agent-yes 1.302.2 → 1.303.0

package/dist/{SUPPORTED_CLIS-C5Uhdl61.js → SUPPORTED_CLIS-BvWBFlrN.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DrjMn-XI.js";
-import "./ts-D29CMeWZ.js";
+import "./versionChecker-CFyZKym2.js";
+import "./ts-Bm6FhYS4.js";
 import "./todoAutomation-TTp_Qz9G.js";
 import "./JsonlStore-BpYZZTap.js";
 import "./globalPidIndex-CRB5KtyL.js";
 import "./pidStore-433kvh9D.js";
 import "./messageLog-Dq_ka-Bt.js";
 import "./todoStore-C9RTz0Vs.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-FBshN0v2.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CqmE-ESB.js";
 
 export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-FBshN0v2.js → SUPPORTED_CLIS-CqmE-ESB.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-D29CMeWZ.js";
+import { t as CLIS_CONFIG } from "./ts-Bm6FhYS4.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-FBshN0v2.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-CqmE-ESB.js.map

package/dist/{agentShare-CNgCQMY9.js → agentShare-Gb4vxJzE.js}

@@ -5,10 +5,10 @@ import "./pidStore-433kvh9D.js";
 import "./messageLog-Dq_ka-Bt.js";
 import "./e2e-BdLf8DvY.js";
 import "./configShared-De4bR5hH.js";
-import { nt as resolveOne } from "./subcommands-fX4Ygx3a.js";
+import { nt as resolveOne } from "./subcommands-Cc6bmEnB.js";
 import "./notifyStore-DI4iKFut.js";
-import "./webrtcLink-CKnjNGaV.js";
-import "./remotes-D10E_xUn.js";
+import "./webrtcLink-bWxiCBTV.js";
+import "./remotes-COBEhmlr.js";
 import { l as startShare } from "./share-Jl8Eia9b.js";
 
 //#region ts/agentShare.ts
@@ -232,4 +232,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-CNgCQMY9.js.map
+//# sourceMappingURL=agentShare-Gb4vxJzE.js.map

package/dist/{callback-ayc9yXqJ.js → callback-CuIY-75l.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-JmJC28YX.js";
-import { nt as resolveOne } from "./subcommands-fX4Ygx3a.js";
+import { nt as resolveOne } from "./subcommands-Cc6bmEnB.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-DXVwvq0X.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-DdHbUWtG.js");
+		const { resolveLocalServeUrl } = await import("./serve-BWy7zL7j.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-ayc9yXqJ.js.map
+//# sourceMappingURL=callback-CuIY-75l.js.map

package/dist/{callback-CbZ-H_Pn.js → callback-ZzRPkYjf.js}

@@ -5,11 +5,11 @@ import "./pidStore-433kvh9D.js";
 import "./messageLog-Dq_ka-Bt.js";
 import "./e2e-BdLf8DvY.js";
 import "./configShared-De4bR5hH.js";
-import "./subcommands-fX4Ygx3a.js";
+import "./subcommands-Cc6bmEnB.js";
 import "./notifyStore-DI4iKFut.js";
-import "./webrtcLink-CKnjNGaV.js";
-import "./remotes-D10E_xUn.js";
+import "./webrtcLink-bWxiCBTV.js";
+import "./remotes-COBEhmlr.js";
 import "./callbackCore-DXVwvq0X.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-ayc9yXqJ.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-CuIY-75l.js";
 
 export { cmdCallback };

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-zdFbz1ST.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DrjMn-XI.js";
-import { p as getRustBinary } from "./rustBinary-Btf18sk5.js";
+import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-CFyZKym2.js";
+import { p as getRustBinary } from "./rustBinary-eOcvZ5yS.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-oIARj_mJ.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-C627cuOl.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -309,7 +309,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-C5Uhdl61.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BvWBFlrN.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -360,7 +360,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-C5Uhdl61.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BvWBFlrN.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/{cmdPs-CDj-l5Pk.js → cmdPs-DSKYjOKS.js}

@@ -5,10 +5,10 @@ import "./pidStore-433kvh9D.js";
 import "./messageLog-Dq_ka-Bt.js";
 import "./e2e-BdLf8DvY.js";
 import "./configShared-De4bR5hH.js";
-import { V as listRecords, bt as flattenForest, v as deriveLiveState, yt as buildAgentForest } from "./subcommands-fX4Ygx3a.js";
+import { V as listRecords, bt as flattenForest, v as deriveLiveState, yt as buildAgentForest } from "./subcommands-Cc6bmEnB.js";
 import "./notifyStore-DI4iKFut.js";
-import "./webrtcLink-CKnjNGaV.js";
-import "./remotes-D10E_xUn.js";
+import "./webrtcLink-bWxiCBTV.js";
+import "./remotes-COBEhmlr.js";
 import { i as systemStats, n as sampleTrees, r as snapshotProcs, t as humanBytes } from "./procStats-xvUthnOx.js";
 import yargs from "yargs";
 import { readFileSync } from "node:fs";
@@ -330,4 +330,4 @@ function readPpidSync(pid) {
 
 //#endregion
 export { cmdPs };
-//# sourceMappingURL=cmdPs-CDj-l5Pk.js.map
+//# sourceMappingURL=cmdPs-DSKYjOKS.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DrjMn-XI.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-D29CMeWZ.js";
+import "./versionChecker-CFyZKym2.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-Bm6FhYS4.js";
 import { a as renderTree, c as describeBlock, i as renderDigest, l as monitorHint, o as unblockedTasks, r as openBlockers, t as reconcileTodos, u as removeControlCharacters } from "./todoAutomation-TTp_Qz9G.js";
 import "./JsonlStore-BpYZZTap.js";
 import "./globalPidIndex-CRB5KtyL.js";

package/dist/{notifyDaemon-DZbd5fTj.js → notifyDaemon-C_gTWqYZ.js}

@@ -5,10 +5,10 @@ import "./pidStore-433kvh9D.js";
 import "./messageLog-Dq_ka-Bt.js";
 import "./e2e-BdLf8DvY.js";
 import "./configShared-De4bR5hH.js";
-import { $ as renderLogTailLines, N as isPidAlive, V as listRecords, v as deriveLiveState } from "./subcommands-fX4Ygx3a.js";
+import { $ as renderLogTailLines, N as isPidAlive, V as listRecords, v as deriveLiveState } from "./subcommands-Cc6bmEnB.js";
 import { f as readInbox, g as daemonLockOwnerPath, h as daemonLockDir, i as gcInboxes, l as listInboxParents, m as shouldStealLock, n as appendEvent, s as hostId, u as liveWatchers, x as notifyDir } from "./notifyStore-DI4iKFut.js";
-import "./webrtcLink-CKnjNGaV.js";
-import "./remotes-D10E_xUn.js";
+import "./webrtcLink-bWxiCBTV.js";
+import "./remotes-COBEhmlr.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
 import { randomUUID } from "node:crypto";
 import { execFile, execFileSync } from "node:child_process";
@@ -879,4 +879,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-DZbd5fTj.js.map
+//# sourceMappingURL=notifyDaemon-C_gTWqYZ.js.map

package/dist/{parentPingLoop-Bim6u0OH.js → parentPingLoop-BhVR1EQm.js}

@@ -338,7 +338,7 @@ async function isParentWatching(parentWrapperPid, parentAgentPid, selfAgentPid,
 		logger.debug("[parent-ping] watcher lookup failed:", error);
 	}
 	try {
-		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-oIARj_mJ.js");
+		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-C627cuOl.js");
 		const last = await lastReadAt(`agent:${parentAgentPid}`, selfAgentPid);
 		if (last !== null && now - last <= READ_WINDOW_MS) return true;
 	} catch (error) {
@@ -466,4 +466,4 @@ function startParentPingLoop(opts) {
 
 //#endregion
 export { startParentPingLoop };
-//# sourceMappingURL=parentPingLoop-Bim6u0OH.js.map
+//# sourceMappingURL=parentPingLoop-BhVR1EQm.js.map

package/dist/{remotes-ByjpYjQ9.js → remotes-C36aI8Ty.js}

@@ -1,5 +1,5 @@
 import "./e2e-BdLf8DvY.js";
-import "./webrtcLink-CKnjNGaV.js";
-import { a as deleteRemoteAlias, c as parseShareUrl, d as writeRemoteAlias, i as defaultConnectAlias, l as readRemotes, n as cmdConnect, o as maskRemoteUrl, r as cmdRemote, s as parseDirectRemoteSpec, t as MASK, u as resolveRemoteSpec } from "./remotes-D10E_xUn.js";
+import "./webrtcLink-bWxiCBTV.js";
+import { a as deleteRemoteAlias, c as parseShareUrl, d as writeRemoteAlias, i as defaultConnectAlias, l as readRemotes, n as cmdConnect, o as maskRemoteUrl, r as cmdRemote, s as parseDirectRemoteSpec, t as MASK, u as resolveRemoteSpec } from "./remotes-COBEhmlr.js";
 
 export { cmdConnect, cmdRemote };

package/dist/{remotes-D10E_xUn.js → remotes-COBEhmlr.js}

@@ -1,4 +1,4 @@
-import { i as parseWebrtcLink, r as isWebrtcSpec } from "./webrtcLink-CKnjNGaV.js";
+import { a as parseWebrtcLink, i as isWebrtcSpec, o as toWebrtcUrl, r as hasJoinSecret } from "./webrtcLink-bWxiCBTV.js";
 import { mkdir, readFile, writeFile } from "fs/promises";
 import { homedir } from "os";
 import path from "path";
@@ -136,12 +136,12 @@ async function resolveRemoteSpec(spec) {
 * The bridge lives for the rest of the process (torn down on `process.exit`).
 */
 async function resolveWebrtc(link, keyword, label) {
-	const { startWebrtcBridge } = await import("./webrtcRemote-BYy2lTTl.js");
-	const bridge = await startWebrtcBridge(link);
+	const { startWebrtcBridge } = await import("./webrtcRemote-RmkbzY6Y.js");
+	const bridge = await startWebrtcBridge(link, { keyword });
 	return {
 		url: bridge.baseUrl,
 		token: bridge.token,
-		keyword,
+		keyword: bridge.keyword,
 		label
 	};
 }
@@ -295,7 +295,7 @@ async function cmdConnect(rest) {
 	}
 	const alias = aliasArg ?? defaultConnectAlias(link);
 	if (!parsed) await writeRemoteAlias(alias, {
-		url: link,
+		url: hasJoinSecret(link) ? toWebrtcUrl(link) ?? link : link,
 		token: ""
 	});
 	else {
@@ -321,4 +321,4 @@ async function cmdConnect(rest) {
 
 //#endregion
 export { deleteRemoteAlias as a, parseShareUrl as c, writeRemoteAlias as d, defaultConnectAlias as i, readRemotes as l, cmdConnect as n, maskRemoteUrl as o, cmdRemote as r, parseDirectRemoteSpec as s, MASK as t, resolveRemoteSpec as u };
-//# sourceMappingURL=remotes-D10E_xUn.js.map
+//# sourceMappingURL=remotes-COBEhmlr.js.map

package/dist/{rustBinary-DklBSefL.js → rustBinary-Ep0x7WrS.js}

@@ -1,4 +1,4 @@
-import "./versionChecker-DrjMn-XI.js";
-import { a as findAyrsBinary, c as findTrayLauncher, d as getBinaryName, f as getDownloadUrl, i as ensureExecutable, l as gcOldBinaryDirs, m as hasValidMacSignature, n as devBuildInfo, o as findRustBinary, p as getRustBinary, r as downloadBinary, s as findSpawnHiddenLauncher, t as chmodExtractedBinaries, u as getBinDir } from "./rustBinary-Btf18sk5.js";
+import "./versionChecker-CFyZKym2.js";
+import { a as findAyrsBinary, c as findTrayLauncher, d as getBinaryName, f as getDownloadUrl, i as ensureExecutable, l as gcOldBinaryDirs, m as hasValidMacSignature, n as devBuildInfo, o as findRustBinary, p as getRustBinary, r as downloadBinary, s as findSpawnHiddenLauncher, t as chmodExtractedBinaries, u as getBinDir } from "./rustBinary-eOcvZ5yS.js";
 
 export { findAyrsBinary, gcOldBinaryDirs };

package/dist/{rustBinary-Btf18sk5.js → rustBinary-eOcvZ5yS.js}

@@ -1,4 +1,4 @@
-import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-DrjMn-XI.js";
+import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-CFyZKym2.js";
 import { execFileSync } from "child_process";
 import { accessSync, chmodSync, constants, existsSync, mkdirSync, readdirSync, rmSync, statSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -414,4 +414,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { findAyrsBinary as a, findTrayLauncher as c, getBinaryName as d, getDownloadUrl as f, ensureExecutable as i, gcOldBinaryDirs as l, hasValidMacSignature as m, devBuildInfo as n, findRustBinary as o, getRustBinary as p, downloadBinary as r, findSpawnHiddenLauncher as s, chmodExtractedBinaries as t, getBinDir as u };
-//# sourceMappingURL=rustBinary-Btf18sk5.js.map
+//# sourceMappingURL=rustBinary-eOcvZ5yS.js.map

package/dist/{schedule-DzqTosvJ.js → schedule-E2QlsME5.js}

@@ -1,13 +1,13 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DrjMn-XI.js";
-import "./ts-D29CMeWZ.js";
+import "./versionChecker-CFyZKym2.js";
+import "./ts-Bm6FhYS4.js";
 import "./todoAutomation-TTp_Qz9G.js";
 import "./JsonlStore-BpYZZTap.js";
 import "./globalPidIndex-CRB5KtyL.js";
 import "./pidStore-433kvh9D.js";
 import "./messageLog-Dq_ka-Bt.js";
 import "./todoStore-C9RTz0Vs.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-FBshN0v2.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CqmE-ESB.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-CWGh8o36.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-oANVaOqi.js";
 import { createHash } from "node:crypto";
@@ -154,4 +154,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-DzqTosvJ.js.map
+//# sourceMappingURL=schedule-E2QlsME5.js.map

package/dist/{serve-DdHbUWtG.js → serve-BWy7zL7j.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-DrjMn-XI.js";
-import { s as findSpawnHiddenLauncher } from "./rustBinary-Btf18sk5.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-D29CMeWZ.js";
+import { i as getInstalledPackage } from "./versionChecker-CFyZKym2.js";
+import { s as findSpawnHiddenLauncher } from "./rustBinary-eOcvZ5yS.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-Bm6FhYS4.js";
 import { t as agentYesHome$1 } from "./agentYesHome-JmJC28YX.js";
 import { u as removeControlCharacters } from "./todoAutomation-TTp_Qz9G.js";
 import "./JsonlStore-BpYZZTap.js";
@@ -12,19 +12,19 @@ import { t as pgidForWrapper } from "./reaper-C2cuougX.js";
 import "./todoStore-C9RTz0Vs.js";
 import "./e2e-BdLf8DvY.js";
 import "./configShared-De4bR5hH.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-FBshN0v2.js";
-import { $ as renderLogTailLines, C as extractBadges, E as extractTaskCounts, J as readLogForRender, P as isSlashCommand, Q as recentReadEdges, R as isUserTyping, T as extractNeedsInput, V as listRecords, X as readPtysize, Y as readNotes, Z as recentMessageEdges, _t as shouldFramePaste, ct as snapshotStatus, et as renderRawLog, f as cliDefaults, gt as framePaste, h as controlCodeFromName, ht as withIpcLock, mt as writeToIpc, nt as resolveOne, tt as renderRawLogLines, vt as TYPING_BADGE, y as deriveLiveStatus } from "./subcommands-fX4Ygx3a.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CqmE-ESB.js";
+import { $ as renderLogTailLines, C as extractBadges, E as extractTaskCounts, J as readLogForRender, P as isSlashCommand, Q as recentReadEdges, R as isUserTyping, T as extractNeedsInput, V as listRecords, X as readPtysize, Y as readNotes, Z as recentMessageEdges, _t as shouldFramePaste, ct as snapshotStatus, et as renderRawLog, f as cliDefaults, gt as framePaste, h as controlCodeFromName, ht as withIpcLock, mt as writeToIpc, nt as resolveOne, tt as renderRawLogLines, vt as TYPING_BADGE, y as deriveLiveStatus } from "./subcommands-Cc6bmEnB.js";
 import { c as isTransientLockMkdirError } from "./notifyStore-DI4iKFut.js";
-import { a as toWebrtcUrl, r as isWebrtcSpec } from "./webrtcLink-CKnjNGaV.js";
-import "./remotes-D10E_xUn.js";
+import { i as isWebrtcSpec, o as toWebrtcUrl } from "./webrtcLink-bWxiCBTV.js";
+import "./remotes-COBEhmlr.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-DXVwvq0X.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-ayc9yXqJ.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-CuIY-75l.js";
 import { n as sampleTrees } from "./procStats-xvUthnOx.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-CWGh8o36.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-oANVaOqi.js";
-import { i as importProvisionModule } from "./ws-Cbx5sfsd.js";
+import { i as importProvisionModule } from "./ws-DCcdDRXH.js";
 import { r as spawnRejectionReason } from "./spawnGate-SX13EqI3.js";
-import { i as launchTray } from "./trayApp-DWVdr0Pr.js";
+import { i as launchTray } from "./trayApp-D0UYVT6n.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -1343,8 +1343,8 @@ async function warnStrayServeProcesses() {
 	process.stderr.write(`warning: ${stray.length} unmanaged ay serve process(es) running (pid ${pids.join(", ")}) — they will fight the daemon for the WebRTC room; stop them: kill ${pids.join(" ")}\n`);
 }
 async function daemonShareRuntime(args) {
-	const { daemonShareRuntime: decide } = await import("./serveRust-BEzTqFRy.js");
-	const { findAyrsBinary } = await import("./rustBinary-DklBSefL.js");
+	const { daemonShareRuntime: decide } = await import("./serveRust-BgY5Te5E.js");
+	const { findAyrsBinary } = await import("./rustBinary-Ep0x7WrS.js");
 	return decide(args, () => !!findAyrsBinary());
 }
 function explicitWebrtcUrl(args) {
@@ -1642,7 +1642,7 @@ async function cmdServeStatus(args) {
 	const token = await loadTokenReadOnly();
 	const daemonArgs = mgr ? await readDaemonServeArgs(mgr) : null;
 	const installed = daemonArgs !== null;
-	const { daemonShareLink, foregroundAyrsShareLink } = await import("./shareCmd-DinezAHY.js");
+	const { daemonShareLink, foregroundAyrsShareLink } = await import("./shareCmd-Drxb-SjM.js");
 	const shareLink = (installed ? await daemonShareLink(daemonArgs) : await foregroundAyrsShareLink()) ?? await readShareLink();
 	const running = installed ? await readDaemonRunning(mgr) : false;
 	const a = daemonArgs ?? [];
@@ -1752,6 +1752,10 @@ Modes (default: --http):
                     (.share-room under --no-rust); stable link across restarts,
                     delete the file to rotate.
   --share [URL]     Legacy alias for --http --webrtc
+  --webrtc URL --join
+                    Host URL's room as one more member next to its other
+                    hosts (all members' agents show up for every viewer).
+                    Needs AY_JOIN_SECRET; AY_NAME names this member.
 
 Runtime: like \`ay <cli>\`, the Rust daemon (ayrs serve) runs by default for
   the flags it supports — --webrtc [webrtc://url], --port N, --sighost H.
@@ -1765,18 +1769,31 @@ Options:
   -d, --daemon      Install these flags as a background daemon (pm2/oxmgr)
                     (same as: ay serve install <flags>)
   --local           Explicitly use Portless (the default for HTTP mode)
-                    ${portlessConsoleUrl()}\n  --allow-spawn     Deprecated no-op — the console can always spawn agents\n  --tls-cert FILE   TLS certificate PEM\n  --tls-key  FILE   TLS private key PEM\n\nSubcommands:\n  ay serve install    install as background daemon (oxmgr; pm2 fallback on Windows without the winfix build)\n  ay serve status     show daemon/server status (add --json for scripts)\n  ay serve uninstall  remove daemon\n  ay serve logs       view daemon logs\n\nOnce running, connect from another machine:\n  ay ls   <token>@<host>:<port>\n  ay remote add <alias> http://<token>@<host>:<port>\n`);
+                    ${portlessConsoleUrl()}\n  --allow-spawn     Deprecated no-op — the console can always spawn agents\n  --tls-cert FILE   TLS certificate PEM\n  --tls-key  FILE   TLS private key PEM\n\nSubcommands:\n  ay serve install    install as background daemon (oxmgr; pm2 fallback on Windows without the winfix build)\n  ay serve status     show daemon/server status (add --json for scripts)\n  ay serve uninstall  remove daemon\n  ay serve logs       view daemon logs\n  ay serve join-secret [--webrtc URL]\n                      print AY_ROOM + AY_JOIN_SECRET for members of this\n                      host's room (mints the secret; the room then requires it)\n\nOnce running, connect from another machine:\n  ay ls   <token>@<host>:<port>\n  ay remote add <alias> http://<token>@<host>:<port>\n`);
 		return 0;
 	}
 	{
-		const { planRustServe } = await import("./serveRust-BEzTqFRy.js");
+		const { planRustServe } = await import("./serveRust-BgY5Te5E.js");
 		const plan = planRustServe(rest);
+		if (plan.kind === "rust-only") {
+			const { findAyrsBinary } = await import("./rustBinary-Ep0x7WrS.js");
+			const ayrs = findAyrsBinary();
+			if (ayrs) return runAyrsServe(ayrs, plan.argv);
+			process.stderr.write(`ay serve: ${plan.feature} needs the Rust daemon (ayrs), which was not found (bun run build:rs, or reinstall)\n`);
+			return 1;
+		}
 		if (plan.kind === "rust") {
-			const { findAyrsBinary } = await import("./rustBinary-DklBSefL.js");
+			const { findAyrsBinary } = await import("./rustBinary-Ep0x7WrS.js");
 			const ayrs = findAyrsBinary();
 			if (ayrs) return runAyrsServe(ayrs, plan.argv);
 			process.stderr.write("ay serve: ayrs binary not found — running the TypeScript server (bun run build:rs, or reinstall, to get the Rust daemon)\n");
-		} else rest = plan.rest;
+		} else {
+			rest = plan.rest;
+			if (rest[0] === "join-secret" || rest.includes("--join")) {
+				process.stderr.write(`ay serve: ${plan.reason}: joining rooms needs the Rust daemon\n`);
+				return 1;
+			}
+		}
 	}
 	const sub = rest[0];
 	if (sub === "status") return cmdServeStatus(rest.slice(1));
@@ -2747,7 +2764,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-DDB8jh0f.js");
+			const ws = await import("./ws-DmiSL50p.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2767,7 +2784,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-DDB8jh0f.js");
+			const ws = await import("./ws-DmiSL50p.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2789,7 +2806,7 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/ws/repos") {
-			const ws = await import("./ws-DDB8jh0f.js");
+			const ws = await import("./ws-DmiSL50p.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2870,7 +2887,7 @@ Options:
 			const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
 			if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..") return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
 			const [, owner, repo] = m;
-			const ws = await import("./ws-DDB8jh0f.js");
+			const ws = await import("./ws-DmiSL50p.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -3788,7 +3805,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-CNgCQMY9.js");
+				const { createScopedShare } = await import("./agentShare-Gb4vxJzE.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3803,12 +3820,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-CNgCQMY9.js");
+			const { listShares } = await import("./agentShare-Gb4vxJzE.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-CNgCQMY9.js");
+			const { revokeShare } = await import("./agentShare-Gb4vxJzE.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -4120,7 +4137,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-CNgCQMY9.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-Gb4vxJzE.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -4133,4 +4150,4 @@ Options:
 
 //#endregion
 export { cmdServe, inspectServeDaemon, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-DdHbUWtG.js.map
+//# sourceMappingURL=serve-BWy7zL7j.js.map

package/dist/{serveRust-BEzTqFRy.js → serveRust-BgY5Te5E.js}

@@ -1,3 +1,6 @@
+import "./e2e-BdLf8DvY.js";
+import { o as toWebrtcUrl } from "./webrtcLink-bWxiCBTV.js";
+
 //#region ts/serveRust.ts
 /**
 * `ay serve` → `ayrs serve` delegation.
@@ -11,7 +14,10 @@
 *
 * What delegates today — exactly the flags `ayrs serve` accepts:
 *   --webrtc            (bare: load/mint the persisted room)
-*   --webrtc <url>      / --webrtc=<url>   (a webrtc:// room url)
+*   --webrtc <link>     / --webrtc=<link>  (a room link, any spelling; passed on
+*                                          as webrtc://)
+*   --join              (host that room as one of its members; ayrs only)
+*   join-secret         (print the link + join secret members need; ayrs only)
 *   --port <n>          / --port=<n>       (loopback HTTP console; 0 = free port)
 *   --sighost <host>    / --sighost=<host>
 *
@@ -23,7 +29,7 @@
 *     healthcheck) and -d/--daemon: ayrs has its own OS-supervisor install and
 *     the two must not manage each other's registration
 *   - --share (http+webrtc over Portless), --http, --host, --token, --tls-*,
-*     --local, https room links (ayrs pins rooms by webrtc:// url only)
+*     --local
 */
 /** Subcommands `ay serve` dispatches before flag parsing — never delegated. */
 const SERVE_SUBCOMMANDS = new Set([
@@ -58,6 +64,23 @@ function planRustServe(rest, env = process.env) {
 		rest
 	};
 	const first = rest[0];
+	if (first === "join-secret") {
+		const flags = rest.slice(1);
+		const plan = flags.length ? planRustServe(flags, env) : {
+			kind: "rust",
+			argv: ["serve"]
+		};
+		if (plan.kind !== "rust" || plan.argv.some((a) => a === "--port" || a === "--join")) return {
+			kind: "ts",
+			reason: `\`ay serve join-secret\` takes only --webrtc/--sighost`,
+			rest
+		};
+		return {
+			kind: "rust-only",
+			argv: [...plan.argv, "join-secret"],
+			feature: first
+		};
+	}
 	if (SERVE_SUBCOMMANDS.has(first)) return {
 		kind: "ts",
 		reason: `\`ay serve ${first}\``,
@@ -80,15 +103,24 @@ function planRustServe(rest, env = process.env) {
 		switch (name) {
 			case "--webrtc": {
 				const v = takeNext();
+				const url = v === void 0 ? void 0 : toWebrtcUrl(v, { join: true });
 				if (v === void 0) argv.push("--webrtc");
-				else if (v.startsWith("webrtc://")) argv.push("--webrtc", v);
+				else if (url) argv.push("--webrtc", url);
 				else return {
 					kind: "ts",
-					reason: `--webrtc ${v} (ayrs takes webrtc:// urls only)`,
+					reason: `--webrtc ${v} (not a room link)`,
 					rest
 				};
 				break;
 			}
+			case "--join":
+				if (inline !== void 0) return {
+					kind: "ts",
+					reason: a,
+					rest
+				};
+				argv.push("--join");
+				break;
 			case "--port": {
 				const v = takeNext();
 				if (v === void 0 || !/^\d+$/.test(v)) return {
@@ -116,6 +148,18 @@ function planRustServe(rest, env = process.env) {
 			};
 		}
 	}
+	if (argv.includes("--join")) {
+		if (!argv.some((x) => x.startsWith("webrtc://"))) return {
+			kind: "ts",
+			reason: "--join needs --webrtc <room link>",
+			rest
+		};
+		return {
+			kind: "rust-only",
+			argv,
+			feature: "--join"
+		};
+	}
 	return {
 		kind: "rust",
 		argv
@@ -133,9 +177,9 @@ function planRustServe(rest, env = process.env) {
 * stays a pure function for tests.
 */
 function daemonShareRuntime(args, hasAyrs, env = process.env) {
-	return planRustServe(args, env).kind === "rust" && hasAyrs() ? "rust" : "ts";
+	return planRustServe(args, env).kind !== "ts" && hasAyrs() ? "rust" : "ts";
 }
 
 //#endregion
 export { daemonShareRuntime, planRustServe };
-//# sourceMappingURL=serveRust-BEzTqFRy.js.map
+//# sourceMappingURL=serveRust-BgY5Te5E.js.map

package/dist/{setup-CzKkVYp8.js → setup-CD9-RyhT.js}

@@ -97,7 +97,7 @@ async function cmdSetup(rest) {
 	} catch {}
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-DdHbUWtG.js");
+	const { cmdServe } = await import("./serve-BWy7zL7j.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -107,4 +107,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-CzKkVYp8.js.map
+//# sourceMappingURL=setup-CD9-RyhT.js.map

package/dist/{shareCmd-DinezAHY.js → shareCmd-Drxb-SjM.js}

@@ -243,8 +243,8 @@ shown first and needs a y at a [y/N] prompt.
 Options:
   --port N      HTTP port (default: ${DEFAULT_SHARE_PORT}, or the daemon's)\n  --path /ay    tailscale mount path (default: ${DEFAULT_TS_PATH})\n  -y, --yes     approve the shown commands without prompting\n  --json        print {mode, url} as JSON\n\nThe URL carries this host's serve token: whoever holds it can read and steer\nevery agent here. Rotate: rm ~/.agent-yes/.serve-token && ay serve install\n`;
 async function shareRuntimeOf(args) {
-	const { daemonShareRuntime } = await import("./serveRust-BEzTqFRy.js");
-	const { findAyrsBinary } = await import("./rustBinary-DklBSefL.js");
+	const { daemonShareRuntime } = await import("./serveRust-BgY5Te5E.js");
+	const { findAyrsBinary } = await import("./rustBinary-Ep0x7WrS.js");
 	return daemonShareRuntime(args ?? [], () => !!findAyrsBinary());
 }
 async function daemonShareLink(args) {
@@ -259,8 +259,8 @@ async function daemonShareLink(args) {
 }
 async function foregroundAyrsShareLink() {
 	const { readShareRoom, shareLinkFromRoomUrl } = await import("./share-530eCWft.js");
-	const { parseWebrtcLink } = await import("./webrtcLink-CAdvnRM0.js");
-	const { isPidAlive } = await import("./subcommands-oIARj_mJ.js");
+	const { parseWebrtcLink } = await import("./webrtcLink-CHLgPKWj.js");
+	const { isPidAlive } = await import("./subcommands-C627cuOl.js");
 	const { agentYesHome } = await import("./agentYesHome-CYNNNP71.js");
 	const { readFile } = await import("fs/promises");
 	const path = await import("path");
@@ -276,7 +276,7 @@ async function foregroundAyrsShareLink() {
 	}
 }
 async function cmdShareStatus(mount) {
-	const { inspectServeDaemon } = await import("./serve-DdHbUWtG.js");
+	const { inspectServeDaemon } = await import("./serve-BWy7zL7j.js");
 	const [d, ts] = await Promise.all([inspectServeDaemon(), detectTailscale()]);
 	const line = (k, v) => process.stdout.write(`${k.padEnd(11)}${v}\n`);
 	if (d.args === null) {
@@ -323,7 +323,7 @@ async function cmdShare(rest) {
 		process.stderr.write(`ay share: unknown mode '${mode}' — one of ${SHARE_MODES.join(", ")}\n`);
 		return 1;
 	}
-	const { inspectServeDaemon, cmdServe } = await import("./serve-DdHbUWtG.js");
+	const { inspectServeDaemon, cmdServe } = await import("./serve-BWy7zL7j.js");
 	const [daemon, ts] = await Promise.all([inspectServeDaemon(), detectTailscale()]);
 	const lanIp = pickLanIp(networkInterfaces());
 	if (!mode) {
@@ -448,4 +448,4 @@ async function cmdShare(rest) {
 
 //#endregion
 export { cmdShare, daemonShareLink, foregroundAyrsShareLink };
-//# sourceMappingURL=shareCmd-DinezAHY.js.map
+//# sourceMappingURL=shareCmd-Drxb-SjM.js.map