agent-yes 1.246.4 → 1.246.5

package/dist/{SUPPORTED_CLIS-Bxzq06Mp.js → SUPPORTED_CLIS-D3b_1q8z.js}

@@ -1,11 +1,11 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-D5s9vQ-1.js";
-import "./ts-CQ67EOjN.js";
+import "./versionChecker-D5ir842c.js";
+import "./ts-B51ZLoJC.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DjDZ3MGT.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-ia9b-P1k.js";
 
 export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-DjDZ3MGT.js → SUPPORTED_CLIS-ia9b-P1k.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-CQ67EOjN.js";
+import { t as CLIS_CONFIG } from "./ts-B51ZLoJC.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-DjDZ3MGT.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-ia9b-P1k.js.map

package/dist/{agent-yes.config-DPtMM0S-.js → agent-yes.config-C8e9rNLW.js}

@@ -1,8 +1,8 @@
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { n as normalizeAgentYesConfig, t as loadSharedCliDefaults } from "./configShared-9wVlbPyC.js";
+import { n as normalizeAgentYesConfig, t as loadSharedCliDefaults } from "./configShared-IBbnn9b8.js";
+import path from "node:path";
 import os from "node:os";
 import { access, mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
 import { parse } from "yaml";
 
 //#region ts/defineConfig.ts
@@ -226,4 +226,4 @@ async function getDefaultConfig() {
 
 //#endregion
 export { agent_yes_config_default as default };
-//# sourceMappingURL=agent-yes.config-DPtMM0S-.js.map
+//# sourceMappingURL=agent-yes.config-C8e9rNLW.js.map

package/dist/{agentShare-DfvmYPdC.js → agentShare-BazKWNQQ.js}

@@ -2,8 +2,8 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { P as resolveOne } from "./subcommands-WOGfqD8M.js";
+import "./configShared-IBbnn9b8.js";
+import { P as resolveOne } from "./subcommands-BL_SWFDC.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { a as startShare } from "./share-BGl3wutJ.js";
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-DfvmYPdC.js.map
+//# sourceMappingURL=agentShare-BazKWNQQ.js.map

package/dist/{callback-Bd4vejg2.js → callback-Csr8_-FG.js}

@@ -2,11 +2,11 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import "./subcommands-WOGfqD8M.js";
+import "./configShared-IBbnn9b8.js";
+import "./subcommands-BL_SWFDC.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import "./callbackCore-Dd28_cBM.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-CgvcnRIP.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-DyyjF-fr.js";
 
 export { cmdCallback };

package/dist/{callback-CgvcnRIP.js → callback-DyyjF-fr.js}

@@ -1,10 +1,10 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { P as resolveOne } from "./subcommands-WOGfqD8M.js";
+import { P as resolveOne } from "./subcommands-BL_SWFDC.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Dd28_cBM.js";
 import { randomBytes } from "node:crypto";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
 
 //#region ts/callback.ts
 function callbacksPath() {
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-88nSS8sz.js");
+		const { resolveLocalServeUrl } = await import("./serve-DyZpvp4C.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-CgvcnRIP.js.map
+//# sourceMappingURL=callback-DyyjF-fr.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-D5s9vQ-1.js";
-import { n as getRustBinary } from "./rustBinary-t6UmLbT8.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-D5ir842c.js";
+import { n as getRustBinary } from "./rustBinary-DuwxRidk.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-BLOe70zq.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-CdWAGc4C.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-Bxzq06Mp.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-D3b_1q8z.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -346,7 +346,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-Bxzq06Mp.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-D3b_1q8z.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/{configShared-9wVlbPyC.js → configShared-IBbnn9b8.js}

@@ -1,5 +1,5 @@
-import { access, readFile } from "node:fs/promises";
 import path from "node:path";
+import { access, readFile } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 import { parse } from "yaml";
 
@@ -69,4 +69,4 @@ async function loadSharedCliDefaults(fromUrl = import.meta.url) {
 
 //#endregion
 export { normalizeAgentYesConfig as n, loadSharedCliDefaults as t };
-//# sourceMappingURL=configShared-9wVlbPyC.js.map
+//# sourceMappingURL=configShared-IBbnn9b8.js.map

package/dist/{expose-Ct28jckQ.js → expose-BU3f7VfC.js}

@@ -1,7 +1,7 @@
 import { createHash, randomBytes } from "node:crypto";
-import { homedir } from "node:os";
-import path from "node:path";
 import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { homedir } from "node:os";
 
 //#region node_modules/codehost/src/tunnel/protocol.ts
 let Op = /* @__PURE__ */ function(Op) {
@@ -546,4 +546,4 @@ async function cmdExpose(args) {
 
 //#endregion
 export { cmdExpose, ensureExposure, listExposures, stopExposure };
-//# sourceMappingURL=expose-Ct28jckQ.js.map
+//# sourceMappingURL=expose-BU3f7VfC.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-D5s9vQ-1.js";
-import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-CQ67EOjN.js";
+import "./versionChecker-D5ir842c.js";
+import { a as hasTodoStore, c as AgentContext, i as answerAsk, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-B51ZLoJC.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";

package/dist/{notifyDaemon-Cgx9Sauh.js → notifyDaemon-DDPfMGlw.js}

@@ -2,8 +2,8 @@ import { n as logger } from "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-WOGfqD8M.js";
+import "./configShared-IBbnn9b8.js";
+import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-BL_SWFDC.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -589,4 +589,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-Cgx9Sauh.js.map
+//# sourceMappingURL=notifyDaemon-DDPfMGlw.js.map

package/dist/{rustBinary-t6UmLbT8.js → rustBinary-DuwxRidk.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-D5s9vQ-1.js";
+import { r as getInstalledPackage } from "./versionChecker-D5ir842c.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -225,4 +225,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { getRustBinary as n, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-t6UmLbT8.js.map
+//# sourceMappingURL=rustBinary-DuwxRidk.js.map

package/dist/{schedule-Ak3Z7M7d.js → schedule-CWBHxQxk.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-D5s9vQ-1.js";
-import "./ts-CQ67EOjN.js";
+import "./versionChecker-D5ir842c.js";
+import "./ts-B51ZLoJC.js";
 import "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./pidStore-6EZd5DUv.js";
 import "./messageLog-C-YIzhRj.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DjDZ3MGT.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-ia9b-P1k.js";
 import { d as resolveSpawnCwd } from "./workspaceConfig-DOHygA2x.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BtL6Oo1o.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-Ak3Z7M7d.js.map
+//# sourceMappingURL=schedule-CWBHxQxk.js.map

package/dist/{serve-88nSS8sz.js → serve-DyZpvp4C.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-D5s9vQ-1.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-t6UmLbT8.js";
-import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-CQ67EOjN.js";
+import { r as getInstalledPackage } from "./versionChecker-D5ir842c.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-DuwxRidk.js";
+import { i as answerAsk, l as CLAUDE_SESSION_PIN_ENV, o as listAsks } from "./ts-B51ZLoJC.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import "./JsonlStore-CPGIR0Wy.js";
@@ -10,13 +10,13 @@ import "./pidStore-6EZd5DUv.js";
 import { r as recordInbox } from "./messageLog-C-YIzhRj.js";
 import { t as pgidForWrapper } from "./reaper-DP49VCKx.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DjDZ3MGT.js";
-import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-WOGfqD8M.js";
+import "./configShared-IBbnn9b8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-ia9b-P1k.js";
+import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-BL_SWFDC.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Dd28_cBM.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-CgvcnRIP.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-DyyjF-fr.js";
 import { a as getSpawnHook, c as hasProvisionHook, d as resolveSpawnCwd, i as getProvisionRoot, l as hasSpawnHook, r as getProvisionHook, u as isProvisionAllowed } from "./workspaceConfig-DOHygA2x.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-BtL6Oo1o.js";
 import { r as spawnRejectionReason } from "./spawnGate-BxgS_GlF.js";
@@ -2300,7 +2300,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-BSxJ9sZs.js");
+			const ws = await import("./ws-C6gfqPHM.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2320,7 +2320,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-BSxJ9sZs.js");
+			const ws = await import("./ws-C6gfqPHM.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -3070,7 +3070,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-DfvmYPdC.js");
+				const { createScopedShare } = await import("./agentShare-BazKWNQQ.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3085,12 +3085,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-DfvmYPdC.js");
+			const { listShares } = await import("./agentShare-BazKWNQQ.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-DfvmYPdC.js");
+			const { revokeShare } = await import("./agentShare-BazKWNQQ.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3104,7 +3104,7 @@ Options:
 			const port = Number(body.port);
 			if (!Number.isInteger(port) || port < 1 || port > 65535) return new Response("valid port required", { status: 400 });
 			try {
-				const { ensureExposure } = await import("./expose-Ct28jckQ.js");
+				const { ensureExposure } = await import("./expose-BU3f7VfC.js");
 				const h = await ensureExposure(port, body.relay);
 				return Response.json({
 					id: h.id,
@@ -3118,12 +3118,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/exposes") {
-			const { listExposures } = await import("./expose-Ct28jckQ.js");
+			const { listExposures } = await import("./expose-BU3f7VfC.js");
 			return Response.json(listExposures());
 		}
 		const unexposeM = /^\/api\/expose\/(\d+)$/.exec(p);
 		if (req.method === "DELETE" && unexposeM) {
-			const { stopExposure } = await import("./expose-Ct28jckQ.js");
+			const { stopExposure } = await import("./expose-BU3f7VfC.js");
 			const ok = stopExposure(Number(unexposeM[1]));
 			return new Response(ok ? "revoked" : "no such exposure", { status: ok ? 200 : 404 });
 		}
@@ -3392,7 +3392,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-DfvmYPdC.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-BazKWNQQ.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3405,4 +3405,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-88nSS8sz.js.map
+//# sourceMappingURL=serve-DyZpvp4C.js.map

package/dist/{setup-Dfc3vx65.js → setup-JqletyDD.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-88nSS8sz.js");
+	const { cmdServe } = await import("./serve-DyZpvp4C.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-Dfc3vx65.js.map
+//# sourceMappingURL=setup-JqletyDD.js.map

package/dist/{subcommands-WOGfqD8M.js → subcommands-BL_SWFDC.js}

@@ -3,7 +3,7 @@ import { n as logger } from "./logger-CDIsZ-Pp.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidIndex-D9DOSd-c.js";
 import { a as recordOutbox, i as recordMessage, n as readMailbox, t as partyMatches } from "./messageLog-C-YIzhRj.js";
-import { t as loadSharedCliDefaults } from "./configShared-9wVlbPyC.js";
+import { t as loadSharedCliDefaults } from "./configShared-IBbnn9b8.js";
 import { n as isWebrtcSpec } from "./webrtcLink-BMYneHbu.js";
 import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-BxQnNxQv.js";
 import ms from "ms";
@@ -1267,31 +1267,31 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-DxXJeIF4.js");
+				const { cmdTerm } = await import("./terminal-BFq0mWdQ.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-DZxzSlx6.js");
+				const { cmdWidget } = await import("./widget-BXlREJHQ.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-DZxzSlx6.js");
+				const { cmdMint } = await import("./widget-BXlREJHQ.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-88nSS8sz.js");
+				const { cmdServe } = await import("./serve-DyZpvp4C.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-Dfc3vx65.js");
+				const { cmdSetup } = await import("./setup-JqletyDD.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-BSxJ9sZs.js");
+				const { cmdWs } = await import("./ws-C6gfqPHM.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-Ak3Z7M7d.js");
+				const { cmdSchedule } = await import("./schedule-CWBHxQxk.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1299,11 +1299,11 @@ async function runSubcommand(argv) {
 				return cmdRemote(rest);
 			}
 			case "expose": {
-				const { cmdExpose } = await import("./expose-Ct28jckQ.js");
+				const { cmdExpose } = await import("./expose-BU3f7VfC.js");
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-Bd4vejg2.js");
+				const { cmdCallback } = await import("./callback-Csr8_-FG.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -3706,7 +3706,7 @@ async function cmdAttach(rest) {
 	const winsizeDir = path.join(ayHome, "winsize");
 	await mkdir(winsizeDir, { recursive: true });
 	const winsizePath = path.join(winsizeDir, String(record.pid));
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-88nSS8sz.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DyZpvp4C.js");
 	const daemonBase = await resolveDaemonHttpBase().catch(() => null);
 	const daemonToken = daemonBase ? await loadTokenReadOnly().catch(() => null) ?? "" : "";
 	const capViewer = `attach:${process.pid}`;
@@ -4403,7 +4403,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-Cgx9Sauh.js");
+		const { ensureDaemon } = await import("./notifyDaemon-DDPfMGlw.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4477,7 +4477,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-Cgx9Sauh.js");
+	const daemon = await import("./notifyDaemon-DDPfMGlw.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4504,4 +4504,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { shouldStealLock as $, recentReadEdges as A, stdinActivityPath as B, listRecords as C, readNotes as D, readAgentPtysize as E, resolveReadWindow as F, writeToIpc as G, submitAndConfirm as H, resolveResumeArgs as I, hostId as J, appendEvent as K, restartHintLines as L, renderRawLog as M, renderRawLogLines as N, readPtysize as O, resolveOne as P, readInbox as Q, runSubcommand as R, lastStdinAt as S, menuSelectKeys as T, waitForLogQuiet as U, stopTipForCli as V, writeKeysPaced as W, listInboxParents as X, isTransientLockMkdirError as Y, liveWatchers as Z, isPidAlive as _, cmdHelp as a, isUnknownManagerToken as b, deriveLiveState as c, extractMenu as d, daemonLockDir as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderLogTailLines as j, recentMessageEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, notifyDir as nt, controlCodeFromName as o, extractTaskCounts as p, gcInboxes as q, TYPING_WINDOW_MS as r, TYPING_BADGE as rt, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, daemonLockOwnerPath as tt, extractBadges as u, isSlashCommand as v, matchKeyword as w, isUserTyping as x, isSubcommand as y, snapshotStatus as z };
-//# sourceMappingURL=subcommands-WOGfqD8M.js.map
+//# sourceMappingURL=subcommands-BL_SWFDC.js.map

package/dist/{subcommands-BLOe70zq.js → subcommands-CdWAGc4C.js}

@@ -2,8 +2,8 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-WOGfqD8M.js";
+import "./configShared-IBbnn9b8.js";
+import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-BL_SWFDC.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 

package/dist/{terminal-DxXJeIF4.js → terminal-BFq0mWdQ.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-88nSS8sz.js");
+	const { mintScopedTermToken } = await import("./serve-DyZpvp4C.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-DxXJeIF4.js.map
+//# sourceMappingURL=terminal-BFq0mWdQ.js.map

package/dist/{ts-CQ67EOjN.js → ts-B51ZLoJC.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-D5s9vQ-1.js";
+import { r as getInstalledPackage } from "./versionChecker-D5ir842c.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-Buo457VO.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-DBoONoM-.js";
@@ -22,10 +22,10 @@ import sflow from "sflow";
 import xterm from "@xterm/headless";
 import { createServer } from "net";
 import { execSync as execSync$1 } from "node:child_process";
+import { accessSync, constants as constants$1, existsSync as existsSync$1, statSync as statSync$1 } from "node:fs";
+import path$1 from "node:path";
 import os$1 from "node:os";
 import { readFile as readFile$1 } from "node:fs/promises";
-import path$1 from "node:path";
-import { existsSync as existsSync$1 } from "node:fs";
 
 //#region ts/xterm-proxy.ts
 const { Terminal } = xterm;
@@ -749,6 +749,84 @@ async function applyAgentNice(pid, env = process.env) {
 	} catch {}
 }
 
+//#endregion
+//#region ts/resolveBinary.ts
+/**
+* Decide whether a PATH candidate is a runnable program.
+*
+* Two checks, both load-bearing:
+* - `isFile()` rejects directories and symlinks-to-directories (statSync FOLLOWS
+*   symlinks), which is the case that used to abort the whole process — see
+*   {@link resolveProgram}.
+* - `access(X_OK)` rejects non-executables. Preferred over testing the raw mode
+*   bits because it accounts for the caller's uid/gid, and because Windows has
+*   no exec bit (there it succeeds for any existing file, which is correct —
+*   Windows executability is decided by PATHEXT, not by permissions).
+*
+* The Rust runtime's `resolve_program` makes the equivalent pair of checks with
+* `metadata().is_file()` + mode & 0o111 (it only ever runs on unix).
+*/
+function isExecutableFile(candidate) {
+	try {
+		if (!statSync$1(candidate).isFile()) return false;
+		accessSync(candidate, constants$1.X_OK);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Walk `rawPath` and return the first entry that names a runnable `bin`.
+*
+* Split out from {@link resolveProgram} (and taking an injectable `isExec`) so
+* the resolution logic itself is exercised on every platform, including the
+* Windows CI leg where {@link resolveProgram} short-circuits.
+*
+* @throws Error mentioning ENOENT / "command not found" when unresolvable, so
+*   `isCommandNotFoundError` in ts/core/spawner.ts still routes it to the
+*   auto-install path
+*/
+function resolveOnPath(bin, rawPath, isExec = isExecutableFile) {
+	if (bin.includes("/") || bin.includes(path$1.sep)) return bin;
+	for (const dir of rawPath.split(path$1.delimiter)) {
+		if (!dir) continue;
+		const candidate = path$1.join(dir, bin);
+		if (isExec(candidate)) return candidate;
+	}
+	throw new Error(`spawn ${bin} ENOENT: command not found in PATH (install it, or point \`binary:\` at a full path)`);
+}
+/**
+* Resolve a bare program name to an absolute path using POSIX PATH semantics.
+*
+* `portable-pty`'s `CommandBuilder` — reached from the TS runtime through
+* `bun-pty`'s `librust_pty` — resolves a RELATIVE program name against the cwd
+* FIRST and accepts the result if it merely `exists()`, with no regular-file or
+* executable check (portable-pty 0.8.1, `cmdbuilder.rs::search_path`). So a cwd
+* that happens to hold an entry named like the agent CLI — a `claude/` directory,
+* a symlink to one, or a non-executable `claude` file — shadows the real binary.
+* exec then fails inside the forked child, and portable-pty's `close_random_fds()`
+* `pre_exec` hook has already closed every fd >= 3, including std's CLOEXEC
+* error-report pipe. The child therefore can't hand the errno back to the parent
+* and dies on std's `rtassert!(output.write(&bytes).is_ok())` with
+* `fatal runtime error: assertion failed: output.write(&bytes).is_ok(), aborting`
+* instead of surfacing a normal "not found / not executable" spawn error.
+* See issue #138.
+*
+* POSIX is unambiguous that a command name containing no slash is looked up in
+* PATH *only*, never in the cwd, so pre-resolving here is both the fix and the
+* correct semantics.
+*
+* Mirrors `resolve_program` in rs/src/pty_spawner.rs — keep the two in sync.
+*
+* @param bin - Program name as configured (`cliConf.binary` or the CLI name)
+* @param pathEnv - PATH the child will see; defaults to this process's PATH
+* @returns Absolute path to the executable
+*/
+function resolveProgram(bin, pathEnv) {
+	if (process.platform === "win32") return bin;
+	return resolveOnPath(bin, pathEnv ?? process.env.PATH ?? "");
+}
+
 //#endregion
 //#region ts/pty-fix.ts
 var pty_fix_exports = /* @__PURE__ */ __exportAll({});
@@ -915,8 +993,9 @@ function spawnAgent(options) {
 	const { cli, cliConf, cliArgs, install, ptyOptions } = options;
 	const spawn = () => {
 		let [bin, ...args] = [...parseCommandString(cliConf?.binary || cli), ...cliArgs];
-		logger.debug(`Spawning ${bin} with args: ${JSON.stringify(args)}`);
-		const spawned = pty_default.spawn(bin, args, ptyOptions);
+		const program = resolveProgram(bin, ptyOptions.env.PATH);
+		logger.debug(`Spawning ${program} with args: ${JSON.stringify(args)}`);
+		const spawned = pty_default.spawn(program, args, ptyOptions);
 		logger.info(`[${cli}-yes] Spawned ${bin} with PID ${spawned.pid} (agent-yes v${getInstalledPackage().version})`);
 		applyAgentNice(spawned.pid);
 		return spawned;
@@ -1268,7 +1347,7 @@ async function answerAsk(projectRoot, taskId, answer) {
 
 //#endregion
 //#region ts/index.ts
-const config = await import("./agent-yes.config-DPtMM0S-.js").then((mod) => mod.default || mod);
+const config = await import("./agent-yes.config-C8e9rNLW.js").then((mod) => mod.default || mod);
 const CLIS_CONFIG = config.clis;
 /**
 * Main function to run agent-cli with automatic yes/no responses
@@ -1547,7 +1626,7 @@ async function agentYes({ cli, cliArgs = [], skipPermissions = false, prompt, ro
 				cwd: cwd ?? process.cwd(),
 				env: ptyEnv
 			};
-			shell = pty_default.spawn(bin, args, restartPtyOptions);
+			shell = pty_default.spawn(resolveProgram(bin, ptyEnv.PATH), args, restartPtyOptions);
 			shellWrite = (data) => shell.write(data);
 			try {
 				await pidStore.registerProcess({
@@ -1631,7 +1710,7 @@ async function agentYes({ cli, cliArgs = [], skipPermissions = false, prompt, ro
 				cwd: cwd ?? process.cwd(),
 				env: ptyEnv
 			};
-			shell = pty_default.spawn(cli, restoreArgs, restorePtyOptions);
+			shell = pty_default.spawn(resolveProgram(cli, ptyEnv.PATH), restoreArgs, restorePtyOptions);
 			shellWrite = (data) => shell.write(data);
 			try {
 				await pidStore.registerProcess({
@@ -2017,7 +2096,7 @@ async function agentYes({ cli, cliArgs = [], skipPermissions = false, prompt, ro
 		};
 		return {
 			cols: Math.max(20, process.stdout.columns),
-			rows: process.stdout.rows
+			rows: Math.max(4, process.stdout.rows)
 		};
 	}
 }
@@ -2027,4 +2106,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, AgentContext as c, answerAsk as i, CLAUDE_SESSION_PIN_ENV as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-CQ67EOjN.js.map
+//# sourceMappingURL=ts-B51ZLoJC.js.map

package/dist/{versionChecker-D5s9vQ-1.js → versionChecker-D5ir842c.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.246.4";
+var version = "1.246.5";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-D5s9vQ-1.js.map
+//# sourceMappingURL=versionChecker-D5ir842c.js.map

package/dist/{widget-DZxzSlx6.js → widget-BXlREJHQ.js}

@@ -28,7 +28,7 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-88nSS8sz.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DyZpvp4C.js");
 	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
@@ -186,7 +186,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-88nSS8sz.js");
+	const { mintScopedTermToken } = await import("./serve-DyZpvp4C.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -202,4 +202,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-DZxzSlx6.js.map
+//# sourceMappingURL=widget-BXlREJHQ.js.map

package/dist/{ws-BSxJ9sZs.js → ws-C6gfqPHM.js}

@@ -2,8 +2,8 @@ import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-D9DOSd-c.js";
 import "./messageLog-C-YIzhRj.js";
 import "./e2e-CEIdJGZ7.js";
-import "./configShared-9wVlbPyC.js";
-import { C as listRecords } from "./subcommands-WOGfqD8M.js";
+import "./configShared-IBbnn9b8.js";
+import { C as listRecords } from "./subcommands-BL_SWFDC.js";
 import "./webrtcLink-BMYneHbu.js";
 import "./remotes-BxQnNxQv.js";
 import { i as getProvisionRoot } from "./workspaceConfig-DOHygA2x.js";
@@ -418,4 +418,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
-//# sourceMappingURL=ws-BSxJ9sZs.js.map
+//# sourceMappingURL=ws-C6gfqPHM.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.246.4",
+  "version": "1.246.5",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/index.ts

@@ -37,6 +37,7 @@ import {
   saveDeprecatedLogFile,
 } from "./core/logging.ts";
 import { spawnAgent } from "./core/spawner.ts";
+import { resolveProgram } from "./resolveBinary.ts";
 import { AgentContext } from "./core/context.ts";
 import { createTerminatorStream } from "./core/streamHelpers.ts";
 import { globalAgentRegistry } from "./agentRegistry.ts";
@@ -639,7 +640,8 @@ export default async function agentYes({
         cwd: cwd ?? process.cwd(),
         env: ptyEnv,
       };
-      shell = pty.spawn(bin!, args, restartPtyOptions);
+      // Resolve via PATH so a cwd entry named like the CLI can't shadow it (#138).
+      shell = pty.spawn(resolveProgram(bin!, ptyEnv.PATH), args, restartPtyOptions);
       shellWrite = (data: string) => shell.write(data);
       // Register process in pidStore (non-blocking)
       try {
@@ -745,7 +747,8 @@ export default async function agentYes({
         cwd: cwd ?? process.cwd(),
         env: ptyEnv,
       };
-      shell = pty.spawn(cli, restoreArgs, restorePtyOptions);
+      // Resolve via PATH so a cwd entry named like the CLI can't shadow it (#138).
+      shell = pty.spawn(resolveProgram(cli, ptyEnv.PATH), restoreArgs, restorePtyOptions);
       shellWrite = (data: string) => shell.write(data);
       // Register process in pidStore (non-blocking)
       try {
@@ -1417,7 +1420,11 @@ export default async function agentYes({
     return {
       // Enforce minimum 20 columns to avoid layout issues
       cols: Math.max(20, process.stdout.columns),
-      rows: process.stdout.rows,
+      // Clamp rows too: a tty whose winsize was never set (e.g. a pty created by
+      // `script`/a daemon) reports 0, and bun-pty rejects rows <= 0 outright —
+      // the spawn then fails with a bare "PTY spawn failed" and no clue why.
+      // Mirrors get_terminal_size() in rs/src/pty_spawner.rs.
+      rows: Math.max(4, process.stdout.rows),
     };
   }
 }

package/ts/resolveBinary.spec.ts

@@ -0,0 +1,133 @@
+import { describe, expect, it } from "vitest";
+import { chmodSync, mkdirSync, mkdtempSync, symlinkSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { isExecutableFile, resolveOnPath, resolveProgram } from "./resolveBinary.ts";
+
+// Issue #138: a cwd entry named like the agent CLI used to shadow the real
+// binary inside portable-pty (reached via bun-pty), killing the forked child
+// with "fatal runtime error: assertion failed: output.write(&bytes).is_ok()".
+// Resolution must consult PATH only, and only accept runnable files.
+
+const isWindows = process.platform === "win32";
+const root = mkdtempSync(path.join(os.tmpdir(), "ay-resolve-"));
+
+// resolveOnPath takes an injected probe, so these run on every platform —
+// including the Windows CI leg, where resolveProgram itself short-circuits.
+describe("resolveOnPath", () => {
+  const binDir = path.join(root, "bin");
+  const real = path.join(binDir, "ayfake");
+  // Only `real` is runnable; anything else the walk considers must be rejected.
+  const isExec = (candidate: string) => candidate === real;
+
+  it("returns the PATH entry that is actually runnable", () => {
+    expect(resolveOnPath("ayfake", binDir, isExec)).toBe(real);
+  });
+
+  it("skips PATH entries that are not runnable and keeps walking", () => {
+    const decoys = [path.join(root, "a"), path.join(root, "b")].join(path.delimiter);
+    expect(resolveOnPath("ayfake", `${decoys}${path.delimiter}${binDir}`, isExec)).toBe(real);
+  });
+
+  it("does not treat an empty PATH entry as the cwd", () => {
+    expect(resolveOnPath("ayfake", `${path.delimiter}${binDir}`, isExec)).toBe(real);
+  });
+
+  it("passes through a name that already contains a separator", () => {
+    expect(resolveOnPath(`.${path.sep}ayfake`, binDir, isExec)).toBe(`.${path.sep}ayfake`);
+    expect(resolveOnPath("/usr/bin/env", binDir, isExec)).toBe("/usr/bin/env");
+  });
+
+  it("throws a command-not-found error the auto-install path recognises", () => {
+    // ts/core/spawner.ts isCommandNotFoundError() keys off these substrings.
+    expect(() => resolveOnPath("ay-nope", binDir, isExec)).toThrow(/ENOENT/);
+    expect(() => resolveOnPath("ay-nope", binDir, isExec)).toThrow(/command not found/);
+  });
+});
+
+describe("isExecutableFile", () => {
+  const dir = path.join(root, "probe");
+  mkdirSync(dir, { recursive: true });
+
+  it("accepts a runnable file", () => {
+    // Windows has no exec bit — access(X_OK) succeeds for any existing file
+    // there, which is the intended behaviour (PATHEXT decides executability).
+    const exe = path.join(dir, "ayexe");
+    writeFileSync(exe, "#!/bin/sh\n");
+    chmodSync(exe, 0o755);
+    expect(isExecutableFile(exe)).toBe(true);
+  });
+
+  it("rejects a directory named like the CLI", () => {
+    const asDir = path.join(dir, "aydir");
+    mkdirSync(asDir, { recursive: true });
+    expect(isExecutableFile(asDir)).toBe(false);
+  });
+
+  it("rejects a path that does not exist", () => {
+    expect(isExecutableFile(path.join(dir, "ay-missing"))).toBe(false);
+  });
+
+  // Symlink creation needs elevation on Windows, and there is no exec bit there.
+  it.skipIf(isWindows)("rejects a symlink pointing at a directory", () => {
+    const target = path.join(dir, "aydir");
+    const link = path.join(dir, "aylink");
+    symlinkSync(target, link);
+    expect(isExecutableFile(link)).toBe(false);
+  });
+
+  it.skipIf(isWindows)("rejects a non-executable file", () => {
+    const dud = path.join(dir, "aydud");
+    writeFileSync(dud, "not executable");
+    chmodSync(dud, 0o644);
+    expect(isExecutableFile(dud)).toBe(false);
+  });
+});
+
+describe("resolveProgram", () => {
+  // Both platform arms matter on both CI legs, so drive process.platform
+  // directly rather than skipping half the behaviour on each OS.
+  function withPlatform(value: string, fn: () => void) {
+    const original = Object.getOwnPropertyDescriptor(process, "platform")!;
+    Object.defineProperty(process, "platform", { ...original, value });
+    try {
+      fn();
+    } finally {
+      Object.defineProperty(process, "platform", original);
+    }
+  }
+
+  it("passes the name through on Windows", () => {
+    // cmd.exe / ConPTY do their own PATH+PATHEXT resolution there.
+    withPlatform("win32", () => {
+      expect(resolveProgram("cmd", `C:${path.sep}nonexistent`)).toBe("cmd");
+    });
+  });
+
+  it("resolves against the real filesystem via PATH elsewhere", () => {
+    const binDir = path.join(root, "realbin");
+    mkdirSync(binDir, { recursive: true });
+    const exe = path.join(binDir, "ayreal");
+    writeFileSync(exe, "#!/bin/sh\n");
+    chmodSync(exe, 0o755);
+    // A same-named directory next to it must NOT win: only PATH is consulted.
+    mkdirSync(path.join(root, "ayreal"), { recursive: true });
+    withPlatform("linux", () => {
+      expect(resolveProgram("ayreal", binDir)).toBe(exe);
+    });
+  });
+
+  it("falls back to the process PATH, and to none at all", () => {
+    const original = process.env.PATH;
+    try {
+      withPlatform("linux", () => {
+        expect(() => resolveProgram("ay-definitely-missing")).toThrow(/command not found/);
+        delete process.env.PATH;
+        expect(() => resolveProgram("ay-definitely-missing")).toThrow(/command not found/);
+      });
+    } finally {
+      if (original === undefined) delete process.env.PATH;
+      else process.env.PATH = original;
+    }
+  });
+});

package/ts/resolveBinary.ts

@@ -0,0 +1,95 @@
+import { accessSync, constants, statSync } from "node:fs";
+import path from "node:path";
+
+/**
+ * Decide whether a PATH candidate is a runnable program.
+ *
+ * Two checks, both load-bearing:
+ * - `isFile()` rejects directories and symlinks-to-directories (statSync FOLLOWS
+ *   symlinks), which is the case that used to abort the whole process — see
+ *   {@link resolveProgram}.
+ * - `access(X_OK)` rejects non-executables. Preferred over testing the raw mode
+ *   bits because it accounts for the caller's uid/gid, and because Windows has
+ *   no exec bit (there it succeeds for any existing file, which is correct —
+ *   Windows executability is decided by PATHEXT, not by permissions).
+ *
+ * The Rust runtime's `resolve_program` makes the equivalent pair of checks with
+ * `metadata().is_file()` + mode & 0o111 (it only ever runs on unix).
+ */
+export function isExecutableFile(candidate: string): boolean {
+  try {
+    if (!statSync(candidate).isFile()) return false;
+    accessSync(candidate, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Walk `rawPath` and return the first entry that names a runnable `bin`.
+ *
+ * Split out from {@link resolveProgram} (and taking an injectable `isExec`) so
+ * the resolution logic itself is exercised on every platform, including the
+ * Windows CI leg where {@link resolveProgram} short-circuits.
+ *
+ * @throws Error mentioning ENOENT / "command not found" when unresolvable, so
+ *   `isCommandNotFoundError` in ts/core/spawner.ts still routes it to the
+ *   auto-install path
+ */
+export function resolveOnPath(
+  bin: string,
+  rawPath: string,
+  isExec: (candidate: string) => boolean = isExecutableFile,
+): string {
+  // A name that already carries a separator is a path, not a PATH lookup —
+  // `./claude` must keep meaning the one in this directory.
+  if (bin.includes("/") || bin.includes(path.sep)) return bin;
+
+  for (const dir of rawPath.split(path.delimiter)) {
+    // Empty PATH entries mean "the cwd" under a legacy POSIX allowance.
+    // Honouring that would reintroduce exactly the shadowing described in
+    // resolveProgram, so skip them.
+    if (!dir) continue;
+    const candidate = path.join(dir, bin);
+    if (isExec(candidate)) return candidate;
+  }
+
+  throw new Error(
+    `spawn ${bin} ENOENT: command not found in PATH (install it, or point \`binary:\` at a full path)`,
+  );
+}
+
+/**
+ * Resolve a bare program name to an absolute path using POSIX PATH semantics.
+ *
+ * `portable-pty`'s `CommandBuilder` — reached from the TS runtime through
+ * `bun-pty`'s `librust_pty` — resolves a RELATIVE program name against the cwd
+ * FIRST and accepts the result if it merely `exists()`, with no regular-file or
+ * executable check (portable-pty 0.8.1, `cmdbuilder.rs::search_path`). So a cwd
+ * that happens to hold an entry named like the agent CLI — a `claude/` directory,
+ * a symlink to one, or a non-executable `claude` file — shadows the real binary.
+ * exec then fails inside the forked child, and portable-pty's `close_random_fds()`
+ * `pre_exec` hook has already closed every fd >= 3, including std's CLOEXEC
+ * error-report pipe. The child therefore can't hand the errno back to the parent
+ * and dies on std's `rtassert!(output.write(&bytes).is_ok())` with
+ * `fatal runtime error: assertion failed: output.write(&bytes).is_ok(), aborting`
+ * instead of surfacing a normal "not found / not executable" spawn error.
+ * See issue #138.
+ *
+ * POSIX is unambiguous that a command name containing no slash is looked up in
+ * PATH *only*, never in the cwd, so pre-resolving here is both the fix and the
+ * correct semantics.
+ *
+ * Mirrors `resolve_program` in rs/src/pty_spawner.rs — keep the two in sync.
+ *
+ * @param bin - Program name as configured (`cliConf.binary` or the CLI name)
+ * @param pathEnv - PATH the child will see; defaults to this process's PATH
+ * @returns Absolute path to the executable
+ */
+export function resolveProgram(bin: string, pathEnv?: string): string {
+  // Windows spawns through cmd.exe / ConPTY, which apply their own PATH+PATHEXT
+  // resolution — the cwd-shadowing bug is unix-specific, so pass through.
+  if (process.platform === "win32") return bin;
+  return resolveOnPath(bin, pathEnv ?? process.env.PATH ?? "");
+}