agent-yes 1.290.7 → 1.291.0

package/dist/{subcommands-D6LBtVPM.js → subcommands-yWgVRM2r.js}

@@ -1,22 +1,23 @@
 import { t as invokedCliName } from "./invokedCli-zdFbz1ST.js";
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
-import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidIndex-DoaKEUkO.js";
-import { t as PidStore } from "./pidStore-B73xnAeT.js";
-import { a as recordOutbox, i as recordMessage, n as readMailbox, o as senderLabel, t as partyMatches } from "./messageLog-CVRSTLza.js";
+import { a as readGlobalPids, s as updateGlobalPidStatus } from "./globalPidIndex-CRH9L9tn.js";
+import { t as PidStore } from "./pidStore-DXWqzTSz.js";
+import { a as recordOutbox, i as recordMessage, n as readMailbox, o as senderLabel, t as partyMatches } from "./messageLog-Brx3w6zT.js";
 import { t as loadSharedCliDefaults } from "./configShared-DKTgiz7K.js";
 import { n as localHost, r as localUser, t as formatIdentity } from "./identity-CKRuYUFi.js";
 import { n as isWorkingScreen, r as parseMenu, t as classifyNeedsInput } from "./needsInput-BHopZGM8.js";
 import { S as postmortemStartedAt, _ as filterSinceSeq, a as getCursor, b as maxSeq, f as readInbox, o as heartbeatWatcher, p as setCursor, r as clearWatcher, s as hostId, v as filterSinceTs, y as filterUnread } from "./notifyStore-2SWKGwZI.js";
-import { n as isWebrtcSpec } from "./webrtcLink-DLaJfTcB.js";
-import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-DTXPW8U1.js";
+import { n as isWebrtcSpec } from "./webrtcLink-CnQf9pmu.js";
+import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-tmKwrr20.js";
 import { execFile } from "child_process";
 import ms from "ms";
 import yargs from "yargs";
-import { closeSync, constants, openSync } from "fs";
-import { appendFile, mkdir, open, readFile, stat, writeFile } from "fs/promises";
+import { closeSync, constants, openSync, realpathSync } from "fs";
+import { appendFile, mkdir, open, readFile, rename, stat, writeFile } from "fs/promises";
 import { homedir } from "os";
 import path from "path";
 import { lock } from "proper-lockfile";
+import { execFileSync as execFileSync$1 } from "node:child_process";
 import { randomBytes } from "crypto";
 import { promisify } from "util";
 
@@ -606,11 +607,19 @@ async function findAgentAncestor(pid, isAgent, opts) {
 	return null;
 }
 /**
-* The process table, read once, or null when it cannot be read.
+* Whether the process holding a pid is still the agent that registered it.
 *
-* Exposed so a caller can do the ancestry walk AND the pid-reuse age check off
-* a single `ps`, instead of paying for the spawn twice.
+* Three-way on purpose, and the third value is the point. "Cannot establish"
+* is not "established that it is not ours": win32 has no process table reader
+* here at all, so folding unknown into reused would not guard a destructive
+* action on that platform — it would delete the action from it, permanently,
+* to protect a case that has never occurred. Callers refuse on evidence
+* ("reused") and keep their prior behaviour on "unknown".
 */
+function pidOwnershipVerdict(ageSecs, startedAt, now = Date.now(), toleranceSecs = 60) {
+	if (ageSecs === void 0 || startedAt === void 0) return "unknown";
+	return ageMatchesRegistration(ageSecs, startedAt, now, toleranceSecs) ? "ours" : "reused";
+}
 async function readAncestryTable(read = readProcessTable) {
 	try {
 		return await read();
@@ -619,6 +628,124 @@ async function readAncestryTable(read = readProcessTable) {
 	}
 }
 
+//#endregion
+//#region ts/remoteHealth.ts
+/**
+* Backoff for remotes that are not answering.
+*
+* `ay ls` gathers every configured remote on every invocation. A host that has
+* gone away costs a full `CONNECT_TIMEOUT_MS` (25s for a WebRTC spec) and
+* returns nothing, and `Promise.allSettled` waits for all of them — so two dead
+* entries in `remotes.yaml` made every `ay ls` on this fleet take 27s instead of
+* 5s. Measured, then confirmed by removing only those two from a COPY of the
+* config: 27.40s → 5.49s.
+*
+* Deleting the remote is the wrong remedy: those machines can come back, and a
+* config someone must REMEMBER to re-add is a worse failure than a slow list.
+* So the entry stays, and we stop paying for it every time.
+*
+* WHY EXPONENTIAL AND NOT φ: the operator's φ-backoff rule (golden ratio, no
+* 2x) is a symval/symval convention — its AGENTS.md, its helpers. agent-yes is a
+* general tool in snomiao/ and that rule does not reach it. This repo already
+* has one backoff shape, `ts/autoRetry.ts` (base × 2ⁿ, capped, mirrored in
+* rs/src/context.rs), and one repo with two backoff shapes is its own defect.
+* So this mirrors autoRetry deliberately rather than importing a foreign
+* convention or inventing a third.
+*/
+/** First skip window after a host fails. Short: a blip should barely register. */
+const REMOTE_BACKOFF_BASE_MS = 6e4;
+/** Cap, mirroring autoRetry's shape: 1m, 2m, 4m, … 32m, then hold. */
+const REMOTE_BACKOFF_MAX_MS = 32 * 6e4;
+/**
+* How long to skip a host after `streak` consecutive failures — doubling, then
+* capped, exactly as `autoRetryBackoffMs` does.
+*/
+function remoteBackoffMs(streak) {
+	if (streak <= 0) return 0;
+	const shift = Math.min(streak - 1, 20);
+	return Math.min(REMOTE_BACKOFF_BASE_MS * 2 ** shift, REMOTE_BACKOFF_MAX_MS);
+}
+/**
+* Whether a host should be SKIPPED right now.
+*
+* Fails OPEN in every ambiguous case — no record, a zero/negative streak, a
+* clock that has gone backwards. The cost of wrongly skipping is an agent that
+* silently vanishes from `ay ls`; the cost of wrongly probing is one slow list.
+* Those are not symmetric, so the tie goes to probing.
+*/
+function shouldSkipRemote(health, now) {
+	if (!health || health.streak <= 0) return false;
+	const elapsed = now - health.lastFailedAt;
+	if (elapsed < 0) return false;
+	return elapsed < remoteBackoffMs(health.streak);
+}
+/** Record an outcome. Success clears the streak entirely; failure extends it. */
+function noteRemoteResult(health, ok, now) {
+	if (ok) return {
+		streak: 0,
+		lastFailedAt: 0
+	};
+	return {
+		streak: (health?.streak ?? 0) + 1,
+		lastFailedAt: now
+	};
+}
+/**
+* Health lives beside `remotes.yaml` in the state dir, NOT inside it: that file
+* is the operator's config and this is derived, disposable data. Deleting it
+* costs one slow `ay ls` and nothing else.
+*/
+function healthPath() {
+	const dir = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
+	return path.join(dir, "remote-health.json");
+}
+/** Read the per-alias health map. Any error yields {} — probe rather than skip. */
+async function readRemoteHealth() {
+	try {
+		const raw = await readFile(healthPath(), "utf-8");
+		const parsed = JSON.parse(raw);
+		if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
+		const out = {};
+		for (const [alias, v] of Object.entries(parsed)) {
+			if (!v || typeof v !== "object") continue;
+			const { streak, lastFailedAt } = v;
+			if (typeof streak !== "number" || !Number.isFinite(streak)) continue;
+			if (typeof lastFailedAt !== "number" || !Number.isFinite(lastFailedAt)) continue;
+			out[alias] = {
+				streak,
+				lastFailedAt
+			};
+		}
+		return out;
+	} catch {
+		return {};
+	}
+}
+/**
+* Best-effort write. A health file we cannot persist must never break `ay ls`.
+*
+* Written to a temp file and renamed, so a concurrent reader sees either the old
+* file or the new one and never a truncated one. Two `ay ls` processes finishing
+* together still last-writer-wins — that is acceptable here because the loser's
+* data is one probe's worth of a self-correcting counter, and because reading a
+* torn file already fails open to "probe".
+*/
+async function writeRemoteHealth(health) {
+	const dest = healthPath();
+	await mkdir(path.dirname(dest), { recursive: true });
+	const tmp = `${dest}.${process.pid}.tmp`;
+	await writeFile(tmp, JSON.stringify(health, null, 2));
+	await rename(tmp, dest);
+}
+/**
+* Drop entries for aliases that are no longer configured, so the file cannot
+* grow without bound as remotes come and go. Called with the live alias set.
+*/
+function pruneRemoteHealth(health, aliases) {
+	const live = new Set(aliases);
+	return Object.fromEntries(Object.entries(health).filter(([alias]) => live.has(alias)));
+}
+
 //#endregion
 //#region ts/ipcLock.ts
 /**
@@ -904,6 +1031,41 @@ function observedSender() {
 		pid: process.pid
 	};
 }
+/**
+* The repository a directory belongs to, as git itself defines it: the common
+* dir, which every linked worktree of one repository shares and no separate
+* clone does. Null when the path is not in a repository or git cannot answer.
+*
+* Synchronous and cached: it is consulted at most twice per send, and only on
+* the path where the cheaper directory check already failed.
+*/
+const _commonDirCache = /* @__PURE__ */ new Map();
+function gitCommonDir(dir) {
+	const hit = _commonDirCache.get(dir);
+	if (hit !== void 0) return hit;
+	let out = null;
+	try {
+		out = execFileSync$1("git", [
+			"-C",
+			dir,
+			"rev-parse",
+			"--path-format=absolute",
+			"--git-common-dir"
+		], {
+			encoding: "utf8",
+			timeout: 5e3,
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			]
+		}).trim().replace(/\/+$/, "") || null;
+	} catch {
+		out = null;
+	}
+	_commonDirCache.set(dir, out);
+	return out;
+}
 async function resolveSender() {
 	return (await resolveSenderVia()).agent;
 }
@@ -949,10 +1111,37 @@ async function computeSenderVia() {
 		return ageMatchesRegistration(table?.get(pid)?.ageSecs, rec.started_at) ? rec : null;
 	};
 	const inherited = table ? await findAgentAncestor(process.pid, isLiveAgent, { readTable: async () => table }) : null;
-	if (declared) return {
-		agent: declared,
-		via: inherited?.pid === declared.pid ? "env" : "env-uncorroborated"
-	};
+	if (declared) {
+		if (inherited?.pid === declared.pid) return {
+			agent: declared,
+			via: "env"
+		};
+		const real = (p2) => {
+			try {
+				return realpathSync(p2).replace(/\/+$/, "");
+			} catch {
+				return p2.replace(/\/+$/, "");
+			}
+		};
+		const here = real(process.cwd());
+		const claimedRoot = declared.cwd ? real(declared.cwd) : "";
+		const insideClaimedTree = Boolean(claimedRoot) && (here === claimedRoot || here.startsWith(claimedRoot + path.sep));
+		const sameRepo = () => {
+			if (!claimedRoot) return false;
+			const a = gitCommonDir(here);
+			const b = gitCommonDir(claimedRoot);
+			if (a === null || b === null) return false;
+			return a === b || a.startsWith(b + path.sep) || b.startsWith(a + path.sep);
+		};
+		if (!insideClaimedTree && !sameRepo()) return {
+			agent: declared,
+			via: "env-uncorroborated"
+		};
+		return {
+			agent: declared,
+			via: "env-unverified"
+		};
+	}
 	if (inherited) return {
 		agent: inherited,
 		via: "ancestry"
@@ -1226,6 +1415,7 @@ function envelopeAttribution(via) {
 	switch (via) {
 		case "ancestry": return " via process-tree";
 		case "env-uncorroborated": return " UNCORROBORATED-SENDER";
+		case "env-unverified": return "";
 		default: return "";
 	}
 }
@@ -1356,7 +1546,7 @@ async function runSubcommand(argv) {
 		switch (sub) {
 			case "ls":
 			case "list": return await cmdLs(rest);
-			case "ps": return await (await import("./cmdPs-BAaLB4Pz.js")).cmdPs(rest);
+			case "ps": return await (await import("./cmdPs-D5L3Eyh5.js")).cmdPs(rest);
 			case "status": return await cmdStatus(rest);
 			case "whoami": return await cmdWhoami(rest);
 			case "result": return await cmdResult(rest);
@@ -1380,7 +1570,7 @@ async function runSubcommand(argv) {
 			case "note": return await cmdNote(rest);
 			case "ask":
 			case "answer": {
-				const { runAskSubcommand, runAnswerSubcommand } = await import("./askCli-DR9vhdcV.js");
+				const { runAskSubcommand, runAnswerSubcommand } = await import("./askCli-DFsWcgpF.js");
 				const deps = {
 					resolveAgent: (keyword) => resolveOne(keyword, {
 						all: true,
@@ -1394,48 +1584,48 @@ async function runSubcommand(argv) {
 				return sub === "ask" ? await runAskSubcommand(rest, deps) : await runAnswerSubcommand(rest, deps);
 			}
 			case "todo": {
-				const { runTodoSubcommand } = await import("./todoCli-azqbjBtz.js");
+				const { runTodoSubcommand } = await import("./todoCli-DSQXAcwA.js");
 				return runTodoSubcommand(rest);
 			}
 			case "ch":
 			case "channels": {
-				const { cmdCh } = await import("./channels-hOG3-R_3.js");
+				const { cmdCh } = await import("./channels-aYwLMbFV.js");
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-iGHEnc7Z.js");
+				const { cmdTerm } = await import("./terminal-Dv73BTE-.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-OvkqW2Z6.js");
+				const { cmdWidget } = await import("./widget-DhBSNUey.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-OvkqW2Z6.js");
+				const { cmdMint } = await import("./widget-DhBSNUey.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-B2nisui8.js");
+				const { cmdServe } = await import("./serve-CJDQq_Jp.js");
 				return cmdServe(rest);
 			}
 			case "tray": {
-				const { cmdTray } = await import("./trayApp-Br2T2Yrb.js");
+				const { cmdTray } = await import("./trayApp-BjQ5V3WV.js");
 				return cmdTray(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-vCDTqyqR.js");
+				const { cmdSetup } = await import("./setup-DwLAkbTC.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-qZy7Giub.js");
+				const { cmdWs } = await import("./ws-DZ9YAXlY.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-Hao0WqyJ.js");
+				const { cmdSchedule } = await import("./schedule-Ba_4wNVK.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
-				const { cmdRemote } = await import("./remotes-C696AJzL.js");
+				const { cmdRemote } = await import("./remotes-wPL0JtBs.js");
 				return cmdRemote(rest);
 			}
 			case "expose": {
@@ -1443,7 +1633,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-BEvLUUBR.js");
+				const { cmdCallback } = await import("./callback-yCpK6Qpg.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -1454,13 +1644,20 @@ async function runSubcommand(argv) {
 				return await cmdDsh(rest);
 			}
 			case "gc": {
-				const { gcOldBinaryDirs } = await import("./rustBinary-CZRPfa4y.js");
-				const res = gcOldBinaryDirs();
-				if (res.removed.length === 0) process.stdout.write("no old agent-yes binary cache dirs to remove\n");
+				const { gcOldBinaryDirs } = await import("./rustBinary-C_EbyMTk.js");
+				const { gcLogs } = await import("./globalPidIndex-DC93JhHQ.js");
+				const bins = gcOldBinaryDirs();
+				const logs = await gcLogs();
+				if (bins.removed.length === 0) process.stdout.write("no old agent-yes binary cache dirs to remove\n");
+				else {
+					for (const v of bins.removed) process.stdout.write(`removed ${v}\n`);
+					const mib = (bins.freedBytes / 1024 / 1024).toFixed(1);
+					process.stdout.write(`freed ${mib} MiB (${bins.freedBytes} bytes) across ${bins.removed.length} version dir(s)\n`);
+				}
+				if (logs.removed.length === 0) process.stdout.write("no stale session logs to remove\n");
 				else {
-					for (const v of res.removed) process.stdout.write(`removed ${v}\n`);
-					const mib = (res.freedBytes / 1024 / 1024).toFixed(1);
-					process.stdout.write(`freed ${mib} MiB (${res.freedBytes} bytes) across ${res.removed.length} version dir(s)\n`);
+					const mib = (logs.freedBytes / 1024 / 1024).toFixed(1);
+					process.stdout.write(`freed ${mib} MiB (${logs.freedBytes} bytes) across ${logs.removed.length} session log file(s)\n`);
 				}
 				return 0;
 			}
@@ -1508,7 +1705,7 @@ async function cmdHelp(managerCommands = true) {
 	const wsLines = managerCommands ? "  ay ws ls [--status]                 list <owner>/<repo>/tree/<branch> workspaces\n  ay ws new <owner>/<repo>[@branch]   clone/refresh a workspace (ay ws help for more)\n" : ``;
 	const self = process.env.AGENT_YES_PID ? await resolveSender() : null;
 	const agentSection = self ? await buildAgentContextSection(self) : "";
-	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay ps [keyword]                     per-agent CPU/RSS, rolled up over each\n                                        agent's whole process tree, + box vitals\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay hist [-n 6] [--all] [--json]     past agent conversations (claude/codex\n                                        transcripts, incl. exited sessions);\n                                        this cwd unless --all\n  ay send <keyword> <msg>             send a message (keyword '.' = agent in this cwd)\n  ay msgs [keyword] [--in|--out]      inter-agent message log (sent + received)\n  ay ch mk|join|send|read|tail <topic>  local-first E2E channels: AI ↔ humans on a topic (ay ch help)\n  ay term embed <pid>                 <script> to embed a live read-only agent terminal in a page (ay term help)\n  ay widget ls | read selection|dom   read an opted-in page widget's context (selection/DOM) (ay widget help)\n  ay mint <target> --caps ...         mint a scoped, short-TTL capability token (embeddable in a page)\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay notify watch --unread            get notified when sub-agents finish/stuck/crash (writes to inbox)\n  ay whoami [--json]                  (inside an agent) your own registry identity + reply address\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n  ay gc                               remove old-version binary cache dirs and report freed space\n  ay dsh-legacy [args...]              launch the DeepSeek Harness terminal client (dsh-tui)\n" + wsLines + "\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay expose <port>                    share localhost:<port> at https://<id>.agent-yes.com (private link)\n  ay callback --expires 7d           mint an embeddable message-me widget for one agent\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent (naming a CLI is what launches one — bare 'ay' shows this help):\n  ay <claude|codex|...> [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  cy [options] -- [prompt]            shortcut for 'ay claude' (bare 'cy' starts claude)\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
+	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay ps [keyword]                     per-agent CPU/RSS, rolled up over each\n                                        agent's whole process tree, + box vitals\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay hist [-n 6] [--all] [--json]     past agent conversations (claude/codex\n                                        transcripts, incl. exited sessions);\n                                        this cwd unless --all\n  ay send <keyword> <msg>             send a message (keyword '.' = agent in this cwd)\n  ay msgs [keyword] [--in|--out]      inter-agent message log (sent + received)\n  ay ch mk|join|send|read|tail <topic>  local-first E2E channels: AI ↔ humans on a topic (ay ch help)\n  ay term embed <pid>                 <script> to embed a live read-only agent terminal in a page (ay term help)\n  ay widget ls | read selection|dom   read an opted-in page widget's context (selection/DOM) (ay widget help)\n  ay mint <target> --caps ...         mint a scoped, short-TTL capability token (embeddable in a page)\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay notify watch --unread            get notified when sub-agents finish/stuck/crash (writes to inbox)\n  ay whoami [--json]                  (inside an agent) your own registry identity + reply address\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n  ay gc                               reclaim old-version binary cache dirs + stale session logs\n  ay dsh-legacy [args...]              launch the DeepSeek Harness terminal client (dsh-tui)\n" + wsLines + "\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay expose <port>                    share localhost:<port> at https://<id>.agent-yes.com (private link)\n  ay callback --expires 7d           mint an embeddable message-me widget for one agent\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent (naming a CLI is what launches one — bare 'ay' shows this help):\n  ay <claude|codex|...> [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  cy [options] -- [prompt]            shortcut for 'ay claude' (bare 'cy' starts claude)\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
 	return 0;
 }
 function matchKeyword(record, keyword) {
@@ -1899,7 +2096,7 @@ async function runRemoteStatus(remote) {
 	process.stdout.write(JSON.stringify(await res.json(), null, 2) + "\n");
 	return 0;
 }
-async function fetchRemoteRecordsRaw(url, token, opts) {
+async function fetchRemoteRecordsRaw(url, token, opts, onReachable) {
 	const params = new URLSearchParams();
 	if (opts.all) params.set("all", "1");
 	if (opts.active) params.set("active", "1");
@@ -1909,7 +2106,7 @@ async function fetchRemoteRecordsRaw(url, token, opts) {
 		let base = url;
 		let bearer = token;
 		if (isWebrtcSpec(url)) {
-			const { startWebrtcBridge } = await import("./webrtcRemote-L5NxhLLR.js");
+			const { startWebrtcBridge } = await import("./webrtcRemote-yvMYsij3.js");
 			bridge = await startWebrtcBridge(url);
 			base = bridge.baseUrl;
 			bearer = bridge.token;
@@ -1918,9 +2115,11 @@ async function fetchRemoteRecordsRaw(url, token, opts) {
 			headers: { Authorization: `Bearer ${bearer}` },
 			signal: AbortSignal.timeout(8e3)
 		});
+		onReachable?.(true);
 		if (!res.ok) return [];
 		return await res.json();
 	} catch {
+		onReachable?.(false);
 		return [];
 	} finally {
 		bridge?.close();
@@ -1935,13 +2134,32 @@ async function runAllRemotesLs(opts) {
 		latest: false,
 		cwdScope: null
 	};
+	const health = await readRemoteHealth();
+	const healthNow = Date.now();
+	const skipped = new Set([...remotes.keys()].filter((alias) => shouldSkipRemote(health[alias], healthNow)));
+	const probed = [...remotes.entries()].filter(([alias]) => !skipped.has(alias));
 	const [localResult, ...remoteResults] = await Promise.allSettled([listRecords(opts.keyword, localOpts).then((recs) => ({
 		host: "local",
 		records: recs
-	})), ...Array.from(remotes.entries()).map(([alias, cfg]) => fetchRemoteRecordsRaw(cfg.url, cfg.token, opts).then((records) => ({
-		host: alias,
-		records
-	})))]);
+	})), ...probed.map(([alias, cfg]) => {
+		let reachable = false;
+		return fetchRemoteRecordsRaw(cfg.url, cfg.token, opts, (ok) => {
+			reachable = ok;
+		}).then((records) => ({
+			host: alias,
+			records,
+			ok: reachable
+		}));
+	})]);
+	{
+		const next = pruneRemoteHealth({ ...health }, remotes.keys());
+		for (const [i, [alias]] of probed.entries()) {
+			const res = remoteResults[i];
+			const ok = res?.status === "fulfilled" && res.value.ok === true;
+			next[alias] = noteRemoteResult(health[alias], ok, healthNow);
+		}
+		await writeRemoteHealth(next).catch(() => {});
+	}
 	const byHost = [];
 	const gitRootCache = /* @__PURE__ */ new Map();
 	const gitInfoCache = /* @__PURE__ */ new Map();
@@ -1974,6 +2192,12 @@ async function runAllRemotesLs(opts) {
 			records: enriched
 		});
 	}
+	for (const alias of skipped) {
+		const h = health[alias];
+		const leftMs = Math.max(0, remoteBackoffMs(h?.streak ?? 1) - (healthNow - (h?.lastFailedAt ?? healthNow)));
+		const left = leftMs >= 6e4 ? `${Math.round(leftMs / 6e4)}m` : `${Math.ceil(leftMs / 1e3)}s`;
+		process.stderr.write(`${alias}: unreachable — skipped after ${h?.streak ?? 0} failed attempt(s), retrying in ${left} (ay ls ${alias} to force a probe now)\n`);
+	}
 	for (const res of remoteResults) if (res.status === "fulfilled") byHost.push({
 		host: res.value.host,
 		records: res.value.records
@@ -4127,7 +4351,7 @@ async function cmdAttach(rest) {
 	const winsizeDir = path.join(ayHome, "winsize");
 	await mkdir(winsizeDir, { recursive: true });
 	const winsizePath = path.join(winsizeDir, String(record.pid));
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-B2nisui8.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-CJDQq_Jp.js");
 	const daemonBase = await resolveDaemonHttpBase().catch(() => null);
 	const daemonToken = daemonBase ? await loadTokenReadOnly().catch(() => null) ?? "" : "";
 	const capViewer = `attach:${process.pid}`;
@@ -4390,6 +4614,10 @@ async function cmdRestart(rest) {
 		process.stdout.write(`stopping pid ${record.pid} (${record.cli}) before restart…\n`);
 		let exited = await waitForExit(record.pid, 3e4);
 		if (!exited) {
+			if (pidOwnershipVerdict((await readAncestryTable())?.get(record.pid)?.ageSecs, record.started_at) === "reused") {
+				process.stderr.write(`pid ${record.pid} is alive but is NOT the agent that registered it — its process is younger than the registration, so the number was reused. Refusing to kill it.\n  check with: ps -p ${record.pid} -o pid=,user=,comm=\n  retire the stale row instead: ay stop ${record.pid}\n`);
+				return 1;
+			}
 			try {
 				process.kill(record.pid, "SIGKILL");
 			} catch {}
@@ -4850,7 +5078,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-Dnbe66Fl.js");
+		const { ensureDaemon } = await import("./notifyDaemon-CvUtRnAB.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -4924,7 +5152,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-Dnbe66Fl.js");
+	const daemon = await import("./notifyDaemon-CvUtRnAB.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -4951,4 +5179,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { sendPayloadCapError as $, isUnknownManagerToken as A, readLogForRender as B, finalizedLines as C, isPidAlive as D, isExitRequest as E, listRecords as F, renderLogTailLines as G, readPtysize as H, matchKeyword as I, resolveOne as J, renderRawLog as K, menuSelectKeys as L, isUserTyping as M, lastReadAt as N, isSlashCommand as O, lastStdinAt as P, runSubcommand as Q, probeStdinReachable as R, extractTaskCounts as S, isBareManagerInvocation as T, recentMessageEdges as U, readNotes as V, recentReadEdges as W, resolveResumeArgs as X, resolveReadWindow as Y, restartHintLines as Z, envelopeAttribution as _, SEND_BODY_MAX_CHARS as a, writeKeysPaced as at, extractMenu as b, backoffWhileTyping as c, framePaste as ct, cmdHelp as d, buildAgentForest as dt, snapshotStatus as et, confirmStdinUnreachable as f, flattenForest as ft, deriveLiveStatus as g, deriveLiveState as h, READ_WINDOW_MS as i, waitForLogQuiet as it, isUnreachableWriteErrno as j, isSubcommand as k, buildEnvelope as l, shouldFramePaste as lt, cursorAbs as m, MAX_RENDER_BYTES as n, stopTipForCli as nt, SEND_EXIT_UNREACHABLE as o, writeToIpc as ot, controlCodeFromName as p, renderRawLogLines as q, READ_PAGE_DEFAULT as r, submitAndConfirm as rt, TYPING_WINDOW_MS as s, withIpcLock as st, GRACEFUL_EXIT_COMMANDS as t, stdinActivityPath as tt, cliDefaults as u, TYPING_BADGE as ut, envelopeCostFor as v, isAgentStuck as w, extractNeedsInput as x, extractBadges as y, readAgentPtysize as z };
-//# sourceMappingURL=subcommands-D6LBtVPM.js.map
+//# sourceMappingURL=subcommands-yWgVRM2r.js.map

package/dist/{terminal-iGHEnc7Z.js → terminal-Dv73BTE-.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-B2nisui8.js");
+	const { mintScopedTermToken } = await import("./serve-CJDQq_Jp.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-iGHEnc7Z.js.map
+//# sourceMappingURL=terminal-Dv73BTE-.js.map

package/dist/terminal.js

@@ -1,3 +1,3 @@
-import { t as AyTerminal } from "./browser-oqC3Ln2a.js";
+import { t as AyTerminal } from "./browser-wkzxw6lx.js";
 
 export { AyTerminal, AyTerminal as default };

package/dist/{todoCli-azqbjBtz.js → todoCli-DSQXAcwA.js}

@@ -1,9 +1,9 @@
 import "./logger-CDIsZ-Pp.js";
 import { a as renderTree, c as describeBlock, i as renderDigest, n as buildTreeJSON, o as unblockedTasks, s as blockedOnAgent, t as reconcileTodos, u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
-import { i as readGlobalPids } from "./globalPidIndex-DoaKEUkO.js";
+import { a as readGlobalPids } from "./globalPidIndex-CRH9L9tn.js";
 import { a as LIFECYCLES, l as isKnownKind, r as openStore, t as CycleError } from "./todoStore-DF6vxHgV.js";
-import { a as resolveTodoRoot, i as resolveSelf, n as SELF_OWNER, r as ownerLiveness, t as NO_OWNER } from "./todoIdentity-NEceTmEe.js";
+import { a as resolveTodoRoot, i as resolveSelf, n as SELF_OWNER, r as ownerLiveness, t as NO_OWNER } from "./todoIdentity-CAmnkzzP.js";
 import yargs from "yargs";
 
 //#region ts/todoCli.ts
@@ -583,4 +583,4 @@ async function runTodoSubcommand(rest0) {
 
 //#endregion
 export { runTodoSubcommand };
-//# sourceMappingURL=todoCli-azqbjBtz.js.map
+//# sourceMappingURL=todoCli-DSQXAcwA.js.map

package/dist/{todoIdentity-NEceTmEe.js → todoIdentity-CAmnkzzP.js}

@@ -1,4 +1,4 @@
-import { i as readGlobalPids } from "./globalPidIndex-DoaKEUkO.js";
+import { a as readGlobalPids } from "./globalPidIndex-CRH9L9tn.js";
 import { execFile } from "child_process";
 import path from "path";
 import { promisify } from "util";
@@ -135,4 +135,4 @@ function ownerLiveness(owner, agents) {
 
 //#endregion
 export { resolveTodoRoot as a, resolveSelf as i, SELF_OWNER as n, ownerLiveness as r, NO_OWNER as t };
-//# sourceMappingURL=todoIdentity-NEceTmEe.js.map
+//# sourceMappingURL=todoIdentity-CAmnkzzP.js.map

package/dist/{trayApp-BdNlQCFx.js → trayApp-BRw8f0mT.js}

@@ -1,4 +1,4 @@
-import { i as findTrayLauncher } from "./rustBinary-jO6EN8LR.js";
+import { i as findTrayLauncher } from "./rustBinary-Clbk_K5c.js";
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
 import { existsSync } from "node:fs";
 import path from "node:path";
@@ -97,4 +97,4 @@ async function cmdTray(args) {
 
 //#endregion
 export { trayHiddenMarker as a, launchTray as i, hasDesktop as n, isTrayHidden as r, cmdTray as t };
-//# sourceMappingURL=trayApp-BdNlQCFx.js.map
+//# sourceMappingURL=trayApp-BRw8f0mT.js.map

package/dist/trayApp-BjQ5V3WV.js

@@ -0,0 +1,5 @@
+import "./versionChecker-CWPGASjD.js";
+import "./rustBinary-Clbk_K5c.js";
+import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-BRw8f0mT.js";
+
+export { cmdTray };

package/dist/{ts-oyuaLWWx.js → ts-C8PxhJZM.js}

@@ -1,12 +1,12 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-CMjS88mL.js";
+import { i as getInstalledPackage } from "./versionChecker-CWPGASjD.js";
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
 import { u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-BOIPD_Vs.js";
-import { i as readGlobalPids } from "./globalPidIndex-DoaKEUkO.js";
-import { t as PidStore } from "./pidStore-B73xnAeT.js";
-import { r as recordInbox } from "./messageLog-CVRSTLza.js";
+import { a as readGlobalPids } from "./globalPidIndex-CRH9L9tn.js";
+import { t as PidStore } from "./pidStore-DXWqzTSz.js";
+import { r as recordInbox } from "./messageLog-Brx3w6zT.js";
 import { n as register, r as sweep } from "./reaper-UimuuTfO.js";
 import { a as LIFECYCLES, r as openStore } from "./todoStore-DF6vxHgV.js";
 import { arch, platform } from "process";
@@ -1613,7 +1613,7 @@ async function agentYes({ cli, cliArgs = [], skipPermissions = false, prompt, ro
 	})();
 	const originalPrompt = prompt;
 	if (prompt && inheritedParentPid) try {
-		const { resolveSpawner } = await import("./parentLink-fdiuB13i.js");
+		const { resolveSpawner } = await import("./parentLink-BILJ32nA.js");
 		const spawner = await resolveSpawner(inheritedParentPid);
 		if (spawner) {
 			const { buildInitMsg } = await import("./initMsg-DoltWTZj.js");
@@ -2086,7 +2086,7 @@ async function agentYes({ cli, cliArgs = [], skipPermissions = false, prompt, ro
 	}, 100);
 	const cleanupHeartbeat = () => clearInterval(heartbeatInterval);
 	shell.onExit(cleanupHeartbeat);
-	const { startParentPingLoop } = await import("./parentPingLoop-DWv-xJoi.js");
+	const { startParentPingLoop } = await import("./parentPingLoop-CVOCiQp2.js");
 	const parentPingLoop = startParentPingLoop({
 		parentPid,
 		selfWrapperPid: process.pid,
@@ -2349,4 +2349,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, permissionBadge as c, answerAsk as i, AgentContext as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t, CLAUDE_SESSION_PIN_ENV as u };
-//# sourceMappingURL=ts-oyuaLWWx.js.map
+//# sourceMappingURL=ts-C8PxhJZM.js.map

package/dist/{versionChecker-CMjS88mL.js → versionChecker-CWPGASjD.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.290.7";
+var version = "1.291.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -285,4 +285,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as a, getInstalledPackage as i, compareVersions as n, displayVersion as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-CMjS88mL.js.map
+//# sourceMappingURL=versionChecker-CWPGASjD.js.map