agent-yes 1.300.3 → 1.300.4-beta.775.1

package/dist/{SUPPORTED_CLIS-ChSO8FiS.js → SUPPORTED_CLIS-Dca1WOkk.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CCGSbjio.js";
-import "./ts--JmSY117.js";
+import "./versionChecker-B-4-p3q_.js";
+import "./ts-lNj8kZSk.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CWJr4TJH.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-R-XtD570.js";
 
 export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-CWJr4TJH.js → SUPPORTED_CLIS-R-XtD570.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts--JmSY117.js";
+import { t as CLIS_CONFIG } from "./ts-lNj8kZSk.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-CWJr4TJH.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-R-XtD570.js.map

package/dist/{agentShare-NkW0b0mg.js → agentShare-CPfzAr28.js}

@@ -5,11 +5,11 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { nt as resolveOne } from "./subcommands-UWLkF5pq.js";
+import { nt as resolveOne } from "./subcommands-BUEujBnq.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-DFRyWNMs.js";
-import "./remotes-B4v0Nowo.js";
-import { o as startShare } from "./share-C9oGvjXT.js";
+import "./remotes-B4CNXwDS.js";
+import { l as startShare } from "./share-CLataFnI.js";
 
 //#region ts/agentShare.ts
 const MAX_SHARES = 8;
@@ -232,4 +232,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-NkW0b0mg.js.map
+//# sourceMappingURL=agentShare-CPfzAr28.js.map

package/dist/{callback-B8CUyag4.js → callback-DrbPZRQc.js}

@@ -5,11 +5,11 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import "./subcommands-UWLkF5pq.js";
+import "./subcommands-BUEujBnq.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-DFRyWNMs.js";
-import "./remotes-B4v0Nowo.js";
+import "./remotes-B4CNXwDS.js";
 import "./callbackCore-Bl2gGcxg.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-CjlaFXp1.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-eekD5aBe.js";
 
 export { cmdCallback };

package/dist/{callback-CjlaFXp1.js → callback-eekD5aBe.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
-import { nt as resolveOne } from "./subcommands-UWLkF5pq.js";
+import { nt as resolveOne } from "./subcommands-BUEujBnq.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Bl2gGcxg.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-DVoYVgBo.js");
+		const { resolveLocalServeUrl } = await import("./serve-DTZA4xqX.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-CjlaFXp1.js.map
+//# sourceMappingURL=callback-eekD5aBe.js.map

package/dist/{channels-aYwLMbFV.js → channels-rhxQArqN.js}

@@ -387,7 +387,7 @@ function printOp(op) {
 */
 async function runMesh(cwd, entry, opts) {
 	const { ChannelPeer } = await import("./peer-CGSJluSw.js");
-	const { importRTC, getIceServers } = await import("./share-Bmnd_qT0.js");
+	const { importRTC, getIceServers } = await import("./share-nmgSIjYP.js");
 	const rtc = await importRTC();
 	const seen = new Set((await readOps(cwd, entry.channelId)).map((o) => o.id));
 	const peer = new ChannelPeer({
@@ -567,4 +567,4 @@ async function cmdCh(args) {
 
 //#endregion
 export { cmdCh };
-//# sourceMappingURL=channels-aYwLMbFV.js.map
+//# sourceMappingURL=channels-rhxQArqN.js.map

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-zdFbz1ST.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CCGSbjio.js";
-import { d as getRustBinary } from "./rustBinary-gI_r3g9K.js";
+import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-B-4-p3q_.js";
+import { p as getRustBinary } from "./rustBinary-PgvSiDzh.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-BviFOQZE.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-B94mFwcB.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -309,7 +309,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-ChSO8FiS.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-Dca1WOkk.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -360,7 +360,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-ChSO8FiS.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-Dca1WOkk.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/{cmdPs-C8DIl8V6.js → cmdPs-7EkZHFbz.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { V as listRecords, bt as flattenForest, v as deriveLiveState, yt as buildAgentForest } from "./subcommands-UWLkF5pq.js";
+import { V as listRecords, bt as flattenForest, v as deriveLiveState, yt as buildAgentForest } from "./subcommands-BUEujBnq.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-DFRyWNMs.js";
-import "./remotes-B4v0Nowo.js";
+import "./remotes-B4CNXwDS.js";
 import { i as systemStats, n as sampleTrees, r as snapshotProcs, t as humanBytes } from "./procStats-CyD8h5nx.js";
 import yargs from "yargs";
 import { readFileSync } from "node:fs";
@@ -330,4 +330,4 @@ function readPpidSync(pid) {
 
 //#endregion
 export { cmdPs };
-//# sourceMappingURL=cmdPs-C8DIl8V6.js.map
+//# sourceMappingURL=cmdPs-7EkZHFbz.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CCGSbjio.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts--JmSY117.js";
+import "./versionChecker-B-4-p3q_.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-lNj8kZSk.js";
 import { a as renderTree, c as describeBlock, i as renderDigest, l as monitorHint, o as unblockedTasks, r as openBlockers, t as reconcileTodos, u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";

package/dist/{notifyDaemon-DWIfzEE7.js → notifyDaemon-Cmf8ppK6.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { $ as renderLogTailLines, N as isPidAlive, V as listRecords, v as deriveLiveState } from "./subcommands-UWLkF5pq.js";
+import { $ as renderLogTailLines, N as isPidAlive, V as listRecords, v as deriveLiveState } from "./subcommands-BUEujBnq.js";
 import { f as readInbox, g as daemonLockOwnerPath, h as daemonLockDir, i as gcInboxes, l as listInboxParents, m as shouldStealLock, n as appendEvent, s as hostId, u as liveWatchers, x as notifyDir } from "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-DFRyWNMs.js";
-import "./remotes-B4v0Nowo.js";
+import "./remotes-B4CNXwDS.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
 import { randomUUID } from "node:crypto";
 import { execFile, execFileSync } from "node:child_process";
@@ -879,4 +879,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-DWIfzEE7.js.map
+//# sourceMappingURL=notifyDaemon-Cmf8ppK6.js.map

package/dist/{parentPingLoop-Bh3KuFcW.js → parentPingLoop-BQfHtucu.js}

@@ -338,7 +338,7 @@ async function isParentWatching(parentWrapperPid, parentAgentPid, selfAgentPid,
 		logger.debug("[parent-ping] watcher lookup failed:", error);
 	}
 	try {
-		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-BviFOQZE.js");
+		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-B94mFwcB.js");
 		const last = await lastReadAt(`agent:${parentAgentPid}`, selfAgentPid);
 		if (last !== null && now - last <= READ_WINDOW_MS) return true;
 	} catch (error) {
@@ -466,4 +466,4 @@ function startParentPingLoop(opts) {
 
 //#endregion
 export { startParentPingLoop };
-//# sourceMappingURL=parentPingLoop-Bh3KuFcW.js.map
+//# sourceMappingURL=parentPingLoop-BQfHtucu.js.map

package/dist/{remotes-B4v0Nowo.js → remotes-B4CNXwDS.js}

@@ -136,7 +136,7 @@ async function resolveRemoteSpec(spec) {
 * The bridge lives for the rest of the process (torn down on `process.exit`).
 */
 async function resolveWebrtc(link, keyword, label) {
-	const { startWebrtcBridge } = await import("./webrtcRemote-Cd4vTrgv.js");
+	const { startWebrtcBridge } = await import("./webrtcRemote-Cy5kB8aR.js");
 	const bridge = await startWebrtcBridge(link);
 	return {
 		url: bridge.baseUrl,
@@ -321,4 +321,4 @@ async function cmdConnect(rest) {
 
 //#endregion
 export { deleteRemoteAlias as a, parseShareUrl as c, writeRemoteAlias as d, defaultConnectAlias as i, readRemotes as l, cmdConnect as n, maskRemoteUrl as o, cmdRemote as r, parseDirectRemoteSpec as s, MASK as t, resolveRemoteSpec as u };
-//# sourceMappingURL=remotes-B4v0Nowo.js.map
+//# sourceMappingURL=remotes-B4CNXwDS.js.map

package/dist/{remotes-DnMQWaqQ.js → remotes-CQTEY8Gt.js}

@@ -1,5 +1,5 @@
 import "./e2e-z1xpwSAg.js";
 import "./webrtcLink-DFRyWNMs.js";
-import { a as deleteRemoteAlias, c as parseShareUrl, d as writeRemoteAlias, i as defaultConnectAlias, l as readRemotes, n as cmdConnect, o as maskRemoteUrl, r as cmdRemote, s as parseDirectRemoteSpec, t as MASK, u as resolveRemoteSpec } from "./remotes-B4v0Nowo.js";
+import { a as deleteRemoteAlias, c as parseShareUrl, d as writeRemoteAlias, i as defaultConnectAlias, l as readRemotes, n as cmdConnect, o as maskRemoteUrl, r as cmdRemote, s as parseDirectRemoteSpec, t as MASK, u as resolveRemoteSpec } from "./remotes-B4CNXwDS.js";
 
 export { cmdConnect, cmdRemote };

package/dist/rustBinary-DkOJW7Ss.js

@@ -0,0 +1,4 @@
+import "./versionChecker-B-4-p3q_.js";
+import { a as findAyrsBinary, c as findTrayLauncher, d as getBinaryName, f as getDownloadUrl, i as ensureExecutable, l as gcOldBinaryDirs, m as hasValidMacSignature, n as devBuildInfo, o as findRustBinary, p as getRustBinary, r as downloadBinary, s as findSpawnHiddenLauncher, t as chmodExtractedBinaries, u as getBinDir } from "./rustBinary-PgvSiDzh.js";
+
+export { findAyrsBinary, gcOldBinaryDirs };

package/dist/{rustBinary-gI_r3g9K.js → rustBinary-PgvSiDzh.js}

@@ -1,6 +1,6 @@
-import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-CCGSbjio.js";
+import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-B-4-p3q_.js";
 import { execFileSync } from "child_process";
-import { existsSync, mkdirSync, readdirSync, rmSync, statSync, unlinkSync } from "fs";
+import { accessSync, chmodSync, constants, existsSync, mkdirSync, readdirSync, rmSync, statSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
 import path from "path";
 
@@ -172,7 +172,49 @@ function findAyrsBinary() {
 		path.join(getBinDir(), exe),
 		Bun.which("ayrs") ?? ""
 	];
-	for (const p of searchPaths) if (p && existsSync(p)) return p;
+	for (const p of searchPaths) if (p && existsSync(p)) return ensureExecutable(p);
+}
+/**
+* Repair a binary that is present but not executable (POSIX only; Windows has
+* no exec bit). A release bundle that lost its modes in transit, or a cache
+* written by an older fetcher that only chmod'ed the main binary, leaves
+* `ayrs` as a plain file: the daemon then dies with EACCES on every restart
+* and the supervisor loops forever. Best effort — a read-only cache keeps
+* failing, and the caller's spawn reports that.
+*/
+function ensureExecutable(p) {
+	if (process.platform === "win32") return p;
+	try {
+		accessSync(p, constants.X_OK);
+	} catch {
+		try {
+			chmodSync(p, 493);
+		} catch {}
+	}
+	return p;
+}
+/**
+* Mark every regular file a release bundle extracted into `dir` executable.
+* The tarball carries ayrs (and friends) next to the main binary; the modes
+* they arrive with are whatever the packaging pipeline preserved, which has
+* been "none" (CI artifacts drop Unix permissions). Chmod'ing the main binary
+* alone (the old behaviour) left ayrs non-executable — see ensureExecutable.
+*/
+async function chmodExtractedBinaries(dir) {
+	const fixed = [];
+	for (const name of readdirSync(dir)) {
+		const p = path.join(dir, name);
+		let isFile = false;
+		try {
+			isFile = statSync(p).isFile();
+		} catch {
+			continue;
+		}
+		if (!isFile || /\.(tar\.gz|zip|json|txt|md)$/i.test(name)) continue;
+		await chmod(p, 493);
+		fixed.push(name);
+	}
+	return fixed;
 }
 /**
 * Get GitHub release download URL for the binary
@@ -248,6 +290,7 @@ async function downloadBinary(verbose = false) {
 		try {
 			unlinkSync(tarPath);
 		} catch {}
+		await chmodExtractedBinaries(binDir);
 		await chmod(binaryPath, 493);
 	}
 	if (verbose) console.log(`[rust] Binary downloaded to: ${binaryPath}`);
@@ -370,5 +413,5 @@ async function getRustBinary(options = {}) {
 }
 
 //#endregion
-export { findSpawnHiddenLauncher as a, getBinDir as c, getRustBinary as d, hasValidMacSignature as f, findRustBinary as i, getBinaryName as l, downloadBinary as n, findTrayLauncher as o, findAyrsBinary as r, gcOldBinaryDirs as s, devBuildInfo as t, getDownloadUrl as u };
-//# sourceMappingURL=rustBinary-gI_r3g9K.js.map
+export { findAyrsBinary as a, findTrayLauncher as c, getBinaryName as d, getDownloadUrl as f, ensureExecutable as i, gcOldBinaryDirs as l, hasValidMacSignature as m, devBuildInfo as n, findRustBinary as o, getRustBinary as p, downloadBinary as r, findSpawnHiddenLauncher as s, chmodExtractedBinaries as t, getBinDir as u };
+//# sourceMappingURL=rustBinary-PgvSiDzh.js.map

package/dist/{schedule-DryC--yx.js → schedule-Bpy5K-SJ.js}

@@ -1,13 +1,13 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-CCGSbjio.js";
-import "./ts--JmSY117.js";
+import "./versionChecker-B-4-p3q_.js";
+import "./ts-lNj8kZSk.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CWJr4TJH.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-R-XtD570.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
 import { createHash } from "node:crypto";
@@ -154,4 +154,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-DryC--yx.js.map
+//# sourceMappingURL=schedule-Bpy5K-SJ.js.map

package/dist/{serve-DVoYVgBo.js → serve-DTZA4xqX.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-CCGSbjio.js";
-import { a as findSpawnHiddenLauncher } from "./rustBinary-gI_r3g9K.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts--JmSY117.js";
+import { i as getInstalledPackage } from "./versionChecker-B-4-p3q_.js";
+import { s as findSpawnHiddenLauncher } from "./rustBinary-PgvSiDzh.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-lNj8kZSk.js";
 import { t as agentYesHome$1 } from "./agentYesHome-BNtn19J4.js";
 import { u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
@@ -12,25 +12,25 @@ import { t as pgidForWrapper } from "./reaper-UimuuTfO.js";
 import "./todoStore-DF6vxHgV.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CWJr4TJH.js";
-import { $ as renderLogTailLines, C as extractBadges, E as extractTaskCounts, J as readLogForRender, P as isSlashCommand, Q as recentReadEdges, R as isUserTyping, T as extractNeedsInput, V as listRecords, X as readPtysize, Y as readNotes, Z as recentMessageEdges, _t as shouldFramePaste, ct as snapshotStatus, et as renderRawLog, f as cliDefaults, gt as framePaste, h as controlCodeFromName, ht as withIpcLock, mt as writeToIpc, nt as resolveOne, tt as renderRawLogLines, vt as TYPING_BADGE, y as deriveLiveStatus } from "./subcommands-UWLkF5pq.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-R-XtD570.js";
+import { $ as renderLogTailLines, C as extractBadges, E as extractTaskCounts, J as readLogForRender, P as isSlashCommand, Q as recentReadEdges, R as isUserTyping, T as extractNeedsInput, V as listRecords, X as readPtysize, Y as readNotes, Z as recentMessageEdges, _t as shouldFramePaste, ct as snapshotStatus, et as renderRawLog, f as cliDefaults, gt as framePaste, h as controlCodeFromName, ht as withIpcLock, mt as writeToIpc, nt as resolveOne, tt as renderRawLogLines, vt as TYPING_BADGE, y as deriveLiveStatus } from "./subcommands-BUEujBnq.js";
 import { c as isTransientLockMkdirError } from "./notifyStore-2SWKGwZI.js";
 import { i as toWebrtcUrl, n as isWebrtcSpec } from "./webrtcLink-DFRyWNMs.js";
-import "./remotes-B4v0Nowo.js";
+import "./remotes-B4CNXwDS.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Bl2gGcxg.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-CjlaFXp1.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-eekD5aBe.js";
 import { n as sampleTrees } from "./procStats-CyD8h5nx.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
-import { i as importProvisionModule } from "./ws-dc7MP054.js";
+import { i as importProvisionModule } from "./ws-BszLSq2p.js";
 import { r as spawnRejectionReason } from "./spawnGate-YpHopveO.js";
-import { i as launchTray } from "./trayApp-PJrwfyDs.js";
+import { i as launchTray } from "./trayApp-CixEBRfS.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
 import path from "path";
 import { execFileSync } from "node:child_process";
-import { existsSync, renameSync, watch, writeFileSync } from "node:fs";
+import { existsSync, realpathSync, renameSync, watch, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { createHash, createHmac, randomBytes, timingSafeEqual } from "crypto";
 
@@ -459,7 +459,7 @@ function negotiateSize(caps) {
 //#region ts/strayServe.ts
 const MANAGEMENT_COMMAND_RE = /\b(?:install|uninstall|status|logs|restart)\b/;
 function isServeCommand(command) {
-	return /\bay(?:\.js)?\s+serve\b/.test(command) || /\bagent-yes(?:\.js)?\s+serve\b/.test(command) || /\bagent-yes\.js\s+serve\b/.test(command);
+	return /\bay(?:\.js)?\s+serve\b/.test(command) || /\bayrs(?:\.exe)?\s+serve\b/.test(command) || /\bagent-yes(?:\.js)?\s+serve\b/.test(command) || /\bagent-yes\.js\s+serve\b/.test(command);
 }
 function parseStrayServeProcesses(psOutput, opts) {
 	const ignoredPids = new Set([opts.selfPid, opts.parentPid]);
@@ -1102,14 +1102,66 @@ async function bootstrapDaemonManager() {
 function oxmgrCmd(argv) {
 	return argv.map((a) => /[\\\s"]/.test(a) ? `"${a.replace(/"/g, "\\\"")}"` : a).join(" ");
 }
+/**
+* The argv a daemon manager runs for `ay serve …`. Pure so the contract is
+* testable: `which` is the `ay` on PATH (or null), `script` is THIS process's
+* own entry (`process.argv[1]`, always present), `realpath` resolves symlinks.
+*
+* Never bake in the `~/.bun/bin/ay` symlink: `bun add -g` removes and recreates
+* it on every upgrade, and some images ship without it until the first update
+* — a manager that stored it then restarts into ENOENT thousands of times.
+* Resolve to the real file instead, and when nothing is on PATH fall back to
+* the script running this very install (never a bare `ay`, which a manager's
+* minimal PATH cannot resolve). On POSIX the entry is a `#!/usr/bin/env bun`
+* script run via bun; on Windows it is a self-contained exe.
+*/
+function serveLauncher(opts) {
+	const resolve = (p) => {
+		try {
+			return opts.realpath(p);
+		} catch {
+			return p;
+		}
+	};
+	const entry = opts.which ? resolve(opts.which) : opts.script ? resolve(opts.script) : null;
+	if (!entry) return ["ay"];
+	if (opts.platform === "win32") return /\.(exe|cmd|bat)$/i.test(entry) ? [entry] : [opts.execPath, entry];
+	return [opts.execPath, entry];
+}
 function ayServeArgv(args) {
-	const ayBin = Bun.which("ay");
 	return [
-		...ayBin ? process.platform === "win32" ? [ayBin] : [process.execPath, ayBin] : ["ay"],
+		...serveLauncher({
+			which: Bun.which("ay"),
+			script: process.argv[1],
+			execPath: process.execPath,
+			platform: process.platform,
+			realpath: realpathSync
+		}),
 		"serve",
 		...args
 	];
 }
+const LEGACY_AYRS_TASK = "com.snomiao.ayrs-serve";
+function legacyAyrsTaskArgv(step) {
+	const base = [
+		"schtasks",
+		`/${step}`,
+		"/tn",
+		LEGACY_AYRS_TASK
+	];
+	return step === "query" ? [
+		...base,
+		"/fo",
+		"LIST"
+	] : step === "delete" ? [...base, "/f"] : base;
+}
+async function stopLegacyAyrsTask() {
+	if (process.platform !== "win32") return;
+	if (await spawnExit(legacyAyrsTaskArgv("query")) !== 0) return;
+	process.stdout.write(`stopping legacy scheduled task '${LEGACY_AYRS_TASK}' (it would keep hosting the WebRTC room)\n`);
+	await spawnExit(legacyAyrsTaskArgv("end"));
+	await spawnExit(legacyAyrsTaskArgv("delete"));
+}
 const WIN_RUN_KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
 const WIN_RUN_VALUE = DAEMON_NAME;
 async function ensureBootAutostart(mgr) {
@@ -1290,6 +1342,11 @@ async function warnStrayServeProcesses() {
 	const pids = stray.map((p) => p.pid);
 	process.stderr.write(`warning: ${stray.length} unmanaged ay serve process(es) running (pid ${pids.join(", ")}) — they will fight the daemon for the WebRTC room; stop them: kill ${pids.join(" ")}\n`);
 }
+async function daemonShareRuntime(args) {
+	const { daemonShareRuntime: decide } = await import("./serveRust-BAawe83i.js");
+	const { findAyrsBinary } = await import("./rustBinary-DkOJW7Ss.js");
+	return decide(args, () => !!findAyrsBinary());
+}
 function explicitWebrtcUrl(args) {
 	for (let i = 0; i < args.length; i++) {
 		const a = args[i];
@@ -1401,6 +1458,7 @@ async function cmdServeDaemon(sub, args) {
 			}
 		}
 		if (removed === 0 && failed === 0) process.stdout.write(`no '${DAEMON_NAME}' daemon registered with any manager\n`);
+		await stopLegacyAyrsTask();
 		await warnStrayServeProcesses();
 		return failed ? 1 : 0;
 	}
@@ -1422,19 +1480,25 @@ async function cmdServeDaemon(sub, args) {
 		const webrtcDaemon = effArgs.some((a) => a.startsWith("--webrtc") || a.startsWith("--share"));
 		let shareLink = null;
 		let shareLinkMinted = false;
+		let roomFile = ".share-room";
 		if (webrtcDaemon) try {
-			const { loadOrCreateShareRoom, shareLinkFromRoomUrl } = await import("./share-Bmnd_qT0.js");
+			const { loadOrCreateShareRoom, shareLinkFromRoomUrl, shareRoomFileName } = await import("./share-nmgSIjYP.js");
+			const runtime = await daemonShareRuntime(effArgs);
+			roomFile = shareRoomFileName(runtime);
 			const explicit = explicitWebrtcUrl(effArgs);
-			shareLink = shareLinkFromRoomUrl(explicit ?? await loadOrCreateShareRoom());
+			shareLink = shareLinkFromRoomUrl(explicit ?? await loadOrCreateShareRoom(void 0, runtime));
 			shareLinkMinted = !explicit;
 		} catch {}
 		const emitShareLink = async () => {
 			if (!webrtcDaemon) return;
 			if (shareLink) {
-				process.stdout.write(`\nshared over WebRTC — open this link (the token is eaten from the URL on open):\n  ${shareLink}\n` + (shareLinkMinted ? `  (persistent room — same link across restarts; delete ~/.agent-yes/.share-room to rotate)\n` : ``));
+				process.stdout.write(`\nshared over WebRTC — open this link (the token is eaten from the URL on open):\n  ${shareLink}\n` + (shareLinkMinted ? `  (persistent room — same link across restarts; delete ~/.agent-yes/${roomFile} to rotate)\n` : ``));
 				const { offerOpenInBrowser } = await import("./openBrowser-THOzOGNm.js");
 				await offerOpenInBrowser(shareLink);
-			} else process.stdout.write("\nthe WebRTC share link carries a secret, so the daemon does NOT log it —\nread it from ~/.agent-yes/.share-link (mode 0600). The room persists in\n~/.agent-yes/.share-room, so the link survives restarts.\n");
+			} else process.stdout.write(`
+the WebRTC share link carries a secret, so the daemon does NOT log it —
+read it with \`ay share status\`. The room persists in
+~/.agent-yes/${roomFile}, so the link survives restarts.\n`);
 		};
 		if (priorArgs !== null) {
 			const sameConfig = JSON.stringify(effArgs) === JSON.stringify(priorArgs);
@@ -1457,7 +1521,9 @@ async function cmdServeDaemon(sub, args) {
 				DAEMON_NAME
 			]);
 		}
+		await stopLegacyAyrsTask();
 		await warnStrayServeProcesses();
+		await unlink(heartbeatPath()).catch(() => {});
 		const serveArgv = ayServeArgv(effArgs);
 		const spawnHidden = findSpawnHiddenLauncher();
 		const managedArgv = spawnHidden ? [spawnHidden, ...serveArgv] : serveArgv;
@@ -1574,9 +1640,10 @@ async function cmdServeStatus(args) {
 	const json = args.includes("--json");
 	const mgr = await resolveActiveManager();
 	const token = await loadTokenReadOnly();
-	const shareLink = await readShareLink();
 	const daemonArgs = mgr ? await readDaemonServeArgs(mgr) : null;
 	const installed = daemonArgs !== null;
+	const { daemonShareLink } = await import("./shareCmd-DTCJK1RC.js");
+	const shareLink = (installed ? await daemonShareLink(daemonArgs) : null) ?? await readShareLink();
 	const running = installed ? await readDaemonRunning(mgr) : false;
 	const a = daemonArgs ?? [];
 	const local = argsUsePortless(a);
@@ -1681,8 +1748,9 @@ Modes (default: --http):
                     agent-yes.com, or pass a room link to join that room:
                     https://agent-yes.com/room/#room=<id>&s=e1.<secret>).
                     Alone it needs NO port — combine with --http for both.
-                    The minted room persists in ~/.agent-yes/.share-room
-                    (stable link across restarts; delete the file to rotate).
+                    The minted room persists in ~/.agent-yes/.share-room-ayrs
+                    (.share-room under --no-rust); stable link across restarts,
+                    delete the file to rotate.
   --share [URL]     Legacy alias for --http --webrtc
 
 Runtime: like \`ay <cli>\`, the Rust daemon (ayrs serve) runs by default for
@@ -1701,10 +1769,10 @@ Options:
 		return 0;
 	}
 	{
-		const { planRustServe } = await import("./serveRust-DDQiZmMf.js");
+		const { planRustServe } = await import("./serveRust-BAawe83i.js");
 		const plan = planRustServe(rest);
 		if (plan.kind === "rust") {
-			const { findAyrsBinary } = await import("./rustBinary-BNmAJEBb.js");
+			const { findAyrsBinary } = await import("./rustBinary-DkOJW7Ss.js");
 			const ayrs = findAyrsBinary();
 			if (ayrs) return runAyrsServe(ayrs, plan.argv);
 			process.stderr.write("ay serve: ayrs binary not found — running the TypeScript server (bun run build:rs, or reinstall, to get the Rust daemon)\n");
@@ -2679,7 +2747,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-DnBg8-g-.js");
+			const ws = await import("./ws-DncmqAsv.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2699,7 +2767,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-DnBg8-g-.js");
+			const ws = await import("./ws-DncmqAsv.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2721,7 +2789,7 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/ws/repos") {
-			const ws = await import("./ws-DnBg8-g-.js");
+			const ws = await import("./ws-DncmqAsv.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2802,7 +2870,7 @@ Options:
 			const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
 			if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..") return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
 			const [, owner, repo] = m;
-			const ws = await import("./ws-DnBg8-g-.js");
+			const ws = await import("./ws-DncmqAsv.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -3720,7 +3788,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-NkW0b0mg.js");
+				const { createScopedShare } = await import("./agentShare-CPfzAr28.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3735,12 +3803,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-NkW0b0mg.js");
+			const { listShares } = await import("./agentShare-CPfzAr28.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-NkW0b0mg.js");
+			const { revokeShare } = await import("./agentShare-CPfzAr28.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -4002,7 +4070,7 @@ Options:
 	if (wantWebrtc) {
 		const explicitUrl = explicitRoomUrl;
 		try {
-			const { startShare, loadOrCreateShareRoom } = await import("./share-Bmnd_qT0.js");
+			const { startShare, loadOrCreateShareRoom } = await import("./share-nmgSIjYP.js");
 			const linkFile = path.join(process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"), ".share-link");
 			const announce = async (room, link, joinLink, rotated) => {
 				const lead = rotated ? "the room was rejected by signaling (stale generation) — rotated to a fresh link" : "shared over WebRTC — open this link (the token is eaten from the URL on open)";
@@ -4052,7 +4120,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-NkW0b0mg.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-CPfzAr28.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -4065,4 +4133,4 @@ Options:
 
 //#endregion
 export { cmdServe, inspectServeDaemon, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-DVoYVgBo.js.map
+//# sourceMappingURL=serve-DTZA4xqX.js.map