agent-yes 1.262.0 → 1.263.0

package/dist/{subcommands-Zk3brdKt.js → subcommands-Bo1MSwuC.js}

@@ -6,6 +6,7 @@ import { a as recordOutbox, i as recordMessage, n as readMailbox, t as partyMatc
 import { t as loadSharedCliDefaults } from "./configShared-DtHMBCl7.js";
 import { n as isWebrtcSpec } from "./webrtcLink-CS4D-3G1.js";
 import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-Cn-wszbK.js";
+import { spawn } from "child_process";
 import ms from "ms";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from "fs/promises";
@@ -13,6 +14,7 @@ import { homedir } from "os";
 import path from "path";
 import { randomUUID } from "node:crypto";
 import os$1 from "node:os";
+import { fileURLToPath } from "node:url";
 import { randomBytes as randomBytes$1 } from "crypto";
 
 //#region ts/agentTree.ts
@@ -1318,6 +1320,8 @@ const SUBCOMMANDS = new Set([
 	"expose",
 	"callback",
 	"reap",
+	"deepseek",
+	"ds",
 	"help"
 ]);
 const MANAGER_SUBCOMMANDS = new Set(["setup", "ws"]);
@@ -1359,6 +1363,28 @@ function isUnknownManagerToken(rawArg, managerCommands, supportedClis) {
 	return !supportedClis.includes(rawArg);
 }
 /**
+* Write to stdout and wait until it has actually been handed off.
+*
+* The CLI ends with `process.exit()`, which DISCARDS bytes still sitting in the
+* pipe buffer. Writing to a file completes synchronously so this never showed
+* there, but any consumer that PIPES us silently lost everything past 64KiB.
+* Measured on `ay ls --json` with a large fleet (symval CTO, 2026-08-05):
+*
+*     ay ls --json > file    118055 bytes, valid JSON
+*     ay ls --json | consumer 65536 bytes, cut mid-multibyte — will not parse
+*
+* The truncation is invisible to the caller: it looks exactly like a small
+* fleet, and an orchestrator that parses this reported 27 of 71 agents.
+*
+* Only capturing the REAL write's completion works. Probing afterwards with an
+* empty `write("")` — by return value, by drain event, or by callback — reports
+* ready while the big write is still queued (all three verified failing), so do
+* not "simplify" this into a flush helper at the exit site.
+*/
+async function writeStdoutFlushed(text) {
+	if (process.stdout.write(text) === false) await Promise.race([new Promise((resolve) => process.stdout.once("drain", () => resolve())), new Promise((resolve) => setTimeout(resolve, 2e3))]);
+}
+/**
 * Top-level entry. Returns the desired process exit code, or null if argv
 * is not a subcommand invocation.
 */
@@ -1402,35 +1428,35 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-BVWhnQUf.js");
+				const { cmdTerm } = await import("./terminal-BMQWojIp.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-CJyd9t8k.js");
+				const { cmdWidget } = await import("./widget-BVss0Z9Y.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-CJyd9t8k.js");
+				const { cmdMint } = await import("./widget-BVss0Z9Y.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-DhtgWGZB.js");
+				const { cmdServe } = await import("./serve-BEdLsSpv.js");
 				return cmdServe(rest);
 			}
 			case "tray": {
-				const { cmdTray } = await import("./trayApp-C6U7Hghi.js");
+				const { cmdTray } = await import("./trayApp-DrdktFnW.js");
 				return cmdTray(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-BlJRaODn.js");
+				const { cmdSetup } = await import("./setup-DFRvZ_ku.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-mG4yeZu8.js");
+				const { cmdWs } = await import("./ws-DMudFezi.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-ChAdx2h6.js");
+				const { cmdSchedule } = await import("./schedule-BSEIVKQ0.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1442,12 +1468,14 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-lqCCgSy1.js");
+				const { cmdCallback } = await import("./callback-B0PQUZcK.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
 				await (await import("./reaper-B231i49s.js")).sweep();
 				return 0;
+			case "deepseek":
+			case "ds": return cmdDeepseek(rest);
 			case "help": return cmdHelp(managerCommands);
 			default: return null;
 		}
@@ -1458,6 +1486,37 @@ async function runSubcommand(argv) {
 	}
 }
 /**
+* `ay deepseek [-- <args>…]` / `ay ds …`: run the local DeepSeek adapter that
+* bridges Codex's Responses API to DeepSeek's chat completions, then spawn
+* `codex` pointed at it. The adapter script lives in this package's
+* `scripts/deepseek-codex.ts` and is Bun-only (Bun.serve / Bun.spawn), so it is
+* re-exec'd via the same bun runtime that's running us — never imported into
+* this process. Extra args are forwarded verbatim to `codex`.
+*/
+function cmdDeepseek(rest) {
+	const root = path.join(path.dirname(fileURLToPath(import.meta.url)), "..");
+	const script = path.join(root, "scripts", "deepseek-codex.ts");
+	const child = spawn(process.execPath.split(/[/\\]/).at(-1)?.startsWith("bun") ? process.execPath : "bun", [script, ...rest], {
+		cwd: process.cwd(),
+		env: {
+			...process.env,
+			AGENT_YES_BIN: process.argv[1]
+		},
+		stdio: "inherit"
+	});
+	return new Promise((resolve) => {
+		child.on("error", (err) => {
+			process.stderr.write(`ay deepseek: failed to start: ${err.message}\n`);
+			resolve(1);
+		});
+		child.on("exit", (code, signal) => {
+			if (signal) resolve(128 + (signal === "SIGINT" ? 2 : signal === "SIGTERM" ? 15 : 1));
+			else resolve(code ?? 1);
+		});
+		for (const signal of ["SIGINT", "SIGTERM"]) process.on(signal, () => child.kill(signal));
+	});
+}
+/**
 * The banner shown by `ay help` / `ay -h` when this process is itself running
 * inside an agent (`AGENT_YES_PID` set — see resolveSender). Answers the three
 * things a nested agent actually needs: who am I, who spawned me, and how do I
@@ -1480,7 +1539,7 @@ async function cmdHelp(managerCommands = true) {
 	const wsLines = managerCommands ? "  ay ws ls [--status]                 list <owner>/<repo>/tree/<branch> workspaces\n  ay ws new <owner>/<repo>[@branch]   clone/refresh a workspace (ay ws help for more)\n" : ``;
 	const self = process.env.AGENT_YES_PID ? await resolveSender() : null;
 	const agentSection = self ? await buildAgentContextSection(self) : "";
-	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay send <keyword> <msg>             send a message (keyword '.' = agent in this cwd)\n  ay msgs [keyword] [--in|--out]      inter-agent message log (sent + received)\n  ay role [name] | ay role <kw> <name>  lane/role name shown in the send envelope\n  ay ch mk|join|send|read|tail <topic>  local-first E2E channels: AI ↔ humans on a topic (ay ch help)\n  ay term embed <pid>                 <script> to embed a live read-only agent terminal in a page (ay term help)\n  ay widget ls | read selection|dom   read an opted-in page widget's context (selection/DOM) (ay widget help)\n  ay mint <target> --caps ...         mint a scoped, short-TTL capability token (embeddable in a page)\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay whoami [--json]                  (inside an agent) your own registry identity + reply address\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n" + wsLines + "\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay expose <port>                    share localhost:<port> at https://<id>.agent-yes.com (private link)\n  ay callback --expires 7d           mint an embeddable message-me widget for one agent\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent:\n  ay [claude|codex|gemini|...] [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
+	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay send <keyword> <msg>             send a message (keyword '.' = agent in this cwd)\n  ay msgs [keyword] [--in|--out]      inter-agent message log (sent + received)\n  ay role [name] | ay role <kw> <name>  lane/role name shown in the send envelope\n  ay ch mk|join|send|read|tail <topic>  local-first E2E channels: AI ↔ humans on a topic (ay ch help)\n  ay term embed <pid>                 <script> to embed a live read-only agent terminal in a page (ay term help)\n  ay widget ls | read selection|dom   read an opted-in page widget's context (selection/DOM) (ay widget help)\n  ay mint <target> --caps ...         mint a scoped, short-TTL capability token (embeddable in a page)\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay whoami [--json]                  (inside an agent) your own registry identity + reply address\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n  ay deepseek|ds [-- <codex args>]    run codex via the local DeepSeek adapter (DEEPSEEK_API_KEY)\n" + wsLines + "\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay expose <port>                    share localhost:<port> at https://<id>.agent-yes.com (private link)\n  ay callback --expires 7d           mint an embeddable message-me widget for one agent\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent:\n  ay [claude|codex|gemini|...] [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
 	return 0;
 }
 function matchKeyword(record, keyword) {
@@ -2263,7 +2322,7 @@ async function cmdLs(rest) {
 			...r,
 			...await deriveLiveState(r)
 		})));
-		process.stdout.write(JSON.stringify(enriched, null, 2) + "\n");
+		await writeStdoutFlushed(JSON.stringify(enriched, null, 2) + "\n");
 		return 0;
 	}
 	if (records.length === 0) {
@@ -3256,7 +3315,7 @@ async function cmdSend(rest) {
 		default: false,
 		alias: "no-wrap",
 		description: "Send the body verbatim: omit the <ay-msg …> attribution wrapper that agent senders add by default (also: AGENT_YES_SEND_RAW=1)"
-	}).help(false).version(false).exitProcess(false).parseAsync();
+	}).help(false).version(false).strictOptions().exitProcess(false).parseAsync();
 	const opts = {
 		all: argv.all,
 		active: false,
@@ -3267,6 +3326,7 @@ async function cmdSend(rest) {
 	const keyword = argv._[0] !== void 0 ? String(argv._[0]) : void 0;
 	const rawMessage = argv._.slice(1).map(String).join(" ");
 	if (!keyword) throw new Error("usage: ay send <keyword> <msg|-> [--code=enter|esc|ctrl-c|ctrl-y|tab|none]");
+	if (rawMessage !== "-" && rawMessage.trim() === "") throw new Error("ay send: refusing to send an empty message. Pass the text as a single argument, or use `-` to read the body from stdin (e.g. `ay send <keyword> - < file.txt`).");
 	const codeName = argv.code.toLowerCase();
 	{
 		const remote = await resolveRemoteSpec(keyword);
@@ -3282,6 +3342,7 @@ async function cmdSend(rest) {
 		const chunks = [];
 		for await (const chunk of process.stdin) chunks.push(chunk);
 		body = Buffer.concat(chunks).toString("utf-8").trimEnd();
+		if (body.trim() === "") throw new Error("ay send: refusing to send an empty message (stdin was empty).");
 	} else body = rawMessage;
 	const force = Boolean(argv.force) || process.env.AGENT_YES_FORCE_SEND === "1";
 	const raw = Boolean(argv.raw) || process.env.AGENT_YES_SEND_RAW === "1";
@@ -3956,7 +4017,7 @@ async function cmdAttach(rest) {
 	const winsizeDir = path.join(ayHome, "winsize");
 	await mkdir(winsizeDir, { recursive: true });
 	const winsizePath = path.join(winsizeDir, String(record.pid));
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DhtgWGZB.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-BEdLsSpv.js");
 	const daemonBase = await resolveDaemonHttpBase().catch(() => null);
 	const daemonToken = daemonBase ? await loadTokenReadOnly().catch(() => null) ?? "" : "";
 	const capViewer = `attach:${process.pid}`;
@@ -4666,7 +4727,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-P6Q7Eo_B.js");
+		const { ensureDaemon } = await import("./notifyDaemon-BskLhHdg.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4740,7 +4801,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-P6Q7Eo_B.js");
+	const daemon = await import("./notifyDaemon-BskLhHdg.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4766,5 +4827,5 @@ async function cmdNotifyd(rest) {
 }
 
 //#endregion
-export { liveWatchers as $, readPtysize as A, runSubcommand as B, lastStdinAt as C, readAgentPtysize as D, menuSelectKeys as E, renderRawLogLines as F, waitForLogQuiet as G, stdinActivityPath as H, resolveOne as I, appendEvent as J, writeKeysPaced as K, resolveReadWindow as L, recentReadEdges as M, renderLogTailLines as N, readLogForRender as O, renderRawLog as P, listInboxParents as Q, resolveResumeArgs as R, isUserTyping as S, matchKeyword as T, stopTipForCli as U, snapshotStatus as V, submitAndConfirm as W, hostId as X, gcInboxes as Y, isTransientLockMkdirError as Z, isExitRequest as _, backoffWhileTyping as a, TYPING_BADGE as at, isSubcommand as b, cursorAbs as c, extractBadges as d, readInbox as et, extractMenu as f, isAgentStuck as g, finalizedLines as h, TYPING_WINDOW_MS as i, notifyDir as it, recentMessageEdges as j, readNotes as k, deriveLiveState as l, extractTaskCounts as m, MAX_RENDER_BYTES as n, daemonLockDir as nt, cmdHelp as o, extractNeedsInput as p, writeToIpc as q, READ_PAGE_DEFAULT as r, daemonLockOwnerPath as rt, controlCodeFromName as s, GRACEFUL_EXIT_COMMANDS as t, shouldStealLock as tt, deriveLiveStatus as u, isPidAlive as v, listRecords as w, isUnknownManagerToken as x, isSlashCommand as y, restartHintLines as z };
-//# sourceMappingURL=subcommands-Zk3brdKt.js.map
+export { listInboxParents as $, readNotes as A, restartHintLines as B, isUserTyping as C, menuSelectKeys as D, matchKeyword as E, renderRawLog as F, submitAndConfirm as G, snapshotStatus as H, renderRawLogLines as I, writeToIpc as J, waitForLogQuiet as K, resolveOne as L, recentMessageEdges as M, recentReadEdges as N, readAgentPtysize as O, renderLogTailLines as P, isTransientLockMkdirError as Q, resolveReadWindow as R, isUnknownManagerToken as S, listRecords as T, stdinActivityPath as U, runSubcommand as V, stopTipForCli as W, gcInboxes as X, appendEvent as Y, hostId as Z, isAgentStuck as _, backoffWhileTyping as a, notifyDir as at, isSlashCommand as b, controlCodeFromName as c, deriveLiveStatus as d, liveWatchers as et, extractBadges as f, finalizedLines as g, extractTaskCounts as h, TYPING_WINDOW_MS as i, daemonLockOwnerPath as it, readPtysize as j, readLogForRender as k, cursorAbs as l, extractNeedsInput as m, MAX_RENDER_BYTES as n, shouldStealLock as nt, cmdDeepseek as o, TYPING_BADGE as ot, extractMenu as p, writeKeysPaced as q, READ_PAGE_DEFAULT as r, daemonLockDir as rt, cmdHelp as s, GRACEFUL_EXIT_COMMANDS as t, readInbox as tt, deriveLiveState as u, isExitRequest as v, lastStdinAt as w, isSubcommand as x, isPidAlive as y, resolveResumeArgs as z };
+//# sourceMappingURL=subcommands-Bo1MSwuC.js.map

package/dist/{terminal-BVWhnQUf.js → terminal-BMQWojIp.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-DhtgWGZB.js");
+	const { mintScopedTermToken } = await import("./serve-BEdLsSpv.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-BVWhnQUf.js.map
+//# sourceMappingURL=terminal-BMQWojIp.js.map

package/dist/{trayApp-DtThjl0_.js → trayApp-CjB5QhdV.js}

@@ -1,4 +1,4 @@
-import { n as findTrayLauncher } from "./rustBinary-_qRGhAa5.js";
+import { n as findTrayLauncher } from "./rustBinary-Borvwmya.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { existsSync } from "node:fs";
 import path from "node:path";
@@ -97,4 +97,4 @@ async function cmdTray(args) {
 
 //#endregion
 export { trayHiddenMarker as a, launchTray as i, hasDesktop as n, isTrayHidden as r, cmdTray as t };
-//# sourceMappingURL=trayApp-DtThjl0_.js.map
+//# sourceMappingURL=trayApp-CjB5QhdV.js.map

package/dist/trayApp-DrdktFnW.js

@@ -0,0 +1,5 @@
+import "./versionChecker-BTLZ3PAb.js";
+import "./rustBinary-Borvwmya.js";
+import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-CjB5QhdV.js";
+
+export { cmdTray };

package/dist/{ts-BqaOPFCQ.js → ts-BSHR_dga.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-D-WLKAN6.js";
+import { r as getInstalledPackage } from "./versionChecker-BTLZ3PAb.js";
 import { t as agentYesHome } from "./agentYesHome-CtmsY6I-.js";
 import { d as openStore, p as LIFECYCLES, x as removeControlCharacters } from "./todoAutomation-BQRW614S.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-DBoONoM-.js";
@@ -2181,4 +2181,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, permissionBadge as c, answerAsk as i, AgentContext as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t, CLAUDE_SESSION_PIN_ENV as u };
-//# sourceMappingURL=ts-BqaOPFCQ.js.map
+//# sourceMappingURL=ts-BSHR_dga.js.map

package/dist/{versionChecker-D-WLKAN6.js → versionChecker-BTLZ3PAb.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.262.0";
+var version = "1.263.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-D-WLKAN6.js.map
+//# sourceMappingURL=versionChecker-BTLZ3PAb.js.map

package/dist/{widget-CJyd9t8k.js → widget-BVss0Z9Y.js}

@@ -28,7 +28,7 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-DhtgWGZB.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-BEdLsSpv.js");
 	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
@@ -186,7 +186,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-DhtgWGZB.js");
+	const { mintScopedTermToken } = await import("./serve-BEdLsSpv.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -202,4 +202,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-CJyd9t8k.js.map
+//# sourceMappingURL=widget-BVss0Z9Y.js.map

package/dist/{ws-mG4yeZu8.js → ws-DMudFezi.js}

@@ -3,9 +3,9 @@ import "./globalPidIndex-pwp7Vb7o.js";
 import "./messageLog-BYFwioFY.js";
 import "./e2e-CUMZC53I.js";
 import "./configShared-DtHMBCl7.js";
-import "./subcommands-Zk3brdKt.js";
+import "./subcommands-Bo1MSwuC.js";
 import "./webrtcLink-CS4D-3G1.js";
 import "./remotes-Cn-wszbK.js";
-import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-Vy3mBjNm.js";
+import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-DxNNwnrc.js";
 
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, walkWorkspaces, workspaceStatus };

package/dist/{ws-Vy3mBjNm.js → ws-DxNNwnrc.js}

@@ -1,4 +1,4 @@
-import { w as listRecords } from "./subcommands-Zk3brdKt.js";
+import { T as listRecords } from "./subcommands-Bo1MSwuC.js";
 import { a as getProvisionRoot } from "./workspaceConfig-Bxuk_MOq.js";
 import { existsSync } from "fs";
 import { lstat, opendir } from "fs/promises";
@@ -426,4 +426,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { isPathInside as a, walkWorkspaces as c, importProvisionModule as i, workspaceStatus as l, cmdWs as n, loadProvision as o, collectWorkspaces as r, resolveOperand as s, WS_JSON_SCHEMA as t };
-//# sourceMappingURL=ws-Vy3mBjNm.js.map
+//# sourceMappingURL=ws-DxNNwnrc.js.map

package/lab/ui/index.html

@@ -7982,6 +7982,7 @@ my.translate = async (text, lang) => {
         const res = await target.tx.post("/api/spawn", {
           cli: spec.cli || "claude",
           from: spec.from || undefined,
+          branch: spec.branch || undefined,
           create: spec.create || undefined,
           fork: spec.fork || undefined,
           cwd: spec.cwd || undefined,
@@ -8104,11 +8105,10 @@ my.translate = async (text, lang) => {
         $("newform").innerHTML = `<div class="lcard">
       <div class="ltitle">New agent · ${esc(sourceLabel(target) || "local")}</div>
       ${hostRow}
-      <div class="nfield"><label>Working dir</label><input id="nf-cwd" list="nf-cwd-list" value="${esc(cwd)}" placeholder="(host default — ignored when Spawn from is set)" spellcheck="false" autocapitalize="off" /><datalist id="nf-cwd-list">${cwdOptions(target ? target.id : "")}</datalist></div>
+      <div class="nfield"><label>Working dir</label><input id="nf-cwd" list="nf-cwd-list" value="${esc(cwd)}" placeholder="(host default — ignored when a Provision repo is set)" spellcheck="false" autocapitalize="off" /><datalist id="nf-cwd-list">${cwdOptions(target ? target.id : "")}</datalist></div>
       <div class="nfield"><label>CLI</label><select id="nf-cli">${cliOptions(null, preferredCli)}</select></div>
-      <div class="nfield"><label>Provision repo — optional</label><select id="nf-repo"><option value="" selected>(none — use working dir or spawn-from)</option></select></div>
+      <div class="nfield"><label>Provision repo — optional</label><input id="nf-repo" list="nf-repo-list" placeholder="owner/repo · github URL · git URL (gitlab etc.) — provisions a worktree" spellcheck="false" autocapitalize="off" /><datalist id="nf-repo-list"></datalist><div class="lhint" id="nf-repo-hint" style="display:none"></div></div>
       <div class="nfield" id="nf-branch-row" style="display:none"><label>Branch</label><input id="nf-branch" list="nf-branch-list" placeholder="(repo default) — pick one, or type a new name to create it" spellcheck="false" autocapitalize="off" /><datalist id="nf-branch-list"></datalist><div class="lhint" id="nf-branch-hint" style="display:none"></div></div>
-      <div class="nfield"><label>Spawn from — optional</label><input id="nf-from" placeholder="github URL / owner/repo@branch — provisions a worktree" spellcheck="false" autocapitalize="off" /></div>
       <div class="nfield"><label>Prompt — optional</label><textarea id="nf-prompt" rows="3" placeholder="initial message to send the agent…"></textarea></div>
       <div class="lrow">
         <button class="lfleet" id="nf-go">▷ Launch</button>
@@ -8127,13 +8127,7 @@ my.translate = async (text, lang) => {
           showHook(sources.get(ev.target.value));
           loadRepoPicker(sources.get(ev.target.value));
         });
-        $("nf-repo")?.addEventListener("change", () => {
-          const repo = $("nf-repo").value;
-          const row = $("nf-branch-row");
-          if (row) row.style.display = repo ? "" : "none";
-          if (repo) loadBranchPicker(spawnTarget($("newform").dataset.room), repo);
-          else nfRemoteBranches = null;
-        });
+        $("nf-repo")?.addEventListener("change", onRepoChange);
         $("nf-branch-row")?.addEventListener("input", (ev) => {
           if (ev.target.id === "nf-branch") updateBranchHint();
         });
@@ -8141,15 +8135,39 @@ my.translate = async (text, lang) => {
         loadRepoPicker(target);
       }
 
-      // ---- provisioning picker (repo → branch) for the New-agent form -------
-      // Data comes from the target host's /api/ws/repos and /api/ws/branches.
-      // Both are best-effort on the server (gh may be unauthenticated); here a
-      // fetch failure just leaves the pickers empty — the free-text "Spawn
-      // from" field still works.
+      // ---- provisioning picker (repo combobox → branch) for the New-agent form
+      // The repo field is a COMBOBOX: a datalist filled from the target host's
+      // /api/ws/repos (local checkouts + gh-visible repos), but free text always
+      // works — owner/repo, a full github URL (repo or /tree/<branch> URL), or
+      // any other git URL (gitlab etc. — the host raw-`git clone`s those).
+      // The listing endpoints are best-effort; a fetch failure just leaves the
+      // datalist empty and shows a short hint, manual input still provisions.
       let nfRemoteBranches = null; // Set of remote branch names for the picked repo
+
+      // What the repo field's text means. github-first: bare owner/repo IS a
+      // github repo; only scheme/git@ inputs on other hosts become raw git URLs.
+      function parseRepoInput(v) {
+        v = (v || "").trim();
+        if (!v) return null;
+        let m =
+          /^https?:\/\/github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?(?:\/tree\/([^\s?#]+))?\/?$/i.exec(
+            v,
+          );
+        if (m) return { kind: "github", owner: m[1], repo: m[2], branch: m[3] || "" };
+        m = /^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?$/i.exec(v);
+        if (m) return { kind: "github", owner: m[1], repo: m[2], branch: "" };
+        m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(v);
+        if (m && m[1] !== "." && m[1] !== "..")
+          return { kind: "github", owner: m[1], repo: m[2], branch: "" };
+        if (/^(git@[^:\s]+:|ssh:\/\/|git:\/\/|https?:\/\/)\S+$/.test(v))
+          return { kind: "git", url: v.replace(/\/+$/, "") };
+        return null;
+      }
       function loadRepoPicker(target) {
-        const selEl = $("nf-repo");
-        if (!selEl || !target?.tx?.fetchJSON) return;
+        const dl = $("nf-repo-list");
+        const hint = $("nf-repo-hint");
+        if (!dl) return;
+        if (!target?.tx?.fetchJSON) return;
         const forId = target.id;
         target.tx
           .fetchJSON("/api/ws/repos")
@@ -8157,18 +8175,49 @@ my.translate = async (text, lang) => {
             // a slow answer for a host the user switched away from must not
             // paint the new host's repo list (same guard as showHook)
             if ($("newform").dataset.room !== forId) return;
-            const cur = selEl.value;
             const repos = (d && d.repos) || [];
-            selEl.innerHTML =
-              `<option value="">(none — use working dir or spawn-from)</option>` +
-              repos
-                .map((r) => {
-                  const full = `${r.owner}/${r.repo}`;
-                  return `<option value="${esc(full)}"${full === cur ? " selected" : ""}>${esc(full)}${r.local ? "" : " (gh)"}</option>`;
-                })
-                .join("");
+            dl.innerHTML = repos
+              .map(
+                (r) =>
+                  `<option value="${esc(`${r.owner}/${r.repo}`)}">${r.local ? "provisioned" : "gh"}</option>`,
+              )
+              .join("");
+            if (hint && d && d.gh && !d.gh.ok && d.gh.error) {
+              hint.textContent = `gh listing unavailable (${d.gh.error}) — type a repo or URL`;
+              hint.style.display = "";
+            } else if (hint) hint.style.display = "none";
           })
-          .catch(() => {});
+          .catch(() => {
+            if ($("newform").dataset.room !== forId) return;
+            if (hint) {
+              hint.textContent =
+                "repo list unavailable on this host — type owner/repo or a git URL";
+              hint.style.display = "";
+            }
+          });
+      }
+      function onRepoChange() {
+        const parsed = parseRepoInput($("nf-repo")?.value || "");
+        const row = $("nf-branch-row");
+        const hint = $("nf-branch-hint");
+        nfRemoteBranches = null;
+        if (row) row.style.display = parsed ? "" : "none";
+        if (!parsed) return;
+        if (parsed.kind === "github") {
+          if (parsed.branch && $("nf-branch")) $("nf-branch").value = parsed.branch;
+          loadBranchPicker(
+            spawnTarget($("newform").dataset.room),
+            `${parsed.owner}/${parsed.repo}`,
+          );
+        } else {
+          const dl = $("nf-branch-list");
+          if (dl) dl.innerHTML = "";
+          if (hint) {
+            hint.textContent =
+              "non-GitHub git URL — the host runs a raw `git clone`; branch optional (a new name creates it)";
+            hint.style.display = "";
+          }
+        }
       }
       function loadBranchPicker(target, repo) {
         const dl = $("nf-branch-list");
@@ -8184,7 +8233,9 @@ my.translate = async (text, lang) => {
         target.tx
           .fetchJSON("/api/ws/branches?repo=" + encodeURIComponent(repo))
           .then((d) => {
-            if ($("nf-repo")?.value !== want) return; // user picked another repo meanwhile
+            // user picked another repo meanwhile (value may be a URL — normalize)
+            const cur = parseRepoInput($("nf-repo")?.value || "");
+            if (!cur || cur.kind !== "github" || `${cur.owner}/${cur.repo}` !== want) return;
             const branches = (d && d.branches) || [];
             nfRemoteBranches = new Set(branches.filter((b) => b.remote).map((b) => b.name));
             if (dl)
@@ -8258,23 +8309,37 @@ my.translate = async (text, lang) => {
         try {
           localStorage.setItem(LAST_CLI_KEY, cli);
         } catch {}
-        // The repo/branch pickers win over the free-text "Spawn from" field:
-        // picked repo [+ branch] → a `from` spec; a branch name that isn't on
-        // the remote asks the server to create it (create:true, ws new --create).
-        let from = $("nf-from")?.value.trim() || "";
+        // The repo combobox decides provisioning: a github repo [+ branch]
+        // becomes a `from` spec (a branch name that isn't on the remote asks
+        // the server to create it — create:true, ws new --create); any other
+        // git URL is sent as-is with the branch alongside (raw clone path).
+        let from = "";
+        let branch = "";
         let create = false;
-        const pickedRepo = $("nf-repo")?.value || "";
-        if (pickedRepo) {
-          const br = ($("nf-branch")?.value || "").trim();
-          from = br ? `${pickedRepo}@${br}` : pickedRepo;
+        const parsed = parseRepoInput($("nf-repo")?.value || "");
+        const br = ($("nf-branch")?.value || "").trim();
+        if (parsed && parsed.kind === "github") {
+          from = br ? `${parsed.owner}/${parsed.repo}@${br}` : `${parsed.owner}/${parsed.repo}`;
           // Unknown remote list (fetch failed) → still send create: the server
           // only uses it after the branch turns out missing, so it's harmless
           // for existing branches and saves an un-actionable 502 for new ones.
           create = !!(br && (!nfRemoteBranches || !nfRemoteBranches.has(br)));
+        } else if (parsed && parsed.kind === "git") {
+          from = parsed.url;
+          branch = br;
+          create = !!br;
+        } else if ($("nf-repo")?.value.trim()) {
+          // unparseable text must not silently fall through to a plain-cwd spawn
+          $("nf-repo").focus();
+          alert(
+            "Provision repo not recognized — use owner/repo, a github URL, or a git URL (git@… / https://…)",
+          );
+          return;
         }
         const spec = {
           cli,
           from,
+          branch,
           create,
           // a provision spec decides the cwd server-side — don't send a stale one
           cwd: from ? "" : $("nf-cwd").value.trim(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.262.0",
+  "version": "1.263.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",
@@ -108,6 +108,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "scripts": {
+    "deepseek": "bun scripts/deepseek-codex.ts",
     "build": "tsdown",
     "check:e2e": "bun scripts/check-e2e.ts",
     "cf": "bun scripts/cf.ts",