pp.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidIndex-D9DOSd-c.js";
 import { a as recordOutbox, i as recordMessage, n as readMailbox, t as partyMatches } from "./messageLog-C-YIzhRj.js";
-import { t as loadSharedCliDefaults } from "./configShared-9wVlbPyC.js";
+import { t as loadSharedCliDefaults } from "./configShared-IBbnn9b8.js";
 import { n as isWebrtcSpec } from "./webrtcLink-BMYneHbu.js";
 import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-BxQnNxQv.js";
 import ms from "ms";
@@ -1267,31 +1267,31 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-Dhx67Thi.js");
+				const { cmdTerm } = await import("./terminal-DejUdjU0.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-DeJUoOYQ.js");
+				const { cmdWidget } = await import("./widget-DUeVYdCO.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-DeJUoOYQ.js");
+				const { cmdMint } = await import("./widget-DUeVYdCO.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-di_OIfsC.js");
+				const { cmdServe } = await import("./serve-D_OiHSTd.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-CjrHOYZs.js");
+				const { cmdSetup } = await import("./setup-C8PDI1dj.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-CzHpujvz.js");
+				const { cmdWs } = await import("./ws-CdMDHB2O.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-Cg5bJdAF.js");
+				const { cmdSchedule } = await import("./schedule-e8gyu89f.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1299,11 +1299,11 @@ async function runSubcommand(argv) {
 				return cmdRemote(rest);
 			}
 			case "expose": {
-				const { cmdExpose } = await import("./expose-Ct28jckQ.js");
+				const { cmdExpose } = await import("./expose-BU3f7VfC.js");
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-BqFaWi9L.js");
+				const { cmdCallback } = await import("./callback-llWDd9ft.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -3706,7 +3706,7 @@ async function cmdAttach(rest) {
 	const winsizeDir = path.join(ayHome, "winsize");
 	await mkdir(winsizeDir, { recursive: true });
 	const winsizePath = path.join(winsizeDir, String(record.pid));
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-di_OIfsC.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-D_OiHSTd.js");
 	const daemonBase = await resolveDaemonHttpBase().catch(() => null);
 	const daemonToken = daemonBase ? await loadTokenReadOnly().catch(() => null) ?? "" : "";
 	const capViewer = `attach:${process.pid}`;
@@ -4403,7 +4403,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-CTCu7uSw.js");
+		const { ensureDaemon } = await import("./notifyDaemon-C3p8yn0R.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4477,7 +4477,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-CTCu7uSw.js");
+	const daemon = await import("./notifyDaemon-C3p8yn0R.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4504,4 +4504,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { shouldStealLock as $, recentReadEdges as A, stdinActivityPath as B, listRecords as C, readNotes as D, readAgentPtysize as E, resolveReadWindow as F, writeToIpc as G, submitAndConfirm as H, resolveResumeArgs as I, hostId as J, appendEvent as K, restartHintLines as L, renderRawLog as M, renderRawLogLines as N, readPtysize as O, resolveOne as P, readInbox as Q, runSubcommand as R, lastStdinAt as S, menuSelectKeys as T, waitForLogQuiet as U, stopTipForCli as V, writeKeysPaced as W, listInboxParents as X, isTransientLockMkdirError as Y, liveWatchers as Z, isPidAlive as _, cmdHelp as a, isUnknownManagerToken as b, deriveLiveState as c, extractMenu as d, daemonLockDir as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderLogTailLines as j, recentMessageEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, notifyDir as nt, controlCodeFromName as o, extractTaskCounts as p, gcInboxes as q, TYPING_WINDOW_MS as r, TYPING_BADGE as rt, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, daemonLockOwnerPath as tt, extractBadges as u, isSlashCommand as v, matchKeyword as w, isUserTyping as x, isSubcommand as y, snapshotStatus as z };
-//# sourceMappingURL=subcommands-9m9D3C03.js.map
+//# sourceMappingURL=subcommands-8KoxlZi3.js.map

package/dist/{subcommands-CustPguh.js → subcommands-DNvEvOOs.js}

@@ -2,8 +2,8 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-9m9D3C03.js";
+import "./configShared-IBbnn9b8.js";
+import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-8KoxlZi3.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 

package/dist/{terminal-Dhx67Thi.js → terminal-DejUdjU0.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-di_OIfsC.js");
+	const { mintScopedTermToken } = await import("./serve-D_OiHSTd.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-Dhx67Thi.js.map
+//# sourceMappingURL=terminal-DejUdjU0.js.map