agent-yes 1.256.1 → 1.257.0

package/dist/{SUPPORTED_CLIS-CUrSR0fn.js → SUPPORTED_CLIS-BNRnFFc2.js}

@@ -1,11 +1,11 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BlwkAisS.js";
-import "./ts-DLM7M0W3.js";
+import "./versionChecker-bcw3nJay.js";
+import "./ts-Ct3yd-1m.js";
 import "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-Dq4KY2IV.js";
 import "./pidStore-Cmcc8Oej.js";
 import "./messageLog-BYFwioFY.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BzDARJYP.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BPPX9iGs.js";
 
 export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-BzDARJYP.js → SUPPORTED_CLIS-BPPX9iGs.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-DLM7M0W3.js";
+import { t as CLIS_CONFIG } from "./ts-Ct3yd-1m.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-BzDARJYP.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-BPPX9iGs.js.map

package/dist/{agentShare-JbxEAAIb.js → agentShare-aCSONMZp.js}

@@ -3,9 +3,9 @@ import "./globalPidIndex-Dq4KY2IV.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { P as resolveOne } from "./subcommands-CAYOfibe.js";
+import { P as resolveOne } from "./subcommands-B04Jcb4a.js";
 import "./webrtcLink-CS4D-3G1.js";
-import "./remotes-BwytVgTX.js";
+import "./remotes-Dy4Rg8Yp.js";
 import { a as startShare } from "./share-B-e_9WBx.js";
 
 //#region ts/agentShare.ts
@@ -229,4 +229,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-JbxEAAIb.js.map
+//# sourceMappingURL=agentShare-aCSONMZp.js.map

package/dist/{callback-BH4-6FVz.js → callback-CpGhgUwm.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
-import { P as resolveOne } from "./subcommands-CAYOfibe.js";
+import { P as resolveOne } from "./subcommands-B04Jcb4a.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Cg3Ye0ZS.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-JNGfYmLT.js");
+		const { resolveLocalServeUrl } = await import("./serve-DQPkrKcN.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-BH4-6FVz.js.map
+//# sourceMappingURL=callback-CpGhgUwm.js.map

package/dist/{callback-CDZ0mSn8.js → callback-CzYsRWjX.js}

@@ -3,10 +3,10 @@ import "./globalPidIndex-Dq4KY2IV.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import "./subcommands-CAYOfibe.js";
+import "./subcommands-B04Jcb4a.js";
 import "./webrtcLink-CS4D-3G1.js";
-import "./remotes-BwytVgTX.js";
+import "./remotes-Dy4Rg8Yp.js";
 import "./callbackCore-Cg3Ye0ZS.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-BH4-6FVz.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-CpGhgUwm.js";
 
 export { cmdCallback };

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-BlwkAisS.js";
-import { r as getRustBinary } from "./rustBinary-Cd9DngDh.js";
+import { i as versionString, n as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-bcw3nJay.js";
+import { r as getRustBinary } from "./rustBinary-DWzZGM4A.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -285,7 +285,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-DEcce_73.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken } = await import("./subcommands-dNgWfaKE.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CUrSR0fn.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BNRnFFc2.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -314,16 +314,16 @@ await checkAndAutoUpdate();
 logger.info(versionString());
 const config = parseCliArgs(process.argv);
 if (config.tray) {
-	const { startTray } = await import("./tray-d0GZiGI9.js");
+	const { startTray } = await import("./tray-CgkwxtG6.js");
 	await startTray();
 	await new Promise(() => {});
 }
 {
-	const { ensureTray } = await import("./tray-d0GZiGI9.js");
+	const { ensureTray } = await import("./tray-CgkwxtG6.js");
 	ensureTray();
 }
 if (!config.showVersion && !config.appendPrompt && !config.tray) {
-	const { waitForSpawnCapacity } = await import("./spawnGate-DcG_Pn2f.js");
+	const { waitForSpawnCapacity } = await import("./spawnGate-DqKBA07k.js");
 	await waitForSpawnCapacity({
 		onWait: (reason, waitedMs) => {
 			if (config.verbose || waitedMs === 0) console.error(`[agent-yes] spawn gate: ${reason} — waiting…`);
@@ -346,7 +346,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CUrSR0fn.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BNRnFFc2.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BlwkAisS.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-DLM7M0W3.js";
+import "./versionChecker-bcw3nJay.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-Ct3yd-1m.js";
 import { _ as isKnownKind, a as renderTree, b as statesOf, c as monitorHint, d as openStore, f as DONE_STATE, g as initialState, h as canTransition, i as renderDigest, l as CycleError, m as ORPHANED_STATE, o as unblockedTasks, p as LIFECYCLES, r as openBlockers, s as describeBlock, t as reconcileTodos, u as TodoStore, v as nextStates, x as removeControlCharacters, y as requiredGate } from "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-Dq4KY2IV.js";

package/dist/{notifyDaemon-7udiA8IF.js → notifyDaemon-Cvnvfqw8.js}

@@ -3,9 +3,9 @@ import "./globalPidIndex-Dq4KY2IV.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-CAYOfibe.js";
+import { $ as shouldStealLock, C as listRecords, J as hostId, K as appendEvent, Q as readInbox, X as listInboxParents, Z as liveWatchers, _ as isPidAlive, c as deriveLiveState, et as daemonLockDir, j as renderLogTailLines, nt as notifyDir, q as gcInboxes, tt as daemonLockOwnerPath } from "./subcommands-B04Jcb4a.js";
 import "./webrtcLink-CS4D-3G1.js";
-import "./remotes-BwytVgTX.js";
+import "./remotes-Dy4Rg8Yp.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
 import { randomUUID } from "node:crypto";
 import { execFile, execFileSync } from "node:child_process";
@@ -836,4 +836,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-7udiA8IF.js.map
+//# sourceMappingURL=notifyDaemon-Cvnvfqw8.js.map

package/dist/{remotes-C71bbp-g.js → remotes-CNe85Icx.js}

@@ -1,5 +1,5 @@
 import "./e2e-CUMZC53I.js";
 import "./webrtcLink-CS4D-3G1.js";
-import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-BwytVgTX.js";
+import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-Dy4Rg8Yp.js";
 
 export { cmdRemote };

package/dist/{remotes-BwytVgTX.js → remotes-Dy4Rg8Yp.js}

@@ -86,7 +86,7 @@ async function resolveRemoteSpec(spec) {
 * The bridge lives for the rest of the process (torn down on `process.exit`).
 */
 async function resolveWebrtc(link, keyword) {
-	const { startWebrtcBridge } = await import("./webrtcRemote-BXmkHX-i.js");
+	const { startWebrtcBridge } = await import("./webrtcRemote-C3OlHYSt.js");
 	const bridge = await startWebrtcBridge(link);
 	return {
 		url: bridge.baseUrl,
@@ -173,4 +173,4 @@ async function cmdRemote(rest) {
 
 //#endregion
 export { resolveRemoteSpec as a, readRemotes as i, deleteRemoteAlias as n, writeRemoteAlias as o, parseDirectRemoteSpec as r, cmdRemote as t };
-//# sourceMappingURL=remotes-BwytVgTX.js.map
+//# sourceMappingURL=remotes-Dy4Rg8Yp.js.map

package/dist/{rustBinary-Cd9DngDh.js → rustBinary-DWzZGM4A.js}

@@ -1,4 +1,4 @@
-import { r as getInstalledPackage } from "./versionChecker-BlwkAisS.js";
+import { r as getInstalledPackage } from "./versionChecker-bcw3nJay.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -243,4 +243,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { findTrayLauncher as n, getRustBinary as r, findSpawnHiddenLauncher as t };
-//# sourceMappingURL=rustBinary-Cd9DngDh.js.map
+//# sourceMappingURL=rustBinary-DWzZGM4A.js.map

package/dist/{schedule-Otpou3Ni.js → schedule-ChwwFCgQ.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BlwkAisS.js";
-import "./ts-DLM7M0W3.js";
+import "./versionChecker-bcw3nJay.js";
+import "./ts-Ct3yd-1m.js";
 import "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
 import "./globalPidIndex-Dq4KY2IV.js";
 import "./pidStore-Cmcc8Oej.js";
 import "./messageLog-BYFwioFY.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BzDARJYP.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BPPX9iGs.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-Bxuk_MOq.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-vhOBffJ3.js";
 import { createHash } from "node:crypto";
@@ -153,4 +153,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-Otpou3Ni.js.map
+//# sourceMappingURL=schedule-ChwwFCgQ.js.map

package/dist/{serve-JNGfYmLT.js → serve-DQPkrKcN.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-BlwkAisS.js";
-import { t as findSpawnHiddenLauncher } from "./rustBinary-Cd9DngDh.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-DLM7M0W3.js";
+import { r as getInstalledPackage } from "./versionChecker-bcw3nJay.js";
+import { t as findSpawnHiddenLauncher } from "./rustBinary-DWzZGM4A.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-Ct3yd-1m.js";
 import { t as agentYesHome$1 } from "./agentYesHome-CtmsY6I-.js";
 import { x as removeControlCharacters } from "./todoAutomation-BQRW614S.js";
 import "./JsonlStore-CPGIR0Wy.js";
@@ -11,16 +11,17 @@ import { r as recordInbox } from "./messageLog-BYFwioFY.js";
 import { t as pgidForWrapper } from "./reaper-C4BvNylH.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BzDARJYP.js";
-import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-CAYOfibe.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BPPX9iGs.js";
+import { A as recentReadEdges, C as listRecords, D as readNotes, G as writeToIpc, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, Y as isTransientLockMkdirError, f as extractNeedsInput, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, o as controlCodeFromName, p as extractTaskCounts, rt as TYPING_BADGE, u as extractBadges, x as isUserTyping, z as snapshotStatus } from "./subcommands-B04Jcb4a.js";
 import "./webrtcLink-CS4D-3G1.js";
-import "./remotes-BwytVgTX.js";
+import "./remotes-Dy4Rg8Yp.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Cg3Ye0ZS.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-BH4-6FVz.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-CpGhgUwm.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-Bxuk_MOq.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-vhOBffJ3.js";
-import { r as spawnRejectionReason } from "./spawnGate-BGaqQpMd.js";
-import { i as launchTray } from "./trayApp-pBLHICYj.js";
+import { i as importProvisionModule } from "./ws-BlISbGY8.js";
+import { r as spawnRejectionReason } from "./spawnGate-D0E1uRP7.js";
+import { i as launchTray } from "./trayApp-CCN3zyo7.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -2367,7 +2368,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-833ph696.js");
+			const ws = await import("./ws-BkOJQeeZ.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2387,7 +2388,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-833ph696.js");
+			const ws = await import("./ws-BkOJQeeZ.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2972,9 +2973,9 @@ Options:
 			if (fork) {
 				let prov;
 				try {
-					prov = await import("codehost/provision");
+					prov = await importProvisionModule();
 				} catch (e) {
-					return new Response(`fork needs the 'codehost' package (codehost/provision) — install it (npm i -g codehost) or 'bun link' it for local dev: ${e.message}`, { status: 501 });
+					return new Response(`fork needs a provision implementation — '@snomiao/ws-provision' (bundled dependency) or a bun-linked 'codehost': ${e.message}`, { status: 501 });
 				}
 				const forkOrigin = originOwnerRepo(fork.fromCwd);
 				const forkHook = await runProvisionHook(fork.fromCwd, {
@@ -3007,9 +3008,9 @@ Options:
 			} else if (from) {
 				let prov;
 				try {
-					prov = await import("codehost/provision");
+					prov = await importProvisionModule();
 				} catch (e) {
-					return new Response(`spawn-from needs the 'codehost' package (codehost/provision) — install it (npm i -g codehost) or 'bun link' it for local dev: ${e.message}`, { status: 501 });
+					return new Response(`spawn-from needs a provision implementation — '@snomiao/ws-provision' (bundled dependency) or a bun-linked 'codehost': ${e.message}`, { status: 501 });
 				}
 				let spec;
 				try {
@@ -3144,7 +3145,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-JbxEAAIb.js");
+				const { createScopedShare } = await import("./agentShare-aCSONMZp.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3159,12 +3160,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-JbxEAAIb.js");
+			const { listShares } = await import("./agentShare-aCSONMZp.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-JbxEAAIb.js");
+			const { revokeShare } = await import("./agentShare-aCSONMZp.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3466,7 +3467,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-JbxEAAIb.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-aCSONMZp.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3479,4 +3480,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-JNGfYmLT.js.map
+//# sourceMappingURL=serve-DQPkrKcN.js.map

package/dist/{setup-RVV6dnf3.js → setup-uZqYF0KT.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-JNGfYmLT.js");
+	const { cmdServe } = await import("./serve-DQPkrKcN.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-RVV6dnf3.js.map
+//# sourceMappingURL=setup-uZqYF0KT.js.map

package/dist/{spawnGate-BGaqQpMd.js → spawnGate-D0E1uRP7.js}

@@ -104,4 +104,4 @@ async function waitForSpawnCapacity(opts) {
 
 //#endregion
 export { waitForSpawnCapacity as i, spawnGateEnabled as n, spawnRejectionReason as r, memAvailableMb as t };
-//# sourceMappingURL=spawnGate-BGaqQpMd.js.map
+//# sourceMappingURL=spawnGate-D0E1uRP7.js.map

package/dist/{spawnGate-DcG_Pn2f.js → spawnGate-DqKBA07k.js}

@@ -1,5 +1,5 @@
 import "./logger-CDIsZ-Pp.js";
 import "./globalPidIndex-Dq4KY2IV.js";
-import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-BGaqQpMd.js";
+import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-D0E1uRP7.js";
 
 export { waitForSpawnCapacity };

package/dist/{subcommands-CAYOfibe.js → subcommands-B04Jcb4a.js}

@@ -5,7 +5,7 @@ import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidInde
 import { a as recordOutbox, i as recordMessage, n as readMailbox, t as partyMatches } from "./messageLog-BYFwioFY.js";
 import { t as loadSharedCliDefaults } from "./configShared-DtHMBCl7.js";
 import { n as isWebrtcSpec } from "./webrtcLink-CS4D-3G1.js";
-import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-BwytVgTX.js";
+import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-Dy4Rg8Yp.js";
 import ms from "ms";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from "fs/promises";
@@ -1385,7 +1385,7 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "todo": {
-				const { runTodoSubcommand } = await import("./todoCli-CaQDl5WR.js");
+				const { runTodoSubcommand } = await import("./todoCli-B2kqgqPh.js");
 				return runTodoSubcommand(rest);
 			}
 			case "ch":
@@ -1394,39 +1394,39 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-CkzqkAST.js");
+				const { cmdTerm } = await import("./terminal-sCD-7D_2.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-C2_s8SHw.js");
+				const { cmdWidget } = await import("./widget-B7NK6egy.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-C2_s8SHw.js");
+				const { cmdMint } = await import("./widget-B7NK6egy.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-JNGfYmLT.js");
+				const { cmdServe } = await import("./serve-DQPkrKcN.js");
 				return cmdServe(rest);
 			}
 			case "tray": {
-				const { cmdTray } = await import("./trayApp-DmaV4IyV.js");
+				const { cmdTray } = await import("./trayApp-HLGzyGrP.js");
 				return cmdTray(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-RVV6dnf3.js");
+				const { cmdSetup } = await import("./setup-uZqYF0KT.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-833ph696.js");
+				const { cmdWs } = await import("./ws-BkOJQeeZ.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-Otpou3Ni.js");
+				const { cmdSchedule } = await import("./schedule-ChwwFCgQ.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
-				const { cmdRemote } = await import("./remotes-C71bbp-g.js");
+				const { cmdRemote } = await import("./remotes-CNe85Icx.js");
 				return cmdRemote(rest);
 			}
 			case "expose": {
@@ -1434,7 +1434,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-CDZ0mSn8.js");
+				const { cmdCallback } = await import("./callback-CzYsRWjX.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -1852,7 +1852,7 @@ async function fetchRemoteRecordsRaw(url, token, opts) {
 		let base = url;
 		let bearer = token;
 		if (isWebrtcSpec(url)) {
-			const { startWebrtcBridge } = await import("./webrtcRemote-BXmkHX-i.js");
+			const { startWebrtcBridge } = await import("./webrtcRemote-C3OlHYSt.js");
 			bridge = await startWebrtcBridge(url);
 			base = bridge.baseUrl;
 			bearer = bridge.token;
@@ -3844,7 +3844,7 @@ async function cmdAttach(rest) {
 	const winsizeDir = path.join(ayHome, "winsize");
 	await mkdir(winsizeDir, { recursive: true });
 	const winsizePath = path.join(winsizeDir, String(record.pid));
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-JNGfYmLT.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DQPkrKcN.js");
 	const daemonBase = await resolveDaemonHttpBase().catch(() => null);
 	const daemonToken = daemonBase ? await loadTokenReadOnly().catch(() => null) ?? "" : "";
 	const capViewer = `attach:${process.pid}`;
@@ -4554,7 +4554,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-7udiA8IF.js");
+		const { ensureDaemon } = await import("./notifyDaemon-Cvnvfqw8.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4628,7 +4628,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-7udiA8IF.js");
+	const daemon = await import("./notifyDaemon-Cvnvfqw8.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4655,4 +4655,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { shouldStealLock as $, recentReadEdges as A, stdinActivityPath as B, listRecords as C, readNotes as D, readAgentPtysize as E, resolveReadWindow as F, writeToIpc as G, submitAndConfirm as H, resolveResumeArgs as I, hostId as J, appendEvent as K, restartHintLines as L, renderRawLog as M, renderRawLogLines as N, readPtysize as O, resolveOne as P, readInbox as Q, runSubcommand as R, lastStdinAt as S, menuSelectKeys as T, waitForLogQuiet as U, stopTipForCli as V, writeKeysPaced as W, listInboxParents as X, isTransientLockMkdirError as Y, liveWatchers as Z, isPidAlive as _, cmdHelp as a, isUnknownManagerToken as b, deriveLiveState as c, extractMenu as d, daemonLockDir as et, extractNeedsInput as f, isExitRequest as g, isAgentStuck as h, backoffWhileTyping as i, renderLogTailLines as j, recentMessageEdges as k, deriveLiveStatus as l, finalizedLines as m, READ_PAGE_DEFAULT as n, notifyDir as nt, controlCodeFromName as o, extractTaskCounts as p, gcInboxes as q, TYPING_WINDOW_MS as r, TYPING_BADGE as rt, cursorAbs as s, GRACEFUL_EXIT_COMMANDS as t, daemonLockOwnerPath as tt, extractBadges as u, isSlashCommand as v, matchKeyword as w, isUserTyping as x, isSubcommand as y, snapshotStatus as z };
-//# sourceMappingURL=subcommands-CAYOfibe.js.map
+//# sourceMappingURL=subcommands-B04Jcb4a.js.map

package/dist/{subcommands-DEcce_73.js → subcommands-dNgWfaKE.js}

@@ -3,8 +3,8 @@ import "./globalPidIndex-Dq4KY2IV.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-CAYOfibe.js";
+import { A as recentReadEdges, B as stdinActivityPath, C as listRecords, D as readNotes, E as readAgentPtysize, F as resolveReadWindow, G as writeToIpc, H as submitAndConfirm, I as resolveResumeArgs, L as restartHintLines, M as renderRawLog, N as renderRawLogLines, O as readPtysize, P as resolveOne, R as runSubcommand, S as lastStdinAt, T as menuSelectKeys, U as waitForLogQuiet, V as stopTipForCli, W as writeKeysPaced, _ as isPidAlive, a as cmdHelp, b as isUnknownManagerToken, c as deriveLiveState, d as extractMenu, f as extractNeedsInput, g as isExitRequest, h as isAgentStuck, i as backoffWhileTyping, j as renderLogTailLines, k as recentMessageEdges, l as deriveLiveStatus, m as finalizedLines, n as READ_PAGE_DEFAULT, o as controlCodeFromName, p as extractTaskCounts, r as TYPING_WINDOW_MS, s as cursorAbs, t as GRACEFUL_EXIT_COMMANDS, u as extractBadges, v as isSlashCommand, w as matchKeyword, x as isUserTyping, y as isSubcommand, z as snapshotStatus } from "./subcommands-B04Jcb4a.js";
 import "./webrtcLink-CS4D-3G1.js";
-import "./remotes-BwytVgTX.js";
+import "./remotes-Dy4Rg8Yp.js";
 
 export { cmdHelp, isSubcommand, isUnknownManagerToken, runSubcommand };

package/dist/{terminal-CkzqkAST.js → terminal-sCD-7D_2.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-JNGfYmLT.js");
+	const { mintScopedTermToken } = await import("./serve-DQPkrKcN.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-CkzqkAST.js.map
+//# sourceMappingURL=terminal-sCD-7D_2.js.map

package/dist/{todoCli-CaQDl5WR.js → todoCli-B2kqgqPh.js}

@@ -456,4 +456,4 @@ async function runTodoSubcommand(rest0) {
 
 //#endregion
 export { runTodoSubcommand };
-//# sourceMappingURL=todoCli-CaQDl5WR.js.map
+//# sourceMappingURL=todoCli-B2kqgqPh.js.map

package/dist/{tray-d0GZiGI9.js → tray-CgkwxtG6.js}

@@ -187,4 +187,4 @@ async function startTray() {
 
 //#endregion
 export { ensureTray, startTray };
-//# sourceMappingURL=tray-d0GZiGI9.js.map
+//# sourceMappingURL=tray-CgkwxtG6.js.map

package/dist/{trayApp-pBLHICYj.js → trayApp-CCN3zyo7.js}

@@ -1,4 +1,4 @@
-import { n as findTrayLauncher } from "./rustBinary-Cd9DngDh.js";
+import { n as findTrayLauncher } from "./rustBinary-DWzZGM4A.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { existsSync } from "node:fs";
 import path from "node:path";
@@ -97,4 +97,4 @@ async function cmdTray(args) {
 
 //#endregion
 export { trayHiddenMarker as a, launchTray as i, hasDesktop as n, isTrayHidden as r, cmdTray as t };
-//# sourceMappingURL=trayApp-pBLHICYj.js.map
+//# sourceMappingURL=trayApp-CCN3zyo7.js.map

package/dist/trayApp-HLGzyGrP.js

@@ -0,0 +1,5 @@
+import "./versionChecker-bcw3nJay.js";
+import "./rustBinary-DWzZGM4A.js";
+import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-CCN3zyo7.js";
+
+export { cmdTray };

package/dist/{ts-DLM7M0W3.js → ts-Ct3yd-1m.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-BlwkAisS.js";
+import { r as getInstalledPackage } from "./versionChecker-bcw3nJay.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-BQRW614S.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-DBoONoM-.js";
@@ -2155,4 +2155,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, permissionBadge as c, answerAsk as i, AgentContext as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t, CLAUDE_SESSION_PIN_ENV as u };
-//# sourceMappingURL=ts-DLM7M0W3.js.map
+//# sourceMappingURL=ts-Ct3yd-1m.js.map

package/dist/{versionChecker-BlwkAisS.js → versionChecker-bcw3nJay.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.256.1";
+var version = "1.257.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-BlwkAisS.js.map
+//# sourceMappingURL=versionChecker-bcw3nJay.js.map

package/dist/{webrtcRemote-BXmkHX-i.js → webrtcRemote-C3OlHYSt.js}

@@ -256,4 +256,4 @@ async function startWebrtcBridge(link) {
 
 //#endregion
 export { startWebrtcBridge };
-//# sourceMappingURL=webrtcRemote-BXmkHX-i.js.map
+//# sourceMappingURL=webrtcRemote-C3OlHYSt.js.map

package/dist/{widget-C2_s8SHw.js → widget-B7NK6egy.js}

@@ -28,7 +28,7 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-JNGfYmLT.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DQPkrKcN.js");
 	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
@@ -186,7 +186,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-JNGfYmLT.js");
+	const { mintScopedTermToken } = await import("./serve-DQPkrKcN.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -202,4 +202,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-C2_s8SHw.js.map
+//# sourceMappingURL=widget-B7NK6egy.js.map

package/dist/ws-BkOJQeeZ.js

@@ -0,0 +1,11 @@
+import "./logger-CDIsZ-Pp.js";
+import "./globalPidIndex-Dq4KY2IV.js";
+import "./messageLog-BYFwioFY.js";
+import "./e2e-CUMZC53I.js";
+import "./configShared-DtHMBCl7.js";
+import "./subcommands-B04Jcb4a.js";
+import "./webrtcLink-CS4D-3G1.js";
+import "./remotes-Dy4Rg8Yp.js";
+import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-BlISbGY8.js";
+
+export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };

package/dist/{ws-833ph696.js → ws-BlISbGY8.js}

@@ -1,11 +1,4 @@
-import "./logger-CDIsZ-Pp.js";
-import "./globalPidIndex-Dq4KY2IV.js";
-import "./messageLog-BYFwioFY.js";
-import "./e2e-CUMZC53I.js";
-import "./configShared-DtHMBCl7.js";
-import { C as listRecords } from "./subcommands-CAYOfibe.js";
-import "./webrtcLink-CS4D-3G1.js";
-import "./remotes-BwytVgTX.js";
+import { C as listRecords } from "./subcommands-B04Jcb4a.js";
 import { a as getProvisionRoot } from "./workspaceConfig-Bxuk_MOq.js";
 import { existsSync } from "fs";
 import { lstat, opendir } from "fs/promises";
@@ -35,11 +28,25 @@ import path from "path";
 * fork path, it is imported lazily so `ay ls` etc. never pay for it and a
 * missing install produces a clear actionable error instead of a module crash.
 */
-async function loadProvision() {
+/**
+* Provisioning implementation, resolved at call time. @snomiao/ws-provision is
+* the canonical zero-dependency package (a regular dependency, so npm installs
+* of agent-yes always have it); codehost/provision — which re-exports the same
+* module — stays as a fallback for bun-linked dev setups pinned to a codehost
+* checkout. Shared by `ay ws` and serve's fork/spawn-from provisioning.
+*/
+async function importProvisionModule() {
 	try {
+		return await import("@snomiao/ws-provision");
+	} catch {
 		return await import("codehost/provision");
+	}
+}
+async function loadProvision() {
+	try {
+		return await importProvisionModule();
 	} catch (e) {
-		throw new Error(`'ay ws' needs the 'codehost' package (codehost/provision) — install it (npm i -g codehost) or 'bun link' it for local dev: ${e.message}`);
+		throw new Error(`'ay ws' needs a provision implementation — '@snomiao/ws-provision' (bundled as a dependency) or 'codehost/provision' (bun-linked dev): ${e.message}`);
 	}
 }
 const WS_JSON_SCHEMA = "ay-ws/v1";
@@ -418,5 +425,5 @@ async function cmdWs(args) {
 }
 
 //#endregion
-export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, workspaceStatus };
-//# sourceMappingURL=ws-833ph696.js.map
+export { isPathInside as a, walkWorkspaces as c, importProvisionModule as i, workspaceStatus as l, cmdWs as n, loadProvision as o, collectWorkspaces as r, resolveOperand as s, WS_JSON_SCHEMA as t };
+//# sourceMappingURL=ws-BlISbGY8.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.256.1",
+  "version": "1.257.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",
@@ -135,6 +135,7 @@
   },
   "dependencies": {
     "@snomiao/bun-pty": "^0.3.4",
+    "@snomiao/ws-provision": "^0.1.0",
     "@xterm/headless": "^6.0.0",
     "bun-pty": "^0.4.8",
     "execa": "^9.6.1",

package/ts/serve.ts

@@ -38,6 +38,7 @@ import {
   type CommonOpts,
 } from "./subcommands.ts";
 import { answerAsk, listAsks } from "./askApi.ts";
+import { importProvisionModule } from "./ws.ts";
 import { permissionBadge } from "./agentPermissions.ts";
 import { TYPING_BADGE } from "./badges.ts";
 import { isTermToken, mintTermToken, verifyTermToken, type TermScope } from "./termToken.ts";
@@ -3907,11 +3908,11 @@ export async function cmdServe(rest: string[]): Promise<number> {
           }>;
         };
         try {
-          prov = (await import("codehost/provision")) as typeof prov;
+          prov = (await importProvisionModule()) as typeof prov;
         } catch (e) {
           return new Response(
-            `fork needs the 'codehost' package (codehost/provision) — install it ` +
-              `(npm i -g codehost) or 'bun link' it for local dev: ${(e as Error).message}`,
+            `fork needs a provision implementation — '@snomiao/ws-provision' (bundled ` +
+              `dependency) or a bun-linked 'codehost': ${(e as Error).message}`,
             { status: 501 },
           );
         }
@@ -3979,11 +3980,11 @@ export async function cmdServe(rest: string[]): Promise<number> {
           ) => Promise<{ ok: boolean; folder: string; action: string; error?: string }>;
         };
         try {
-          prov = (await import("codehost/provision")) as typeof prov;
+          prov = (await importProvisionModule()) as typeof prov;
         } catch (e) {
           return new Response(
-            `spawn-from needs the 'codehost' package (codehost/provision) — install it ` +
-              `(npm i -g codehost) or 'bun link' it for local dev: ${(e as Error).message}`,
+            `spawn-from needs a provision implementation — '@snomiao/ws-provision' (bundled ` +
+              `dependency) or a bun-linked 'codehost': ${(e as Error).message}`,
             { status: 501 },
           );
         }

package/ts/ws.spec.ts

@@ -27,7 +27,10 @@ const prov = vi.hoisted(() => ({
   gitAuthHint: vi.fn(),
 }));
 
-vi.mock("codehost/provision", () => ({
+// loadProvision prefers @snomiao/ws-provision (a real installed dependency) and
+// falls back to codehost/provision, so BOTH must be mocked to the same shims —
+// otherwise the preferred path would bypass the mocks and hit real git.
+const provMockFactory = vi.hoisted(() => () => ({
   resolveWsRoot: (w?: string) => w ?? prov.wsRoot,
   folderFor: (spec: { owner: string; repo: string; branch: string }, wsRoot?: string) =>
     path.join(wsRoot ?? prov.wsRoot, spec.owner, spec.repo, "tree", spec.branch),
@@ -38,6 +41,8 @@ vi.mock("codehost/provision", () => ({
   forkWorktree: (opts: unknown) => prov.forkWorktree(opts),
   gitAuthHint: (host?: string) => prov.gitAuthHint(host),
 }));
+vi.mock("@snomiao/ws-provision", provMockFactory);
+vi.mock("codehost/provision", provMockFactory);
 
 describe("isPathInside", () => {
   it("contains itself and descendants", () => {

package/ts/ws.ts

@@ -70,13 +70,28 @@ interface Provision {
   gitAuthHint(host?: string): string[];
 }
 
+/**
+ * Provisioning implementation, resolved at call time. @snomiao/ws-provision is
+ * the canonical zero-dependency package (a regular dependency, so npm installs
+ * of agent-yes always have it); codehost/provision — which re-exports the same
+ * module — stays as a fallback for bun-linked dev setups pinned to a codehost
+ * checkout. Shared by `ay ws` and serve's fork/spawn-from provisioning.
+ */
+export async function importProvisionModule(): Promise<unknown> {
+  try {
+    return await import("@snomiao/ws-provision");
+  } catch {
+    return await import("codehost/provision"); // let THIS failure surface to the caller
+  }
+}
+
 export async function loadProvision(): Promise<Provision> {
   try {
-    return (await import("codehost/provision")) as unknown as Provision;
+    return (await importProvisionModule()) as Provision;
   } catch (e) {
     throw new Error(
-      `'ay ws' needs the 'codehost' package (codehost/provision) — install it ` +
-        `(npm i -g codehost) or 'bun link' it for local dev: ${(e as Error).message}`,
+      `'ay ws' needs a provision implementation — '@snomiao/ws-provision' (bundled ` +
+        `as a dependency) or 'codehost/provision' (bun-linked dev): ${(e as Error).message}`,
     );
   }
 }

package/dist/trayApp-DmaV4IyV.js

@@ -1,5 +0,0 @@
-import "./versionChecker-BlwkAisS.js";
-import "./rustBinary-Cd9DngDh.js";
-import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-pBLHICYj.js";
-
-export { cmdTray };