claude-yes 1.156.0 → 1.158.0

package/dist/SUPPORTED_CLIS-BSuNAuIv.js

@@ -0,0 +1,8 @@
+import "./ts-IAAUoBpk.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-Dwe07Fe6.js";
+import "./pidStore-fqXqTKkh.js";
+import "./globalPidIndex-DlmmJlO8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CeyKUwT5.js";
+
+export { SUPPORTED_CLIS };

package/dist/{SUPPORTED_CLIS-BrOIMMzT.js → SUPPORTED_CLIS-CeyKUwT5.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-CLHiUE0V.js";
+import { t as CLIS_CONFIG } from "./ts-IAAUoBpk.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-BrOIMMzT.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-CeyKUwT5.js.map

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-C4EICUab.js";
+import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-Dwe07Fe6.js";
 import { argv } from "process";
 import { execFileSync, spawn } from "child_process";
 import ms from "ms";
@@ -481,7 +481,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-bpbzbGmp.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-CyKom1IU.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		cmdHelp(managerCommands);
 		process.exit(0);
@@ -514,7 +514,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DmRDiLen.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BSuNAuIv.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-CLHiUE0V.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-IAAUoBpk.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-C4EICUab.js";
+import "./versionChecker-Dwe07Fe6.js";
 import "./pidStore-fqXqTKkh.js";
 import "./globalPidIndex-DlmmJlO8.js";
 

package/dist/{schedule-DLMYKfDJ.js → schedule-BVKN6cO5.js}

@@ -1,10 +1,10 @@
-import "./ts-CLHiUE0V.js";
+import "./ts-IAAUoBpk.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-C4EICUab.js";
+import "./versionChecker-Dwe07Fe6.js";
 import "./pidStore-fqXqTKkh.js";
 import "./globalPidIndex-DlmmJlO8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BrOIMMzT.js";
-import { i as resolveSpawnCwd } from "./workspaceConfig-DT3cCBZK.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CeyKUwT5.js";
+import { o as resolveSpawnCwd } from "./workspaceConfig-B0Q9-q2B.js";
 import { createHash } from "node:crypto";
 
 //#region ts/oxmgrService.ts
@@ -141,4 +141,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-DLMYKfDJ.js.map
+//# sourceMappingURL=schedule-BVKN6cO5.js.map

package/dist/{serve-BXUK9_Ex.js → serve-Dij1y--H.js}

@@ -1,18 +1,18 @@
-import "./ts-CLHiUE0V.js";
+import "./ts-IAAUoBpk.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-C4EICUab.js";
+import { r as getInstalledPackage } from "./versionChecker-Dwe07Fe6.js";
 import "./pidStore-fqXqTKkh.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-DlmmJlO8.js";
 import { t as pgidForWrapper } from "./reaper-C-eWAxIj.js";
 import "./configShared-CEyhl0WH.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BrOIMMzT.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-CeyKUwT5.js";
 import "./e2e-Bfw7qL9O.js";
 import "./webrtcLink-CBZkZ-LT.js";
 import "./remotes-DBCvpp3B.js";
-import { i as resolveSpawnCwd, r as isProvisionAllowed, t as getProvisionRoot } from "./workspaceConfig-DT3cCBZK.js";
-import { E as writeToIpc, _ as readPtysize, b as resolveOne, c as extractTaskCounts, g as readNotes, i as controlCodeFromName, m as listRecords, o as deriveLiveStatus, v as renderRawLog, w as snapshotStatus } from "./subcommands-DTWNUJAa.js";
+import { a as isProvisionAllowed, i as hasSpawnHook, n as getSpawnHook, o as resolveSpawnCwd, t as getProvisionRoot } from "./workspaceConfig-B0Q9-q2B.js";
+import { E as writeToIpc, _ as readPtysize, b as resolveOne, c as extractTaskCounts, g as readNotes, i as controlCodeFromName, m as listRecords, o as deriveLiveStatus, v as renderRawLog, w as snapshotStatus } from "./subcommands-COLw05N-.js";
 import yargs from "yargs";
-import { mkdir, open, readFile, stat, writeFile } from "fs/promises";
+import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { homedir, hostname, userInfo } from "os";
 import path from "path";
 import { execFileSync } from "node:child_process";
@@ -789,6 +789,7 @@ Options:
 			return Response.json({ host: user ? `${user}@${host}` : host });
 		}
 		if (req.method === "GET" && p === "/api/version") return Response.json({ version: getInstalledPackage().version });
+		if (req.method === "GET" && p === "/api/spawn-config") return Response.json({ hasSpawnHook: hasSpawnHook() });
 		if (req.method === "GET" && p === "/api/notes") {
 			const notes = await readNotes();
 			return Response.json(Object.fromEntries(notes));
@@ -1154,15 +1155,59 @@ Options:
 			}
 			process.stderr.write(`→ console spawned:  ay ${cli}${prompt ? ` -- "${prompt.slice(0, 60)}"` : ""}  (cwd: ${cwd}${provisioned ? `, ${provisioned.action}` : ""})\n`);
 			const ayBin = Bun.which("ay") ?? process.argv[1];
-			const ayCmd = process.platform === "win32" && ayBin.toLowerCase().endsWith(".exe") ? [ayBin] : [process.execPath, ayBin];
+			const agentArgv = [
+				...process.platform === "win32" && ayBin.toLowerCase().endsWith(".exe") ? [ayBin] : [process.execPath, ayBin],
+				cli,
+				...prompt ? ["--", prompt] : []
+			];
+			const agentEnv = freshAgentEnv();
 			try {
-				const child = Bun.spawn([
-					...ayCmd,
-					cli,
-					...prompt ? ["--", prompt] : []
-				], {
+				const hook = getSpawnHook();
+				if (hook) {
+					const shell = process.env.AGENT_YES_SPAWN_SHELL?.trim() || "/bin/sh";
+					const script = `set -e\n${hook}\nexec "$@"`;
+					const errPath = path.join(agentYesHome(), `spawn-hook-${process.pid}-${performance.now().toString(36).replace(".", "")}.err`);
+					const child = Bun.spawn([
+						shell,
+						"-c",
+						script,
+						"ay-spawn",
+						...agentArgv
+					], {
+						cwd,
+						env: {
+							...agentEnv,
+							AGENT_YES_CWD: cwd,
+							AGENT_YES_CLI: cli
+						},
+						stdin: "ignore",
+						stdout: "ignore",
+						stderr: Bun.file(errPath)
+					});
+					const windowMs = Number(process.env.AGENT_YES_SPAWN_HOOK_TIMEOUT_MS) || 5e3;
+					const exitCode = await Promise.race([child.exited, new Promise((r) => setTimeout(() => r(null), windowMs))]);
+					if (exitCode !== null && exitCode !== 0) {
+						let detail = "";
+						try {
+							detail = (await Bun.file(errPath).text()).slice(0, 4096);
+						} catch {}
+						await unlink(errPath).catch(() => {});
+						return new Response(`spawn hook failed (exit ${exitCode})${detail ? `:\n${detail.trimEnd()}` : ""}`, { status: 502 });
+					}
+					child.unref();
+					setTimeout(() => void unlink(errPath).catch(() => {}), 6e4).unref?.();
+					return Response.json({
+						ok: true,
+						pid: child.pid,
+						cli,
+						cwd,
+						hook: true,
+						...provisioned ? { provisioned } : {}
+					});
+				}
+				const child = Bun.spawn(agentArgv, {
 					cwd,
-					env: freshAgentEnv(),
+					env: agentEnv,
 					stdin: "ignore",
 					stdout: "ignore",
 					stderr: "ignore"
@@ -1303,4 +1348,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-BXUK9_Ex.js.map
+//# sourceMappingURL=serve-Dij1y--H.js.map

package/dist/{setup-BXIWWZAP.js → setup-DymiMHke.js}

@@ -1,4 +1,4 @@
-import { a as setWorkspaceRoot, n as getWorkspaceRoot } from "./workspaceConfig-DT3cCBZK.js";
+import { r as getWorkspaceRoot, s as setWorkspaceRoot } from "./workspaceConfig-B0Q9-q2B.js";
 import { existsSync } from "node:fs";
 import { stdin, stdout } from "node:process";
 import { createInterface } from "node:readline/promises";
@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-BXUK9_Ex.js");
+	const { cmdServe } = await import("./serve-Dij1y--H.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-BXIWWZAP.js.map
+//# sourceMappingURL=setup-DymiMHke.js.map

package/dist/{subcommands-DTWNUJAa.js → subcommands-COLw05N-.js}

@@ -554,15 +554,15 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-BXUK9_Ex.js");
+				const { cmdServe } = await import("./serve-Dij1y--H.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-BXIWWZAP.js");
+				const { cmdSetup } = await import("./setup-DymiMHke.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-DLMYKfDJ.js");
+				const { cmdSchedule } = await import("./schedule-BVKN6cO5.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -2710,4 +2710,4 @@ async function cmdResultSet(rest) {
 
 //#endregion
 export { runSubcommand as C, writeToIpc as E, resolveResumeArgs as S, stopTipForCli as T, readPtysize as _, cursorAbs as a, resolveOne as b, extractTaskCounts as c, isExitRequest as d, isPidAlive as f, readNotes as g, matchKeyword as h, controlCodeFromName as i, finalizedLines as l, listRecords as m, READ_PAGE_DEFAULT as n, deriveLiveStatus as o, isSubcommand as p, cmdHelp as r, extractNeedsInput as s, GRACEFUL_EXIT_COMMANDS as t, isAgentStuck as u, renderRawLog as v, snapshotStatus as w, resolveReadWindow as x, renderRawLogLines as y };
-//# sourceMappingURL=subcommands-DTWNUJAa.js.map
+//# sourceMappingURL=subcommands-COLw05N-.js.map

package/dist/{subcommands-bpbzbGmp.js → subcommands-CyKom1IU.js}

@@ -4,6 +4,6 @@ import "./configShared-CEyhl0WH.js";
 import "./e2e-Bfw7qL9O.js";
 import "./webrtcLink-CBZkZ-LT.js";
 import "./remotes-DBCvpp3B.js";
-import { C as runSubcommand, E as writeToIpc, S as resolveResumeArgs, T as stopTipForCli, _ as readPtysize, a as cursorAbs, b as resolveOne, c as extractTaskCounts, d as isExitRequest, f as isPidAlive, g as readNotes, h as matchKeyword, i as controlCodeFromName, l as finalizedLines, m as listRecords, n as READ_PAGE_DEFAULT, o as deriveLiveStatus, p as isSubcommand, r as cmdHelp, s as extractNeedsInput, t as GRACEFUL_EXIT_COMMANDS, u as isAgentStuck, v as renderRawLog, w as snapshotStatus, x as resolveReadWindow, y as renderRawLogLines } from "./subcommands-DTWNUJAa.js";
+import { C as runSubcommand, E as writeToIpc, S as resolveResumeArgs, T as stopTipForCli, _ as readPtysize, a as cursorAbs, b as resolveOne, c as extractTaskCounts, d as isExitRequest, f as isPidAlive, g as readNotes, h as matchKeyword, i as controlCodeFromName, l as finalizedLines, m as listRecords, n as READ_PAGE_DEFAULT, o as deriveLiveStatus, p as isSubcommand, r as cmdHelp, s as extractNeedsInput, t as GRACEFUL_EXIT_COMMANDS, u as isAgentStuck, v as renderRawLog, w as snapshotStatus, x as resolveReadWindow, y as renderRawLogLines } from "./subcommands-COLw05N-.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{ts-CLHiUE0V.js → ts-IAAUoBpk.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-C4EICUab.js";
+import { r as getInstalledPackage } from "./versionChecker-Dwe07Fe6.js";
 import { t as agentYesHome } from "./agentYesHome-_eJa3DaX.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-V4qvXgAw.js";
 import { t as PidStore } from "./pidStore-fqXqTKkh.js";
@@ -1802,4 +1802,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-CLHiUE0V.js.map
+//# sourceMappingURL=ts-IAAUoBpk.js.map

package/dist/{versionChecker-C4EICUab.js → versionChecker-Dwe07Fe6.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "claude-yes";
-var version = "1.156.0";
+var version = "1.158.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-C4EICUab.js.map
+//# sourceMappingURL=versionChecker-Dwe07Fe6.js.map

package/dist/{workspaceConfig-DT3cCBZK.js → workspaceConfig-B0Q9-q2B.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-_eJa3DaX.js";
-import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { lstatSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import path from "path";
 
@@ -61,6 +61,41 @@ function isProvisionAllowed(owner, repo) {
 	const full = `${owner}/${repo}`.toLowerCase();
 	return list.some((e) => e.replace(/\/\*$/, "") === o || e === full);
 }
+/**
+* A trusted, HOST-LOCAL shell hook run before each agent spawn. It is a POSIX
+* `sh -c` script that prepares the environment (provisioning, env, cd) and that
+* agent-yes runs as `sh -c "set -e\n<hook>\nexec \"$@\"" ay-spawn <agent argv…>`
+* — so the real agent argv is passed as positional params and the prompt is
+* never shell-parsed. `set -e` aborts the spawn if any hook step fails.
+*
+* This is arbitrary local code that runs on EVERY spawn, so it is deliberately
+* NOT writable over the network. Set it on the machine by editing
+* `~/.agent-yes/config.json` (`"spawnHook"`), or via env `AGENT_YES_SPAWN_HOOK`.
+*
+* Tampering guard (POSIX): a file-backed hook is ignored when the config file is
+* a symlink, is not owned by us, or is group/world-writable — we refuse to run a
+* hook from a file other users can swap or rewrite. The env override is trusted
+* (it comes from the daemon's own environment). Returns null when unset/guarded.
+*/
+function getSpawnHook() {
+	const env = process.env.AGENT_YES_SPAWN_HOOK;
+	if (env && env.trim()) return env;
+	const h = readConfig().spawnHook;
+	if (!h || !h.trim()) return null;
+	if (process.platform !== "win32") try {
+		if (lstatSync(configPath()).isSymbolicLink()) return null;
+		const st = statSync(configPath());
+		if ((st.mode & 18) !== 0) return null;
+		if (typeof process.getuid === "function" && st.uid !== process.getuid()) return null;
+	} catch {
+		return null;
+	}
+	return h;
+}
+/** Whether a usable {@link getSpawnHook} is configured (for read-only disclosure). */
+function hasSpawnHook() {
+	return getSpawnHook() !== null;
+}
 /** Persist the workspace root, tilde-expanded and resolved to an absolute path. */
 function setWorkspaceRoot(dir) {
 	const abs = path.resolve(expandTilde(dir));
@@ -87,5 +122,5 @@ function resolveSpawnCwd(input) {
 }
 
 //#endregion
-export { setWorkspaceRoot as a, resolveSpawnCwd as i, getWorkspaceRoot as n, isProvisionAllowed as r, getProvisionRoot as t };
-//# sourceMappingURL=workspaceConfig-DT3cCBZK.js.map
+export { isProvisionAllowed as a, hasSpawnHook as i, getSpawnHook as n, resolveSpawnCwd as o, getWorkspaceRoot as r, setWorkspaceRoot as s, getProvisionRoot as t };
+//# sourceMappingURL=workspaceConfig-B0Q9-q2B.js.map

package/lab/ui/console-logic.js

@@ -305,6 +305,54 @@ function agentForestNodes(list) {
   return roots;
 }
 
+// ---- display sort order -----------------------------------------------------
+// The console cycles a button through these; the chosen comparator runs over the
+// flat entry list BEFORE layeredRows builds the room/peer/agent tree (which keeps
+// the given order for siblings and first-seen order for room/peer groups). So
+// sorting reorders roots and siblings without breaking the nesting.
+export const SORT_MODES = ["state", "created", "identity"];
+
+// Attention-first state ranking: someone scanning the fleet wants the agents that
+// need them (needs_input) up top, then the wedged ones (stuck), then live work,
+// then quiet/idle, then finished. Unknown states sort last.
+const STATE_RANK = {
+  needs_input: 0,
+  stuck: 1,
+  active: 2,
+  running: 2,
+  idle: 3,
+  stopped: 4,
+  exited: 4,
+};
+function stateRank(e) {
+  const r = STATE_RANK[e.status];
+  return r === undefined ? 5 : r;
+}
+
+// Git "busyness" for the state mode's secondary key: a dirty / ahead / behind
+// repo outranks a clean one, and more outstanding changes rank higher. The +0.5
+// for `dirty` breaks a 0-count tie toward the dirty tree.
+function gitWeight(e) {
+  const g = e.git || {};
+  return (g.changed || 0) + (g.ahead || 0) + (g.behind || 0) + (g.dirty ? 0.5 : 0);
+}
+
+// Return a NEW array sorted for display per `mode` (default "state"):
+//   - "state":    attention-first state, then git busyness, then newest.
+//   - "created":  newest first (started_at desc).
+//   - "identity": user@host:owner/repo/branch (alphabetical).
+// Every comparator falls back to newest-first so order is total & deterministic.
+export function sortEntries(entries, mode = "state") {
+  const byNewest = (a, b) => (b.started_at || 0) - (a.started_at || 0);
+  const cmp =
+    mode === "created"
+      ? byNewest
+      : mode === "identity"
+        ? (a, b) => fullIdent(a).localeCompare(fullIdent(b)) || byNewest(a, b)
+        : (a, b) => stateRank(a) - stateRank(b) || gitWeight(b) - gitWeight(a) || byNewest(a, b);
+  return entries.slice().sort(cmp);
+}
+
 // Order entries as agent>subagent forests so a nested `ay` (one agent spawning
 // another) renders indented under its parent. SCOPED PER HOST. Returns a NEW
 // array in depth-first order; each entry is shallow-copied with `_branch` (a

package/lab/ui/index.html

@@ -838,6 +838,11 @@
       .dot.stuck {
         background: var(--red);
       }
+      /* Waiting on you: alive and quiet, but parked on an unanswered prompt/menu.
+         The UI accent (blue) reads as "your turn" — distinct from idle-amber. */
+      .dot.needs_input {
+        background: var(--accent);
+      }
       .dot.stopped,
       .dot.exited {
         background: var(--muted);
@@ -1346,6 +1351,7 @@
           <div class="meta">
             <span id="count"></span>
             <span class="metaright">
+              <button id="sortbtn" class="viewbtn" title="cycle sort order">⇅ state</button>
               <button id="viewbtn" class="viewbtn" title="toggle compact list">☰</button>
               <button id="newbtn" class="newbtn" title="spawn a new agent on this fleet">
                 + New agent
@@ -1529,6 +1535,8 @@
         hasIdent,
         deviceCount,
         layeredRows,
+        sortEntries,
+        SORT_MODES,
         taskLabel,
         hashHue,
         selFromBottom,
@@ -3155,6 +3163,22 @@
       // Compact list: one line per agent (dot + cli + title), persisted per device.
       let compactList = localStorage.getItem("ay.compactList") === "1";
 
+      // Display sort order, cycled by the sort button and persisted per device.
+      // Default "state" (attention-first state, then git busyness). Guard against
+      // a stale/garbage stored value so we never start in an unknown mode.
+      let sortMode = localStorage.getItem("ay.sortMode") || "state";
+      if (!SORT_MODES.includes(sortMode)) sortMode = "state";
+
+      // The filtered + sorted entry list, in the SAME order the left panel renders
+      // and the keyboard nav steps. Sorting runs before layeredRows builds the
+      // room/peer/agent tree, so it reorders roots/siblings without breaking nesting.
+      function orderedEntries(toks) {
+        return sortEntries(
+          entries.filter((e) => matches(e, toks)),
+          sortMode,
+        );
+      }
+
       // A small git chip (±changed ↑ahead ↓behind) for a row, amber when the tree
       // is dirty. Empty for clean/in-sync repos and non-git cwds — no noise.
       function gitChipHtml(e) {
@@ -3195,10 +3219,14 @@
         const toks = $("q").value.trim().split(/\s+/).filter(Boolean);
         // Build the full signalling-server > rooms > peers > agents > subagents
         // tree. Single-node room/peer layers fold away; ≥2 become ├ └ │ branches.
-        const rows = layeredRows(entries.filter((e) => matches(e, toks)));
+        const rows = layeredRows(orderedEntries(toks));
         const agentRows = rows.filter((r) => r.kind === "agent");
         $("count").textContent = `${agentRows.length} / ${entries.length} agents`;
         $("viewbtn").classList.toggle("on", compactList);
+        // Show the active sort mode on the button so it's self-documenting; the
+        // default ("state") is also highlighted to hint it's the implicit order.
+        $("sortbtn").textContent = `⇅ ${sortMode}`;
+        $("sortbtn").classList.toggle("on", sortMode !== "state");
         // identContext blanks any field uniform across the shown list (so a
         // single-device fleet shows no device); multiDevice gates the detailed
         // host tag so it only appears when machines are actually mixed.
@@ -3658,6 +3686,12 @@
         localStorage.setItem("ay.compactList", compactList ? "1" : "0");
         renderList();
       });
+      // Cycle the sort order: state → created → identity → state.
+      $("sortbtn").addEventListener("click", () => {
+        sortMode = SORT_MODES[(SORT_MODES.indexOf(sortMode) + 1) % SORT_MODES.length];
+        localStorage.setItem("ay.sortMode", sortMode);
+        renderList();
+      });
       window.addEventListener("resize", () => {
         // Resizing our window is strong intent → re-fit to our pane (we become the
         // size driver; the push rides term.onResize). applyCanvasScale then clears
@@ -3695,7 +3729,7 @@
       function stepSelection(dir) {
         const toks = $("q").value.trim().split(/\s+/).filter(Boolean);
         // Must match renderList's order; step only over agent rows (skip headers).
-        const shown = layeredRows(entries.filter((e) => matches(e, toks)))
+        const shown = layeredRows(orderedEntries(toks))
           .filter((r) => r.kind === "agent")
           .map((r) => r.entry);
         if (!shown.length) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-yes",
-  "version": "1.156.0",
+  "version": "1.158.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/serve.ts

@@ -1,4 +1,4 @@
-import { mkdir, open, readFile, stat, writeFile } from "fs/promises";
+import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { renameSync, watch, writeFileSync } from "node:fs";
 import { execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -23,7 +23,13 @@ import { updateGlobalPidStatus } from "./globalPidIndex.ts";
 import { pgidForWrapper } from "./reaper.ts";
 import { SUPPORTED_CLIS } from "./SUPPORTED_CLIS.ts";
 import { getInstalledPackage } from "./versionChecker.ts";
-import { getProvisionRoot, isProvisionAllowed, resolveSpawnCwd } from "./workspaceConfig.ts";
+import {
+  getProvisionRoot,
+  getSpawnHook,
+  hasSpawnHook,
+  isProvisionAllowed,
+  resolveSpawnCwd,
+} from "./workspaceConfig.ts";
 
 const DEFAULT_PORT = 7432;
 
@@ -1157,6 +1163,15 @@ export async function cmdServe(rest: string[]): Promise<number> {
       return Response.json({ version: getInstalledPackage().version });
     }
 
+    // GET /api/spawn-config — read-only disclosure of WHETHER a host-local spawn
+    // hook is configured. Deliberately returns only a boolean, never the hook
+    // body: the hook is arbitrary local code and console/room clients holding the
+    // share token are not necessarily host admins. Setting it stays host-local
+    // (edit ~/.agent-yes/config.json) — there is no PUT.
+    if (req.method === "GET" && p === "/api/spawn-config") {
+      return Response.json({ hasSpawnHook: hasSpawnHook() });
+    }
+
     // GET /api/notes
     if (req.method === "GET" && p === "/api/notes") {
       const notes = await readNotes();
@@ -1685,10 +1700,75 @@ export async function cmdServe(rest: string[]): Promise<number> {
         process.platform === "win32" && ayBin.toLowerCase().endsWith(".exe")
           ? [ayBin]
           : [process.execPath, ayBin];
+      const agentArgv = [...ayCmd, cli, ...(prompt ? ["--", prompt] : [])];
+      // don't leak our Claude Code session into the agent
+      const agentEnv = freshAgentEnv();
       try {
-        const child = Bun.spawn([...ayCmd, cli, ...(prompt ? ["--", prompt] : [])], {
+        const hook = getSpawnHook();
+        if (hook) {
+          // Host-local spawn hook (trusted local code, never network-writable). We
+          // run it via POSIX `sh -c` then `exec "$@"` the real agent — the agent
+          // argv is passed as positional params ($1…), so the prompt is NEVER
+          // shell-parsed (no quoting/injection surface). `set -e` aborts the spawn
+          // if any hook step fails. No `-l`: we don't re-source rc files here (the
+          // env is already the recovered login-shell env via freshAgentEnv). cwd
+          // and cli are exposed as env for the hook to consume.
+          const shell = process.env.AGENT_YES_SPAWN_SHELL?.trim() || "/bin/sh";
+          const script = `set -e\n${hook}\nexec "$@"`;
+          const errPath = path.join(
+            agentYesHome(),
+            `spawn-hook-${process.pid}-${performance.now().toString(36).replace(".", "")}.err`,
+          );
+          // File-backed stderr never blocks the child (a pipe we stop draining
+          // after exec would), and bounds our read to the first few KB.
+          const child = Bun.spawn([shell, "-c", script, "ay-spawn", ...agentArgv], {
+            cwd,
+            env: { ...agentEnv, AGENT_YES_CWD: cwd, AGENT_YES_CLI: cli },
+            stdin: "ignore",
+            stdout: "ignore",
+            stderr: Bun.file(errPath),
+          });
+          // Handshake: surface an EARLY hook/provision failure synchronously. If
+          // the child exits non-zero within the window, the hook failed before the
+          // agent settled — return the captured stderr. If it's still alive after
+          // the window, `exec` succeeded (or the agent is running) → detach and
+          // report success. We can't always attribute a failure to the hook vs the
+          // agent, so we just surface the captured output.
+          const windowMs = Number(process.env.AGENT_YES_SPAWN_HOOK_TIMEOUT_MS) || 5000;
+          const exitCode = await Promise.race([
+            child.exited,
+            new Promise<null>((r) => setTimeout(() => r(null), windowMs)),
+          ]);
+          if (exitCode !== null && exitCode !== 0) {
+            let detail = "";
+            try {
+              detail = (await Bun.file(errPath).text()).slice(0, 4096);
+            } catch {
+              /* no stderr captured */
+            }
+            await unlink(errPath).catch(() => {});
+            return new Response(
+              `spawn hook failed (exit ${exitCode})${detail ? `:\n${detail.trimEnd()}` : ""}`,
+              { status: 502 },
+            );
+          }
+          child.unref();
+          // Clean up the stderr sidecar. On POSIX the running agent may still hold
+          // the fd; unlinking an open file is harmless (the inode lives until
+          // close), so a brief delay is enough to keep early-failure reads valid.
+          setTimeout(() => void unlink(errPath).catch(() => {}), 60_000).unref?.();
+          return Response.json({
+            ok: true,
+            pid: child.pid,
+            cli,
+            cwd,
+            hook: true,
+            ...(provisioned ? { provisioned } : {}),
+          });
+        }
+        const child = Bun.spawn(agentArgv, {
           cwd,
-          env: freshAgentEnv(), // don't leak our Claude Code session into the agent
+          env: agentEnv,
           stdin: "ignore",
           stdout: "ignore",
           stderr: "ignore",

package/ts/workspaceConfig.spec.ts

@@ -1,12 +1,14 @@
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { mkdtempSync, rmSync, writeFileSync } from "fs";
+import { chmodSync, mkdtempSync, rmSync, writeFileSync } from "fs";
 import { homedir, tmpdir } from "os";
 import path from "path";
 import {
   expandTilde,
   getProvisionAllowlist,
   getProvisionRoot,
+  getSpawnHook,
   getWorkspaceRoot,
+  hasSpawnHook,
   isProvisionAllowed,
   resolveSpawnCwd,
   setWorkspaceRoot,
@@ -25,6 +27,7 @@ describe("workspaceConfig", () => {
     else process.env.AGENT_YES_HOME = original;
     delete process.env.CODEHOST_WS_ROOT;
     delete process.env.CODEHOST_PROVISION_ALLOWLIST;
+    delete process.env.AGENT_YES_SPAWN_HOOK;
     rmSync(tmp, { recursive: true, force: true });
   });
 
@@ -142,4 +145,42 @@ describe("workspaceConfig", () => {
       expect(isProvisionAllowed("org", "anything")).toBe(true);
     });
   });
+
+  describe("getSpawnHook / hasSpawnHook", () => {
+    const isPosix = process.platform !== "win32";
+
+    it("is null/false when unset", () => {
+      expect(getSpawnHook()).toBeNull();
+      expect(hasSpawnHook()).toBe(false);
+    });
+
+    it("returns the configured hook from a private (0600) config", () => {
+      writeConfig({ spawnHook: 'echo hi >&2\nexec "$@"' });
+      if (isPosix) chmodSync(path.join(tmp, "config.json"), 0o600);
+      expect(getSpawnHook()).toBe('echo hi >&2\nexec "$@"');
+      expect(hasSpawnHook()).toBe(true);
+    });
+
+    it("ignores a blank hook", () => {
+      writeConfig({ spawnHook: "   " });
+      expect(getSpawnHook()).toBeNull();
+    });
+
+    it("env AGENT_YES_SPAWN_HOOK overrides the config", () => {
+      writeConfig({ spawnHook: "from-file" });
+      process.env.AGENT_YES_SPAWN_HOOK = "from-env";
+      expect(getSpawnHook()).toBe("from-env");
+    });
+
+    it.skipIf(!isPosix)(
+      "refuses a file-backed hook when the config is group/world-writable (tampering guard)",
+      () => {
+        writeConfig({ spawnHook: "echo pwned" });
+        chmodSync(path.join(tmp, "config.json"), 0o666);
+        expect(getSpawnHook()).toBeNull();
+        chmodSync(path.join(tmp, "config.json"), 0o600);
+        expect(getSpawnHook()).toBe("echo pwned");
+      },
+    );
+  });
 });

package/ts/workspaceConfig.ts

@@ -1,4 +1,4 @@
-import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { lstatSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import path from "path";
 import { agentYesHome } from "./agentYesHome.ts";
@@ -19,6 +19,12 @@ interface Config {
   provisionRoot?: string;
   /** Owners/repos permitted for `from`-provisioning; empty = deny all. */
   provisionAllowlist?: string[];
+  /**
+   * A trusted, HOST-LOCAL shell hook run before each console/CLI spawn. See
+   * {@link getSpawnHook}. Intentionally NOT settable over the network — it is
+   * arbitrary local code that runs on every spawn.
+   */
+  spawnHook?: string;
 }
 
 function configPath(): string {
@@ -86,6 +92,45 @@ export function isProvisionAllowed(owner: string, repo: string): boolean {
   return list.some((e) => e.replace(/\/\*$/, "") === o || e === full);
 }
 
+/**
+ * A trusted, HOST-LOCAL shell hook run before each agent spawn. It is a POSIX
+ * `sh -c` script that prepares the environment (provisioning, env, cd) and that
+ * agent-yes runs as `sh -c "set -e\n<hook>\nexec \"$@\"" ay-spawn <agent argv…>`
+ * — so the real agent argv is passed as positional params and the prompt is
+ * never shell-parsed. `set -e` aborts the spawn if any hook step fails.
+ *
+ * This is arbitrary local code that runs on EVERY spawn, so it is deliberately
+ * NOT writable over the network. Set it on the machine by editing
+ * `~/.agent-yes/config.json` (`"spawnHook"`), or via env `AGENT_YES_SPAWN_HOOK`.
+ *
+ * Tampering guard (POSIX): a file-backed hook is ignored when the config file is
+ * a symlink, is not owned by us, or is group/world-writable — we refuse to run a
+ * hook from a file other users can swap or rewrite. The env override is trusted
+ * (it comes from the daemon's own environment). Returns null when unset/guarded.
+ */
+export function getSpawnHook(): string | null {
+  const env = process.env.AGENT_YES_SPAWN_HOOK;
+  if (env && env.trim()) return env;
+  const h = readConfig().spawnHook;
+  if (!h || !h.trim()) return null;
+  if (process.platform !== "win32") {
+    try {
+      if (lstatSync(configPath()).isSymbolicLink()) return null;
+      const st = statSync(configPath());
+      if ((st.mode & 0o022) !== 0) return null; // group/world-writable
+      if (typeof process.getuid === "function" && st.uid !== process.getuid()) return null;
+    } catch {
+      return null;
+    }
+  }
+  return h;
+}
+
+/** Whether a usable {@link getSpawnHook} is configured (for read-only disclosure). */
+export function hasSpawnHook(): boolean {
+  return getSpawnHook() !== null;
+}
+
 /** Persist the workspace root, tilde-expanded and resolved to an absolute path. */
 export function setWorkspaceRoot(dir: string): string {
   const abs = path.resolve(expandTilde(dir));

package/dist/SUPPORTED_CLIS-DmRDiLen.js

@@ -1,8 +0,0 @@
-import "./ts-CLHiUE0V.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-C4EICUab.js";
-import "./pidStore-fqXqTKkh.js";
-import "./globalPidIndex-DlmmJlO8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BrOIMMzT.js";
-
-export { SUPPORTED_CLIS };