claude-yes 1.160.3 → 1.162.0

package/dist/{SUPPORTED_CLIS-WcYvfnJQ.js → SUPPORTED_CLIS-BNLYYzBZ.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-DcZvAsIp.js";
+import { t as CLIS_CONFIG } from "./ts--UKFJGU-.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-WcYvfnJQ.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-BNLYYzBZ.js.map

package/dist/SUPPORTED_CLIS-C9TQK7ME.js

@@ -0,0 +1,8 @@
+import "./ts--UKFJGU-.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-DJObC8O_.js";
+import "./pidStore-BfoBWUjc.js";
+import "./globalPidIndex-DlmmJlO8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BNLYYzBZ.js";
+
+export { SUPPORTED_CLIS };

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-DOse329y.js";
+import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-DJObC8O_.js";
 import { argv } from "process";
 import { execFileSync, spawn } from "child_process";
 import ms from "ms";
@@ -481,7 +481,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-BJ2xKtDu.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-DeW-4FGU.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		cmdHelp(managerCommands);
 		process.exit(0);
@@ -514,7 +514,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-pKjUYMIj.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-C9TQK7ME.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);
@@ -544,7 +544,7 @@ if (config.showVersion) {
 	process.exit(0);
 }
 if (config.appendPrompt) {
-	const { PidStore } = await import("./pidStore-DfHh3Yt0.js");
+	const { PidStore } = await import("./pidStore-5qyLX3Fh.js");
 	const ipcPath = await PidStore.findActiveFifo(process.cwd());
 	if (!ipcPath) {
 		console.error("No active agent with IPC found in current directory.");

package/dist/index.js

@@ -1,7 +1,7 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-DcZvAsIp.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts--UKFJGU-.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DOse329y.js";
-import "./pidStore-fqXqTKkh.js";
+import "./versionChecker-DJObC8O_.js";
+import "./pidStore-BfoBWUjc.js";
 import "./globalPidIndex-DlmmJlO8.js";
 
 export { AgentContext, CLIS_CONFIG, config, agentYes as default, removeControlCharacters };

package/dist/pidStore-5qyLX3Fh.js

@@ -0,0 +1,5 @@
+import "./logger-CDIsZ-Pp.js";
+import { t as PidStore } from "./pidStore-BfoBWUjc.js";
+import "./globalPidIndex-DlmmJlO8.js";
+
+export { PidStore };

package/dist/{pidStore-fqXqTKkh.js → pidStore-BfoBWUjc.js}

@@ -209,8 +209,9 @@ var PidStore = class PidStore {
 		const argsJson = JSON.stringify(args);
 		const logFile = this.getRawLogPath(pid);
 		const fifoFile = this.getFifoPath(pid);
+		const injected = process.env.AGENT_YES_AGENT_ID;
 		const existing = this.store.findOne((doc) => doc.pid === pid);
-		const agentId = existing?.agentId ?? randomBytes(6).toString("hex");
+		const agentId = existing?.agentId ?? (injected && /^[0-9a-f]{6,32}$/i.test(injected) ? injected : randomBytes(6).toString("hex"));
 		const record = {
 			pid,
 			cli,
@@ -367,4 +368,4 @@ pid-db/
 
 //#endregion
 export { PidStore as t };
-//# sourceMappingURL=pidStore-fqXqTKkh.js.map
+//# sourceMappingURL=pidStore-BfoBWUjc.js.map

package/dist/{schedule-YIA3BrZV.js → schedule-DzFEVEoq.js}

@@ -1,9 +1,9 @@
-import "./ts-DcZvAsIp.js";
+import "./ts--UKFJGU-.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DOse329y.js";
-import "./pidStore-fqXqTKkh.js";
+import "./versionChecker-DJObC8O_.js";
+import "./pidStore-BfoBWUjc.js";
 import "./globalPidIndex-DlmmJlO8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-WcYvfnJQ.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BNLYYzBZ.js";
 import { o as resolveSpawnCwd } from "./workspaceConfig-B0Q9-q2B.js";
 import { createHash } from "node:crypto";
 
@@ -141,4 +141,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-YIA3BrZV.js.map
+//# sourceMappingURL=schedule-DzFEVEoq.js.map

package/dist/{serve-D3vy56FC.js → serve-BFnjq7JW.js}

@@ -1,16 +1,16 @@
-import "./ts-DcZvAsIp.js";
+import "./ts--UKFJGU-.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DOse329y.js";
-import "./pidStore-fqXqTKkh.js";
+import { r as getInstalledPackage } from "./versionChecker-DJObC8O_.js";
+import "./pidStore-BfoBWUjc.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-DlmmJlO8.js";
 import { t as pgidForWrapper } from "./reaper-C-eWAxIj.js";
 import "./configShared-CEyhl0WH.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-WcYvfnJQ.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-BNLYYzBZ.js";
 import "./e2e-Bfw7qL9O.js";
 import "./webrtcLink-CBZkZ-LT.js";
 import "./remotes-DBCvpp3B.js";
 import { a as isProvisionAllowed, i as hasSpawnHook, n as getSpawnHook, o as resolveSpawnCwd, t as getProvisionRoot } from "./workspaceConfig-B0Q9-q2B.js";
-import { D as writeToIpc, T as snapshotStatus, _ as readPtysize, b as resolveOne, c as extractTaskCounts, g as readNotes, i as controlCodeFromName, m as listRecords, o as deriveLiveStatus, v as renderRawLog } from "./subcommands-Cz17HvuK.js";
+import { D as writeToIpc, T as snapshotStatus, _ as readPtysize, b as resolveOne, c as extractTaskCounts, g as readNotes, i as controlCodeFromName, m as listRecords, o as deriveLiveStatus, v as renderRawLog } from "./subcommands-CKMEWv6U.js";
 import yargs from "yargs";
 import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { homedir, hostname, userInfo } from "os";
@@ -1200,6 +1200,7 @@ Options:
 				...prompt ? ["--", prompt] : []
 			];
 			const agentEnv = freshAgentEnv();
+			const agentId = randomBytes(6).toString("hex");
 			try {
 				const hook = getSpawnHook();
 				if (hook) {
@@ -1218,7 +1219,8 @@ Options:
 						env: {
 							...agentEnv,
 							AGENT_YES_CWD: cwd,
-							AGENT_YES_CLI: cli
+							AGENT_YES_CLI: cli,
+							AGENT_YES_AGENT_ID: agentId
 						},
 						stdin: "ignore",
 						stdout: "ignore",
@@ -1239,6 +1241,7 @@ Options:
 					return Response.json({
 						ok: true,
 						pid: child.pid,
+						agentId,
 						cli,
 						cwd,
 						hook: true,
@@ -1248,7 +1251,10 @@ Options:
 				const child = Bun.spawn(agentArgv, {
 					cwd,
 					detached: true,
-					env: agentEnv,
+					env: {
+						...agentEnv,
+						AGENT_YES_AGENT_ID: agentId
+					},
 					stdin: "ignore",
 					stdout: "ignore",
 					stderr: "ignore"
@@ -1257,6 +1263,7 @@ Options:
 				return Response.json({
 					ok: true,
 					pid: child.pid,
+					agentId,
 					cli,
 					cwd,
 					...provisioned ? { provisioned } : {}
@@ -1389,4 +1396,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-D3vy56FC.js.map
+//# sourceMappingURL=serve-BFnjq7JW.js.map

package/dist/{setup-B1meh4do.js → setup-BmUQ_Zbt.js}

@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-D3vy56FC.js");
+	const { cmdServe } = await import("./serve-BFnjq7JW.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-B1meh4do.js.map
+//# sourceMappingURL=setup-BmUQ_Zbt.js.map

package/dist/{subcommands-Cz17HvuK.js → subcommands-CKMEWv6U.js}

@@ -500,6 +500,7 @@ const SUBCOMMANDS = new Set([
 	"tail",
 	"head",
 	"send",
+	"spawn",
 	"attach",
 	"stop",
 	"exit",
@@ -548,21 +549,22 @@ async function runSubcommand(argv) {
 			case "tail": return await cmdRead(rest, { mode: "tail" });
 			case "head": return await cmdRead(rest, { mode: "head" });
 			case "send": return await cmdSend(rest);
+			case "spawn": return await cmdSpawn(rest);
 			case "attach": return await cmdAttach(rest);
 			case "stop": return await cmdStop(rest);
 			case "exit": return await cmdExit(rest);
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-D3vy56FC.js");
+				const { cmdServe } = await import("./serve-BFnjq7JW.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-B1meh4do.js");
+				const { cmdSetup } = await import("./setup-BmUQ_Zbt.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-YIA3BrZV.js");
+				const { cmdSchedule } = await import("./schedule-DzFEVEoq.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
@@ -716,14 +718,15 @@ async function resolveOne(keyword, opts) {
 async function remoteGet(remote, pathname) {
 	return fetch(`${remote.url}${pathname}`, { headers: { Authorization: `Bearer ${remote.token}` } });
 }
-async function remotePost(remote, pathname, body) {
+async function remotePost(remote, pathname, body, signal) {
 	return fetch(`${remote.url}${pathname}`, {
 		method: "POST",
 		headers: {
 			Authorization: `Bearer ${remote.token}`,
 			"Content-Type": "application/json"
 		},
-		body: JSON.stringify(body)
+		body: JSON.stringify(body),
+		...signal ? { signal } : {}
 	});
 }
 async function runRemoteLs(remote, opts) {
@@ -875,6 +878,45 @@ async function runRemoteSend(remote, msg, code) {
 	process.stdout.write(`sent to remote pid ${data.pid} (${remote.url}  ${keyword})\n`);
 	return 0;
 }
+/**
+* Spawn an agent on a remote host by POSTing its existing `/api/spawn`. The
+* remote applies ITS OWN spawn hook + provision allowlist server-side (the hook
+* never crosses the wire). `hint` is the user-typed target (alias or
+* token@host:port) so the printed follow-ups are copy-pasteable.
+*
+* NO retry: a POST that already spawned must never be re-sent (double-spawn). A
+* generous timeout still bounds a half-open/stalled connection — on timeout the
+* result is UNKNOWN, so we say so and point at `ay ls` rather than retrying.
+*/
+async function runRemoteSpawn(remote, hint, spec) {
+	const SPAWN_TIMEOUT_MS = Number(process.env.AGENT_YES_REMOTE_SPAWN_TIMEOUT_MS) || 12e4;
+	let res;
+	try {
+		res = await remotePost(remote, "/api/spawn", {
+			cli: spec.cli,
+			cwd: spec.cwd || void 0,
+			from: spec.from || void 0,
+			prompt: spec.prompt || void 0
+		}, AbortSignal.timeout(SPAWN_TIMEOUT_MS));
+	} catch (e) {
+		const name = e?.name;
+		if (name === "TimeoutError" || name === "AbortError") {
+			process.stderr.write(`remote spawn: no response from ${remote.url} within ${Math.round(SPAWN_TIMEOUT_MS / 1e3)}s — result UNKNOWN (not retried).\n  ay ls ${hint}    # check whether it started\n`);
+			return 2;
+		}
+		process.stderr.write(`remote spawn failed: ${e.message}\n`);
+		return 1;
+	}
+	if (!res.ok) {
+		process.stderr.write(`remote spawn failed ${res.status}: ${await res.text()}\n`);
+		return 1;
+	}
+	const r = await res.json();
+	process.stdout.write(`spawned ${r.cli} on ${remote.url} in ${r.cwd}${r.hook ? " (via spawn hook)" : ""}${r.provisioned ? ` (${r.provisioned.action})` : ""}\n`);
+	if (r.agentId && !hint.includes("://")) process.stderr.write(`\n  ay tail ${hint}:${r.agentId}            # watch its output\n  ay status ${hint}:${r.agentId} --wait   # block until it needs you\n`);
+	else process.stderr.write(`\n  ay ls ${hint}    # the new ${r.cli} agent appears here\n`);
+	return 0;
+}
 async function runRemoteStatus(remote) {
 	const keyword = remote.keyword ?? "";
 	if (!keyword) {
@@ -1819,6 +1861,40 @@ function extractActivityFromLines(lines) {
 	}
 	return null;
 }
+async function cmdSpawn(rest) {
+	const argv = await yargs(rest).usage("Usage: ay spawn <remote> [--cli claude] [--cwd <dir>] [--from <src>] -- <prompt>").option("cli", {
+		type: "string",
+		default: "claude",
+		description: "CLI to wrap (claude|codex|gemini|…)"
+	}).option("cwd", {
+		type: "string",
+		description: "Working dir ON THE REMOTE (resolved against the remote's workspace root)"
+	}).option("from", {
+		type: "string",
+		description: "Provision a worktree from a GitHub source (owner/repo@branch) on the remote"
+	}).option("prompt", {
+		type: "string",
+		description: "Initial prompt (or pass it after `--`)"
+	}).help(false).version(false).exitProcess(false).parseAsync();
+	const target = argv._[0] !== void 0 ? String(argv._[0]) : void 0;
+	if (!target) throw new Error("usage: ay spawn <remote> [--cli X] [--cwd D] [--from S] -- <prompt>");
+	const prompt = String(argv.prompt ?? argv._.slice(1).map(String).join(" "));
+	const remote = await resolveRemoteSpec(target);
+	if (!remote) {
+		process.stderr.write(`ay spawn: '${target}' is not a known remote (token@host:port or a saved alias).\n  to spawn locally:  ay ${argv.cli}${prompt ? ` -- "${prompt}"` : ""}\n  to add a remote:   ay remote add <alias> http://<token>@<host>:<port>\n`);
+		return 1;
+	}
+	if (remote.keyword) {
+		process.stderr.write(`ay spawn: target '${target}' carries a ':${remote.keyword}' keyword — spawn takes a remote, not an existing agent. Drop the ':${remote.keyword}'.\n`);
+		return 1;
+	}
+	return runRemoteSpawn(remote, target, {
+		cli: String(argv.cli || "claude"),
+		cwd: argv.cwd ? String(argv.cwd) : void 0,
+		from: argv.from ? String(argv.from) : void 0,
+		prompt: prompt || void 0
+	});
+}
 async function cmdSend(rest) {
 	const argv = await yargs(rest).usage("Usage: ay send <keyword> <msg|-> [options]").option("code", {
 		type: "string",
@@ -1858,7 +1934,7 @@ async function cmdSend(rest) {
 	const trailing = controlCodeFromName(codeName);
 	const record = await resolveOne(keyword, opts);
 	const fifoPath = record.fifo_file;
-	if (!fifoPath) throw new Error(`pid ${record.pid}: no fifo_file recorded — agent was not started with --stdpush (or was spawned by Rust which doesn't yet support FIFO IPC; see ROADMAP item 10)`);
+	if (!fifoPath) throw new Error(`pid ${record.pid}: no fifo_file recorded — this agent didn't register a stdin FIFO (an older agent, or one not started with --stdpush). Restarting it (ay restart ${record.pid}) re-registers one.`);
 	let body;
 	if (rawMessage === "-") {
 		const chunks = [];
@@ -2719,4 +2795,4 @@ async function cmdResultSet(rest) {
 
 //#endregion
 export { restartHintLines as C, writeToIpc as D, stopTipForCli as E, resolveResumeArgs as S, snapshotStatus as T, readPtysize as _, cursorAbs as a, resolveOne as b, extractTaskCounts as c, isExitRequest as d, isPidAlive as f, readNotes as g, matchKeyword as h, controlCodeFromName as i, finalizedLines as l, listRecords as m, READ_PAGE_DEFAULT as n, deriveLiveStatus as o, isSubcommand as p, cmdHelp as r, extractNeedsInput as s, GRACEFUL_EXIT_COMMANDS as t, isAgentStuck as u, renderRawLog as v, runSubcommand as w, resolveReadWindow as x, renderRawLogLines as y };
-//# sourceMappingURL=subcommands-Cz17HvuK.js.map
+//# sourceMappingURL=subcommands-CKMEWv6U.js.map

package/dist/{subcommands-BJ2xKtDu.js → subcommands-DeW-4FGU.js}

@@ -4,6 +4,6 @@ import "./configShared-CEyhl0WH.js";
 import "./e2e-Bfw7qL9O.js";
 import "./webrtcLink-CBZkZ-LT.js";
 import "./remotes-DBCvpp3B.js";
-import { C as restartHintLines, D as writeToIpc, E as stopTipForCli, S as resolveResumeArgs, T as snapshotStatus, _ as readPtysize, a as cursorAbs, b as resolveOne, c as extractTaskCounts, d as isExitRequest, f as isPidAlive, g as readNotes, h as matchKeyword, i as controlCodeFromName, l as finalizedLines, m as listRecords, n as READ_PAGE_DEFAULT, o as deriveLiveStatus, p as isSubcommand, r as cmdHelp, s as extractNeedsInput, t as GRACEFUL_EXIT_COMMANDS, u as isAgentStuck, v as renderRawLog, w as runSubcommand, x as resolveReadWindow, y as renderRawLogLines } from "./subcommands-Cz17HvuK.js";
+import { C as restartHintLines, D as writeToIpc, E as stopTipForCli, S as resolveResumeArgs, T as snapshotStatus, _ as readPtysize, a as cursorAbs, b as resolveOne, c as extractTaskCounts, d as isExitRequest, f as isPidAlive, g as readNotes, h as matchKeyword, i as controlCodeFromName, l as finalizedLines, m as listRecords, n as READ_PAGE_DEFAULT, o as deriveLiveStatus, p as isSubcommand, r as cmdHelp, s as extractNeedsInput, t as GRACEFUL_EXIT_COMMANDS, u as isAgentStuck, v as renderRawLog, w as runSubcommand, x as resolveReadWindow, y as renderRawLogLines } from "./subcommands-CKMEWv6U.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{ts-DcZvAsIp.js → ts--UKFJGU-.js}

@@ -1,8 +1,8 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-DOse329y.js";
+import { r as getInstalledPackage } from "./versionChecker-DJObC8O_.js";
 import { t as agentYesHome } from "./agentYesHome-_eJa3DaX.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-V4qvXgAw.js";
-import { t as PidStore } from "./pidStore-fqXqTKkh.js";
+import { t as PidStore } from "./pidStore-BfoBWUjc.js";
 import { i as readGlobalPids } from "./globalPidIndex-DlmmJlO8.js";
 import { n as register, r as sweep } from "./reaper-C-eWAxIj.js";
 import { arch, platform } from "process";
@@ -1216,6 +1216,7 @@ async function agentYes({ cli, cliArgs = [], skipPermissions = false, prompt, ro
 	const inheritedAyPid = Number(ptyEnv.AGENT_YES_PID);
 	const parentPid = Number.isInteger(inheritedAyPid) && inheritedAyPid > 0 ? inheritedAyPid : void 0;
 	ptyEnv.AGENT_YES_PID = String(process.pid);
+	delete ptyEnv.AGENT_YES_AGENT_ID;
 	if (cliConf?.env) for (const [key, raw] of Object.entries(cliConf.env)) {
 		let unresolved = false;
 		const value = raw.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-([^}]*))?\}/g, (_, name, fallback) => {
@@ -1802,4 +1803,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-DcZvAsIp.js.map
+//# sourceMappingURL=ts--UKFJGU-.js.map

package/dist/{versionChecker-DOse329y.js → versionChecker-DJObC8O_.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "claude-yes";
-var version = "1.160.3";
+var version = "1.162.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-DOse329y.js.map
+//# sourceMappingURL=versionChecker-DJObC8O_.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-yes",
-  "version": "1.160.3",
+  "version": "1.162.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/index.ts

@@ -374,6 +374,12 @@ export default async function agentYes({
   const parentPid =
     Number.isInteger(inheritedAyPid) && inheritedAyPid > 0 ? inheritedAyPid : undefined;
   ptyEnv.AGENT_YES_PID = String(process.pid);
+  // A caller-injected AGENT_YES_AGENT_ID (from `ay serve`'s /api/spawn) is meant
+  // for THIS agent's record only — pidStore.registerProcess reads it from our own
+  // env. Strip it from the wrapped CLI's env so the agent's subagents (a nested
+  // `ay`) don't inherit it and register under the same id (which would make that
+  // id ambiguous). The wrapper's own process.env still carries it for pidStore.
+  delete ptyEnv.AGENT_YES_AGENT_ID;
   // Inject per-CLI env (e.g. glm → Z.AI endpoint). Expand ${VAR} against the
   // launching env; skip entries whose vars are unset so we never blank out an
   // inherited value (e.g. ANTHROPIC_AUTH_TOKEN when ZAI_API_KEY isn't exported).

package/ts/pidStore.ts

@@ -77,9 +77,15 @@ export class PidStore {
     const fifoFile = this.getFifoPath(pid);
 
     // Upsert by pid. Reuse an existing record's agent id so re-registration
-    // (e.g. status churn) keeps the id stable; mint a fresh 12-hex id otherwise.
+    // (e.g. status churn) keeps the id stable; else adopt a caller-injected
+    // AGENT_YES_AGENT_ID (so `ay serve`'s /api/spawn can hand back an id that
+    // addresses this exact agent — index.ts strips it from the wrapped CLI's env
+    // so subagents don't inherit it); else mint a fresh 12-hex id.
+    const injected = process.env.AGENT_YES_AGENT_ID;
     const existing = this.store.findOne((doc) => doc.pid === pid);
-    const agentId = existing?.agentId ?? randomBytes(6).toString("hex");
+    const agentId =
+      existing?.agentId ??
+      (injected && /^[0-9a-f]{6,32}$/i.test(injected) ? injected : randomBytes(6).toString("hex"));
 
     const record: Omit<PidRecord, "_id"> = {
       pid,

package/ts/serve.ts

@@ -1763,6 +1763,14 @@ export async function cmdServe(rest: string[]): Promise<number> {
       const agentArgv = [...ayCmd, cli, ...(prompt ? ["--", prompt] : [])];
       // don't leak our Claude Code session into the agent
       const agentEnv = freshAgentEnv();
+      // Correlation id: the spawn response returns the `ay` LAUNCHER pid, which is
+      // NOT the agent's registered pid — so the caller can't find the agent it just
+      // spawned. Mint a 12-hex id (the agent_id format), inject it as
+      // AGENT_YES_AGENT_ID, and return it. Both runtimes adopt it as their agent_id
+      // (instead of minting a random one) and strip it from the wrapped CLI's env so
+      // subagents don't inherit and collide. The caller can then address the agent
+      // immediately: `ay <verb> <remote>:<agentId>`.
+      const agentId = randomBytes(6).toString("hex");
       // Detach the agent into its OWN session (setsid). When `ay serve` runs WITH a
       // controlling terminal (started in a shell rather than as a headless daemon),
       // an undetached child inherits the daemon's session + controlling tty and lands
@@ -1792,7 +1800,7 @@ export async function cmdServe(rest: string[]): Promise<number> {
           const child = Bun.spawn([shell, "-c", script, "ay-spawn", ...agentArgv], {
             cwd,
             detached: true,
-            env: { ...agentEnv, AGENT_YES_CWD: cwd, AGENT_YES_CLI: cli },
+            env: { ...agentEnv, AGENT_YES_CWD: cwd, AGENT_YES_CLI: cli, AGENT_YES_AGENT_ID: agentId },
             stdin: "ignore",
             stdout: "ignore",
             stderr: Bun.file(errPath),
@@ -1829,6 +1837,7 @@ export async function cmdServe(rest: string[]): Promise<number> {
           return Response.json({
             ok: true,
             pid: child.pid,
+            agentId,
             cli,
             cwd,
             hook: true,
@@ -1838,7 +1847,7 @@ export async function cmdServe(rest: string[]): Promise<number> {
         const child = Bun.spawn(agentArgv, {
           cwd,
           detached: true,
-          env: agentEnv,
+          env: { ...agentEnv, AGENT_YES_AGENT_ID: agentId },
           stdin: "ignore",
           stdout: "ignore",
           stderr: "ignore",
@@ -1847,6 +1856,7 @@ export async function cmdServe(rest: string[]): Promise<number> {
         return Response.json({
           ok: true,
           pid: child.pid,
+          agentId,
           cli,
           cwd,
           ...(provisioned ? { provisioned } : {}),

package/ts/subcommands.ts

@@ -251,6 +251,7 @@ const SUBCOMMANDS = new Set([
   "tail",
   "head",
   "send",
+  "spawn",
   "attach",
   "stop",
   "exit",
@@ -325,6 +326,8 @@ export async function runSubcommand(argv: string[]): Promise<number | null> {
         return await cmdRead(rest, { mode: "head" });
       case "send":
         return await cmdSend(rest);
+      case "spawn":
+        return await cmdSpawn(rest);
       case "attach":
         return await cmdAttach(rest);
       case "stop":
@@ -648,11 +651,13 @@ async function remotePost(
   remote: ResolvedRemote,
   pathname: string,
   body: unknown,
+  signal?: AbortSignal,
 ): Promise<Response> {
   return fetch(`${remote.url}${pathname}`, {
     method: "POST",
     headers: { Authorization: `Bearer ${remote.token}`, "Content-Type": "application/json" },
     body: JSON.stringify(body),
+    ...(signal ? { signal } : {}),
   });
 }
 
@@ -839,6 +844,84 @@ async function runRemoteSend(remote: ResolvedRemote, msg: string, code: string):
   return 0;
 }
 
+/**
+ * Spawn an agent on a remote host by POSTing its existing `/api/spawn`. The
+ * remote applies ITS OWN spawn hook + provision allowlist server-side (the hook
+ * never crosses the wire). `hint` is the user-typed target (alias or
+ * token@host:port) so the printed follow-ups are copy-pasteable.
+ *
+ * NO retry: a POST that already spawned must never be re-sent (double-spawn). A
+ * generous timeout still bounds a half-open/stalled connection — on timeout the
+ * result is UNKNOWN, so we say so and point at `ay ls` rather than retrying.
+ */
+async function runRemoteSpawn(
+  remote: ResolvedRemote,
+  hint: string,
+  spec: { cli: string; cwd?: string; from?: string; prompt?: string },
+): Promise<number> {
+  // A hooked `/api/spawn` (#126) can legitimately block up to the remote's
+  // handshake window, so the timeout is generous; it only guards a dead/half-open
+  // connection that would otherwise hang the CLI forever.
+  const SPAWN_TIMEOUT_MS = Number(process.env.AGENT_YES_REMOTE_SPAWN_TIMEOUT_MS) || 120_000;
+  let res: Response;
+  try {
+    res = await remotePost(
+      remote,
+      "/api/spawn",
+      {
+        cli: spec.cli,
+        cwd: spec.cwd || undefined,
+        from: spec.from || undefined,
+        prompt: spec.prompt || undefined,
+      },
+      AbortSignal.timeout(SPAWN_TIMEOUT_MS),
+    );
+  } catch (e) {
+    const name = (e as Error)?.name;
+    if (name === "TimeoutError" || name === "AbortError") {
+      // The request may or may not have spawned — do NOT retry. Let the operator check.
+      process.stderr.write(
+        `remote spawn: no response from ${remote.url} within ${Math.round(SPAWN_TIMEOUT_MS / 1000)}s — ` +
+          `result UNKNOWN (not retried).\n  ay ls ${hint}    # check whether it started\n`,
+      );
+      return 2;
+    }
+    process.stderr.write(`remote spawn failed: ${(e as Error).message}\n`);
+    return 1;
+  }
+  if (!res.ok) {
+    process.stderr.write(`remote spawn failed ${res.status}: ${await res.text()}\n`);
+    return 1;
+  }
+  const r = (await res.json()) as {
+    pid: number;
+    cli: string;
+    cwd: string;
+    agentId?: string;
+    hook?: boolean;
+    provisioned?: { action: string };
+  };
+  process.stdout.write(
+    `spawned ${r.cli} on ${remote.url} in ${r.cwd}` +
+      `${r.hook ? " (via spawn hook)" : ""}` +
+      `${r.provisioned ? ` (${r.provisioned.action})` : ""}\n`,
+  );
+  // `/api/spawn` returns a correlation `agentId` that the agent adopts as its
+  // agent_id — so we address the EXACT agent by it (no pid guessing, no race). A
+  // webrtc:// / share-link target isn't `:keyword`-addressable, so the keyword
+  // hint is only for an alias / token@host:port. Older remotes omit agentId →
+  // fall back to pointing at `ay ls`.
+  if (r.agentId && !hint.includes("://")) {
+    process.stderr.write(
+      `\n  ay tail ${hint}:${r.agentId}            # watch its output\n` +
+        `  ay status ${hint}:${r.agentId} --wait   # block until it needs you\n`,
+    );
+  } else {
+    process.stderr.write(`\n  ay ls ${hint}    # the new ${r.cli} agent appears here\n`);
+  }
+  return 0;
+}
+
 async function runRemoteStatus(remote: ResolvedRemote): Promise<number> {
   const keyword = remote.keyword ?? "";
   if (!keyword) {
@@ -2072,6 +2155,65 @@ function extractActivityFromLines(lines: string[]): string | null {
   return null;
 }
 
+// ---------------------------------------------------------------------------
+// ay spawn — launch an agent on a REMOTE host (POSTs the remote's /api/spawn)
+// ---------------------------------------------------------------------------
+
+async function cmdSpawn(rest: string[]): Promise<number> {
+  const y = yargs(rest)
+    .usage("Usage: ay spawn <remote> [--cli claude] [--cwd <dir>] [--from <src>] -- <prompt>")
+    .option("cli", {
+      type: "string",
+      default: "claude",
+      description: "CLI to wrap (claude|codex|gemini|…)",
+    })
+    .option("cwd", {
+      type: "string",
+      description: "Working dir ON THE REMOTE (resolved against the remote's workspace root)",
+    })
+    .option("from", {
+      type: "string",
+      description: "Provision a worktree from a GitHub source (owner/repo@branch) on the remote",
+    })
+    .option("prompt", { type: "string", description: "Initial prompt (or pass it after `--`)" })
+    .help(false)
+    .version(false)
+    .exitProcess(false);
+
+  const argv = await y.parseAsync();
+  const target = argv._[0] !== undefined ? String(argv._[0]) : undefined;
+  if (!target)
+    throw new Error("usage: ay spawn <remote> [--cli X] [--cwd D] [--from S] -- <prompt>");
+  const prompt = String(argv.prompt ?? argv._.slice(1).map(String).join(" "));
+
+  // v1 is remote-only: local spawning is just running the agent directly. A
+  // target that doesn't resolve as a remote is almost certainly a mistake (e.g.
+  // passing a cli name), so fail loudly with the local equivalent.
+  const remote = await resolveRemoteSpec(target);
+  if (!remote) {
+    process.stderr.write(
+      `ay spawn: '${target}' is not a known remote (token@host:port or a saved alias).\n` +
+        `  to spawn locally:  ay ${argv.cli}${prompt ? ` -- "${prompt}"` : ""}\n` +
+        `  to add a remote:   ay remote add <alias> http://<token>@<host>:<port>\n`,
+    );
+    return 1;
+  }
+  if (remote.keyword) {
+    process.stderr.write(
+      `ay spawn: target '${target}' carries a ':${remote.keyword}' keyword — spawn takes a remote, ` +
+        `not an existing agent. Drop the ':${remote.keyword}'.\n`,
+    );
+    return 1;
+  }
+
+  return runRemoteSpawn(remote, target, {
+    cli: String(argv.cli || "claude"),
+    cwd: argv.cwd ? String(argv.cwd) : undefined,
+    from: argv.from ? String(argv.from) : undefined,
+    prompt: prompt || undefined,
+  });
+}
+
 // ---------------------------------------------------------------------------
 // ay send
 // ---------------------------------------------------------------------------
@@ -2121,7 +2263,7 @@ async function cmdSend(rest: string[]): Promise<number> {
   const fifoPath = record.fifo_file;
   if (!fifoPath) {
     throw new Error(
-      `pid ${record.pid}: no fifo_file recorded — agent was not started with --stdpush (or was spawned by Rust which doesn't yet support FIFO IPC; see ROADMAP item 10)`,
+      `pid ${record.pid}: no fifo_file recorded — this agent didn't register a stdin FIFO (an older agent, or one not started with --stdpush). Restarting it (ay restart ${record.pid}) re-registers one.`,
     );
   }
 

package/dist/SUPPORTED_CLIS-pKjUYMIj.js

@@ -1,8 +0,0 @@
-import "./ts-DcZvAsIp.js";
-import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DOse329y.js";
-import "./pidStore-fqXqTKkh.js";
-import "./globalPidIndex-DlmmJlO8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-WcYvfnJQ.js";
-
-export { SUPPORTED_CLIS };

package/dist/pidStore-DfHh3Yt0.js

@@ -1,5 +0,0 @@
-import "./logger-CDIsZ-Pp.js";
-import { t as PidStore } from "./pidStore-fqXqTKkh.js";
-import "./globalPidIndex-DlmmJlO8.js";
-
-export { PidStore };