agent-yes 1.298.0 → 1.298.1

package/dist/{SUPPORTED_CLIS-BuCUpIsD.js → SUPPORTED_CLIS-AzChegaJ.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BtYHFqjF.js";
-import "./ts-Cet9EhtO.js";
+import "./versionChecker-D6zM6Pdv.js";
+import "./ts-BePSXUQl.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CghmN9y4.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-sxjBFTrE.js";
 
 export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-CghmN9y4.js → SUPPORTED_CLIS-sxjBFTrE.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-Cet9EhtO.js";
+import { t as CLIS_CONFIG } from "./ts-BePSXUQl.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-CghmN9y4.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-sxjBFTrE.js.map

package/dist/{agentShare-C2z05Xu1.js → agentShare-CDOvU64K.js}

@@ -5,7 +5,7 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { J as resolveOne } from "./subcommands-DoKUSvaF.js";
+import { J as resolveOne } from "./subcommands--9gcc0ew.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
@@ -232,4 +232,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-C2z05Xu1.js.map
+//# sourceMappingURL=agentShare-CDOvU64K.js.map

package/dist/{callback-DULGSaDT.js → callback-DBOgmPV6.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
-import { J as resolveOne } from "./subcommands-DoKUSvaF.js";
+import { J as resolveOne } from "./subcommands--9gcc0ew.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Bl2gGcxg.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-cvUh5Oab.js");
+		const { resolveLocalServeUrl } = await import("./serve-BD-7GaKa.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-DULGSaDT.js.map
+//# sourceMappingURL=callback-DBOgmPV6.js.map

package/dist/{callback-Blg3DkI3.js → callback-Dr5rqkUu.js}

@@ -5,11 +5,11 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import "./subcommands-DoKUSvaF.js";
+import "./subcommands--9gcc0ew.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
 import "./callbackCore-Bl2gGcxg.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-DULGSaDT.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-DBOgmPV6.js";
 
 export { cmdCallback };

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-zdFbz1ST.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-BtYHFqjF.js";
-import { d as getRustBinary } from "./rustBinary-B_KR43x9.js";
+import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-D6zM6Pdv.js";
+import { d as getRustBinary } from "./rustBinary-BW3BGZ4y.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-btyolh0m.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-ClQCwxvk.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -309,7 +309,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BuCUpIsD.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-AzChegaJ.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -360,7 +360,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BuCUpIsD.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-AzChegaJ.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/{cmdPs-CNue6rFE.js → cmdPs-DKuMlynW.js}

@@ -5,7 +5,7 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { F as listRecords, dt as buildAgentForest, ft as flattenForest, h as deriveLiveState } from "./subcommands-DoKUSvaF.js";
+import { F as listRecords, dt as buildAgentForest, ft as flattenForest, h as deriveLiveState } from "./subcommands--9gcc0ew.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
@@ -330,4 +330,4 @@ function readPpidSync(pid) {
 
 //#endregion
 export { cmdPs };
-//# sourceMappingURL=cmdPs-CNue6rFE.js.map
+//# sourceMappingURL=cmdPs-DKuMlynW.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BtYHFqjF.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-Cet9EhtO.js";
+import "./versionChecker-D6zM6Pdv.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-BePSXUQl.js";
 import { a as renderTree, c as describeBlock, i as renderDigest, l as monitorHint, o as unblockedTasks, r as openBlockers, t as reconcileTodos, u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";

package/dist/{notifyDaemon-BPpVmmj0.js → notifyDaemon-Ceyhz4el.js}

@@ -5,7 +5,7 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { D as isPidAlive, F as listRecords, G as renderLogTailLines, h as deriveLiveState } from "./subcommands-DoKUSvaF.js";
+import { D as isPidAlive, F as listRecords, G as renderLogTailLines, h as deriveLiveState } from "./subcommands--9gcc0ew.js";
 import { f as readInbox, g as daemonLockOwnerPath, h as daemonLockDir, i as gcInboxes, l as listInboxParents, m as shouldStealLock, n as appendEvent, s as hostId, u as liveWatchers, x as notifyDir } from "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
@@ -879,4 +879,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-BPpVmmj0.js.map
+//# sourceMappingURL=notifyDaemon-Ceyhz4el.js.map

package/dist/{parentPingLoop-BPcqwhCS.js → parentPingLoop-C0hekeg6.js}

@@ -338,7 +338,7 @@ async function isParentWatching(parentWrapperPid, parentAgentPid, selfAgentPid,
 		logger.debug("[parent-ping] watcher lookup failed:", error);
 	}
 	try {
-		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-btyolh0m.js");
+		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-ClQCwxvk.js");
 		const last = await lastReadAt(`agent:${parentAgentPid}`, selfAgentPid);
 		if (last !== null && now - last <= READ_WINDOW_MS) return true;
 	} catch (error) {
@@ -466,4 +466,4 @@ function startParentPingLoop(opts) {
 
 //#endregion
 export { startParentPingLoop };
-//# sourceMappingURL=parentPingLoop-BPcqwhCS.js.map
+//# sourceMappingURL=parentPingLoop-C0hekeg6.js.map

package/dist/rustBinary-0cD4pQIE.js

@@ -0,0 +1,4 @@
+import "./versionChecker-D6zM6Pdv.js";
+import { a as findSpawnHiddenLauncher, c as getBinDir, d as getRustBinary, f as hasValidMacSignature, i as findRustBinary, l as getBinaryName, n as downloadBinary, o as findTrayLauncher, r as findAyrsBinary, s as gcOldBinaryDirs, t as devBuildInfo, u as getDownloadUrl } from "./rustBinary-BW3BGZ4y.js";
+
+export { findAyrsBinary, gcOldBinaryDirs };

package/dist/{rustBinary-B_KR43x9.js → rustBinary-BW3BGZ4y.js}

@@ -1,4 +1,4 @@
-import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-BtYHFqjF.js";
+import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-D6zM6Pdv.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, readdirSync, rmSync, statSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -318,6 +318,28 @@ function autoRebuildIfOutdated(binaryPath, verbose) {
 	}
 }
 /**
+* macOS only: does `binaryPath` carry a code signature the kernel will accept?
+*
+* On Apple Silicon an arm64 Mach-O with no (or a broken) signature is SIGKILLed
+* at exec — no stderr, just exit 137 — so a cached download damaged on disk
+* makes every `ay <cli>` die silently right after the version banner. Release
+* binaries are linker-signed (ad-hoc), so `codesign --verify` passing is the
+* cheap "will this even start" check. Off macOS, or when `codesign` itself is
+* unavailable, report valid: never block a run on the probe.
+*/
+function hasValidMacSignature(binaryPath) {
+	if (process.platform !== "darwin") return true;
+	try {
+		execFileSync("codesign", ["--verify", binaryPath], {
+			timeout: 1e4,
+			stdio: "ignore"
+		});
+		return true;
+	} catch (err) {
+		return err?.code === "ENOENT";
+	}
+}
+/**
 * Get or download the Rust binary
 */
 async function getRustBinary(options = {}) {
@@ -328,7 +350,12 @@ async function getRustBinary(options = {}) {
 	} catch {}
 	if (!forceDownload) {
 		const existing = findRustBinary(verbose);
-		if (existing) {
+		if (existing && !devBuildInfo(existing) && !hasValidMacSignature(existing)) {
+			process.stderr.write(`\x1b[33m[rust] Cached binary has an invalid code signature, re-downloading: ${existing}\x1b[0m\n`);
+			try {
+				unlinkSync(existing);
+			} catch {}
+		} else if (existing) {
 			if (verbose) console.log(`[rust] Using existing binary: ${existing}`);
 			autoRebuildIfOutdated(existing, verbose);
 			return existing;
@@ -343,5 +370,5 @@ async function getRustBinary(options = {}) {
 }
 
 //#endregion
-export { findSpawnHiddenLauncher as a, getBinDir as c, getRustBinary as d, findRustBinary as i, getBinaryName as l, downloadBinary as n, findTrayLauncher as o, findAyrsBinary as r, gcOldBinaryDirs as s, devBuildInfo as t, getDownloadUrl as u };
-//# sourceMappingURL=rustBinary-B_KR43x9.js.map
+export { findSpawnHiddenLauncher as a, getBinDir as c, getRustBinary as d, hasValidMacSignature as f, findRustBinary as i, getBinaryName as l, downloadBinary as n, findTrayLauncher as o, findAyrsBinary as r, gcOldBinaryDirs as s, devBuildInfo as t, getDownloadUrl as u };
+//# sourceMappingURL=rustBinary-BW3BGZ4y.js.map

package/dist/{schedule-2xXpYxCv.js → schedule-BRC5cDkf.js}

@@ -1,13 +1,13 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-BtYHFqjF.js";
-import "./ts-Cet9EhtO.js";
+import "./versionChecker-D6zM6Pdv.js";
+import "./ts-BePSXUQl.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CghmN9y4.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-sxjBFTrE.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
 import { createHash } from "node:crypto";
@@ -154,4 +154,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-2xXpYxCv.js.map
+//# sourceMappingURL=schedule-BRC5cDkf.js.map

package/dist/{serve-cvUh5Oab.js → serve-BD-7GaKa.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-BtYHFqjF.js";
-import { a as findSpawnHiddenLauncher } from "./rustBinary-B_KR43x9.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-Cet9EhtO.js";
+import { i as getInstalledPackage } from "./versionChecker-D6zM6Pdv.js";
+import { a as findSpawnHiddenLauncher } from "./rustBinary-BW3BGZ4y.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-BePSXUQl.js";
 import { t as agentYesHome$1 } from "./agentYesHome-BNtn19J4.js";
 import { u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
@@ -12,19 +12,19 @@ import { t as pgidForWrapper } from "./reaper-UimuuTfO.js";
 import "./todoStore-DF6vxHgV.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CghmN9y4.js";
-import { B as readLogForRender, F as listRecords, G as renderLogTailLines, H as readPtysize, J as resolveOne, K as renderRawLog, M as isUserTyping, O as isSlashCommand, S as extractTaskCounts, U as recentMessageEdges, V as readNotes, W as recentReadEdges, ct as framePaste, et as snapshotStatus, g as deriveLiveStatus, lt as shouldFramePaste, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, st as withIpcLock, u as cliDefaults, ut as TYPING_BADGE, x as extractNeedsInput, y as extractBadges } from "./subcommands-DoKUSvaF.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-sxjBFTrE.js";
+import { B as readLogForRender, F as listRecords, G as renderLogTailLines, H as readPtysize, J as resolveOne, K as renderRawLog, M as isUserTyping, O as isSlashCommand, S as extractTaskCounts, U as recentMessageEdges, V as readNotes, W as recentReadEdges, ct as framePaste, et as snapshotStatus, g as deriveLiveStatus, lt as shouldFramePaste, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, st as withIpcLock, u as cliDefaults, ut as TYPING_BADGE, x as extractNeedsInput, y as extractBadges } from "./subcommands--9gcc0ew.js";
 import { c as isTransientLockMkdirError } from "./notifyStore-2SWKGwZI.js";
 import { i as toWebrtcUrl, n as isWebrtcSpec } from "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Bl2gGcxg.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-DULGSaDT.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-DBOgmPV6.js";
 import { n as sampleTrees } from "./procStats-CyD8h5nx.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
-import { i as importProvisionModule } from "./ws-DgZVBJje.js";
+import { i as importProvisionModule } from "./ws-Covfyaxn.js";
 import { r as spawnRejectionReason } from "./spawnGate-YpHopveO.js";
-import { i as launchTray } from "./trayApp-7pq0tDGE.js";
+import { i as launchTray } from "./trayApp-DOgsH0en.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -1671,7 +1671,7 @@ Options:
 		const { planRustServe } = await import("./serveRust-DDQiZmMf.js");
 		const plan = planRustServe(rest);
 		if (plan.kind === "rust") {
-			const { findAyrsBinary } = await import("./rustBinary-D59v2mmy.js");
+			const { findAyrsBinary } = await import("./rustBinary-0cD4pQIE.js");
 			const ayrs = findAyrsBinary();
 			if (ayrs) return runAyrsServe(ayrs, plan.argv);
 			process.stderr.write("ay serve: ayrs binary not found — running the TypeScript server (bun run build:rs, or reinstall, to get the Rust daemon)\n");
@@ -2646,7 +2646,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-Bs9AVLZR.js");
+			const ws = await import("./ws-DjGQGPCq.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2666,7 +2666,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-Bs9AVLZR.js");
+			const ws = await import("./ws-DjGQGPCq.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2688,7 +2688,7 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/ws/repos") {
-			const ws = await import("./ws-Bs9AVLZR.js");
+			const ws = await import("./ws-DjGQGPCq.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2769,7 +2769,7 @@ Options:
 			const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
 			if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..") return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
 			const [, owner, repo] = m;
-			const ws = await import("./ws-Bs9AVLZR.js");
+			const ws = await import("./ws-DjGQGPCq.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -3687,7 +3687,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-C2z05Xu1.js");
+				const { createScopedShare } = await import("./agentShare-CDOvU64K.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3702,12 +3702,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-C2z05Xu1.js");
+			const { listShares } = await import("./agentShare-CDOvU64K.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-C2z05Xu1.js");
+			const { revokeShare } = await import("./agentShare-CDOvU64K.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -4019,7 +4019,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-C2z05Xu1.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-CDOvU64K.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -4032,4 +4032,4 @@ Options:
 
 //#endregion
 export { cmdServe, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-cvUh5Oab.js.map
+//# sourceMappingURL=serve-BD-7GaKa.js.map

package/dist/{setup-Ba2SPIhs.js → setup-Dad2A_-o.js}

@@ -97,7 +97,7 @@ async function cmdSetup(rest) {
 	} catch {}
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-cvUh5Oab.js");
+	const { cmdServe } = await import("./serve-BD-7GaKa.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -107,4 +107,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-Ba2SPIhs.js.map
+//# sourceMappingURL=setup-Dad2A_-o.js.map

package/dist/{subcommands-DoKUSvaF.js → subcommands--9gcc0ew.js}

@@ -1680,7 +1680,7 @@ async function runSubcommand(argv) {
 		switch (sub) {
 			case "ls":
 			case "list": return await cmdLs(rest);
-			case "ps": return await (await import("./cmdPs-CNue6rFE.js")).cmdPs(rest);
+			case "ps": return await (await import("./cmdPs-DKuMlynW.js")).cmdPs(rest);
 			case "status": return await cmdStatus(rest);
 			case "whoami": return await cmdWhoami(rest);
 			case "result": return await cmdResult(rest);
@@ -1727,35 +1727,35 @@ async function runSubcommand(argv) {
 				return cmdCh(rest);
 			}
 			case "term": {
-				const { cmdTerm } = await import("./terminal-DOY_IN5y.js");
+				const { cmdTerm } = await import("./terminal-Bam4XVWi.js");
 				return cmdTerm(rest);
 			}
 			case "widget": {
-				const { cmdWidget } = await import("./widget-DKt2rH9F.js");
+				const { cmdWidget } = await import("./widget-DJgiOfgE.js");
 				return cmdWidget(rest);
 			}
 			case "mint": {
-				const { cmdMint } = await import("./widget-DKt2rH9F.js");
+				const { cmdMint } = await import("./widget-DJgiOfgE.js");
 				return cmdMint(rest);
 			}
 			case "serve": {
-				const { cmdServe } = await import("./serve-cvUh5Oab.js");
+				const { cmdServe } = await import("./serve-BD-7GaKa.js");
 				return cmdServe(rest);
 			}
 			case "tray": {
-				const { cmdTray } = await import("./trayApp-DAs4YVeV.js");
+				const { cmdTray } = await import("./trayApp-s2VuJUP4.js");
 				return cmdTray(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-Ba2SPIhs.js");
+				const { cmdSetup } = await import("./setup-Dad2A_-o.js");
 				return cmdSetup(rest);
 			}
 			case "ws": {
-				const { cmdWs } = await import("./ws-Bs9AVLZR.js");
+				const { cmdWs } = await import("./ws-DjGQGPCq.js");
 				return cmdWs(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-2xXpYxCv.js");
+				const { cmdSchedule } = await import("./schedule-BRC5cDkf.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -1767,7 +1767,7 @@ async function runSubcommand(argv) {
 				return cmdExpose(rest);
 			}
 			case "callback": {
-				const { cmdCallback } = await import("./callback-Blg3DkI3.js");
+				const { cmdCallback } = await import("./callback-Dr5rqkUu.js");
 				return cmdCallback(rest);
 			}
 			case "reap":
@@ -1778,7 +1778,7 @@ async function runSubcommand(argv) {
 				return await cmdDsh(rest);
 			}
 			case "gc": {
-				const { gcOldBinaryDirs } = await import("./rustBinary-D59v2mmy.js");
+				const { gcOldBinaryDirs } = await import("./rustBinary-0cD4pQIE.js");
 				const { gcLogs } = await import("./globalPidIndex-DC93JhHQ.js");
 				const bins = gcOldBinaryDirs();
 				const logs = await gcLogs();
@@ -4879,7 +4879,7 @@ async function cmdAttach(rest) {
 	const winsizeDir = path.join(ayHome, "winsize");
 	await mkdir(winsizeDir, { recursive: true });
 	const winsizePath = path.join(winsizeDir, String(record.pid));
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-cvUh5Oab.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-BD-7GaKa.js");
 	const daemonBase = await resolveDaemonHttpBase().catch(() => null);
 	const daemonToken = daemonBase ? await loadTokenReadOnly().catch(() => null) ?? "" : "";
 	const capViewer = `attach:${process.pid}`;
@@ -5606,7 +5606,7 @@ async function cmdNotify(rest) {
 	}
 	const ensure = async () => {
 		if (!argv["ensure-daemon"]) return;
-		const { ensureDaemon } = await import("./notifyDaemon-BPpVmmj0.js");
+		const { ensureDaemon } = await import("./notifyDaemon-Ceyhz4el.js");
 		await ensureDaemon().catch(() => null);
 	};
 	await heartbeatWatcher(parent, selfStartedAt);
@@ -5680,7 +5680,7 @@ async function cmdNotifyCursor(args) {
 }
 async function cmdNotifyd(rest) {
 	const sub = rest[0] ?? "status";
-	const daemon = await import("./notifyDaemon-BPpVmmj0.js");
+	const daemon = await import("./notifyDaemon-Ceyhz4el.js");
 	switch (sub) {
 		case "run": return daemon.runDaemon();
 		case "once": return daemon.runDaemon({ once: true });
@@ -5707,4 +5707,4 @@ async function cmdNotifyd(rest) {
 
 //#endregion
 export { sendPayloadCapError as $, isUnknownManagerToken as A, readLogForRender as B, finalizedLines as C, isPidAlive as D, isExitRequest as E, listRecords as F, renderLogTailLines as G, readPtysize as H, matchKeyword as I, resolveOne as J, renderRawLog as K, menuSelectKeys as L, isUserTyping as M, lastReadAt as N, isSlashCommand as O, lastStdinAt as P, runSubcommand as Q, probeStdinReachable as R, extractTaskCounts as S, isBareManagerInvocation as T, recentMessageEdges as U, readNotes as V, recentReadEdges as W, resolveResumeArgs as X, resolveReadWindow as Y, restartHintLines as Z, envelopeAttribution as _, SEND_BODY_MAX_CHARS as a, writeKeysPaced as at, extractMenu as b, backoffWhileTyping as c, framePaste as ct, cmdHelp as d, buildAgentForest as dt, snapshotStatus as et, confirmStdinUnreachable as f, flattenForest as ft, deriveLiveStatus as g, deriveLiveState as h, READ_WINDOW_MS as i, waitForLogQuiet as it, isUnreachableWriteErrno as j, isSubcommand as k, buildEnvelope as l, shouldFramePaste as lt, cursorAbs as m, MAX_RENDER_BYTES as n, stopTipForCli as nt, SEND_EXIT_UNREACHABLE as o, writeToIpc as ot, controlCodeFromName as p, renderRawLogLines as q, READ_PAGE_DEFAULT as r, submitAndConfirm as rt, TYPING_WINDOW_MS as s, withIpcLock as st, GRACEFUL_EXIT_COMMANDS as t, stdinActivityPath as tt, cliDefaults as u, TYPING_BADGE as ut, envelopeCostFor as v, isAgentStuck as w, extractNeedsInput as x, extractBadges as y, readAgentPtysize as z };
-//# sourceMappingURL=subcommands-DoKUSvaF.js.map
+//# sourceMappingURL=subcommands--9gcc0ew.js.map

package/dist/{subcommands-btyolh0m.js → subcommands-ClQCwxvk.js}

@@ -5,7 +5,7 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { $ as sendPayloadCapError, A as isUnknownManagerToken, B as readLogForRender, C as finalizedLines, D as isPidAlive, E as isExitRequest, F as listRecords, G as renderLogTailLines, H as readPtysize, I as matchKeyword, J as resolveOne, K as renderRawLog, L as menuSelectKeys, M as isUserTyping, N as lastReadAt, O as isSlashCommand, P as lastStdinAt, Q as runSubcommand, R as probeStdinReachable, S as extractTaskCounts, T as isBareManagerInvocation, U as recentMessageEdges, V as readNotes, W as recentReadEdges, X as resolveResumeArgs, Y as resolveReadWindow, Z as restartHintLines, _ as envelopeAttribution, a as SEND_BODY_MAX_CHARS, at as writeKeysPaced, b as extractMenu, c as backoffWhileTyping, d as cmdHelp, et as snapshotStatus, f as confirmStdinUnreachable, g as deriveLiveStatus, h as deriveLiveState, i as READ_WINDOW_MS, it as waitForLogQuiet, j as isUnreachableWriteErrno, k as isSubcommand, l as buildEnvelope, m as cursorAbs, n as MAX_RENDER_BYTES, nt as stopTipForCli, o as SEND_EXIT_UNREACHABLE, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, r as READ_PAGE_DEFAULT, rt as submitAndConfirm, s as TYPING_WINDOW_MS, t as GRACEFUL_EXIT_COMMANDS, tt as stdinActivityPath, u as cliDefaults, v as envelopeCostFor, w as isAgentStuck, x as extractNeedsInput, y as extractBadges, z as readAgentPtysize } from "./subcommands-DoKUSvaF.js";
+import { $ as sendPayloadCapError, A as isUnknownManagerToken, B as readLogForRender, C as finalizedLines, D as isPidAlive, E as isExitRequest, F as listRecords, G as renderLogTailLines, H as readPtysize, I as matchKeyword, J as resolveOne, K as renderRawLog, L as menuSelectKeys, M as isUserTyping, N as lastReadAt, O as isSlashCommand, P as lastStdinAt, Q as runSubcommand, R as probeStdinReachable, S as extractTaskCounts, T as isBareManagerInvocation, U as recentMessageEdges, V as readNotes, W as recentReadEdges, X as resolveResumeArgs, Y as resolveReadWindow, Z as restartHintLines, _ as envelopeAttribution, a as SEND_BODY_MAX_CHARS, at as writeKeysPaced, b as extractMenu, c as backoffWhileTyping, d as cmdHelp, et as snapshotStatus, f as confirmStdinUnreachable, g as deriveLiveStatus, h as deriveLiveState, i as READ_WINDOW_MS, it as waitForLogQuiet, j as isUnreachableWriteErrno, k as isSubcommand, l as buildEnvelope, m as cursorAbs, n as MAX_RENDER_BYTES, nt as stopTipForCli, o as SEND_EXIT_UNREACHABLE, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, r as READ_PAGE_DEFAULT, rt as submitAndConfirm, s as TYPING_WINDOW_MS, t as GRACEFUL_EXIT_COMMANDS, tt as stdinActivityPath, u as cliDefaults, v as envelopeCostFor, w as isAgentStuck, x as extractNeedsInput, y as extractBadges, z as readAgentPtysize } from "./subcommands--9gcc0ew.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";

package/dist/{terminal-DOY_IN5y.js → terminal-Bam4XVWi.js}

@@ -98,7 +98,7 @@ async function cmdTermMint(args) {
 	if (flags.ro && flags.interactive) throw new Error("--ro and --interactive are mutually exclusive");
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
 	const canSend = flags.interactive === true;
-	const { mintScopedTermToken } = await import("./serve-cvUh5Oab.js");
+	const { mintScopedTermToken } = await import("./serve-BD-7GaKa.js");
 	const r = await mintScopedTermToken(pid, {
 		ttlSec,
 		canSend
@@ -135,4 +135,4 @@ async function cmdTerm(args) {
 
 //#endregion
 export { cmdTerm };
-//# sourceMappingURL=terminal-DOY_IN5y.js.map
+//# sourceMappingURL=terminal-Bam4XVWi.js.map

package/dist/{trayApp-7pq0tDGE.js → trayApp-DOgsH0en.js}

@@ -1,4 +1,4 @@
-import { o as findTrayLauncher } from "./rustBinary-B_KR43x9.js";
+import { o as findTrayLauncher } from "./rustBinary-BW3BGZ4y.js";
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
 import { existsSync } from "node:fs";
 import path from "node:path";
@@ -97,4 +97,4 @@ async function cmdTray(args) {
 
 //#endregion
 export { trayHiddenMarker as a, launchTray as i, hasDesktop as n, isTrayHidden as r, cmdTray as t };
-//# sourceMappingURL=trayApp-7pq0tDGE.js.map
+//# sourceMappingURL=trayApp-DOgsH0en.js.map

package/dist/trayApp-s2VuJUP4.js

@@ -0,0 +1,5 @@
+import "./versionChecker-D6zM6Pdv.js";
+import "./rustBinary-BW3BGZ4y.js";
+import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-DOgsH0en.js";
+
+export { cmdTray };

package/dist/{ts-Cet9EhtO.js → ts-BePSXUQl.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin, r as __exportAll } from "./chunk-cZBX9HZv.js";
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-BtYHFqjF.js";
+import { i as getInstalledPackage } from "./versionChecker-D6zM6Pdv.js";
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
 import { u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-BOIPD_Vs.js";
@@ -2086,7 +2086,7 @@ async function agentYes({ cli, cliArgs = [], skipPermissions = false, prompt, ro
 	}, 100);
 	const cleanupHeartbeat = () => clearInterval(heartbeatInterval);
 	shell.onExit(cleanupHeartbeat);
-	const { startParentPingLoop } = await import("./parentPingLoop-BPcqwhCS.js");
+	const { startParentPingLoop } = await import("./parentPingLoop-C0hekeg6.js");
 	const parentPingLoop = startParentPingLoop({
 		parentPid,
 		selfWrapperPid: process.pid,
@@ -2349,4 +2349,4 @@ function sleep(ms) {
 
 //#endregion
 export { hasTodoStore as a, permissionBadge as c, answerAsk as i, AgentContext as l, agentYes as n, listAsks as o, config as r, listAsksForProject as s, CLIS_CONFIG as t, CLAUDE_SESSION_PIN_ENV as u };
-//# sourceMappingURL=ts-Cet9EhtO.js.map
+//# sourceMappingURL=ts-BePSXUQl.js.map

package/dist/{versionChecker-BtYHFqjF.js → versionChecker-D6zM6Pdv.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.298.0";
+var version = "1.298.1";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -285,4 +285,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as a, getInstalledPackage as i, compareVersions as n, displayVersion as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-BtYHFqjF.js.map
+//# sourceMappingURL=versionChecker-D6zM6Pdv.js.map

package/dist/{widget-DKt2rH9F.js → widget-DJgiOfgE.js}

@@ -28,7 +28,7 @@ function parseFlags(args, known) {
 }
 /** Resolve the local daemon base URL + token (flags override discovery). */
 async function daemonTarget(flags) {
-	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-cvUh5Oab.js");
+	const { resolveDaemonHttpBase, loadTokenReadOnly } = await import("./serve-BD-7GaKa.js");
 	const base = typeof flags.base === "string" ? flags.base : await resolveDaemonHttpBase();
 	if (!base) throw new Error("no running ay serve daemon found — start `ay serve` or pass --base <url> (e.g. http://127.0.0.1:PORT)");
 	const token = typeof flags.token === "string" ? flags.token : await loadTokenReadOnly() ?? "";
@@ -186,7 +186,7 @@ async function cmdMint(args) {
 	const bad = caps.filter((c) => !KNOWN_CAPS.has(c));
 	if (bad.length) throw new Error(`unknown cap(s): ${bad.join(", ")} (valid: ${[...KNOWN_CAPS].join(", ")})`);
 	const ttlSec = parseTtlSec(typeof flags.ttl === "string" ? flags.ttl : "15m");
-	const { mintScopedTermToken } = await import("./serve-cvUh5Oab.js");
+	const { mintScopedTermToken } = await import("./serve-BD-7GaKa.js");
 	const r = await mintScopedTermToken(target, {
 		ttlSec,
 		caps
@@ -202,4 +202,4 @@ async function cmdMint(args) {
 
 //#endregion
 export { cmdMint, cmdWidget };
-//# sourceMappingURL=widget-DKt2rH9F.js.map
+//# sourceMappingURL=widget-DJgiOfgE.js.map

package/dist/{ws-DgZVBJje.js → ws-Covfyaxn.js}

@@ -1,4 +1,4 @@
-import { F as listRecords } from "./subcommands-DoKUSvaF.js";
+import { F as listRecords } from "./subcommands--9gcc0ew.js";
 import { a as getProvisionRoot } from "./workspaceConfig-DTvPtr5j.js";
 import { existsSync } from "fs";
 import { lstat, opendir } from "fs/promises";
@@ -424,4 +424,4 @@ async function cmdWs(args) {
 
 //#endregion
 export { isPathInside as a, walkWorkspaces as c, importProvisionModule as i, workspaceStatus as l, cmdWs as n, loadProvision as o, collectWorkspaces as r, resolveOperand as s, WS_JSON_SCHEMA as t };
-//# sourceMappingURL=ws-DgZVBJje.js.map
+//# sourceMappingURL=ws-Covfyaxn.js.map

package/dist/{ws-Bs9AVLZR.js → ws-DjGQGPCq.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import "./subcommands-DoKUSvaF.js";
+import "./subcommands--9gcc0ew.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-CnQf9pmu.js";
 import "./remotes-5P__pAXA.js";
-import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-DgZVBJje.js";
+import { a as isPathInside, c as walkWorkspaces, i as importProvisionModule, l as workspaceStatus, n as cmdWs, o as loadProvision, r as collectWorkspaces, s as resolveOperand, t as WS_JSON_SCHEMA } from "./ws-Covfyaxn.js";
 
 export { WS_JSON_SCHEMA, cmdWs, collectWorkspaces, isPathInside, loadProvision, walkWorkspaces, workspaceStatus };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.298.0",
+  "version": "1.298.1",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/rustBinary.spec.ts

@@ -1,8 +1,8 @@
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
-import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { copyFileSync, existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { devBuildInfo, gcOldBinaryDirs } from "./rustBinary.ts";
+import { devBuildInfo, gcOldBinaryDirs, hasValidMacSignature } from "./rustBinary.ts";
 import { _setInstalledPackageForTesting } from "./versionChecker.ts";
 
 // Startup GC for the versioned binary download cache (PERFORMANCE-EVENT
@@ -115,3 +115,23 @@ describe("devBuildInfo", () => {
     ).toBeUndefined();
   });
 });
+
+// A cached download that lost its code signature is SIGKILLed by macOS at exec
+// (silent exit 137), so getRustBinary() must spot it and re-download.
+describe("hasValidMacSignature", () => {
+  it.skipIf(process.platform !== "darwin")("accepts a signed system binary", () => {
+    const signed = path.join(root, "signed-ls");
+    copyFileSync("/bin/ls", signed);
+    expect(hasValidMacSignature(signed)).toBe(true);
+  });
+
+  it.skipIf(process.platform !== "darwin")("rejects an unsigned file", () => {
+    const unsigned = path.join(root, "agent-yes-darwin-arm64-unsigned");
+    writeFileSync(unsigned, "not a mach-o");
+    expect(hasValidMacSignature(unsigned)).toBe(false);
+  });
+
+  it.skipIf(process.platform === "darwin")("always reports valid off macOS", () => {
+    expect(hasValidMacSignature(path.join(root, "does-not-exist"))).toBe(true);
+  });
+});

package/ts/rustBinary.ts

@@ -446,6 +446,27 @@ function autoRebuildIfOutdated(binaryPath: string, verbose: boolean): boolean {
   }
 }
 
+/**
+ * macOS only: does `binaryPath` carry a code signature the kernel will accept?
+ *
+ * On Apple Silicon an arm64 Mach-O with no (or a broken) signature is SIGKILLed
+ * at exec — no stderr, just exit 137 — so a cached download damaged on disk
+ * makes every `ay <cli>` die silently right after the version banner. Release
+ * binaries are linker-signed (ad-hoc), so `codesign --verify` passing is the
+ * cheap "will this even start" check. Off macOS, or when `codesign` itself is
+ * unavailable, report valid: never block a run on the probe.
+ */
+export function hasValidMacSignature(binaryPath: string): boolean {
+  if (process.platform !== "darwin") return true;
+  try {
+    execFileSync("codesign", ["--verify", binaryPath], { timeout: 10_000, stdio: "ignore" });
+    return true;
+  } catch (err) {
+    // ENOENT → no codesign on this machine; can't tell, so don't block.
+    return (err as NodeJS.ErrnoException)?.code === "ENOENT";
+  }
+}
+
 /**
  * Get or download the Rust binary
  */
@@ -476,7 +497,16 @@ export async function getRustBinary(
   // First try to find existing binary
   if (!forceDownload) {
     const existing = findRustBinary(verbose);
-    if (existing) {
+    if (existing && !devBuildInfo(existing) && !hasValidMacSignature(existing)) {
+      // A downloaded binary macOS would SIGKILL on exec: drop it and fall
+      // through to a fresh download instead of dying silently.
+      process.stderr.write(
+        `\x1b[33m[rust] Cached binary has an invalid code signature, re-downloading: ${existing}\x1b[0m\n`,
+      );
+      try {
+        unlinkSync(existing);
+      } catch {}
+    } else if (existing) {
       if (verbose) {
         console.log(`[rust] Using existing binary: ${existing}`);
       }

package/ts/serveLock.bun.spec.ts

@@ -192,9 +192,14 @@ describe("acquireWebrtcHostLock — held-lock lifecycle", () => {
     "escalates to SIGKILL when the owner ignores SIGTERM",
     async () => {
       const { spawn } = await import("node:child_process");
-      const stubborn = spawn("/bin/sh", ["-c", "trap '' TERM; sleep 30"], { stdio: "ignore" });
+      // Wait for the child to SAY the trap is installed: a fixed sleep raced it on
+      // a loaded host, so SIGTERM landed before `trap` and killed it outright.
+      const stubborn = spawn("/bin/sh", ["-c", "trap '' TERM; echo ready; sleep 30"], {
+        stdio: ["ignore", "pipe", "ignore"],
+      });
       const pid = stubborn.pid!;
-      await new Promise((r) => setTimeout(r, 100)); // let the trap install
+      await new Promise((r) => stubborn.stdout!.once("data", r));
+      const exited = new Promise((r) => stubborn.once("exit", r));
       const { mkdir: mkd, writeFile: wf } = await import("fs/promises");
       await mkd(path.join(home, "webrtc-host.lock"), { recursive: true });
       await wf(ownerFile(), JSON.stringify({ pid, started_at: Date.now(), beat_at: Date.now() }));
@@ -202,7 +207,7 @@ describe("acquireWebrtcHostLock — held-lock lifecycle", () => {
       const got = await acquireWebrtcHostLock({ takeover: true, graceMs: 0, takeoverWaitMs: 200 });
       expect(got.ok).toBe(true);
       if (got.ok) releases.push(got.release);
-      await new Promise((r) => setTimeout(r, 100));
+      await exited;
       expect(stubborn.signalCode).toBe("SIGKILL");
     },
   );

package/ts/serveLock.spec.ts

@@ -192,9 +192,14 @@ describe("acquireWebrtcHostLock — held-lock lifecycle", () => {
     "escalates to SIGKILL when the owner ignores SIGTERM",
     async () => {
       const { spawn } = await import("node:child_process");
-      const stubborn = spawn("/bin/sh", ["-c", "trap '' TERM; sleep 30"], { stdio: "ignore" });
+      // Wait for the child to SAY the trap is installed: a fixed sleep raced it on
+      // a loaded host, so SIGTERM landed before `trap` and killed it outright.
+      const stubborn = spawn("/bin/sh", ["-c", "trap '' TERM; echo ready; sleep 30"], {
+        stdio: ["ignore", "pipe", "ignore"],
+      });
       const pid = stubborn.pid!;
-      await new Promise((r) => setTimeout(r, 100)); // let the trap install
+      await new Promise((r) => stubborn.stdout!.once("data", r));
+      const exited = new Promise((r) => stubborn.once("exit", r));
       const { mkdir: mkd, writeFile: wf } = await import("fs/promises");
       await mkd(path.join(home, "webrtc-host.lock"), { recursive: true });
       await wf(ownerFile(), JSON.stringify({ pid, started_at: Date.now(), beat_at: Date.now() }));
@@ -202,7 +207,7 @@ describe("acquireWebrtcHostLock — held-lock lifecycle", () => {
       const got = await acquireWebrtcHostLock({ takeover: true, graceMs: 0, takeoverWaitMs: 200 });
       expect(got.ok).toBe(true);
       if (got.ok) releases.push(got.release);
-      await new Promise((r) => setTimeout(r, 100));
+      await exited;
       expect(stubborn.signalCode).toBe("SIGKILL");
     },
   );

package/ts/subcommands.spec.ts

@@ -1633,11 +1633,12 @@ describe("subcommands.cmdSend end-to-end submit-confirm wiring", () => {
       const log = path.join(dir, "a.log");
       await writeFile(log, "❯ \r\n"); // would fail to confirm if checked — but we opt out
       await withDrainedFifo(async (fifo) => {
-        const start = Date.now();
+        // The log never grows, so the confirm path — had it run — would report
+        // "NOT confirmed" and exit non-zero; these two asserts prove it was
+        // skipped. (No wall-clock bound: a <1s limit flaked on a loaded host.)
         const { code, stdout } = await send(fifo, log, "hello", ["--no-wait"]);
         expect(code).toBe(0);
         expect(stdout).not.toMatch(/NOT confirmed/);
-        expect(Date.now() - start).toBeLessThan(1000); // fast — no settle/confirm polling
       });
     } finally {
       await rm(dir, { recursive: true, force: true }).catch(() => null);

package/dist/rustBinary-D59v2mmy.js

@@ -1,4 +0,0 @@
-import "./versionChecker-BtYHFqjF.js";
-import { a as findSpawnHiddenLauncher, c as getBinDir, d as getRustBinary, i as findRustBinary, l as getBinaryName, n as downloadBinary, o as findTrayLauncher, r as findAyrsBinary, s as gcOldBinaryDirs, t as devBuildInfo, u as getDownloadUrl } from "./rustBinary-B_KR43x9.js";
-
-export { findAyrsBinary, gcOldBinaryDirs };

package/dist/trayApp-DAs4YVeV.js

@@ -1,5 +0,0 @@
-import "./versionChecker-BtYHFqjF.js";
-import "./rustBinary-B_KR43x9.js";
-import { a as trayHiddenMarker, i as launchTray, n as hasDesktop, r as isTrayHidden, t as cmdTray } from "./trayApp-7pq0tDGE.js";
-
-export { cmdTray };