claude-yes 1.165.0 → 1.167.0

package/dist/{SUPPORTED_CLIS-H7IIw10E.js → SUPPORTED_CLIS-DFBATC85.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-jDEwTsVt.js";
+import { t as CLIS_CONFIG } from "./ts-s3wYccKf.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-H7IIw10E.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-DFBATC85.js.map

package/dist/SUPPORTED_CLIS-DLFqRE8W.js

@@ -0,0 +1,8 @@
+import "./ts-s3wYccKf.js";
+import "./logger-CDIsZ-Pp.js";
+import "./versionChecker-BvR6tV3u.js";
+import "./pidStore-BfoBWUjc.js";
+import "./globalPidIndex-DlmmJlO8.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DFBATC85.js";
+
+export { SUPPORTED_CLIS };

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-uqM2YYA7.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-C0UJyFcN.js";
+import { i as versionString, n as displayVersion, r as getInstalledPackage, t as checkAndAutoUpdate } from "./versionChecker-BvR6tV3u.js";
 import { argv } from "process";
 import { execFileSync, spawn } from "child_process";
 import ms from "ms";
@@ -481,9 +481,9 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-CIFWi9vq.js");
+	const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands-B-WoBVhk.js");
 	if (isHelpFlag && process.argv.length === 3) {
-		cmdHelp(managerCommands);
+		await cmdHelp(managerCommands);
 		process.exit(0);
 	}
 	if (isSubcommand(rawArg, managerCommands)) {
@@ -495,14 +495,23 @@ await checkAndAutoUpdate();
 logger.info(versionString());
 const config = parseCliArgs(process.argv);
 if (config.tray) {
-	const { startTray } = await import("./tray-BMzpUSfa.js");
+	const { startTray } = await import("./tray-CZarCA2Q.js");
 	await startTray();
 	await new Promise(() => {});
 }
 {
-	const { ensureTray } = await import("./tray-BMzpUSfa.js");
+	const { ensureTray } = await import("./tray-CZarCA2Q.js");
 	ensureTray();
 }
+if (!config.showVersion && !config.appendPrompt && !config.tray) {
+	const { waitForSpawnCapacity } = await import("./spawnGate-UH73I2le.js");
+	await waitForSpawnCapacity({
+		onWait: (reason, waitedMs) => {
+			if (config.verbose || waitedMs === 0) console.error(`[agent-yes] spawn gate: ${reason} — waiting…`);
+		},
+		onProceedAnyway: (reason, waitedMs) => console.error(`[agent-yes] spawn gate: ${reason} — waited ${Math.round(waitedMs / 1e3)}s, proceeding anyway`)
+	});
+}
 if (config.useRust) {
 	let rustBinary;
 	try {
@@ -514,7 +523,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-dBgLp3mi.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-DLFqRE8W.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/index.js

@@ -1,6 +1,6 @@
-import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-jDEwTsVt.js";
+import { a as removeControlCharacters, i as AgentContext, n as agentYes, r as config, t as CLIS_CONFIG } from "./ts-s3wYccKf.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-C0UJyFcN.js";
+import "./versionChecker-BvR6tV3u.js";
 import "./pidStore-BfoBWUjc.js";
 import "./globalPidIndex-DlmmJlO8.js";
 

package/dist/{remotes-DkNuq417.js → remotes-ClT1bq16.js}

@@ -1,5 +1,5 @@
 import "./e2e-Bfw7qL9O.js";
 import "./webrtcLink-CBZkZ-LT.js";
-import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-DBCvpp3B.js";
+import { a as resolveRemoteSpec, i as readRemotes, n as deleteRemoteAlias, o as writeRemoteAlias, r as parseDirectRemoteSpec, t as cmdRemote } from "./remotes-T6nf0t3K.js";
 
 export { cmdRemote };

package/dist/{remotes-DBCvpp3B.js → remotes-T6nf0t3K.js}

@@ -86,7 +86,7 @@ async function resolveRemoteSpec(spec) {
 * The bridge lives for the rest of the process (torn down on `process.exit`).
 */
 async function resolveWebrtc(link, keyword) {
-	const { startWebrtcBridge } = await import("./webrtcRemote-Ccdzmuc-.js");
+	const { startWebrtcBridge } = await import("./webrtcRemote-GAgF5K45.js");
 	const bridge = await startWebrtcBridge(link);
 	return {
 		url: bridge.baseUrl,
@@ -173,4 +173,4 @@ async function cmdRemote(rest) {
 
 //#endregion
 export { resolveRemoteSpec as a, readRemotes as i, deleteRemoteAlias as n, writeRemoteAlias as o, parseDirectRemoteSpec as r, cmdRemote as t };
-//# sourceMappingURL=remotes-DBCvpp3B.js.map
+//# sourceMappingURL=remotes-T6nf0t3K.js.map

package/dist/{schedule-BobQwIBS.js → schedule-C2RMA3qm.js}

@@ -1,10 +1,10 @@
-import "./ts-jDEwTsVt.js";
+import "./ts-s3wYccKf.js";
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-C0UJyFcN.js";
+import "./versionChecker-BvR6tV3u.js";
 import "./pidStore-BfoBWUjc.js";
 import "./globalPidIndex-DlmmJlO8.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-H7IIw10E.js";
-import { o as resolveSpawnCwd } from "./workspaceConfig-B0Q9-q2B.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DFBATC85.js";
+import { l as resolveSpawnCwd } from "./workspaceConfig-D3OH7and.js";
 import { createHash } from "node:crypto";
 
 //#region ts/oxmgrService.ts
@@ -141,4 +141,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-BobQwIBS.js.map
+//# sourceMappingURL=schedule-C2RMA3qm.js.map

package/dist/{serve-DzOWMI_8.js → serve-mLqsRwfR.js}

@@ -1,16 +1,17 @@
-import "./ts-jDEwTsVt.js";
+import "./ts-s3wYccKf.js";
 import "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-C0UJyFcN.js";
+import { r as getInstalledPackage } from "./versionChecker-BvR6tV3u.js";
 import "./pidStore-BfoBWUjc.js";
 import { a as updateGlobalPidStatus } from "./globalPidIndex-DlmmJlO8.js";
 import { t as pgidForWrapper } from "./reaper-C-eWAxIj.js";
 import "./configShared-CEyhl0WH.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-H7IIw10E.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DFBATC85.js";
 import "./e2e-Bfw7qL9O.js";
 import "./webrtcLink-CBZkZ-LT.js";
-import "./remotes-DBCvpp3B.js";
-import { a as isProvisionAllowed, i as hasSpawnHook, n as getSpawnHook, o as resolveSpawnCwd, t as getProvisionRoot } from "./workspaceConfig-B0Q9-q2B.js";
-import { A as writeToIpc, D as snapshotStatus, S as resolveOne, b as renderRawLog, c as extractNeedsInput, h as listRecords, i as controlCodeFromName, l as extractTaskCounts, o as deriveLiveStatus, v as readNotes, y as readPtysize } from "./subcommands-DtwxPMYe.js";
+import "./remotes-T6nf0t3K.js";
+import { c as isProvisionAllowed, i as getSpawnHook, l as resolveSpawnCwd, r as getProvisionRoot, s as hasSpawnHook } from "./workspaceConfig-D3OH7and.js";
+import { A as writeToIpc, D as snapshotStatus, S as resolveOne, b as renderRawLog, c as extractNeedsInput, h as listRecords, i as controlCodeFromName, l as extractTaskCounts, o as deriveLiveStatus, v as readNotes, y as readPtysize } from "./subcommands-DWeo7ZLc.js";
+import { r as spawnRejectionReason } from "./spawnGate-B_VDMXYL.js";
 import yargs from "yargs";
 import { mkdir, open, readFile, stat, unlink, writeFile } from "fs/promises";
 import { homedir, hostname, userInfo } from "os";
@@ -307,7 +308,7 @@ async function cmdServeDaemon(sub, args) {
 		let shareLink = null;
 		let shareLinkMinted = false;
 		if (webrtcDaemon) try {
-			const { loadOrCreateShareRoom, shareLinkFromRoomUrl } = await import("./share-Bq_tDXQU.js");
+			const { loadOrCreateShareRoom, shareLinkFromRoomUrl } = await import("./share-BjqQBWM-.js");
 			const explicit = explicitWebrtcUrl(effArgs);
 			shareLink = shareLinkFromRoomUrl(explicit ?? await loadOrCreateShareRoom());
 			shareLinkMinted = !explicit;
@@ -1169,6 +1170,8 @@ Options:
 			const cli = String(body.cli ?? "claude");
 			if (!SUPPORTED_CLIS.includes(cli)) return new Response(`unsupported cli: ${cli}`, { status: 400 });
 			const prompt = String(body.prompt ?? "");
+			const reject = await spawnRejectionReason();
+			if (reject) return new Response(reject, { status: 429 });
 			let cwd;
 			let provisioned = null;
 			const fork = body.fork && typeof body.fork.fromCwd === "string" && body.fork.fromCwd.trim() && typeof body.fork.branch === "string" && body.fork.branch.trim() ? {
@@ -1383,7 +1386,7 @@ Options:
 		const webrtcVal = argv.webrtc ?? argv.share;
 		const explicitUrl = typeof webrtcVal === "string" && webrtcVal.startsWith("webrtc://") ? webrtcVal : void 0;
 		try {
-			const { startShare, loadOrCreateShareRoom } = await import("./share-Bq_tDXQU.js");
+			const { startShare, loadOrCreateShareRoom } = await import("./share-BjqQBWM-.js");
 			const linkFile = path.join(process.env.AGENT_YES_HOME ?? path.join(homedir(), ".agent-yes"), ".share-link");
 			const announce = async (room, link, rotated) => {
 				const lead = rotated ? "the room was rejected by signaling (stale generation) — rotated to a fresh link" : "shared over WebRTC — open this link (the token is eaten from the URL on open)";
@@ -1442,4 +1445,4 @@ Options:
 
 //#endregion
 export { cmdServe };
-//# sourceMappingURL=serve-DzOWMI_8.js.map
+//# sourceMappingURL=serve-mLqsRwfR.js.map

package/dist/{setup-tVfp7djj.js → setup-BtqKZx3q.js}

@@ -1,4 +1,4 @@
-import { r as getWorkspaceRoot, s as setWorkspaceRoot } from "./workspaceConfig-B0Q9-q2B.js";
+import { o as getWorkspaceRoot, u as setWorkspaceRoot } from "./workspaceConfig-D3OH7and.js";
 import { existsSync } from "node:fs";
 import { stdin, stdout } from "node:process";
 import { createInterface } from "node:readline/promises";
@@ -32,7 +32,7 @@ async function cmdSetup(rest) {
 	if (!existsSync(abs)) process.stderr.write(`  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`);
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-DzOWMI_8.js");
+	const { cmdServe } = await import("./serve-mLqsRwfR.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -42,4 +42,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-tVfp7djj.js.map
+//# sourceMappingURL=setup-BtqKZx3q.js.map

package/dist/{share-Bq_tDXQU.js → share-BjqQBWM-.js}

@@ -534,4 +534,4 @@ async function startShare(opts) {
 
 //#endregion
 export { loadOrCreateShareRoom, shareLinkFromRoomUrl, startShare };
-//# sourceMappingURL=share-Bq_tDXQU.js.map
+//# sourceMappingURL=share-BjqQBWM-.js.map

package/dist/spawnGate-B_VDMXYL.js

@@ -0,0 +1,107 @@
+import { i as readGlobalPids } from "./globalPidIndex-DlmmJlO8.js";
+import { a as getSpawnWaitMs, n as getMinFreeMb, t as getMaxAgents } from "./workspaceConfig-D3OH7and.js";
+import { readFile } from "fs/promises";
+
+//#region ts/spawnGate.ts
+/**
+* Spawn admission control — keep an unbounded fan-out of agents from exhausting
+* host RAM and tripping the kernel OOM-killer (which, on a box with no cgroup
+* memory limit, hangs the whole machine). Two opt-in limits:
+*   - {@link getMaxAgents}  — max concurrently-live agents
+*   - {@link getMinFreeMb}  — minimum free memory before admitting a spawn
+*
+* Two entry points share one instantaneous check ({@link spawnRejectionReason}):
+*   - the `ay serve` daemon HARD-REJECTS (`/api/spawn` → 429) so the caller retries;
+*   - the CLI path BLOCKS-AND-WAITS ({@link waitForSpawnCapacity}) with φ-backoff,
+*     failing open after a timeout so recursive `ay <cli>` spawns get spaced out
+*     (the actual cause of the burst storms) without ever deadlocking a workflow.
+*/
+/**
+* System available memory in MB. Prefers Linux `/proc/meminfo` `MemAvailable`
+* (the kernel's own estimate of what's reclaimable without swapping — far more
+* accurate than free RAM), falling back to `os.freemem()` on other platforms or
+* if the file can't be parsed. Returns null when nothing usable is available.
+*/
+async function memAvailableMb() {
+	try {
+		const txt = await readFile("/proc/meminfo", "utf-8");
+		const m = /^MemAvailable:\s+(\d+)\s*kB/m.exec(txt);
+		if (m) return Math.floor(Number(m[1]) / 1024);
+	} catch {}
+	try {
+		const { freemem } = await import("os");
+		return Math.floor(freemem() / (1024 * 1024));
+	} catch {
+		return null;
+	}
+}
+/** True when at least one spawn limit is configured (else the gate is a no-op). */
+function spawnGateEnabled() {
+	return getMaxAgents() !== void 0 || getMinFreeMb() !== void 0;
+}
+/**
+* Instantaneous capacity check. Returns a human-readable reason string when a
+* new spawn should be held back (cap reached / memory too low), or null when
+* there's capacity. Both limits are opt-in — unset means no check.
+*
+* NOTE — the `maxAgents` count is BEST-EFFORT, not a hard barrier: the check is
+* non-atomic (check here → register in `pids.jsonl` later, in another process),
+* so a simultaneous burst can briefly overshoot the cap before the new wrappers
+* appear in the live count. That's acceptable because (a) the CLI path's
+* φ-backoff desynchronizes retries, spreading a burst out, and (b) `minFreeMb`
+* is the HARD OOM guard — it's re-evaluated against live `/proc/meminfo` on every
+* attempt, so once RAM actually drops, further spawns are held regardless of the
+* count. Exact admission would need a cross-process reservation+lock (a TTL'd
+* reservation file); deliberately deferred to avoid stale reservations wedging
+* spawns, which would be worse than a transient overshoot.
+*/
+async function spawnRejectionReason() {
+	const maxAgents = getMaxAgents();
+	if (maxAgents !== void 0) {
+		const live = (await readGlobalPids({ liveOnly: true })).length;
+		if (live >= maxAgents) return `too many agents running (${live}/${maxAgents}) — this agent wasn't started. Please wait for one to finish and try again. (host: raise "maxAgents" in ~/.agent-yes/config.json or AGENT_YES_MAX_AGENTS)`;
+	}
+	const minFreeMb = getMinFreeMb();
+	if (minFreeMb !== void 0) {
+		const avail = await memAvailableMb();
+		if (avail !== null && avail < minFreeMb) return `the host is low on memory (${avail}MB free, needs ${minFreeMb}MB) — this agent wasn't started, to avoid crashing the machine. Please try again in a moment. (host: adjust "minFreeMb" in ~/.agent-yes/config.json or AGENT_YES_MIN_FREE_MB)`;
+	}
+	return null;
+}
+const PHI = 1.618;
+const BACKOFF_CAP_MS = 6e4;
+const BACKOFF_BASE_MS = 1e3;
+/**
+* Block until there's spawn capacity, polling with φ-backoff (1s × φⁿ, capped at
+* 60s — there is no OS event for "memory freed", so polling is unavoidable here).
+* Fails open after {@link getSpawnWaitMs} ms (default 10 min): on timeout it logs
+* and proceeds, so a set of mutually-waiting recursive spawns can never deadlock
+* permanently. A no-op (returns immediately) when no limit is configured, so it
+* adds ~zero overhead to the spawn hot path for users who haven't opted in.
+*
+* `sleep`/`now` are injectable for tests. `onWait` fires once per backoff cycle.
+*/
+async function waitForSpawnCapacity(opts) {
+	if (!spawnGateEnabled()) return;
+	const maxWaitMs = opts?.maxWaitMs ?? getSpawnWaitMs();
+	const now = opts?.now ?? (() => performance.now());
+	const sleep = opts?.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+	const start = now();
+	let delay = BACKOFF_BASE_MS;
+	for (;;) {
+		const reason = await spawnRejectionReason();
+		if (!reason) return;
+		const waited = now() - start;
+		if (waited >= maxWaitMs) {
+			opts?.onProceedAnyway?.(reason, waited);
+			return;
+		}
+		opts?.onWait?.(reason, waited);
+		await sleep(Math.min(delay, BACKOFF_CAP_MS, maxWaitMs - waited));
+		delay = Math.min(delay * PHI, BACKOFF_CAP_MS);
+	}
+}
+
+//#endregion
+export { waitForSpawnCapacity as i, spawnGateEnabled as n, spawnRejectionReason as r, memAvailableMb as t };
+//# sourceMappingURL=spawnGate-B_VDMXYL.js.map

package/dist/spawnGate-UH73I2le.js

@@ -0,0 +1,5 @@
+import "./logger-CDIsZ-Pp.js";
+import "./globalPidIndex-DlmmJlO8.js";
+import { i as waitForSpawnCapacity, n as spawnGateEnabled, r as spawnRejectionReason, t as memAvailableMb } from "./spawnGate-B_VDMXYL.js";
+
+export { waitForSpawnCapacity };

package/dist/{subcommands-CIFWi9vq.js → subcommands-B-WoBVhk.js}

@@ -3,7 +3,7 @@ import "./globalPidIndex-DlmmJlO8.js";
 import "./configShared-CEyhl0WH.js";
 import "./e2e-Bfw7qL9O.js";
 import "./webrtcLink-CBZkZ-LT.js";
-import "./remotes-DBCvpp3B.js";
-import { A as writeToIpc, C as resolveReadWindow, D as snapshotStatus, E as runSubcommand, O as stopTipForCli, S as resolveOne, T as restartHintLines, _ as menuSelectKeys, a as cursorAbs, b as renderRawLog, c as extractNeedsInput, d as isAgentStuck, f as isExitRequest, g as matchKeyword, h as listRecords, i as controlCodeFromName, k as writeKeysPaced, l as extractTaskCounts, m as isSubcommand, n as READ_PAGE_DEFAULT, o as deriveLiveStatus, p as isPidAlive, r as cmdHelp, s as extractMenu, t as GRACEFUL_EXIT_COMMANDS, u as finalizedLines, v as readNotes, w as resolveResumeArgs, x as renderRawLogLines, y as readPtysize } from "./subcommands-DtwxPMYe.js";
+import "./remotes-T6nf0t3K.js";
+import { A as writeToIpc, C as resolveReadWindow, D as snapshotStatus, E as runSubcommand, O as stopTipForCli, S as resolveOne, T as restartHintLines, _ as menuSelectKeys, a as cursorAbs, b as renderRawLog, c as extractNeedsInput, d as isAgentStuck, f as isExitRequest, g as matchKeyword, h as listRecords, i as controlCodeFromName, k as writeKeysPaced, l as extractTaskCounts, m as isSubcommand, n as READ_PAGE_DEFAULT, o as deriveLiveStatus, p as isPidAlive, r as cmdHelp, s as extractMenu, t as GRACEFUL_EXIT_COMMANDS, u as finalizedLines, v as readNotes, w as resolveResumeArgs, x as renderRawLogLines, y as readPtysize } from "./subcommands-DWeo7ZLc.js";
 
 export { cmdHelp, isSubcommand, runSubcommand };

package/dist/{subcommands-DtwxPMYe.js → subcommands-DWeo7ZLc.js}

@@ -3,7 +3,7 @@ import { t as agentYesHome } from "./agentYesHome-_eJa3DaX.js";
 import { a as updateGlobalPidStatus, i as readGlobalPids } from "./globalPidIndex-DlmmJlO8.js";
 import { t as loadSharedCliDefaults } from "./configShared-CEyhl0WH.js";
 import { n as isWebrtcSpec } from "./webrtcLink-CBZkZ-LT.js";
-import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-DBCvpp3B.js";
+import { a as resolveRemoteSpec, i as readRemotes } from "./remotes-T6nf0t3K.js";
 import ms from "ms";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, stat, writeFile } from "fs/promises";
@@ -597,19 +597,19 @@ async function runSubcommand(argv) {
 			case "restart": return await cmdRestart(rest);
 			case "note": return await cmdNote(rest);
 			case "serve": {
-				const { cmdServe } = await import("./serve-DzOWMI_8.js");
+				const { cmdServe } = await import("./serve-mLqsRwfR.js");
 				return cmdServe(rest);
 			}
 			case "setup": {
-				const { cmdSetup } = await import("./setup-tVfp7djj.js");
+				const { cmdSetup } = await import("./setup-BtqKZx3q.js");
 				return cmdSetup(rest);
 			}
 			case "schedule": {
-				const { cmdSchedule } = await import("./schedule-BobQwIBS.js");
+				const { cmdSchedule } = await import("./schedule-C2RMA3qm.js");
 				return cmdSchedule(rest);
 			}
 			case "remote": {
-				const { cmdRemote } = await import("./remotes-DkNuq417.js");
+				const { cmdRemote } = await import("./remotes-ClT1bq16.js");
 				return cmdRemote(rest);
 			}
 			case "reap":
@@ -624,9 +624,29 @@ async function runSubcommand(argv) {
 		return 1;
 	}
 }
-function cmdHelp(managerCommands = true) {
+/**
+* The banner shown by `ay help` / `ay -h` when this process is itself running
+* inside an agent (`AGENT_YES_PID` set — see resolveSender). Answers the three
+* things a nested agent actually needs: who am I, who spawned me, and how do I
+* drive sub-agents of my own — so it doesn't have to rediscover the fan-out
+* primitives (spawn / ay ls forest / ay ls --watch) from scratch every session.
+*/
+async function buildAgentContextSection(self) {
+	const hasParentPid = typeof self.parent_pid === "number" && self.parent_pid > 0;
+	const parent = hasParentPid ? (await listRecords(void 0, {
+		all: true,
+		active: false,
+		json: false,
+		latest: false,
+		cwdScope: null
+	})).find((r) => r.wrapper_pid === self.parent_pid) : void 0;
+	return `You are running inside an agent:\n  ${`You are agent pid ${self.pid} (${self.cli}) in ${shortenPath(self.cwd)}.`}\n  ${!hasParentPid ? `Top-level agent — no parent (started from a human shell or scheduler).` : parent ? `Spawned by agent pid ${parent.pid} (${parent.cli}) in ${shortenPath(parent.cwd)}.` : `Nested under a parent (wrapper pid ${self.parent_pid}) whose record isn't in the local registry.`}\n\nAs an agent, you can:\n  Spawn a sub-agent:\n    ay <cli> -- "<prompt>"                                  auto-links as your child\n    ay claude --model sonnet --advisor opus -- "<prompt>"   routine task\n    ay claude --model opus --advisor fable -- "<prompt>"    complex task\n    (pick --model by task complexity so easy tasks don't cost like hard ones;\n     --advisor is a claude-cli flag — only takes effect for claude/cy)\n  List agents (your children nest under your own pid in the tree):\n    ay ls --cwd ${shortenPath(self.cwd)}\n  Watch agent state changes, scoped to your workspace:\n    ay ls --watch --cwd ${shortenPath(self.cwd)}\n    (NDJSON stream of state changes across every matched agent — one watcher\n     for the whole fan-out instead of N \`ay status --watch\`es)\n  Read one sub-agent's output:\n    ay tail -f <pid>                        follow live output (no single command tails\n                                              many agents' content at once yet — loop\n                                              \`ay ls --json\` pids into per-pid \`ay tail\`)\n\n`;
+}
+async function cmdHelp(managerCommands = true) {
 	const setupLine = managerCommands ? `  ay setup                            guided setup: pick a workspace, share to agent-yes.com\n` : ``;
-	process.stdout.write("ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay send <keyword> <msg>             send a message\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent:\n  ay [claude|codex|gemini|...] [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
+	const self = process.env.AGENT_YES_PID ? await resolveSender() : null;
+	const agentSection = self ? await buildAgentContextSection(self) : "";
+	process.stdout.write(agentSection + "ay - agent-yes CLI\n\nManagement:\n  ay ls [keyword]                     list running agents\n  ay tail [-f] [-n N] <keyword>       last N lines (96), -f to follow\n  ay read <keyword> [page opts]       paginate: --last/--head N, --range A:B,\n                                        --before-line L [--limit N]\n  ay cat <keyword>                    full log\n  ay head <keyword>                   first N lines\n  ay send <keyword> <msg>             send a message\n  ay key <keyword> <key...>           send raw keystrokes (down/up/enter/esc/…) — drives menus\n  ay select <keyword> <N>             pick option N of a needs_input selection menu\n  ay attach <keyword>                 interactive attach (detach: Ctrl-\\)\n  ay stop <keyword>                   graceful shutdown (/exit for claude/codex)\n  ay exit <keyword> [reason]          graceful shutdown, recording who/why (= 'ay send <kw> exit')\n  ay restart <keyword> [--fresh]      stop (if live) + relaunch resuming the session; --fresh replays the prompt\n  ay status <keyword>                 agent status snapshot\n  ay result <keyword> [--wait]        pull an agent's structured result envelope\n  ay result set '<json>'              (inside an agent) deposit your result envelope\n  ay reap                             kill process groups leaked by dead agents\n\nRemote:\n" + setupLine + "  ay schedule <when> <cli> -- <msg>   run an agent on a schedule (HH:MM or cron)\n  ay serve [--port N]                 start HTTP API server (prints token)\n  ay serve status                     show serve daemon/server status\n  ay remote add <alias> http://<token>@<host>:<port>\n  ay remote ls / rm <alias>           manage saved remotes\n  ay ls   <token>@<host>:<port>       connect inline (no alias needed)\n  ay send <token>@<host>:<port>:<kw> <msg>\n\nRun an agent:\n  ay [claude|codex|gemini|...] [options] -- [prompt]\n  ay claude -- \"fix the bug in auth.ts\"\n  ay claude --help                    full agent-runner options\n\nLabs (examples at https://github.com/snomiao/agent-yes/tree/main/lab):\n  local-role-play/   designer + builder on one machine\n  http-remote/       ay serve remote access demo\n  p2p-pairing/       libp2p P2P  (needs: cargo build --features swarm)\n");
 	return 0;
 }
 function matchKeyword(record, keyword) {
@@ -982,7 +1002,7 @@ async function fetchRemoteRecordsRaw(url, token, opts) {
 		let base = url;
 		let bearer = token;
 		if (isWebrtcSpec(url)) {
-			const { startWebrtcBridge } = await import("./webrtcRemote-Ccdzmuc-.js");
+			const { startWebrtcBridge } = await import("./webrtcRemote-GAgF5K45.js");
 			bridge = await startWebrtcBridge(url);
 			base = bridge.baseUrl;
 			bearer = bridge.token;
@@ -3005,4 +3025,4 @@ async function cmdResultSet(rest) {
 
 //#endregion
 export { writeToIpc as A, resolveReadWindow as C, snapshotStatus as D, runSubcommand as E, stopTipForCli as O, resolveOne as S, restartHintLines as T, menuSelectKeys as _, cursorAbs as a, renderRawLog as b, extractNeedsInput as c, isAgentStuck as d, isExitRequest as f, matchKeyword as g, listRecords as h, controlCodeFromName as i, writeKeysPaced as k, extractTaskCounts as l, isSubcommand as m, READ_PAGE_DEFAULT as n, deriveLiveStatus as o, isPidAlive as p, cmdHelp as r, extractMenu as s, GRACEFUL_EXIT_COMMANDS as t, finalizedLines as u, readNotes as v, resolveResumeArgs as w, renderRawLogLines as x, readPtysize as y };
-//# sourceMappingURL=subcommands-DtwxPMYe.js.map
+//# sourceMappingURL=subcommands-DWeo7ZLc.js.map

package/dist/{tray-BMzpUSfa.js → tray-CZarCA2Q.js}

@@ -187,4 +187,4 @@ async function startTray() {
 
 //#endregion
 export { ensureTray, startTray };
-//# sourceMappingURL=tray-BMzpUSfa.js.map
+//# sourceMappingURL=tray-CZarCA2Q.js.map

package/dist/{ts-jDEwTsVt.js → ts-s3wYccKf.js}

@@ -1,5 +1,5 @@
 import { n as logger, t as addTransport } from "./logger-CDIsZ-Pp.js";
-import { r as getInstalledPackage } from "./versionChecker-C0UJyFcN.js";
+import { r as getInstalledPackage } from "./versionChecker-BvR6tV3u.js";
 import { t as agentYesHome } from "./agentYesHome-_eJa3DaX.js";
 import { i as shouldUseLock, r as releaseLock, t as acquireLock } from "./runningLock-V4qvXgAw.js";
 import { t as PidStore } from "./pidStore-BfoBWUjc.js";
@@ -1803,4 +1803,4 @@ function sleep(ms) {
 
 //#endregion
 export { removeControlCharacters as a, AgentContext as i, agentYes as n, config as r, CLIS_CONFIG as t };
-//# sourceMappingURL=ts-jDEwTsVt.js.map
+//# sourceMappingURL=ts-s3wYccKf.js.map

package/dist/{versionChecker-C0UJyFcN.js → versionChecker-BvR6tV3u.js}

@@ -7,7 +7,7 @@ import { fileURLToPath } from "url";
 
 //#region package.json
 var name = "claude-yes";
-var version = "1.165.0";
+var version = "1.167.0";
 
 //#endregion
 //#region ts/versionChecker.ts
@@ -215,4 +215,4 @@ async function displayVersion() {
 
 //#endregion
 export { versionString as i, displayVersion as n, getInstalledPackage as r, checkAndAutoUpdate as t };
-//# sourceMappingURL=versionChecker-C0UJyFcN.js.map
+//# sourceMappingURL=versionChecker-BvR6tV3u.js.map

package/dist/{webrtcRemote-Ccdzmuc-.js → webrtcRemote-GAgF5K45.js}

@@ -256,4 +256,4 @@ async function startWebrtcBridge(link) {
 
 //#endregion
 export { startWebrtcBridge };
-//# sourceMappingURL=webrtcRemote-Ccdzmuc-.js.map
+//# sourceMappingURL=webrtcRemote-GAgF5K45.js.map

package/dist/{workspaceConfig-B0Q9-q2B.js → workspaceConfig-D3OH7and.js}

@@ -96,6 +96,45 @@ function getSpawnHook() {
 function hasSpawnHook() {
 	return getSpawnHook() !== null;
 }
+/**
+* Cap on concurrently-live agents admitted via `/api/spawn`. Env
+* `AGENT_YES_MAX_AGENTS` overrides the config `maxAgents`. A non-positive,
+* missing, or unparseable value means **unlimited** (returns undefined), which
+* preserves the historical no-cap behavior. Exists to stop an unbounded fan-out
+* of agents from exhausting host RAM and tripping the OOM-killer.
+*/
+function getMaxAgents() {
+	const raw = process.env.AGENT_YES_MAX_AGENTS?.trim();
+	const n = raw !== void 0 && raw !== "" ? Number(raw) : readConfig().maxAgents;
+	const v = typeof n === "number" && Number.isFinite(n) ? Math.floor(n) : NaN;
+	return v > 0 ? v : void 0;
+}
+/**
+* Minimum system MemAvailable (MB) required to admit a new spawn. Env
+* `AGENT_YES_MIN_FREE_MB` overrides config `minFreeMb`. Non-positive/unset =
+* no floor (undefined). Complements {@link getMaxAgents}: a count cap alone
+* can't stop OOM when individual agents are large, so we also refuse to spawn
+* when free memory is already low.
+*/
+function getMinFreeMb() {
+	const raw = process.env.AGENT_YES_MIN_FREE_MB?.trim();
+	const n = raw !== void 0 && raw !== "" ? Number(raw) : readConfig().minFreeMb;
+	const v = typeof n === "number" && Number.isFinite(n) ? Math.floor(n) : NaN;
+	return v > 0 ? v : void 0;
+}
+/**
+* Max time (ms) a CLI spawn blocks waiting for capacity before failing open.
+* Env `AGENT_YES_SPAWN_WAIT_MS` overrides config `spawnWaitMs`. A non-negative
+* finite value is used as-is (0 = don't wait, check once then proceed); anything
+* missing/garbage falls back to the 10-minute default. Bounded fail-open is
+* deliberate: recursive spawns must never deadlock permanently on each other.
+*/
+function getSpawnWaitMs() {
+	const DEFAULT = 6e5;
+	const raw = process.env.AGENT_YES_SPAWN_WAIT_MS?.trim();
+	const n = raw !== void 0 && raw !== "" ? Number(raw) : readConfig().spawnWaitMs;
+	return typeof n === "number" && Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT;
+}
 /** Persist the workspace root, tilde-expanded and resolved to an absolute path. */
 function setWorkspaceRoot(dir) {
 	const abs = path.resolve(expandTilde(dir));
@@ -122,5 +161,5 @@ function resolveSpawnCwd(input) {
 }
 
 //#endregion
-export { isProvisionAllowed as a, hasSpawnHook as i, getSpawnHook as n, resolveSpawnCwd as o, getWorkspaceRoot as r, setWorkspaceRoot as s, getProvisionRoot as t };
-//# sourceMappingURL=workspaceConfig-B0Q9-q2B.js.map
+export { getSpawnWaitMs as a, isProvisionAllowed as c, getSpawnHook as i, resolveSpawnCwd as l, getMinFreeMb as n, getWorkspaceRoot as o, getProvisionRoot as r, hasSpawnHook as s, getMaxAgents as t, setWorkspaceRoot as u };
+//# sourceMappingURL=workspaceConfig-D3OH7and.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-yes",
-  "version": "1.165.0",
+  "version": "1.167.0",
   "description": "A wrapper tool that automates interactions with various AI CLI tools by automatically handling common prompts and responses.",
   "keywords": [
     "ai",

package/ts/cli.ts

@@ -30,7 +30,7 @@ import { buildRustArgs } from "./buildRustArgs.ts";
   const isHelpFlag = rawArg === "-h" || rawArg === "--help";
   const { isSubcommand, runSubcommand, cmdHelp } = await import("./subcommands.ts");
   if (isHelpFlag && process.argv.length === 3) {
-    cmdHelp(managerCommands);
+    await cmdHelp(managerCommands);
     process.exit(0);
   }
   if (isSubcommand(rawArg, managerCommands)) {
@@ -62,6 +62,27 @@ if (config.tray) {
   ensureTray(); // fire-and-forget, don't await
 }
 
+// Spawn admission control — applies to a REAL agent launch only (subcommands,
+// --version, --tray already handled/exited above; --append-prompt / --version
+// below are not launches). Sits BEFORE the --rust dispatch so it gates BOTH the
+// Rust and the TypeScript runtimes. Blocks with φ-backoff until there's capacity
+// (or fails open after a timeout) so a burst of recursive `ay <cli>` spawns gets
+// spaced out instead of storming the host into the OOM-killer. No-op (instant)
+// unless maxAgents/minFreeMb is configured — see ts/spawnGate.ts.
+if (!config.showVersion && !config.appendPrompt && !config.tray) {
+  const { waitForSpawnCapacity } = await import("./spawnGate.ts");
+  await waitForSpawnCapacity({
+    onWait: (reason, waitedMs) => {
+      if (config.verbose || waitedMs === 0)
+        console.error(`[agent-yes] spawn gate: ${reason} — waiting…`);
+    },
+    onProceedAnyway: (reason, waitedMs) =>
+      console.error(
+        `[agent-yes] spawn gate: ${reason} — waited ${Math.round(waitedMs / 1000)}s, proceeding anyway`,
+      ),
+  });
+}
+
 // Handle --rust: spawn the Rust binary instead, fall back to TypeScript if unavailable
 if (config.useRust) {
   let rustBinary: string | undefined;

package/ts/serve.ts

@@ -21,6 +21,7 @@ import {
   type CommonOpts,
 } from "./subcommands.ts";
 import { updateGlobalPidStatus } from "./globalPidIndex.ts";
+import { spawnRejectionReason } from "./spawnGate.ts";
 import { pgidForWrapper } from "./reaper.ts";
 import { SUPPORTED_CLIS } from "./SUPPORTED_CLIS.ts";
 import { getInstalledPackage } from "./versionChecker.ts";
@@ -1705,6 +1706,13 @@ export async function cmdServe(rest: string[]): Promise<number> {
         return new Response(`unsupported cli: ${cli}`, { status: 400 });
       const prompt = String(body.prompt ?? "");
 
+      // Admission control BEFORE any provisioning (clone/worktree) so a capped
+      // request fails fast without doing expensive work. Enforces the optional
+      // concurrency cap + memory floor that keep a fan-out of agents from
+      // driving the host into the OOM-killer. 429 = back-pressure, retry later.
+      const reject = await spawnRejectionReason();
+      if (reject) return new Response(reject, { status: 429 });
+
       // Resolve the working directory. A `from` source is provisioned (clone /
       // worktree) through codehost/provision; a plain `cwd` is resolved to the
       // workspace root and mkdir-p'd so a missing dir no longer ENOENTs.