agent-yes 1.96.0 → 1.97.0

package/dist/SUPPORTED_CLIS-CNO_pj9f.js

@@ -0,0 +1,8 @@
+import "./ts-BAc4Jcrw.js";
+import "./logger-B9h0djqx.js";
+import "./versionChecker-MNvA73o9.js";
+import "./pidStore-DBjlqzo8.js";
+import "./globalPidIndex-yVd3mbsV.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-eD-UlqO_.js";
+
+export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-B2FAlgXF.js → SUPPORTED_CLIS-eD-UlqO_.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-DkjQJTcB.js";
+import { t as CLIS_CONFIG } from "./ts-BAc4Jcrw.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-B2FAlgXF.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-eD-UlqO_.js.map

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 import { n as logger } from "./logger-B9h0djqx.js";
-import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-xqnqyGKE.js";
+import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-MNvA73o9.js";
 import { argv } from "process";
 import { execFileSync, spawn } from "child_process";
 import ms from "ms";
@@ -482,7 +482,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 {
 	const rawArg = process.argv[2];
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-EieqoC9Z.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-B4gXEu5I.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		cmdHelp();
 		process.exit(0);
@@ -496,12 +496,12 @@ await checkAndAutoUpdate();
 logger.info(versionString());
 const config = parseCliArgs(process.argv);
 if (config.tray) {
-	const { startTray } = await import("./tray-D4cJA4UH.js");
+	const { startTray } = await import("./tray-CWQe9DMY.js");
 	await startTray();
 	await new Promise(() => {});
 }
 {
-	const { ensureTray } = await import("./tray-D4cJA4UH.js");
+	const { ensureTray } = await import("./tray-CWQe9DMY.js");
 	ensureTray();
 }
 if (config.useRust) {
@@ -515,7 +515,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-G8izHOJP.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-CNO_pj9f.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);
@@ -545,7 +545,7 @@ if (config.showVersion) {
 	process.exit(0);
 }
 if (config.appendPrompt) {
-	const { PidStore } = await import("./pidStore-iJY3JFTn.js");
+	const { PidStore } = await import("./pidStore-9b3YTuf4.js");
 	const ipcPath = await PidStore.findActiveFifo(process.cwd());
 	if (!ipcPath) {
 		console.error("No active agent with IPC found in current directory.");

package/dist/index.js

@@ -1,7 +1,7 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-DkjQJTcB.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-BAc4Jcrw.js";
 import "./logger-B9h0djqx.js";
-import "./versionChecker-xqnqyGKE.js";
-import "./pidStore-DTzl6zeh.js";
+import "./versionChecker-MNvA73o9.js";
+import "./pidStore-DBjlqzo8.js";
 import "./globalPidIndex-yVd3mbsV.js";
 
 export { AgentContext, CLIS_CONFIG, config, agentYes as default, removeControlCharacters };

package/dist/pidStore-9b3YTuf4.js

@@ -0,0 +1,5 @@
+import "./logger-B9h0djqx.js";
+import { t as PidStore } from "./pidStore-DBjlqzo8.js";
+import "./globalPidIndex-yVd3mbsV.js";
+
+export { PidStore };

package/dist/{pidStore-DTzl6zeh.js → pidStore-DBjlqzo8.js}

@@ -6,6 +6,26 @@ import { homedir } from "os";
 import path from "path";
 import { lock } from "proper-lockfile";
 
+//#region ts/agentYesHome.ts
+/**
+* Root directory for cross-runtime, machine-global agent-yes state:
+* the pid index (`pids.jsonl`), FIFO/named-pipe IPC endpoints (`fifo/`),
+* winsize signals, notes, and the serve token.
+*
+* Durable per-session *logs* deliberately do NOT live here — they go under
+* `<cwd>/.agent-yes/` so they stay colocated with the project that produced
+* them (see `PidStore`). Only ephemeral IPC + the discovery index are global,
+* which keeps FIFOs on the local home filesystem (reliable `mkfifo`) and lets
+* `ay ls`/`ay attach` find every agent regardless of the caller's cwd.
+*
+* Resolved at call time (not module load) so tests and callers can override
+* via `$AGENT_YES_HOME` without juggling the module cache.
+*/
+function agentYesHome() {
+	return process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
+}
+
+//#endregion
 //#region ts/JsonlStore.ts
 /**
 * A lightweight NeDB-style JSONL persistence layer.
@@ -184,26 +204,6 @@ function generateId() {
 	return Date.now().toString(36) + (idCounter++).toString(36) + Math.random().toString(36).slice(2, 6);
 }
 
-//#endregion
-//#region ts/agentYesHome.ts
-/**
-* Root directory for cross-runtime, machine-global agent-yes state:
-* the pid index (`pids.jsonl`), FIFO/named-pipe IPC endpoints (`fifo/`),
-* winsize signals, notes, and the serve token.
-*
-* Durable per-session *logs* deliberately do NOT live here — they go under
-* `<cwd>/.agent-yes/` so they stay colocated with the project that produced
-* them (see `PidStore`). Only ephemeral IPC + the discovery index are global,
-* which keeps FIFOs on the local home filesystem (reliable `mkfifo`) and lets
-* `ay ls`/`ay attach` find every agent regardless of the caller's cwd.
-*
-* Resolved at call time (not module load) so tests and callers can override
-* via `$AGENT_YES_HOME` without juggling the module cache.
-*/
-function agentYesHome() {
-	return process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
-}
-
 //#endregion
 //#region ts/pidStore.ts
 var PidStore = class PidStore {
@@ -380,5 +380,5 @@ pid-db/
 };
 
 //#endregion
-export { PidStore as t };
-//# sourceMappingURL=pidStore-DTzl6zeh.js.map
+export { agentYesHome as n, PidStore as t };
+//# sourceMappingURL=pidStore-DBjlqzo8.js.map

package/dist/{runningLock-C22d9SRJ.js → runningLock-CJxsoGdb.js}

@@ -276,4 +276,4 @@ function shouldUseLock(_cwd) {
 
 //#endregion
 export { shouldUseLock as i, getRunningAgentCount as n, releaseLock as r, acquireLock as t };
-//# sourceMappingURL=runningLock-C22d9SRJ.js.map
+//# sourceMappingURL=runningLock-CJxsoGdb.js.map

package/dist/{serve-CuAPBK4y.js → serve-CKcbVPy6.js}

@@ -1,15 +1,16 @@
-import "./ts-DkjQJTcB.js";
+import "./ts-BAc4Jcrw.js";
 import "./logger-B9h0djqx.js";
-import "./versionChecker-xqnqyGKE.js";
-import "./pidStore-DTzl6zeh.js";
+import "./versionChecker-MNvA73o9.js";
+import "./pidStore-DBjlqzo8.js";
 import "./globalPidIndex-yVd3mbsV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-B2FAlgXF.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-eD-UlqO_.js";
 import "./remotes-C3xPRtfg.js";
-import { c as readNotes, f as snapshotStatus, l as renderRawLog, m as writeToIpc, o as listRecords, r as controlCodeFromName, u as resolveOne } from "./subcommands-CcOYsLYD.js";
+import { c as readNotes, f as snapshotStatus, l as renderRawLog, m as writeToIpc, o as listRecords, r as controlCodeFromName, u as resolveOne } from "./subcommands-K242usI5.js";
 import yargs from "yargs";
-import { mkdir, readFile, writeFile } from "fs/promises";
+import { mkdir, open, readFile, writeFile } from "fs/promises";
 import { homedir } from "os";
 import path from "path";
+import { watch } from "node:fs";
 import { randomBytes, timingSafeEqual } from "crypto";
 
 //#region ts/serve.ts
@@ -111,7 +112,7 @@ async function cmdServe(rest) {
 Start an HTTP API server so remote machines can list/tail/send agents.
 
 Options:
-  --port N          Port to listen on (default: ${DEFAULT_PORT})\n  --host HOST       Interface to bind (default: 127.0.0.1; use 0.0.0.0 to expose)\n  --token TOKEN     Auth token (auto-generated and saved if omitted)\n  --share [URL]     Share over WebRTC to agent-yes.com (bare flag mints a room+link)\n  --allow-spawn     Let the shared console launch new agents (asks y/N per request)\n  --tls-cert FILE   TLS certificate PEM\n  --tls-key  FILE   TLS private key PEM\n\nSubcommands:\n  ay serve install    install as background daemon via oxmgr\n  ay serve uninstall  remove daemon\n  ay serve logs       view daemon logs\n\nOnce running, connect from another machine:\n  ay ls   <token>@<host>:${DEFAULT_PORT}\n  ay remote add <alias> http://<token>@<host>:${DEFAULT_PORT}\n`);
+  --port N          Port to listen on (default: ${DEFAULT_PORT})\n  --host HOST       Interface to bind (default: 127.0.0.1; use 0.0.0.0 to expose)\n  --token TOKEN     Auth token (auto-generated and saved if omitted)\n  --share [URL]     Share over WebRTC to agent-yes.com (bare flag mints a room+link)\n  --allow-spawn     Deprecated no-op — the console can always spawn agents\n  --tls-cert FILE   TLS certificate PEM\n  --tls-key  FILE   TLS private key PEM\n\nSubcommands:\n  ay serve install    install as background daemon via oxmgr\n  ay serve uninstall  remove daemon\n  ay serve logs       view daemon logs\n\nOnce running, connect from another machine:\n  ay ls   <token>@<host>:${DEFAULT_PORT}\n  ay remote add <alias> http://<token>@<host>:${DEFAULT_PORT}\n`);
 		return 0;
 	}
 	const sub = rest[0];
@@ -139,7 +140,7 @@ Options:
 	}).option("allow-spawn", {
 		type: "boolean",
 		default: false,
-		description: "Allow the shared console to spawn new agents (asks y/N per request on a TTY)"
+		description: "Deprecated no-op — the console can always spawn agents"
 	}).help(false).version(false).exitProcess(false).parseAsync();
 	const port = argv.port ?? DEFAULT_PORT;
 	const host = argv.host ?? "127.0.0.1";
@@ -154,20 +155,6 @@ Options:
 	const scheme = useHttps ? "https" : "http";
 	if (host !== "127.0.0.1" && host !== "localhost") process.stderr.write("ay serve: warning: binding to non-loopback — ensure your network is trusted or use Tailscale/VPN\n");
 	const token = await loadOrCreateToken(tokenFlag);
-	const allowSpawn = argv["allow-spawn"] === true;
-	const spawnQueue = [];
-	let stdinWired = false;
-	const confirmSpawn = (cli, cwd, prompt) => {
-		if (!process.stdin.isTTY) return Promise.resolve(true);
-		if (!stdinWired) {
-			stdinWired = true;
-			process.stdin.setEncoding("utf8");
-			process.stdin.on("data", (d) => spawnQueue.shift()?.(/^y/i.test(d.trim())));
-			process.stdin.resume();
-		}
-		process.stdout.write(`\n⚠ console requests spawn:  ay ${cli}${prompt ? ` -- "${prompt.slice(0, 60)}"` : ""}\n   cwd: ${cwd}\n   allow? [y/N] `);
-		return new Promise((res) => spawnQueue.push(res));
-	};
 	const serverOpts = {
 		hostname: host,
 		port,
@@ -219,6 +206,30 @@ Options:
 					return new Response(e.message, { status: 404 });
 				}
 			}
+			const sizeM = /^\/api\/size\/(.+)$/.exec(p);
+			if (req.method === "GET" && sizeM) {
+				const keyword = decodeURIComponent(sizeM[1]);
+				try {
+					const record = await resolveOne(keyword, defaultOpts());
+					const ayHome = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
+					let cols = null;
+					let rows = null;
+					try {
+						const [c, r] = (await readFile(path.join(ayHome, "ptysize", String(record.pid)), "utf-8")).trim().split(/\s+/).map(Number);
+						if (c > 0 && r > 0) {
+							cols = c;
+							rows = r;
+						}
+					} catch {}
+					return Response.json({
+						pid: record.pid,
+						cols,
+						rows
+					});
+				} catch (e) {
+					return new Response(e.message, { status: 404 });
+				}
+			}
 			const tailM = /^\/api\/tail\/(.+)$/.exec(p);
 			if (req.method === "GET" && tailM) {
 				const keyword = decodeURIComponent(tailM[1]);
@@ -248,27 +259,43 @@ Options:
 						}, 15e3);
 						const ansiRe = /\x1b\[[0-?]*[ -/]*[@-~]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)|\x1b[@-Z\\-_]/g;
 						const ctrlRe = /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
-						const poller = setInterval(async () => {
-							if (closed) {
-								clearInterval(poller);
-								return;
-							}
+						const fh = await open(logPath, "r").catch(() => null);
+						let reading = false;
+						const flush = async () => {
+							if (closed || reading || !fh) return;
+							reading = true;
 							try {
-								const full = await readFile(logPath);
-								if (full.length <= offset) return;
-								const chunk = full.slice(offset);
-								offset = full.length;
-								if (raw) send(new TextDecoder().decode(chunk));
-								else {
-									const text = new TextDecoder().decode(chunk).replace(ansiRe, "").replace(ctrlRe, "");
-									if (text.trim()) send(text.trimStart());
+								const { size } = await fh.stat();
+								if (size < offset) offset = size;
+								if (size > offset) {
+									const len = size - offset;
+									const buf = Buffer.allocUnsafe(len);
+									const { bytesRead } = await fh.read(buf, 0, len, offset);
+									offset += bytesRead;
+									const chunk = buf.subarray(0, bytesRead);
+									if (raw) send(new TextDecoder().decode(chunk));
+									else {
+										const text = new TextDecoder().decode(chunk).replace(ansiRe, "").replace(ctrlRe, "");
+										if (text.trim()) send(text.trimStart());
+									}
 								}
-							} catch {}
-						}, 300);
+							} catch {} finally {
+								reading = false;
+							}
+						};
+						let watcher = null;
+						try {
+							watcher = watch(logPath, () => void flush());
+						} catch {}
+						const poller = setInterval(() => void flush(), 60);
 						req.signal.addEventListener("abort", () => {
 							closed = true;
 							clearInterval(heartbeat);
 							clearInterval(poller);
+							try {
+								watcher?.close();
+							} catch {}
+							fh?.close().catch(() => {});
 							try {
 								ctrl.close();
 							} catch {}
@@ -341,7 +368,6 @@ Options:
 				}
 			}
 			if (req.method === "POST" && p === "/api/spawn") {
-				if (!allowSpawn) return new Response("spawning disabled — start: ay serve --share --allow-spawn", { status: 403 });
 				let body;
 				try {
 					body = await req.json();
@@ -352,7 +378,7 @@ Options:
 				if (!SUPPORTED_CLIS.includes(cli)) return new Response(`unsupported cli: ${cli}`, { status: 400 });
 				const cwd = typeof body.cwd === "string" && body.cwd ? body.cwd : process.cwd();
 				const prompt = String(body.prompt ?? "");
-				if (!await confirmSpawn(cli, cwd, prompt)) return new Response("denied by host", { status: 403 });
+				process.stderr.write(`→ console spawned:  ay ${cli}${prompt ? ` -- "${prompt.slice(0, 60)}"` : ""}  (cwd: ${cwd})\n`);
 				try {
 					const child = Bun.spawn([
 						"ay",
@@ -422,4 +448,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-CuAPBK4y.js.map
+//# sourceMappingURL=serve-CKcbVPy6.js.map

package/dist/{subcommands-EieqoC9Z.js → subcommands-B4gXEu5I.js}

@@ -1,6 +1,6 @@
 import "./logger-B9h0djqx.js";
 import "./globalPidIndex-yVd3mbsV.js";
 import "./remotes-C3xPRtfg.js";
-import { a as isSubcommand, c as readNotes, d as runSubcommand, f as snapshotStatus, i as isPidAlive, l as renderRawLog, m as writeToIpc, n as cmdHelp, o as listRecords, p as stopTipForCli, r as controlCodeFromName, s as matchKeyword, t as GRACEFUL_EXIT_COMMANDS, u as resolveOne } from "./subcommands-CcOYsLYD.js";
+import { a as isSubcommand, c as readNotes, d as runSubcommand, f as snapshotStatus, i as isPidAlive, l as renderRawLog, m as writeToIpc, n as cmdHelp, o as listRecords, p as stopTipForCli, r as controlCodeFromName, s as matchKeyword, t as GRACEFUL_EXIT_COMMANDS, u as resolveOne } from "./subcommands-K242usI5.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{subcommands-CcOYsLYD.js → subcommands-K242usI5.js}

@@ -162,7 +162,7 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-CuAPBK4y.js");
+				const { cmdServe } = await import("./serve-CKcbVPy6.js");
 				return cmdServe(rest);
 			}
 			case "remote": {
@@ -1447,4 +1447,4 @@ async function cmdStatus(rest) {
 
 //#endregion
 export { isSubcommand as a, readNotes as c, runSubcommand as d, snapshotStatus as f, isPidAlive as i, renderRawLog as l, writeToIpc as m, cmdHelp as n, listRecords as o, stopTipForCli as p, controlCodeFromName as r, matchKeyword as s, GRACEFUL_EXIT_COMMANDS as t, resolveOne as u };
-//# sourceMappingURL=subcommands-CcOYsLYD.js.map
+//# sourceMappingURL=subcommands-K242usI5.js.map

package/dist/{tray-D4cJA4UH.js → tray-CWQe9DMY.js}

@@ -1,4 +1,4 @@
-import { n as getRunningAgentCount } from "./runningLock-C22d9SRJ.js";
+import { n as getRunningAgentCount } from "./runningLock-CJxsoGdb.js";
 import { existsSync } from "fs";
 import { mkdir, readFile, unlink, writeFile } from "fs/promises";
 import { homedir } from "os";
@@ -175,4 +175,4 @@ async function startTray() {
 
 //#endregion
 export { ensureTray, startTray };
-//# sourceMappingURL=tray-D4cJA4UH.js.map
+//# sourceMappingURL=tray-CWQe9DMY.js.map

package/dist/{ts-DkjQJTcB.js → ts-BAc4Jcrw.js}

@@ -1,7 +1,7 @@
 import { n as logger, t as addTransport } from "./logger-B9h0djqx.js";
-import { r as getInstalledPackage } from "./versionChecker-xqnqyGKE.js";
-import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-C22d9SRJ.js";
-import { t as PidStore } from "./pidStore-DTzl6zeh.js";
+import { r as getInstalledPackage } from "./versionChecker-MNvA73o9.js";
+import { n as agentYesHome, t as PidStore } from "./pidStore-DBjlqzo8.js";
+import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-CJxsoGdb.js";
 import { i as readGlobalPids } from "./globalPidIndex-yVd3mbsV.js";
 import { arch, platform } from "process";
 import { execSync } from "child_process";
@@ -1423,10 +1423,19 @@ async function agentYes({ cli, cliArgs = [], prompt, robust = true, cwd, env, ex
 		notifyWebhook("EXIT", `${exitReason} exitCode=${exitCode ?? "?"}`, workingDir).catch(() => null);
 		return pendingExitCode.resolve(exitCode);
 	});
+	const writeCurrentPtysize = (cols, rows) => {
+		const dir = path.join(agentYesHome(), "ptysize");
+		mkdir(dir, { recursive: true }).then(() => writeFile(path.join(dir, String(process.pid)), `${cols} ${rows}\n`)).catch(() => null);
+	};
+	{
+		const { cols, rows } = getTerminalDimensions();
+		writeCurrentPtysize(cols, rows);
+	}
 	process.stdout.on("resize", () => {
 		const { cols, rows } = getTerminalDimensions();
 		shell.resize(cols, rows);
 		xtermProxy.resize(cols, rows);
+		writeCurrentPtysize(cols, rows);
 	});
 	const isStillWorkingQ = () => {
 		const rendered = xtermProxy.tail(24).replace(/\s+/g, " ");
@@ -1705,4 +1714,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-DkjQJTcB.js.map
+//# sourceMappingURL=ts-BAc4Jcrw.js.map

package/dist/{versionChecker-xqnqyGKE.js → versionChecker-MNvA73o9.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "agent-yes";
-var version = "1.96.0";
+var version = "1.97.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -221,4 +221,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-xqnqyGKE.js.map
+//# sourceMappingURL=versionChecker-MNvA73o9.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-yes",
-  "version": "1.96.0",
+  "version": "1.97.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/index.ts

@@ -5,6 +5,7 @@ import path from "path";
 import DIE from "phpdie";
 import sflow from "sflow";
 import { XtermProxy } from "./xterm-proxy.ts";
+import { agentYesHome } from "./agentYesHome.ts";
 import {
   extractSessionId,
   getSessionForCwd,
@@ -643,11 +644,26 @@ export default async function agentYes({
     return pendingExitCode.resolve(exitCode);
   });
 
+  // Record the agent's current PTY size to ~/.agent-yes/ptysize/<pid> so `ay serve`
+  // / the web console can render the existing buffer at the agent's real width
+  // before adapting. Mirrors the Rust runtime (rs/src/pty_spawner.rs).
+  const writeCurrentPtysize = (cols: number, rows: number) => {
+    const dir = path.join(agentYesHome(), "ptysize");
+    void mkdir(dir, { recursive: true })
+      .then(() => writeFile(path.join(dir, String(process.pid)), `${cols} ${rows}\n`))
+      .catch(() => null);
+  };
+  {
+    const { cols, rows } = getTerminalDimensions();
+    writeCurrentPtysize(cols, rows);
+  }
+
   // when current tty resized, resize both pty and xterm proxy
   process.stdout.on("resize", () => {
     const { cols, rows } = getTerminalDimensions();
     shell.resize(cols, rows);
     xtermProxy.resize(cols, rows);
+    writeCurrentPtysize(cols, rows);
   });
 
   const isStillWorkingQ = () => {

package/ts/serve.ts

@@ -1,4 +1,5 @@
-import { mkdir, readFile, writeFile } from "fs/promises";
+import { mkdir, open, readFile, writeFile } from "fs/promises";
+import { watch } from "node:fs";
 import { createHash, randomBytes, timingSafeEqual } from "crypto";
 import { homedir } from "os";
 import path from "path";
@@ -125,7 +126,7 @@ export async function cmdServe(rest: string[]): Promise<number> {
         `  --host HOST       Interface to bind (default: 127.0.0.1; use 0.0.0.0 to expose)\n` +
         `  --token TOKEN     Auth token (auto-generated and saved if omitted)\n` +
         `  --share [URL]     Share over WebRTC to agent-yes.com (bare flag mints a room+link)\n` +
-        `  --allow-spawn     Let the shared console launch new agents (asks y/N per request)\n` +
+        `  --allow-spawn     Deprecated no-op — the console can always spawn agents\n` +
         `  --tls-cert FILE   TLS certificate PEM\n` +
         `  --tls-key  FILE   TLS private key PEM\n\n` +
         `Subcommands:\n` +
@@ -164,7 +165,7 @@ export async function cmdServe(rest: string[]): Promise<number> {
     .option("allow-spawn", {
       type: "boolean",
       default: false,
-      description: "Allow the shared console to spawn new agents (asks y/N per request on a TTY)",
+      description: "Deprecated no-op — the console can always spawn agents",
     })
     .help(false)
     .version(false)
@@ -191,26 +192,11 @@ export async function cmdServe(rest: string[]): Promise<number> {
   }
 
   const token = await loadOrCreateToken(tokenFlag);
-  const allowSpawn = argv["allow-spawn"] === true;
-
-  // Spawn confirmation: launch requests are gated by --allow-spawn AND, on a TTY,
-  // an interactive y/N per request (a leaked launch link can't silently spawn).
-  const spawnQueue: Array<(ok: boolean) => void> = [];
-  let stdinWired = false;
-  const confirmSpawn = (cli: string, cwd: string, prompt: string): Promise<boolean> => {
-    if (!process.stdin.isTTY) return Promise.resolve(true); // flag is the consent when headless
-    if (!stdinWired) {
-      stdinWired = true;
-      process.stdin.setEncoding("utf8");
-      process.stdin.on("data", (d: string) => spawnQueue.shift()?.(/^y/i.test(d.trim())));
-      process.stdin.resume();
-    }
-    process.stdout.write(
-      `\n⚠ console requests spawn:  ay ${cli}${prompt ? ` -- "${prompt.slice(0, 60)}"` : ""}\n` +
-        `   cwd: ${cwd}\n   allow? [y/N] `,
-    );
-    return new Promise((res) => spawnQueue.push(res));
-  };
+  // Spawning is always allowed: a connected console already has full read-write
+  // control over every running agent (it writes straight to their stdin), so it
+  // can already make an agent do anything — gating /api/spawn behind a flag or a
+  // y/N prompt bought no real safety. We just log each spawn so the host sees it.
+  // (--allow-spawn is still accepted as a no-op for older invocations.)
 
   const serverOpts: any = {
     hostname: host,
@@ -275,6 +261,32 @@ export async function cmdServe(rest: string[]): Promise<number> {
         }
       }
 
+      // GET /api/size/:keyword — the agent's current PTY size, so the console can
+      // render the existing buffer at the agent's real width before adapting.
+      const sizeM = /^\/api\/size\/(.+)$/.exec(p);
+      if (req.method === "GET" && sizeM) {
+        const keyword = decodeURIComponent(sizeM[1]!);
+        try {
+          const record = await resolveOne(keyword, defaultOpts());
+          const ayHome = process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes");
+          let cols: number | null = null;
+          let rows: number | null = null;
+          try {
+            const txt = await readFile(path.join(ayHome, "ptysize", String(record.pid)), "utf-8");
+            const [c, r] = txt.trim().split(/\s+/).map(Number);
+            if (c > 0 && r > 0) {
+              cols = c;
+              rows = r;
+            }
+          } catch {
+            /* no ptysize sidecar (older agent or not yet written) */
+          }
+          return Response.json({ pid: record.pid, cols, rows });
+        } catch (e) {
+          return new Response((e as Error).message, { status: 404 });
+        }
+      }
+
       // GET /api/tail/:keyword  — SSE streaming
       const tailM = /^\/api\/tail\/(.+)$/.exec(p);
       if (req.method === "GET" && tailM) {
@@ -319,34 +331,59 @@ export async function cmdServe(rest: string[]): Promise<number> {
               // eslint-disable-next-line no-control-regex
               const ctrlRe = /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
 
-              const poller = setInterval(async () => {
-                if (closed) {
-                  clearInterval(poller);
-                  return;
-                }
+              // Stream only the bytes appended since `offset` (incremental read,
+              // not a full re-read), driven by fs.watch for near-instant echo with
+              // a short fallback poll in case the watcher misses an event. The old
+              // 300 ms full-file poll was the dominant typing-echo latency.
+              const fh = await open(logPath, "r").catch(() => null);
+              let reading = false;
+              const flush = async () => {
+                if (closed || reading || !fh) return;
+                reading = true;
                 try {
-                  const full = await readFile(logPath);
-                  if (full.length <= offset) return;
-                  const chunk = full.slice(offset);
-                  offset = full.length;
-                  if (raw) {
-                    send(new TextDecoder().decode(chunk));
-                  } else {
-                    const text = new TextDecoder()
-                      .decode(chunk)
-                      .replace(ansiRe, "")
-                      .replace(ctrlRe, "");
-                    if (text.trim()) send(text.trimStart());
+                  const { size } = await fh.stat();
+                  if (size < offset) offset = size; // truncated/rotated
+                  if (size > offset) {
+                    const len = size - offset;
+                    const buf = Buffer.allocUnsafe(len);
+                    const { bytesRead } = await fh.read(buf, 0, len, offset);
+                    offset += bytesRead;
+                    const chunk = buf.subarray(0, bytesRead);
+                    if (raw) {
+                      send(new TextDecoder().decode(chunk));
+                    } else {
+                      const text = new TextDecoder()
+                        .decode(chunk)
+                        .replace(ansiRe, "")
+                        .replace(ctrlRe, "");
+                      if (text.trim()) send(text.trimStart());
+                    }
                   }
                 } catch {
                   /* log gone */
+                } finally {
+                  reading = false;
                 }
-              }, 300);
+              };
+
+              let watcher: ReturnType<typeof watch> | null = null;
+              try {
+                watcher = watch(logPath, () => void flush());
+              } catch {
+                /* fs.watch unsupported — the fallback poll below still works */
+              }
+              const poller = setInterval(() => void flush(), 60);
 
               req.signal.addEventListener("abort", () => {
                 closed = true;
                 clearInterval(heartbeat);
                 clearInterval(poller);
+                try {
+                  watcher?.close();
+                } catch {
+                  /* already closed */
+                }
+                void fh?.close().catch(() => {});
                 try {
                   ctrl.close();
                 } catch {
@@ -433,12 +470,8 @@ export async function cmdServe(rest: string[]): Promise<number> {
         }
       }
 
-      // POST /api/spawn  body {cli, cwd, prompt} — launch a new agent (gated)
+      // POST /api/spawn  body {cli, cwd, prompt} — launch a new agent
       if (req.method === "POST" && p === "/api/spawn") {
-        if (!allowSpawn)
-          return new Response("spawning disabled — start: ay serve --share --allow-spawn", {
-            status: 403,
-          });
         let body: { cli?: string; cwd?: string; prompt?: string };
         try {
           body = await req.json();
@@ -450,8 +483,9 @@ export async function cmdServe(rest: string[]): Promise<number> {
           return new Response(`unsupported cli: ${cli}`, { status: 400 });
         const cwd = typeof body.cwd === "string" && body.cwd ? body.cwd : process.cwd();
         const prompt = String(body.prompt ?? "");
-        if (!(await confirmSpawn(cli, cwd, prompt)))
-          return new Response("denied by host", { status: 403 });
+        process.stderr.write(
+          `→ console spawned:  ay ${cli}${prompt ? ` -- "${prompt.slice(0, 60)}"` : ""}  (cwd: ${cwd})\n`,
+        );
         try {
           const child = Bun.spawn(["ay", cli, ...(prompt ? ["--", prompt] : [])], {
             cwd,

package/dist/SUPPORTED_CLIS-G8izHOJP.js

@@ -1,8 +0,0 @@
-import "./ts-DkjQJTcB.js";
-import "./logger-B9h0djqx.js";
-import "./versionChecker-xqnqyGKE.js";
-import "./pidStore-DTzl6zeh.js";
-import "./globalPidIndex-yVd3mbsV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-B2FAlgXF.js";
-
-export { SUPPORTED_CLIS };

package/dist/pidStore-iJY3JFTn.js

@@ -1,5 +0,0 @@
-import "./logger-B9h0djqx.js";
-import { t as PidStore } from "./pidStore-DTzl6zeh.js";
-import "./globalPidIndex-yVd3mbsV.js";
-
-export { PidStore };