agent-yes 1.292.0 → 1.293.0-beta.748.1

package/README.md

@@ -32,6 +32,8 @@ shortcut that launches claude with no arguments.
 
 For the local web console, install [Portless](https://portless.sh/) once with `npm install -g portless`, then run `ay serve`. It assigns a free internal port and serves the console at `https://agent-yes.localhost/`. `ay serve --port N` remains available for a fixed-port API listener.
 
+Like `ay <cli>`, `ay serve` runs the Rust daemon (`ayrs serve`) by default for the flags it supports — `--webrtc [webrtc://url]`, `--port N`, `--sighost H`. The bare `ay serve` (Portless), `--share`, and the `install`/`status`/`logs` subcommands still run the TypeScript server; `--no-rust` (or `AGENT_YES_NO_RUST=1`) forces it for everything.
+
 ## Features
 
 - **Multi-CLI Support**: Works with Claude, Codex, Copilot, and Cursor CLI tools

package/dist/{SUPPORTED_CLIS-BfM59Xpj.js → SUPPORTED_CLIS-B3WUOdLK.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts--tcZ9vtp.js";
+import { t as CLIS_CONFIG } from "./ts-IWyw89k_.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-BfM59Xpj.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-B3WUOdLK.js.map

package/dist/{SUPPORTED_CLIS-BDLK4Ezp.js → SUPPORTED_CLIS-DCn4Zj9h.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CLOLbs5d.js";
-import "./ts--tcZ9vtp.js";
+import "./versionChecker-BlucewMa.js";
+import "./ts-IWyw89k_.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BfM59Xpj.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-B3WUOdLK.js";
 
 export { SUPPORTED_CLIS };

package/dist/{agentShare-BU4Mkg55.js → agentShare-DMdNorDu.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { J as resolveOne } from "./subcommands-O-CiI-D5.js";
+import { J as resolveOne } from "./subcommands-DJ0RybMo.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
-import "./remotes-tmKwrr20.js";
+import "./remotes-5P__pAXA.js";
 import { o as startShare } from "./share-C9oGvjXT.js";
 
 //#region ts/agentShare.ts
@@ -232,4 +232,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-BU4Mkg55.js.map
+//# sourceMappingURL=agentShare-DMdNorDu.js.map

package/dist/{callback-7gzaW-65.js → callback-0m1I1qMq.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
-import { J as resolveOne } from "./subcommands-O-CiI-D5.js";
+import { J as resolveOne } from "./subcommands-DJ0RybMo.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Bl2gGcxg.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-Cek2eJS-.js");
+		const { resolveLocalServeUrl } = await import("./serve-jM8Rq3tl.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-7gzaW-65.js.map
+//# sourceMappingURL=callback-0m1I1qMq.js.map

package/dist/{callback-Bw5PmAIq.js → callback-DBuvXeda.js}

@@ -5,11 +5,11 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import "./subcommands-O-CiI-D5.js";
+import "./subcommands-DJ0RybMo.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
-import "./remotes-tmKwrr20.js";
+import "./remotes-5P__pAXA.js";
 import "./callbackCore-Bl2gGcxg.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-7gzaW-65.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-0m1I1qMq.js";
 
 export { cmdCallback };

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-zdFbz1ST.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CLOLbs5d.js";
-import { u as getRustBinary } from "./rustBinary-CK3xoBVr.js";
+import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-BlucewMa.js";
+import { d as getRustBinary } from "./rustBinary-CjLiUlcX.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-CSAgQgag.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-CljAQU0G.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -309,7 +309,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BDLK4Ezp.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DCn4Zj9h.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -328,12 +328,12 @@ await checkAndAutoUpdate();
 logger.info(versionString());
 const config = parseCliArgs(process.argv);
 if (config.tray) {
-	const { startTray } = await import("./tray-CIt9mCKZ.js");
+	const { startTray } = await import("./tray-DWWsVS7Y.js");
 	await startTray();
 	await new Promise(() => {});
 }
 {
-	const { ensureTray } = await import("./tray-CIt9mCKZ.js");
+	const { ensureTray } = await import("./tray-DWWsVS7Y.js");
 	ensureTray();
 }
 if (!config.showVersion && !config.appendPrompt && !config.tray) {
@@ -360,7 +360,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BDLK4Ezp.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DCn4Zj9h.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/{cmdPs-DHYXWzXx.js → cmdPs-Dw7r3p1V.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { F as listRecords, dt as buildAgentForest, ft as flattenForest, h as deriveLiveState } from "./subcommands-O-CiI-D5.js";
+import { F as listRecords, dt as buildAgentForest, ft as flattenForest, h as deriveLiveState } from "./subcommands-DJ0RybMo.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
-import "./remotes-tmKwrr20.js";
+import "./remotes-5P__pAXA.js";
 import { i as systemStats, n as sampleTrees, r as snapshotProcs, t as humanBytes } from "./procStats-CyD8h5nx.js";
 import yargs from "yargs";
 import { readFileSync } from "node:fs";
@@ -330,4 +330,4 @@ function readPpidSync(pid) {
 
 //#endregion
 export { cmdPs };
-//# sourceMappingURL=cmdPs-DHYXWzXx.js.map
+//# sourceMappingURL=cmdPs-Dw7r3p1V.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CLOLbs5d.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts--tcZ9vtp.js";
+import "./versionChecker-BlucewMa.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-IWyw89k_.js";
 import { a as renderTree, c as describeBlock, i as renderDigest, l as monitorHint, o as unblockedTasks, r as openBlockers, t as reconcileTodos, u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";

package/dist/{notifyDaemon-DLqQeAti.js → notifyDaemon-34ECYio9.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { D as isPidAlive, F as listRecords, G as renderLogTailLines, h as deriveLiveState } from "./subcommands-O-CiI-D5.js";
+import { D as isPidAlive, F as listRecords, G as renderLogTailLines, h as deriveLiveState } from "./subcommands-DJ0RybMo.js";
 import { f as readInbox, g as daemonLockOwnerPath, h as daemonLockDir, i as gcInboxes, l as listInboxParents, m as shouldStealLock, n as appendEvent, s as hostId, u as liveWatchers, x as notifyDir } from "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
-import "./remotes-tmKwrr20.js";
+import "./remotes-5P__pAXA.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
 import { randomUUID } from "node:crypto";
 import { execFile, execFileSync } from "node:child_process";
@@ -879,4 +879,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-DLqQeAti.js.map
+//# sourceMappingURL=notifyDaemon-34ECYio9.js.map

package/dist/{parentPingLoop-H6V7_qIA.js → parentPingLoop-BV9EPkYK.js}

@@ -338,7 +338,7 @@ async function isParentWatching(parentWrapperPid, parentAgentPid, selfAgentPid,
 		logger.debug("[parent-ping] watcher lookup failed:", error);
 	}
 	try {
-		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-CSAgQgag.js");
+		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-CljAQU0G.js");
 		const last = await lastReadAt(`agent:${parentAgentPid}`, selfAgentPid);
 		if (last !== null && now - last <= READ_WINDOW_MS) return true;
 	} catch (error) {
@@ -466,4 +466,4 @@ function startParentPingLoop(opts) {
 
 //#endregion
 export { startParentPingLoop };
-//# sourceMappingURL=parentPingLoop-H6V7_qIA.js.map
+//# sourceMappingURL=parentPingLoop-BV9EPkYK.js.map

package/dist/{remotes-tmKwrr20.js → remotes-5P__pAXA.js}

@@ -93,7 +93,7 @@ async function resolveRemoteSpec(spec) {
 * The bridge lives for the rest of the process (torn down on `process.exit`).
 */
 async function resolveWebrtc(link, keyword, label) {
-	const { startWebrtcBridge } = await import("./webrtcRemote-yvMYsij3.js");
+	const { startWebrtcBridge } = await import("./webrtcRemote-0RGrSwqd.js");
 	const bridge = await startWebrtcBridge(link);
 	return {
 		url: bridge.baseUrl,
@@ -181,4 +181,4 @@ async function cmdRemote(rest) {
 
 //#endregion
 export { resolveRemoteSpec as a, readRemotes as i, deleteRemoteAlias as n, writeRemoteAlias as o, parseDirectRemoteSpec as r, cmdRemote as t };
-//# sourceMappingURL=remotes-tmKwrr20.js.map
+//# sourceMappingURL=remotes-5P__pAXA.js.map

package/dist/{remotes-wPL0JtBs.js → remotes-CY69MeQB.js}

@@ -1,5 +1,5 @@
 import "./e2e-z1xpwSAg.js";
 import "./webrtcLink-CnQf9pmu.js";
-import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-tmKwrr20.js";
+import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-5P__pAXA.js";
 
 export { cmdRemote };

package/dist/rustBinary-B_Aqd4wh.js

@@ -0,0 +1,4 @@
+import "./versionChecker-BlucewMa.js";
+import { a as findSpawnHiddenLauncher, c as getBinDir, d as getRustBinary, i as findRustBinary, l as getBinaryName, n as downloadBinary, o as findTrayLauncher, r as findAyrsBinary, s as gcOldBinaryDirs, t as devBuildInfo, u as getDownloadUrl } from "./rustBinary-CjLiUlcX.js";
+
+export { findAyrsBinary, gcOldBinaryDirs };

package/dist/{rustBinary-CK3xoBVr.js → rustBinary-CjLiUlcX.js}

@@ -1,4 +1,4 @@
-import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-CLOLbs5d.js";
+import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-BlucewMa.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, readdirSync, rmSync, statSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -157,6 +157,24 @@ function findTrayLauncher() {
 	for (const p of searchPaths) if (p && existsSync(p)) return p;
 }
 /**
+* Locate the `ayrs` binary (the Rust `serve` daemon). Same install shapes as
+* the agent runtime — a dev `rs/target` build, the downloaded release bin dir
+* (CI ships ayrs in every platform bundle since #473), or `~/.cargo/bin` on
+* PATH after `bun run build:rs`. Undefined when absent (an older release, or a
+* platform whose bundle predates it) — callers fall back to the TS server.
+*/
+function findAyrsBinary() {
+	const exe = process.platform === "win32" ? "ayrs.exe" : "ayrs";
+	const dir = import.meta.dirname ?? import.meta.dir;
+	const searchPaths = [
+		path.resolve(dir, `../rs/target/release/${exe}`),
+		path.resolve(dir, `../rs/target/debug/${exe}`),
+		path.join(getBinDir(), exe),
+		Bun.which("ayrs") ?? ""
+	];
+	for (const p of searchPaths) if (p && existsSync(p)) return p;
+}
+/**
 * Get GitHub release download URL for the binary
 */
 function getDownloadUrl(version = "latest") {
@@ -325,5 +343,5 @@ async function getRustBinary(options = {}) {
 }
 
 //#endregion
-export { findTrayLauncher as a, getBinaryName as c, findSpawnHiddenLauncher as i, getDownloadUrl as l, downloadBinary as n, gcOldBinaryDirs as o, findRustBinary as r, getBinDir as s, devBuildInfo as t, getRustBinary as u };
-//# sourceMappingURL=rustBinary-CK3xoBVr.js.map
+export { findSpawnHiddenLauncher as a, getBinDir as c, getRustBinary as d, findRustBinary as i, getBinaryName as l, downloadBinary as n, findTrayLauncher as o, findAyrsBinary as r, gcOldBinaryDirs as s, devBuildInfo as t, getDownloadUrl as u };
+//# sourceMappingURL=rustBinary-CjLiUlcX.js.map

package/dist/{schedule-CVeX3FUy.js → schedule-DX14RwYY.js}

@@ -1,13 +1,13 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CLOLbs5d.js";
-import "./ts--tcZ9vtp.js";
+import "./versionChecker-BlucewMa.js";
+import "./ts-IWyw89k_.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BfM59Xpj.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-B3WUOdLK.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
 import { createHash } from "node:crypto";
@@ -154,4 +154,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-CVeX3FUy.js.map
+//# sourceMappingURL=schedule-DX14RwYY.js.map

package/dist/{serve-Cek2eJS-.js → serve-jM8Rq3tl.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-CLOLbs5d.js";
-import { i as findSpawnHiddenLauncher } from "./rustBinary-CK3xoBVr.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts--tcZ9vtp.js";
+import { i as getInstalledPackage } from "./versionChecker-BlucewMa.js";
+import { a as findSpawnHiddenLauncher } from "./rustBinary-CjLiUlcX.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-IWyw89k_.js";
 import { t as agentYesHome$1 } from "./agentYesHome-BNtn19J4.js";
 import { u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
@@ -12,19 +12,19 @@ import { t as pgidForWrapper } from "./reaper-UimuuTfO.js";
 import "./todoStore-DF6vxHgV.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BfM59Xpj.js";
-import { B as readLogForRender, F as listRecords, G as renderLogTailLines, H as readPtysize, J as resolveOne, K as renderRawLog, M as isUserTyping, O as isSlashCommand, S as extractTaskCounts, U as recentMessageEdges, V as readNotes, W as recentReadEdges, ct as framePaste, et as snapshotStatus, g as deriveLiveStatus, lt as shouldFramePaste, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, st as withIpcLock, u as cliDefaults, ut as TYPING_BADGE, x as extractNeedsInput, y as extractBadges } from "./subcommands-O-CiI-D5.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-B3WUOdLK.js";
+import { B as readLogForRender, F as listRecords, G as renderLogTailLines, H as readPtysize, J as resolveOne, K as renderRawLog, M as isUserTyping, O as isSlashCommand, S as extractTaskCounts, U as recentMessageEdges, V as readNotes, W as recentReadEdges, ct as framePaste, et as snapshotStatus, g as deriveLiveStatus, lt as shouldFramePaste, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, st as withIpcLock, u as cliDefaults, ut as TYPING_BADGE, x as extractNeedsInput, y as extractBadges } from "./subcommands-DJ0RybMo.js";
 import { c as isTransientLockMkdirError } from "./notifyStore-2SWKGwZI.js";
 import { i as toWebrtcUrl, n as isWebrtcSpec } from "./webrtcLink-CnQf9pmu.js";
-import "./remotes-tmKwrr20.js";
+import "./remotes-5P__pAXA.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Bl2gGcxg.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-7gzaW-65.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-0m1I1qMq.js";
 import { n as sampleTrees } from "./procStats-CyD8h5nx.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
-import { i as importProvisionModule } from "./ws-DRO7LfQQ.js";
+import { i as importProvisionModule } from "./ws-Dtj4c87P.js";
 import { r as spawnRejectionReason } from "./spawnGate-YpHopveO.js";
-import { i as launchTray } from "./trayApp-xQpwYUxK.js";
+import { i as launchTray } from "./trayApp-DDnRooNR.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -1099,6 +1099,9 @@ async function bootstrapDaemonManager() {
 	}
 	return null;
 }
+function oxmgrCmd(argv) {
+	return argv.map((a) => /[\\\s"]/.test(a) ? `"${a.replace(/"/g, "\\\"")}"` : a).join(" ");
+}
 function ayServeArgv(args) {
 	const ayBin = Bun.which("ay");
 	return [
@@ -1432,7 +1435,7 @@ async function cmdServeDaemon(sub, args) {
 		const managedArgv = spawnHidden ? [spawnHidden, ...serveArgv] : serveArgv;
 		const oxmgrHealth = webrtcDaemon && mgr.id === "oxmgr" ? [
 			"--health-cmd",
-			ayServeArgv(["healthcheck"]).join(" "),
+			oxmgrCmd(ayServeArgv(["healthcheck"])),
 			"--health-interval",
 			"10",
 			"--health-timeout",
@@ -1443,7 +1446,7 @@ async function cmdServeDaemon(sub, args) {
 		const startArgv = mgr.id === "oxmgr" ? [
 			mgr.bin,
 			"start",
-			managedArgv.join(" "),
+			oxmgrCmd(managedArgv),
 			"--name",
 			DAEMON_NAME,
 			"--restart",
@@ -1590,6 +1593,32 @@ async function cmdServeStatus(args) {
 	}
 	return 0;
 }
+async function runAyrsServe(ayrs, argv) {
+	const child = Bun.spawn([ayrs, ...argv], {
+		stdio: [
+			"inherit",
+			"inherit",
+			"inherit"
+		],
+		env: process.env,
+		cwd: process.cwd()
+	});
+	const forward = (sig) => () => {
+		try {
+			child.kill(sig);
+		} catch {}
+	};
+	const onInt = forward("SIGINT");
+	const onTerm = forward("SIGTERM");
+	process.on("SIGINT", onInt);
+	process.on("SIGTERM", onTerm);
+	try {
+		return await child.exited;
+	} finally {
+		process.off("SIGINT", onInt);
+		process.off("SIGTERM", onTerm);
+	}
+}
 async function cmdServe(rest) {
 	if (rest.includes("-h") || rest.includes("--help")) {
 		process.stdout.write(`Usage: ay serve [options]
@@ -1607,6 +1636,11 @@ Modes (default: --http):
                     (stable link across restarts; delete the file to rotate).
   --share [URL]     Legacy alias for --http --webrtc
 
+Runtime: like \`ay <cli>\`, the Rust daemon (ayrs serve) runs by default for
+  the flags it supports — --webrtc [webrtc://url], --port N, --sighost H.
+  Everything else (bare \`ay serve\`, --share/--http/--host/--tls-*, the
+  subcommands) runs the TypeScript server. --no-rust forces TypeScript.
+
 Options:
   --port N          Bypass Portless and listen on a fixed HTTP port
   --host HOST       Interface to bind (default: 127.0.0.1; use 0.0.0.0 to expose)
@@ -1617,6 +1651,16 @@ Options:
                     ${portlessConsoleUrl()}\n  --allow-spawn     Deprecated no-op — the console can always spawn agents\n  --tls-cert FILE   TLS certificate PEM\n  --tls-key  FILE   TLS private key PEM\n\nSubcommands:\n  ay serve install    install as background daemon (oxmgr; pm2 fallback on Windows without the winfix build)\n  ay serve status     show daemon/server status (add --json for scripts)\n  ay serve uninstall  remove daemon\n  ay serve logs       view daemon logs\n\nOnce running, connect from another machine:\n  ay ls   <token>@<host>:<port>\n  ay remote add <alias> http://<token>@<host>:<port>\n`);
 		return 0;
 	}
+	{
+		const { planRustServe } = await import("./serveRust-DDQiZmMf.js");
+		const plan = planRustServe(rest);
+		if (plan.kind === "rust") {
+			const { findAyrsBinary } = await import("./rustBinary-B_Aqd4wh.js");
+			const ayrs = findAyrsBinary();
+			if (ayrs) return runAyrsServe(ayrs, plan.argv);
+			process.stderr.write("ay serve: ayrs binary not found — running the TypeScript server (bun run build:rs, or reinstall, to get the Rust daemon)\n");
+		} else rest = plan.rest;
+	}
 	const sub = rest[0];
 	if (sub === "status") return cmdServeStatus(rest.slice(1));
 	if (sub === "start" || sub === "stop") return cmdServeStartStop(sub);
@@ -2586,7 +2630,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-BZdG-J-R.js");
+			const ws = await import("./ws-Cu2OiqtH.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2606,7 +2650,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-BZdG-J-R.js");
+			const ws = await import("./ws-Cu2OiqtH.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2628,7 +2672,7 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/ws/repos") {
-			const ws = await import("./ws-BZdG-J-R.js");
+			const ws = await import("./ws-Cu2OiqtH.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2709,7 +2753,7 @@ Options:
 			const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
 			if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..") return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
 			const [, owner, repo] = m;
-			const ws = await import("./ws-BZdG-J-R.js");
+			const ws = await import("./ws-Cu2OiqtH.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -3627,7 +3671,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-BU4Mkg55.js");
+				const { createScopedShare } = await import("./agentShare-DMdNorDu.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3642,12 +3686,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-BU4Mkg55.js");
+			const { listShares } = await import("./agentShare-DMdNorDu.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-BU4Mkg55.js");
+			const { revokeShare } = await import("./agentShare-DMdNorDu.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3953,7 +3997,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-BU4Mkg55.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-DMdNorDu.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -3966,4 +4010,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-Cek2eJS-.js.map
+//# sourceMappingURL=serve-jM8Rq3tl.js.map

package/dist/serveRust-DDQiZmMf.js

@@ -0,0 +1,127 @@
+//#region ts/serveRust.ts
+/**
+* `ay serve` → `ayrs serve` delegation.
+*
+* Mirrors how `ay <cli>` runs the Rust agent runtime by default and only falls
+* back to TypeScript on `--no-rust`: the Rust serve daemon (`ayrs`) becomes the
+* default for every invocation it can express, and the TypeScript server keeps
+* everything it can't (yet). The decision is a pure function of the argv so the
+* contract is testable and the fallback reason is explicit — a silent fallback
+* would leave an operator unsure which daemon they are looking at.
+*
+* What delegates today — exactly the flags `ayrs serve` accepts:
+*   --webrtc            (bare: load/mint the persisted room)
+*   --webrtc <url>      / --webrtc=<url>   (a webrtc:// room url)
+*   --port <n>          / --port=<n>       (loopback HTTP console; 0 = free port)
+*   --sighost <host>    / --sighost=<host>
+*
+* What stays on TypeScript, with the reason printed:
+*   - `--no-rust` / AGENT_YES_NO_RUST=1 (explicit opt-out)
+*   - the bare `ay serve` (Portless HTTPS on agent-yes.localhost has no ayrs
+*     equivalent — `--port` is a plain loopback listener)
+*   - the daemon subcommands (install/uninstall/status/logs/start/stop/
+*     healthcheck) and -d/--daemon: ayrs has its own OS-supervisor install and
+*     the two must not manage each other's registration
+*   - --share (http+webrtc over Portless), --http, --host, --token, --tls-*,
+*     --local, https room links (ayrs pins rooms by webrtc:// url only)
+*/
+/** Subcommands `ay serve` dispatches before flag parsing — never delegated. */
+const SERVE_SUBCOMMANDS = new Set([
+	"install",
+	"uninstall",
+	"status",
+	"logs",
+	"start",
+	"stop",
+	"healthcheck"
+]);
+/**
+* Decide whether `rest` (the argv after `serve`) can run as `ayrs serve`.
+* Returns the ayrs argv (without the program) or the TS fallback with its
+* reason and the argv the TS path should parse (`--no-rust` stripped).
+*/
+function planRustServe(rest, env = process.env) {
+	const stripped = rest.filter((a) => a !== "--no-rust");
+	if (stripped.length !== rest.length) return {
+		kind: "ts",
+		reason: "--no-rust",
+		rest: stripped
+	};
+	if (env.AGENT_YES_NO_RUST === "1") return {
+		kind: "ts",
+		reason: "AGENT_YES_NO_RUST=1",
+		rest
+	};
+	if (rest.length === 0) return {
+		kind: "ts",
+		reason: "bare `ay serve` (Portless HTTPS console)",
+		rest
+	};
+	const first = rest[0];
+	if (SERVE_SUBCOMMANDS.has(first)) return {
+		kind: "ts",
+		reason: `\`ay serve ${first}\``,
+		rest
+	};
+	const argv = ["serve"];
+	for (let i = 0; i < rest.length; i++) {
+		const a = rest[i];
+		const eq = a.indexOf("=");
+		const name = eq === -1 ? a : a.slice(0, eq);
+		const inline = eq === -1 ? void 0 : a.slice(eq + 1);
+		const next = rest[i + 1];
+		const takeNext = () => {
+			if (inline !== void 0) return inline;
+			if (next !== void 0 && !next.startsWith("-")) {
+				i++;
+				return next;
+			}
+		};
+		switch (name) {
+			case "--webrtc": {
+				const v = takeNext();
+				if (v === void 0) argv.push("--webrtc");
+				else if (v.startsWith("webrtc://")) argv.push("--webrtc", v);
+				else return {
+					kind: "ts",
+					reason: `--webrtc ${v} (ayrs takes webrtc:// urls only)`,
+					rest
+				};
+				break;
+			}
+			case "--port": {
+				const v = takeNext();
+				if (v === void 0 || !/^\d+$/.test(v)) return {
+					kind: "ts",
+					reason: `--port ${v ?? "(missing)"}`,
+					rest
+				};
+				argv.push("--port", v);
+				break;
+			}
+			case "--sighost": {
+				const v = takeNext();
+				if (v === void 0) return {
+					kind: "ts",
+					reason: "--sighost (missing value)",
+					rest
+				};
+				argv.push("--sighost", v);
+				break;
+			}
+			default: return {
+				kind: "ts",
+				reason: a,
+				rest
+			};
+		}
+	}
+	return {
+		kind: "rust",
+		argv
+	};
+}
+
+//#endregion
+export { planRustServe };
+//# sourceMappingURL=serveRust-DDQiZmMf.js.map