agent-yes 1.294.0 → 1.294.1-beta.750.1

package/dist/{SUPPORTED_CLIS-CPXyE9Tg.js → SUPPORTED_CLIS-BmFucl40.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CqaWZAm0.js";
-import "./ts-DYKrhLtc.js";
+import "./versionChecker-DQtvrPml.js";
+import "./ts-D--BjWeq.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BxxxYx1J.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CNaOWQr6.js";
 
 export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-BxxxYx1J.js → SUPPORTED_CLIS-CNaOWQr6.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-DYKrhLtc.js";
+import { t as CLIS_CONFIG } from "./ts-D--BjWeq.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-BxxxYx1J.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-CNaOWQr6.js.map

package/dist/{agentShare-BXg5zEtW.js → agentShare-DpJrxWI4.js}

@@ -5,7 +5,7 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { J as resolveOne } from "./subcommands-CyhuIreR.js";
+import { J as resolveOne } from "./subcommands-CJaf5iJ8.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
@@ -232,4 +232,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-BXg5zEtW.js.map
+//# sourceMappingURL=agentShare-DpJrxWI4.js.map

package/dist/{callback-TqS7f7-H.js → callback-CnzT3sMS.js}

@@ -5,11 +5,11 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import "./subcommands-CyhuIreR.js";
+import "./subcommands-CJaf5iJ8.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
 import "./callbackCore-Bl2gGcxg.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-MneknqcS.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-D6FLQ5IG.js";
 
 export { cmdCallback };

package/dist/{callback-MneknqcS.js → callback-D6FLQ5IG.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
-import { J as resolveOne } from "./subcommands-CyhuIreR.js";
+import { J as resolveOne } from "./subcommands-CJaf5iJ8.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Bl2gGcxg.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-Cn6LTsO5.js");
+		const { resolveLocalServeUrl } = await import("./serve-HzPmrkoQ.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-MneknqcS.js.map
+//# sourceMappingURL=callback-D6FLQ5IG.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-zdFbz1ST.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CqaWZAm0.js";
-import { d as getRustBinary } from "./rustBinary-Wh9kNpga.js";
+import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DQtvrPml.js";
+import { d as getRustBinary } from "./rustBinary-BDWTBHNk.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-CE0EOwno.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-DPKTGX1I.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -309,7 +309,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CPXyE9Tg.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BmFucl40.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -360,7 +360,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CPXyE9Tg.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BmFucl40.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/{cmdPs-BwDyVmFi.js → cmdPs-CCb6aiqJ.js}

@@ -5,7 +5,7 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { F as listRecords, dt as buildAgentForest, ft as flattenForest, h as deriveLiveState } from "./subcommands-CyhuIreR.js";
+import { F as listRecords, dt as buildAgentForest, ft as flattenForest, h as deriveLiveState } from "./subcommands-CJaf5iJ8.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
@@ -330,4 +330,4 @@ function readPpidSync(pid) {
 
 //#endregion
 export { cmdPs };
-//# sourceMappingURL=cmdPs-BwDyVmFi.js.map
+//# sourceMappingURL=cmdPs-CCb6aiqJ.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CqaWZAm0.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-DYKrhLtc.js";
+import "./versionChecker-DQtvrPml.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-D--BjWeq.js";
 import { a as renderTree, c as describeBlock, i as renderDigest, l as monitorHint, o as unblockedTasks, r as openBlockers, t as reconcileTodos, u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";

package/dist/{notifyDaemon-lY7jeQcF.js → notifyDaemon-CudyV-xk.js}

@@ -5,7 +5,7 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { D as isPidAlive, F as listRecords, G as renderLogTailLines, h as deriveLiveState } from "./subcommands-CyhuIreR.js";
+import { D as isPidAlive, F as listRecords, G as renderLogTailLines, h as deriveLiveState } from "./subcommands-CJaf5iJ8.js";
 import { f as readInbox, g as daemonLockOwnerPath, h as daemonLockDir, i as gcInboxes, l as listInboxParents, m as shouldStealLock, n as appendEvent, s as hostId, u as liveWatchers, x as notifyDir } from "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
@@ -879,4 +879,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-lY7jeQcF.js.map
+//# sourceMappingURL=notifyDaemon-CudyV-xk.js.map

package/dist/{parentPingLoop-BNk9bmkL.js → parentPingLoop-DGmjbTGW.js}

@@ -338,7 +338,7 @@ async function isParentWatching(parentWrapperPid, parentAgentPid, selfAgentPid,
 		logger.debug("[parent-ping] watcher lookup failed:", error);
 	}
 	try {
-		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-CE0EOwno.js");
+		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-DPKTGX1I.js");
 		const last = await lastReadAt(`agent:${parentAgentPid}`, selfAgentPid);
 		if (last !== null && now - last <= READ_WINDOW_MS) return true;
 	} catch (error) {
@@ -466,4 +466,4 @@ function startParentPingLoop(opts) {
 
 //#endregion
 export { startParentPingLoop };
-//# sourceMappingURL=parentPingLoop-BNk9bmkL.js.map
+//# sourceMappingURL=parentPingLoop-DGmjbTGW.js.map

package/dist/{rustBinary-Wh9kNpga.js → rustBinary-BDWTBHNk.js}

@@ -1,4 +1,4 @@
-import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-CqaWZAm0.js";
+import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-DQtvrPml.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, readdirSync, rmSync, statSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -344,4 +344,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { findSpawnHiddenLauncher as a, getBinDir as c, getRustBinary as d, findRustBinary as i, getBinaryName as l, downloadBinary as n, findTrayLauncher as o, findAyrsBinary as r, gcOldBinaryDirs as s, devBuildInfo as t, getDownloadUrl as u };
-//# sourceMappingURL=rustBinary-Wh9kNpga.js.map
+//# sourceMappingURL=rustBinary-BDWTBHNk.js.map

package/dist/{rustBinary-DsxZnwXj.js → rustBinary-D9LImHwC.js}

@@ -1,4 +1,4 @@
-import "./versionChecker-CqaWZAm0.js";
-import { a as findSpawnHiddenLauncher, c as getBinDir, d as getRustBinary, i as findRustBinary, l as getBinaryName, n as downloadBinary, o as findTrayLauncher, r as findAyrsBinary, s as gcOldBinaryDirs, t as devBuildInfo, u as getDownloadUrl } from "./rustBinary-Wh9kNpga.js";
+import "./versionChecker-DQtvrPml.js";
+import { a as findSpawnHiddenLauncher, c as getBinDir, d as getRustBinary, i as findRustBinary, l as getBinaryName, n as downloadBinary, o as findTrayLauncher, r as findAyrsBinary, s as gcOldBinaryDirs, t as devBuildInfo, u as getDownloadUrl } from "./rustBinary-BDWTBHNk.js";
 
 export { findAyrsBinary, gcOldBinaryDirs };

package/dist/{schedule-yMAymlHZ.js → schedule-73un4lz8.js}

@@ -1,13 +1,13 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CqaWZAm0.js";
-import "./ts-DYKrhLtc.js";
+import "./versionChecker-DQtvrPml.js";
+import "./ts-D--BjWeq.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BxxxYx1J.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CNaOWQr6.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
 import { createHash } from "node:crypto";
@@ -154,4 +154,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-yMAymlHZ.js.map
+//# sourceMappingURL=schedule-73un4lz8.js.map

package/dist/{serve-Cn6LTsO5.js → serve-HzPmrkoQ.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-CqaWZAm0.js";
-import { a as findSpawnHiddenLauncher } from "./rustBinary-Wh9kNpga.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-DYKrhLtc.js";
+import { i as getInstalledPackage } from "./versionChecker-DQtvrPml.js";
+import { a as findSpawnHiddenLauncher } from "./rustBinary-BDWTBHNk.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-D--BjWeq.js";
 import { t as agentYesHome$1 } from "./agentYesHome-BNtn19J4.js";
 import { u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
@@ -12,19 +12,19 @@ import { t as pgidForWrapper } from "./reaper-UimuuTfO.js";
 import "./todoStore-DF6vxHgV.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BxxxYx1J.js";
-import { B as readLogForRender, F as listRecords, G as renderLogTailLines, H as readPtysize, J as resolveOne, K as renderRawLog, M as isUserTyping, O as isSlashCommand, S as extractTaskCounts, U as recentMessageEdges, V as readNotes, W as recentReadEdges, ct as framePaste, et as snapshotStatus, g as deriveLiveStatus, lt as shouldFramePaste, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, st as withIpcLock, u as cliDefaults, ut as TYPING_BADGE, x as extractNeedsInput, y as extractBadges } from "./subcommands-CyhuIreR.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CNaOWQr6.js";
+import { B as readLogForRender, F as listRecords, G as renderLogTailLines, H as readPtysize, J as resolveOne, K as renderRawLog, M as isUserTyping, O as isSlashCommand, S as extractTaskCounts, U as recentMessageEdges, V as readNotes, W as recentReadEdges, ct as framePaste, et as snapshotStatus, g as deriveLiveStatus, lt as shouldFramePaste, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, st as withIpcLock, u as cliDefaults, ut as TYPING_BADGE, x as extractNeedsInput, y as extractBadges } from "./subcommands-CJaf5iJ8.js";
 import { c as isTransientLockMkdirError } from "./notifyStore-2SWKGwZI.js";
 import { i as toWebrtcUrl, n as isWebrtcSpec } from "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Bl2gGcxg.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-MneknqcS.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-D6FLQ5IG.js";
 import { n as sampleTrees } from "./procStats-CyD8h5nx.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
-import { i as importProvisionModule } from "./ws-ClgsUOJu.js";
+import { i as importProvisionModule } from "./ws-BOHUpXom.js";
 import { r as spawnRejectionReason } from "./spawnGate-YpHopveO.js";
-import { i as launchTray } from "./trayApp-C77uhW1i.js";
+import { i as launchTray } from "./trayApp-ClgnrIyz.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -1516,6 +1516,22 @@ async function cmdServeDaemon(sub, args) {
 	}).exited ?? 1;
 	return 1;
 }
+/**
+* Content type for a `/vendor/<name>` console asset, or null when `name` is not
+* one we ship. The set is the exact list index.html loads (see lab/ui/vendor/
+* and #317): a request for anything else — a traversal attempt, a stray file
+* in the directory — is a 404, never a read.
+*/
+function vendorAssetType(name) {
+	switch (name) {
+		case "xterm.min.css": return "text/css; charset=utf-8";
+		case "xterm.min.js":
+		case "addon-fit.min.js":
+		case "addon-web-links.min.js":
+		case "addon-clipboard.min.js": return "text/javascript; charset=utf-8";
+		default: return null;
+	}
+}
 function shareLinkStatus(shareLink, installed, webrtcish) {
 	if (!shareLink) return {
 		link: null,
@@ -1655,7 +1671,7 @@ Options:
 		const { planRustServe } = await import("./serveRust-DDQiZmMf.js");
 		const plan = planRustServe(rest);
 		if (plan.kind === "rust") {
-			const { findAyrsBinary } = await import("./rustBinary-DsxZnwXj.js");
+			const { findAyrsBinary } = await import("./rustBinary-D9LImHwC.js");
 			const ayrs = findAyrsBinary();
 			if (ayrs) return runAyrsServe(ayrs, plan.argv);
 			process.stderr.write("ay serve: ayrs binary not found — running the TypeScript server (bun run build:rs, or reinstall, to get the Rust daemon)\n");
@@ -2630,7 +2646,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-Dsu27GmE.js");
+			const ws = await import("./ws-iBBgfNlr.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2650,7 +2666,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-Dsu27GmE.js");
+			const ws = await import("./ws-iBBgfNlr.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2672,7 +2688,7 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/ws/repos") {
-			const ws = await import("./ws-Dsu27GmE.js");
+			const ws = await import("./ws-iBBgfNlr.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2753,7 +2769,7 @@ Options:
 			const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
 			if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..") return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
 			const [, owner, repo] = m;
-			const ws = await import("./ws-Dsu27GmE.js");
+			const ws = await import("./ws-iBBgfNlr.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -3671,7 +3687,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-BXg5zEtW.js");
+				const { createScopedShare } = await import("./agentShare-DpJrxWI4.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3686,12 +3702,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-BXg5zEtW.js");
+			const { listShares } = await import("./agentShare-DpJrxWI4.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-BXg5zEtW.js");
+			const { revokeShare } = await import("./agentShare-DpJrxWI4.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -3843,6 +3859,12 @@ Options:
 		if (req.method === "GET" && p === "/sw.js") return serveUiFile("sw.js", "text/javascript; charset=utf-8");
 		if (req.method === "GET" && p === "/manifest.webmanifest") return serveUiFile("manifest.webmanifest", "application/manifest+json");
 		if (req.method === "GET" && p === "/icon.svg") return serveUiFile("icon.svg", "image/svg+xml");
+		if (req.method === "GET" && p.startsWith("/vendor/")) {
+			const name = p.slice(8);
+			const type = vendorAssetType(name);
+			if (type) return serveUiFile(`vendor/${name}`, type);
+			return new Response("not found", { status: 404 });
+		}
 		if (req.method === "GET" && p === "/favicon.ico") return new Response(null, { status: 204 });
 		if (p.startsWith("/cb/")) return handleCallback(req, p);
 		return withTermCors(req, await apiFetch(req, srv));
@@ -3997,7 +4019,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-BXg5zEtW.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-DpJrxWI4.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -4010,4 +4032,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-Cn6LTsO5.js.map
+//# sourceMappingURL=serve-HzPmrkoQ.js.map

package/dist/{setup-DAKtsxiB.js → setup-D8HSFVS-.js}

@@ -97,7 +97,7 @@ async function cmdSetup(rest) {
 	} catch {}
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-Cn6LTsO5.js");
+	const { cmdServe } = await import("./serve-HzPmrkoQ.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -107,4 +107,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-DAKtsxiB.js.map
+//# sourceMappingURL=setup-D8HSFVS-.js.map

package/dist/{subcommands-CyhuIreR.js → subcommands-CJaf5iJ8.js}

@@ -1546,7 +1546,7 @@ async function runSubcommand(argv) {
 		switch (sub) {
 			case "ls":
 			case "list": return await cmdLs(rest);
-			case "ps": return await (await import("./cmdPs-BwDyVmFi.js")).cmdPs(rest);
+			case "ps": return await (await import("./cmdPs-CCb6aiqJ.js")).cmdPs(rest);
 			case "status": return await cmdStatus(rest);
 			case "whoami": return await cmdWhoami(rest);
 			case "result": return await cmdResult(rest);
@@ -1593,35 +1593,35 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-D7G7Ngnj.js");
+				const { cmdTerm } = await import("./terminal-CjP9waBm.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-D2sc3bde.js");
+				const { cmdWidget } = await import("./widget-CAGGIsmN.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-D2sc3bde.js");
+				const { cmdMint } = await import("./widget-CAGGIsmN.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-Cn6LTsO5.js");
+				const { cmdServe } = await import("./serve-HzPmrkoQ.js");
 				return cmdServe(rest);
 			}
 			case "tray": {
-				const { cmdTray } = await import("./trayApp-i6201tMp.js");
+				const { cmdTray } = await import("./trayApp-D8mtC2nX.js");
 				return cmdTray(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-DAKtsxiB.js");
+				const { cmdSetup } = await import("./setup-D8HSFVS-.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-Dsu27GmE.js");
+				const { cmdWs } = await import("./ws-iBBgfNlr.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-yMAymlHZ.js");
+				const { cmdSchedule } = await import("./schedule-73un4lz8.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1633,7 +1633,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-TqS7f7-H.js");
+				const { cmdCallback } = await import("./callback-CnzT3sMS.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -1644,7 +1644,7 @@ async function runSubcommand(argv) {
 				return await cmdDsh(rest);
 			}
 			case "gc": {
-				const { gcOldBinaryDirs } = await import("./rustBinary-DsxZnwXj.js");
+				const { gcOldBinaryDirs } = await import("./rustBinary-D9LImHwC.js");
 				const { gcLogs } = await import("./globalPidIndex-DC93JhHQ.js");
 				const bins = gcOldBinaryDirs();
 				const logs = await gcLogs();
@@ -4351,7 +4351,7 @@ async function cmdAttach(rest) {
 	const winsizeDir = path.join(ayHome, "winsize");
 	await mkdir(winsizeDir, { recursive: true });
 	const winsizePath = path.join(winsizeDir, String(record.pid));
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-Cn6LTsO5.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-HzPmrkoQ.js");
 	const daemonBase = await resolveDaemonHttpBase().catch(() => null);
 	const daemonToken = daemonBase ? await loadTokenReadOnly().catch(() => null) ?? "" : "";
 	const capViewer = `attach:${process.pid}`;
@@ -5078,7 +5078,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-lY7jeQcF.js");
+		const { ensureDaemon } = await import("./notifyDaemon-CudyV-xk.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -5152,7 +5152,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-lY7jeQcF.js");
+	const daemon = await import("./notifyDaemon-CudyV-xk.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -5179,4 +5179,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { sendPayloadCapError as $, isUnknownManagerToken as A, readLogForRender as B, finalizedLines as C, isPidAlive as D, isExitRequest as E, listRecords as F, renderLogTailLines as G, readPtysize as H, matchKeyword as I, resolveOne as J, renderRawLog as K, menuSelectKeys as L, isUserTyping as M, lastReadAt as N, isSlashCommand as O, lastStdinAt as P, runSubcommand as Q, probeStdinReachable as R, extractTaskCounts as S, isBareManagerInvocation as T, recentMessageEdges as U, readNotes as V, recentReadEdges as W, resolveResumeArgs as X, resolveReadWindow as Y, restartHintLines as Z, envelopeAttribution as _, SEND_BODY_MAX_CHARS as a, writeKeysPaced as at, extractMenu as b, backoffWhileTyping as c, framePaste as ct, cmdHelp as d, buildAgentForest as dt, snapshotStatus as et, confirmStdinUnreachable as f, flattenForest as ft, deriveLiveStatus as g, deriveLiveState as h, READ_WINDOW_MS as i, waitForLogQuiet as it, isUnreachableWriteErrno as j, isSubcommand as k, buildEnvelope as l, shouldFramePaste as lt, cursorAbs as m, MAX_RENDER_BYTES as n, stopTipForCli as nt, SEND_EXIT_UNREACHABLE as o, writeToIpc as ot, controlCodeFromName as p, renderRawLogLines as q, READ_PAGE_DEFAULT as r, submitAndConfirm as rt, TYPING_WINDOW_MS as s, withIpcLock as st, GRACEFUL_EXIT_COMMANDS as t, stdinActivityPath as tt, cliDefaults as u, TYPING_BADGE as ut, envelopeCostFor as v, isAgentStuck as w, extractNeedsInput as x, extractBadges as y, readAgentPtysize as z };
-//# sourceMappingURL=subcommands-CyhuIreR.js.map
+//# sourceMappingURL=subcommands-CJaf5iJ8.js.map

package/dist/{subcommands-CE0EOwno.js → subcommands-DPKTGX1I.js}

@@ -5,7 +5,7 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { $ as sendPayloadCapError, A as isUnknownManagerToken, B as readLogForRender, C as finalizedLines, D as isPidAlive, E as isExitRequest, F as listRecords, G as renderLogTailLines, H as readPtysize, I as matchKeyword, J as resolveOne, K as renderRawLog, L as menuSelectKeys, M as isUserTyping, N as lastReadAt, O as isSlashCommand, P as lastStdinAt, Q as runSubcommand, R as probeStdinReachable, S as extractTaskCounts, T as isBareManagerInvocation, U as recentMessageEdges, V as readNotes, W as recentReadEdges, X as resolveResumeArgs, Y as resolveReadWindow, Z as restartHintLines, _ as envelopeAttribution, a as SEND_BODY_MAX_CHARS, at as writeKeysPaced, b as extractMenu, c as backoffWhileTyping, d as cmdHelp, et as snapshotStatus, f as confirmStdinUnreachable, g as deriveLiveStatus, h as deriveLiveState, i as READ_WINDOW_MS, it as waitForLogQuiet, j as isUnreachableWriteErrno, k as isSubcommand, l as buildEnvelope, m as cursorAbs, n as MAX_RENDER_BYTES, nt as stopTipForCli, o as SEND_EXIT_UNREACHABLE, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, r as READ_PAGE_DEFAULT, rt as submitAndConfirm, s as TYPING_WINDOW_MS, t as GRACEFUL_EXIT_COMMANDS, tt as stdinActivityPath, u as cliDefaults, v as envelopeCostFor, w as isAgentStuck, x as extractNeedsInput, y as extractBadges, z as readAgentPtysize } from "./subcommands-CyhuIreR.js";
+import { $ as sendPayloadCapError, A as isUnknownManagerToken, B as readLogForRender, C as finalizedLines, D as isPidAlive, E as isExitRequest, F as listRecords, G as renderLogTailLines, H as readPtysize, I as matchKeyword, J as resolveOne, K as renderRawLog, L as menuSelectKeys, M as isUserTyping, N as lastReadAt, O as isSlashCommand, P as lastStdinAt, Q as runSubcommand, R as probeStdinReachable, S as extractTaskCounts, T as isBareManagerInvocation, U as recentMessageEdges, V as readNotes, W as recentReadEdges, X as resolveResumeArgs, Y as resolveReadWindow, Z as restartHintLines, _ as envelopeAttribution, a as SEND_BODY_MAX_CHARS, at as writeKeysPaced, b as extractMenu, c as backoffWhileTyping, d as cmdHelp, et as snapshotStatus, f as confirmStdinUnreachable, g as deriveLiveStatus, h as deriveLiveState, i as READ_WINDOW_MS, it as waitForLogQuiet, j as isUnreachableWriteErrno, k as isSubcommand, l as buildEnvelope, m as cursorAbs, n as MAX_RENDER_BYTES, nt as stopTipForCli, o as SEND_EXIT_UNREACHABLE, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, r as READ_PAGE_DEFAULT, rt as submitAndConfirm, s as TYPING_WINDOW_MS, t as GRACEFUL_EXIT_COMMANDS, tt as stdinActivityPath, u as cliDefaults, v as envelopeCostFor, w as isAgentStuck, x as extractNeedsInput, y as extractBadges, z as readAgentPtysize } from "./subcommands-CJaf5iJ8.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";

package/dist/{terminal-D7G7Ngnj.js → terminal-CjP9waBm.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-Cn6LTsO5.js");
+	const { mintScopedTermToken } = await import("./serve-HzPmrkoQ.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-D7G7Ngnj.js.map
+//# sourceMappingURL=terminal-CjP9waBm.js.map

package/dist/{trayApp-C77uhW1i.js → trayApp-ClgnrIyz.js}

@@ -1,4 +1,4 @@
-import { o as findTrayLauncher } from "./rustBinary-Wh9kNpga.js";
+import { o as findTrayLauncher } from "./rustBinary-BDWTBHNk.js";
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
 import { existsSync } from "node:fs";
 import path from "node:path";
@@ -97,4 +97,4 @@ async function cmdTray(args) {
 
 //#endregion
 export { trayHiddenMarker as a, launchTray as i, hasDesktop as n, isTrayHidden as r, cmdTray as t };
-//# sourceMappingURL=trayApp-C77uhW1i.js.map
+//# sourceMappingURL=trayApp-ClgnrIyz.js.map

package/dist/trayApp-D8mtC2nX.js

@@ -0,0 +1,5 @@
+import "./versionChecker-DQtvrPml.js";
+import "./rustBinary-BDWTBHNk.js";
+import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-ClgnrIyz.js";
+
+export { cmdTray };

package/dist/{ts-DYKrhLtc.js → ts-D--BjWeq.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-CqaWZAm0.js";
+import { i as getInstalledPackage } from "./versionChecker-DQtvrPml.js";
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
 import { u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-BOIPD_Vs.js";
@@ -2086,7 +2086,7 @@ async function agentYes({ cli, cliArgs = [], skipPermissions = false, prompt, ro
 	}, 100);
 	const cleanupHeartbeat = () => clearInterval(heartbeatInterval);
 	shell.onExit(cleanupHeartbeat);
-	const { startParentPingLoop } = await import("./parentPingLoop-BNk9bmkL.js");
+	const { startParentPingLoop } = await import("./parentPingLoop-DGmjbTGW.js");
 	const parentPingLoop = startParentPingLoop({
 		parentPid,
 		selfWrapperPid: process.pid,
@@ -2349,4 +2349,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, permissionBadge as c, answerAsk as i, AgentContext as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t, CLAUDE_SESSION_PIN_ENV as u };
-//# sourceMappingURL=ts-DYKrhLtc.js.map
+//# sourceMappingURL=ts-D--BjWeq.js.map

package/dist/{versionChecker-CqaWZAm0.js → versionChecker-DQtvrPml.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.294.0";
+var version = "1.294.1-beta.750.1";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -285,4 +285,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as a, getInstalledPackage as i, compareVersions as n, displayVersion as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-CqaWZAm0.js.map
+//# sourceMappingURL=versionChecker-DQtvrPml.js.map

package/dist/{widget-D2sc3bde.js → widget-CAGGIsmN.js}

@@ -28,7 +28,7 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-Cn6LTsO5.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-HzPmrkoQ.js");
 	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
@@ -186,7 +186,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-Cn6LTsO5.js");
+	const { mintScopedTermToken } = await import("./serve-HzPmrkoQ.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -202,4 +202,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-D2sc3bde.js.map
+//# sourceMappingURL=widget-CAGGIsmN.js.map

package/dist/{ws-ClgsUOJu.js → ws-BOHUpXom.js}

@@ -1,4 +1,4 @@
-import { F as listRecords } from "./subcommands-CyhuIreR.js";
+import { F as listRecords } from "./subcommands-CJaf5iJ8.js";
 import { a as getProvisionRoot } from "./workspaceConfig-DTvPtr5j.js";
 import { existsSync } from "fs";
 import { lstat, opendir } from "fs/promises";
@@ -424,4 +424,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { isPathInside as a, walkWorkspaces as c, importProvisionModule as i, workspaceStatus as l, cmdWs as n, loadProvision as o, collectWorkspaces as r, resolveOperand as s, WS_JSON_SCHEMA as t };
-//# sourceMappingURL=ws-ClgsUOJu.js.map
+//# sourceMappingURL=ws-BOHUpXom.js.map

package/dist/{ws-Dsu27GmE.js → ws-iBBgfNlr.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import "./subcommands-CyhuIreR.js";
+import "./subcommands-CJaf5iJ8.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
-import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-ClgsUOJu.js";
+import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-BOHUpXom.js";
 
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, walkWorkspaces, workspaceStatus };

package/lab/ui/console-logic.js

@@ -170,19 +170,27 @@ export function identContext(entries) {
   return { uniform, anyDevice };
 }
 
+// Per-field clip for the compact identity. Was 3, which turned every row into
+// an unreadable "sno/age/mai" — three-letter stubs distinguish nothing a human
+// can name, and the field-blanking below already removes what is uniform, so
+// what survives is exactly the part worth reading. 12 fits the common repo and
+// branch names whole ("agent-yes", "CapsLockX", "main") and still bounds a
+// long feature-branch name so the title column keeps its room.
+export const IDENT_CAP = 12;
+
 // Build an agent's compact identity against a precomputed identContext. Each
 // field is clipped to `cap` chars (compact one-liner) and BLANKED when uniform
 // across the list — but the separators (@ : / /) are kept so the string stays
-// machine-parseable: e.g. all on one device → "@:age/mai", a mixed-device list →
-// "sno@tak:age/mai". A purely local list (no devices anywhere) falls back to the
-// legacy "own/rep/bra" with no device prefix.
+// machine-parseable: e.g. all on one device → "@:agent-yes/main", a mixed-device
+// list → "sno@taka:agent-yes/main". A purely local list (no devices anywhere)
+// falls back to the legacy "owner/repo/branch" with no device prefix.
 //
 // `parent` is this row's tree parent entry (a subagent's superagent), when it
 // has one. A field that matches the parent's is ALSO blanked: the nesting
 // already conveys it, so a subagent in the same worktree as its parent shows
 // only what differs — often just the submodule leaf (e.g. "//→bot"), or nothing
 // at all (hidden by hasIdent) when it's the very same checkout.
-export function compactIdent(e, ctx, cap = 3, parent = null) {
+export function compactIdent(e, ctx, cap = IDENT_CAP, parent = null) {
   const m = identFields(e);
   const p = parent ? identFields(parent) : null;
   const clip = (s) => (cap && s.length > cap ? s.slice(0, cap) : s);
@@ -375,7 +383,66 @@ export function age(e, now = Date.now()) {
   const s = Math.max(0, (now - at) / 1000);
   if (s < 60) return Math.floor(s) + "s";
   if (s < 3600) return Math.floor(s / 60) + "m";
-  return Math.floor(s / 3600) + "h";
+  // Hours stop being a unit anyone converts in their head after a couple of
+  // days: "2196h" is a row that has been dead for three months, and the column
+  // exists so the eye can rank rows by recency. Days from 48h, weeks from 14d.
+  if (s < 48 * 3600) return Math.floor(s / 3600) + "h";
+  if (s < 14 * 86400) return Math.floor(s / 86400) + "d";
+  return Math.floor(s / (7 * 86400)) + "w";
+}
+
+// The gist of a spawn prompt for a one-line label: the `<ay-msg …>` provenance
+// envelope (which a spawned agent's prompt carries, see rs/src/pid_store.rs
+// wrap_spawn_prompt) is dropped so the header never becomes the title, then
+// the first non-blank line, clipped.
+export function promptGist(prompt, max = 120) {
+  let s = String(prompt || "").trim();
+  const m = /^<ay-msg [^\n]*>\n([\s\S]*?)\n<\/ay-msg [^\n]*>$/.exec(s);
+  if (m) s = m[1];
+  s = (s.split("\n").find((l) => l.trim()) || "").trim();
+  return s.length > max ? s.slice(0, max - 1) + "…" : s;
+}
+
+// One-line label for a row: what the agent is ABOUT, not what its footer says
+// this second. The CLI's own terminal title first (Claude Code sets it to the
+// conversation topic); then the operator's `ay note`; then the spawn prompt's
+// gist; and only then the transient status line. That last one used to be the
+// SECOND choice, so every agent without a title was labelled by whatever its
+// footer said when the list was drawn — "Cogitated for 1m 15s · done 9:15 PM",
+// "Remote Control not started here · …" — which says nothing about the task and
+// changes under the reader's eyes.
+//
+// `remembered` is the last non-transient title this page saw for the agent
+// (Claude alternates topic ↔ status in the title, so the topic was on screen a
+// moment ago); it outranks the prompt gist because it is the CLI's own, newer
+// summary of the conversation, and a human-launched session has no prompt.
+export function rowTitle(e, remembered = "") {
+  const title = (e.title || "").trim();
+  return (
+    (isTransientTitle(title) ? "" : title) ||
+    (e.note || "").trim() ||
+    String(remembered || "").trim() ||
+    promptGist(e.prompt) ||
+    title ||
+    (e.status_text || "").trim()
+  );
+}
+
+// Claude Code writes its terminal title from two different things: the
+// conversation topic ("✳ Agy install") and, while it works or right after, its
+// own status line — a spinner with a timer ("✽ Fiddle-faddling… (6m 50s · ↓
+// 11.8k token)"), a completion stamp ("✻ Cogitated for 1m 15s · done 9:15 PM"),
+// or the last assistant message ("● Remote Control not started here · …").
+// The latter say nothing about the task and change under the reader's eyes, so
+// rowTitle only lets them win when nothing better exists. Recognised by shape,
+// not by verb list — the verbs are random.
+export function isTransientTitle(t) {
+  const s = String(t || "");
+  return (
+    /·\s*done\b/.test(s) || // "… for 1m 15s · done 9:15 PM"
+    /…\s*\(\d+[smh]/.test(s) || // "Verb… (6m 50s · …)"
+    /^[✳✻✽]?\s*●\s/.test(s) // "● <assistant message>"
+  );
 }
 
 // Filter predicate: every space-separated token must match. A `key:value` token
@@ -642,8 +709,7 @@ export function layeredRows(entries) {
     for (const [src, pe] of peerGroups) {
       const agentNodes = agentForestNodes(pe).map(toAgentNode);
       const host = pe[0]?._host || "";
-      const label =
-        host && labelCounts.get(host) > 1 ? `${host} (${String(src).slice(-6)})` : host;
+      const label = host && labelCounts.get(host) > 1 ? `${host} (${String(src).slice(-6)})` : host;
       if (multiPeer && label)
         underRoom.push({ kind: "peer", label, room: rid, host, src, children: agentNodes });
       else underRoom.push(...agentNodes); // single/unlabelled peer hidden

package/lab/ui/index.html

@@ -2205,13 +2205,13 @@
             </div>
             <div class="install" title="click to copy">
               install:
-            <code class="copy" id="setup-sh">curl -fsSL https://agent-yes.com/setup.sh | sh</code>
-            <span class="winhint"
-              >·&nbsp;Windows:
-              <code class="copy" id="setup-ps"
-                >powershell -c "irm https://agent-yes.com/setup.ps1 | iex"</code
-              ></span
-            >
+              <code class="copy" id="setup-sh">curl -fsSL https://agent-yes.com/setup.sh | sh</code>
+              <span class="winhint"
+                >·&nbsp;Windows:
+                <code class="copy" id="setup-ps"
+                  >powershell -c "irm https://agent-yes.com/setup.ps1 | iex"</code
+                ></span
+              >
             </div>
           </div>
           <div class="ibox">
@@ -2579,6 +2579,9 @@
         nextIndex,
         identContext,
         compactIdent,
+        IDENT_CAP,
+        rowTitle,
+        isTransientTitle,
         fullIdent,
         hasIdent,
         deviceCount,
@@ -6155,6 +6158,8 @@ my.translate = async (text, lang) => {
         }
         return `<div class="ioheat"><svg width="${w}" height="${h}" viewBox="0 0 ${w} ${h}" preserveAspectRatio="none" shape-rendering="crispEdges" style="position:absolute;inset:0;width:100%;height:100%">${cells.join("")}</svg></div>`;
       }
+      // Last non-transient (topic) title seen per agent key — see rowTitle.
+      const topicTitles = new Map();
       function renderList() {
         // The graph view (/r/) only exists on the hosted origin — a local
         // `ay serve --http` console (served at /) has no /r/ route, so the
@@ -6195,8 +6200,11 @@ my.translate = async (text, lang) => {
               .map((r) => {
                 if (r.kind !== "agent") return headerHtml(r);
                 const e = r.entry;
-                const t = e.title || e.status_text || e.prompt || "";
-                const id = compactIdent(e, ctx, 3, r.parentEntry);
+                // Remember the agent's last topic title so a status-line title
+                // (spinner / "· done" stamp) doesn't replace it on the next draw.
+                if (e.title && !isTransientTitle(e.title)) topicTitles.set(e._key, e.title);
+                const t = rowTitle(e, topicTitles.get(e._key));
+                const id = compactIdent(e, ctx, IDENT_CAP, r.parentEntry);
                 const cli = cliLabel(e);
                 return `<div class="row crow ${e._key === sel ? "sel" : ""}${rowFlags(e)}" data-key="${esc(e._key)}">${rowIoHeat(e)}
         ${r.branch ? `<span class="tbranch">${esc(r.branch)}</span>` : ""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.294.0",
+  "version": "1.294.1-beta.750.1",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.spec.ts

@@ -8,6 +8,7 @@ import {
   parseGitUrl,
   portlessConsoleUrl,
   shareLinkStatus,
+  vendorAssetType,
 } from "./serve.ts";
 
 describe("portlessConsoleUrl", () => {
@@ -197,11 +198,33 @@ describe("oxmgrCmd", () => {
     expect(oxmgrCmd([String.raw`C:\x\ay.exe`, "serve", "--share"])).toBe(
       String.raw`"C:\x\ay.exe" serve --share`,
     );
-    expect(oxmgrCmd(["/usr/bin/bun", "/x/a b/ay", "serve"])).toBe(
-      '/usr/bin/bun "/x/a b/ay" serve',
-    );
+    expect(oxmgrCmd(["/usr/bin/bun", "/x/a b/ay", "serve"])).toBe('/usr/bin/bun "/x/a b/ay" serve');
   });
   it("escapes an embedded double quote inside a quoted arg", () => {
     expect(oxmgrCmd(['say "hi"'])).toBe(String.raw`"say \"hi\""`);
   });
 });
+
+// The console self-hosts xterm from ./vendor/ (#317), but the TS daemon's
+// static allowlist never routed /vendor/*, so those render-blocking scripts
+// fell through to the token-gated API and came back 401 — the terminal pane
+// sat on "connecting…" with `Terminal is not defined`. Exactly the shipped
+// files are served; anything else (a traversal, a stray file) is a 404.
+describe("vendorAssetType", () => {
+  it("types the pinned xterm builds the page loads", () => {
+    expect(vendorAssetType("xterm.min.css")).toBe("text/css; charset=utf-8");
+    for (const js of [
+      "xterm.min.js",
+      "addon-fit.min.js",
+      "addon-web-links.min.js",
+      "addon-clipboard.min.js",
+    ]) {
+      expect(vendorAssetType(js)).toBe("text/javascript; charset=utf-8");
+    }
+  });
+  it("refuses anything that is not a shipped vendor asset", () => {
+    expect(vendorAssetType("../index.html")).toBeNull();
+    expect(vendorAssetType("xterm.min.js.map")).toBeNull();
+    expect(vendorAssetType("")).toBeNull();
+  });
+});

package/ts/serve.ts

@@ -1534,6 +1534,26 @@ async function cmdServeDaemon(sub: string, args: string[]): Promise<number> {
   return 1;
 }
 
+/**
+ * Content type for a `/vendor/<name>` console asset, or null when `name` is not
+ * one we ship. The set is the exact list index.html loads (see lab/ui/vendor/
+ * and #317): a request for anything else — a traversal attempt, a stray file
+ * in the directory — is a 404, never a read.
+ */
+export function vendorAssetType(name: string): string | null {
+  switch (name) {
+    case "xterm.min.css":
+      return "text/css; charset=utf-8";
+    case "xterm.min.js":
+    case "addon-fit.min.js":
+    case "addon-web-links.min.js":
+    case "addon-clipboard.min.js":
+      return "text/javascript; charset=utf-8";
+    default:
+      return null;
+  }
+}
+
 // How `ay serve status` should report the persisted share link. The link file
 // outlives the daemon config that minted it: `ay serve install` (no --share)
 // over an older --share install leaves ~/.agent-yes/.share-link in place while
@@ -5018,6 +5038,17 @@ export async function cmdServe(rest: string[]): Promise<number> {
     if (req.method === "GET" && p === "/manifest.webmanifest")
       return serveUiFile("manifest.webmanifest", "application/manifest+json");
     if (req.method === "GET" && p === "/icon.svg") return serveUiFile("icon.svg", "image/svg+xml");
+    // Self-hosted xterm (lab/ui/vendor/*, #317). The page loads these
+    // same-origin and render-blocking, so a 401 here — which is what the
+    // token-gated API fallthrough returned — leaves the terminal pane on
+    // "connecting…" forever with `Terminal is not defined`. Allowlisted by
+    // basename (no directory walk): the CSS and the pinned xterm builds only.
+    if (req.method === "GET" && p.startsWith("/vendor/")) {
+      const name = p.slice("/vendor/".length);
+      const type = vendorAssetType(name);
+      if (type) return serveUiFile(`vendor/${name}`, type);
+      return new Response("not found", { status: 404 });
+    }
     if (req.method === "GET" && p === "/favicon.ico") return new Response(null, { status: 204 });
     if (p.startsWith("/cb/")) return handleCallback(req, p);
     // CORS-open the embeddable terminal routes (tail/size/send) so a cross-origin

package/dist/trayApp-i6201tMp.js

@@ -1,5 +0,0 @@
-import "./versionChecker-CqaWZAm0.js";
-import "./rustBinary-Wh9kNpga.js";
-import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-C77uhW1i.js";
-
-export { cmdTray };