claude-yes 1.299.1 → 1.300.1

package/README.md

@@ -231,6 +231,8 @@ Tasks move through a lifecycle per `--kind`, and gated transitions require
 
 ### Ask another agent a question (`ay ask`)
 
+`ay send` の送信確認では、今回のメッセージ識別子が入力欄から履歴へ移ったことを調べます。終了コードは `0` = 送信確認済み、`1` = `NOT SUBMITTED`（宛先を確認してから再送）、`3` = 宛先到達不能、`4` = `QUEUED`（受付済み・処理待ち）です。`4` は失敗として本文を再送せず、宛先の処理を待ってください。確認できない画面や入力候補・ダイアログには Enter を追加しません。`--no-wait` は従来どおり確認を省略するため、終了コード `0` でも送信確認を意味しません。
+
 `ay send` delivers a question but leaves no trace of it: if the asker moves on
 and the other agent dies, wedges, or simply never replies, nothing records that
 an answer is owed. `ay ask` delivers the same way — returning immediately — and
@@ -621,6 +623,13 @@ Each supported CLI has its own configuration defining:
 
 This project was inspired by: [Claude Code full auto while I sleep : r/ClaudeAI](https://www.reddit.com/r/ClaudeAI/comments/1klk6aw/claude_code_full_auto_while_i_sleep/)
 
+## Contributing
+
+Contributions from humans and coding agents are welcome. Please read
+[CONTRIBUTING.md](CONTRIBUTING.md) first: everything in this repository (code,
+docs, commits, PRs, issues) is written in English, and only synthetic data may
+be committed.
+
 ## License
 
 MIT

package/default.config.yaml

@@ -40,6 +40,12 @@ clis:
     needsInput:
       - pattern: '❯ ?\d+\.'
         flags: m
+      # Folder-trust dialog (current un-numbered layout or legacy numbered one).
+      # The typingRespond/enter pair below normally answers it; when that loses
+      # its race the session parks here matching neither `ready` nor `working`,
+      # and `ay ls` called it idle — a lane silently stuck on the dialog.
+      - pattern: '(❯|>) ?(\d\. ?)?(Yes, I trust this folder|No, exit)'
+        flags: m
     typingRespond:
       "1\n":
         - '│ Do you want to use this API key\?'
@@ -202,6 +208,12 @@ clis:
     needsInput:
       - pattern: '❯ ?\d+\.'
         flags: m
+      # Folder-trust dialog (current un-numbered layout or legacy numbered one).
+      # The typingRespond/enter pair below normally answers it; when that loses
+      # its race the session parks here matching neither `ready` nor `working`,
+      # and `ay ls` called it idle — a lane silently stuck on the dialog.
+      - pattern: '(❯|>) ?(\d\. ?)?(Yes, I trust this folder|No, exit)'
+        flags: m
     typingRespond:
       "1\n":
         - '│ Do you want to use this API key\?'

package/dist/{SUPPORTED_CLIS-DTx7dDDB.js → SUPPORTED_CLIS-C-5idp3R.js}

@@ -1,8 +1,8 @@
-import { t as CLIS_CONFIG } from "./ts-CH-PKBYA.js";
+import { t as CLIS_CONFIG } from "./ts-CPR985mz.js";
 
 //#region ts/SUPPORTED_CLIS.ts
 const SUPPORTED_CLIS = Object.keys(CLIS_CONFIG);
 
 //#endregion
 export { SUPPORTED_CLIS as t };
-//# sourceMappingURL=SUPPORTED_CLIS-DTx7dDDB.js.map
+//# sourceMappingURL=SUPPORTED_CLIS-C-5idp3R.js.map

package/dist/{SUPPORTED_CLIS-BT5FW_d7.js → SUPPORTED_CLIS-NZHT0QJq.js}

@@ -1,12 +1,12 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DG0FqSFh.js";
-import "./ts-CH-PKBYA.js";
+import "./versionChecker-pTpboio4.js";
+import "./ts-CPR985mz.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DTx7dDDB.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C-5idp3R.js";
 
 export { SUPPORTED_CLIS };

package/dist/{agentShare-Im44LLoH.js → agentShare-Bt_vRAdp.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { J as resolveOne } from "./subcommands-BDBElI5o.js";
+import { et as resolveOne } from "./subcommands-CFVFLCuJ.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-DFRyWNMs.js";
-import "./remotes-DrYe_nfw.js";
+import "./remotes-B4v0Nowo.js";
 import { o as startShare } from "./share-C9oGvjXT.js";
 
 //#region ts/agentShare.ts
@@ -232,4 +232,4 @@ function transformEvent(rawEvent, agentId, forwarded) {
 
 //#endregion
 export { createScopedShare, listShares, revokeAllShares, revokeShare };
-//# sourceMappingURL=agentShare-Im44LLoH.js.map
+//# sourceMappingURL=agentShare-Bt_vRAdp.js.map

package/dist/{callback-Dy-_YnNE.js → callback-BoCEpJ3Z.js}

@@ -1,5 +1,5 @@
 import { t as agentYesHome } from "./agentYesHome-BNtn19J4.js";
-import { J as resolveOne } from "./subcommands-BDBElI5o.js";
+import { et as resolveOne } from "./subcommands-CFVFLCuJ.js";
 import { a as mintCapability, o as parseExpires } from "./callbackCore-Bl2gGcxg.js";
 import { randomBytes } from "node:crypto";
 import { chmodSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -72,7 +72,7 @@ async function resolveBase(flag) {
 	if (flag) return flag;
 	if (process.env.AGENT_YES_CALLBACK_BASE) return process.env.AGENT_YES_CALLBACK_BASE;
 	try {
-		const { resolveLocalServeUrl } = await import("./serve-k4gygoUs.js");
+		const { resolveLocalServeUrl } = await import("./serve-DknfTqkm.js");
 		const url = await resolveLocalServeUrl();
 		if (url) return url;
 	} catch {}
@@ -187,4 +187,4 @@ async function cmdCallback(rest) {
 
 //#endregion
 export { loadOrCreateCallbackSecret as i, isCallbackRevoked as n, loadCallbackSecretReadOnly as r, cmdCallback as t };
-//# sourceMappingURL=callback-Dy-_YnNE.js.map
+//# sourceMappingURL=callback-BoCEpJ3Z.js.map

package/dist/{callback-C1ufwGiD.js → callback-DniBBM0f.js}

@@ -5,11 +5,11 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import "./subcommands-BDBElI5o.js";
+import "./subcommands-CFVFLCuJ.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-DFRyWNMs.js";
-import "./remotes-DrYe_nfw.js";
+import "./remotes-B4v0Nowo.js";
 import "./callbackCore-Bl2gGcxg.js";
-import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-Dy-_YnNE.js";
+import { i as loadOrCreateCallbackSecret, n as isCallbackRevoked, r as loadCallbackSecretReadOnly, t as cmdCallback } from "./callback-BoCEpJ3Z.js";
 
 export { cmdCallback };

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import { t as invokedCliName } from "./invokedCli-zdFbz1ST.js";
 import { n as logger } from "./logger-CDIsZ-Pp.js";
-import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-DG0FqSFh.js";
-import { d as getRustBinary } from "./rustBinary-B11mjcEo.js";
+import { a as versionString, r as displayVersion, t as checkAndAutoUpdate } from "./versionChecker-pTpboio4.js";
+import { d as getRustBinary } from "./rustBinary-DGb3sdEw.js";
 import { argv } from "process";
 import { spawn } from "child_process";
 import ms from "ms";
@@ -295,7 +295,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 	const rawArg = process.argv[2];
 	const managerCommands = !invokedCliName(process.argv);
 	const isHelpFlag = rawArg === "-h" || rawArg === "--help";
-	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-8wLJqN0E.js");
+	const { isSubcommand, runSubcommand, cmdHelp, isUnknownManagerToken, isBareManagerInvocation } = await import("./subcommands-BNVgv7bt.js");
 	if (isHelpFlag && process.argv.length === 3) {
 		await cmdHelp(managerCommands);
 		process.exit(0);
@@ -309,7 +309,7 @@ function buildRustArgs(argv, cliFromScript, supportedClis) {
 		process.exit(code ?? 0);
 	}
 	{
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BT5FW_d7.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-NZHT0QJq.js");
 		if (isUnknownManagerToken(rawArg, managerCommands, SUPPORTED_CLIS)) {
 			process.stderr.write(`ay: unknown subcommand or CLI '${rawArg}'.\n    See 'ay help' for subcommands. To run an agent, name a CLI:\n    'ay <cli> …' (e.g. 'ay claude …') or 'ay --cli <cli> …'.\n`);
 			process.exit(1);
@@ -360,7 +360,7 @@ if (config.useRust) {
 		}
 	}
 	if (rustBinary) {
-		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-BT5FW_d7.js");
+		const { SUPPORTED_CLIS } = await import("./SUPPORTED_CLIS-NZHT0QJq.js");
 		const rustArgs = buildRustArgs(process.argv, config.cli, SUPPORTED_CLIS);
 		if (config.verbose) {
 			console.log(`[rust] Using binary: ${rustBinary}`);

package/dist/{cmdPs-DFX1QSwS.js → cmdPs-DU-4ULBF.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { F as listRecords, dt as buildAgentForest, ft as flattenForest, h as deriveLiveState } from "./subcommands-BDBElI5o.js";
+import { _ as deriveLiveState, _t as buildAgentForest, vt as flattenForest, z as listRecords } from "./subcommands-CFVFLCuJ.js";
 import "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-DFRyWNMs.js";
-import "./remotes-DrYe_nfw.js";
+import "./remotes-B4v0Nowo.js";
 import { i as systemStats, n as sampleTrees, r as snapshotProcs, t as humanBytes } from "./procStats-CyD8h5nx.js";
 import yargs from "yargs";
 import { readFileSync } from "node:fs";
@@ -330,4 +330,4 @@ function readPpidSync(pid) {
 
 //#endregion
 export { cmdPs };
-//# sourceMappingURL=cmdPs-DFX1QSwS.js.map
+//# sourceMappingURL=cmdPs-DU-4ULBF.js.map

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DG0FqSFh.js";
-import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-CH-PKBYA.js";
+import "./versionChecker-pTpboio4.js";
+import { a as hasTodoStore, i as answerAsk, l as AgentContext, n as agentYes, o as listAsks, r as config, s as listAsksForProject, t as CLIS_CONFIG } from "./ts-CPR985mz.js";
 import { a as renderTree, c as describeBlock, i as renderDigest, l as monitorHint, o as unblockedTasks, r as openBlockers, t as reconcileTodos, u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";

package/dist/{notifyDaemon-BqStp4Wz.js → notifyDaemon-wT-mtu1E.js}

@@ -5,10 +5,10 @@ import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { D as isPidAlive, F as listRecords, G as renderLogTailLines, h as deriveLiveState } from "./subcommands-BDBElI5o.js";
+import { Z as renderLogTailLines, _ as deriveLiveState, j as isPidAlive, z as listRecords } from "./subcommands-CFVFLCuJ.js";
 import { f as readInbox, g as daemonLockOwnerPath, h as daemonLockDir, i as gcInboxes, l as listInboxParents, m as shouldStealLock, n as appendEvent, s as hostId, u as liveWatchers, x as notifyDir } from "./notifyStore-2SWKGwZI.js";
 import "./webrtcLink-DFRyWNMs.js";
-import "./remotes-DrYe_nfw.js";
+import "./remotes-B4v0Nowo.js";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
 import { randomUUID } from "node:crypto";
 import { execFile, execFileSync } from "node:child_process";
@@ -879,4 +879,4 @@ async function ensureDaemon() {
 
 //#endregion
 export { daemonStatus, ensureDaemon, requestDaemonStop, runDaemon };
-//# sourceMappingURL=notifyDaemon-BqStp4Wz.js.map
+//# sourceMappingURL=notifyDaemon-wT-mtu1E.js.map

package/dist/{parentPingLoop-DrELzhlK.js → parentPingLoop-DYL_oSrV.js}

@@ -338,7 +338,7 @@ async function isParentWatching(parentWrapperPid, parentAgentPid, selfAgentPid,
 		logger.debug("[parent-ping] watcher lookup failed:", error);
 	}
 	try {
-		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-8wLJqN0E.js");
+		const { lastReadAt, READ_WINDOW_MS } = await import("./subcommands-BNVgv7bt.js");
 		const last = await lastReadAt(`agent:${parentAgentPid}`, selfAgentPid);
 		if (last !== null && now - last <= READ_WINDOW_MS) return true;
 	} catch (error) {
@@ -466,4 +466,4 @@ function startParentPingLoop(opts) {
 
 //#endregion
 export { startParentPingLoop };
-//# sourceMappingURL=parentPingLoop-DrELzhlK.js.map
+//# sourceMappingURL=parentPingLoop-DYL_oSrV.js.map

package/dist/{remotes-DrYe_nfw.js → remotes-B4v0Nowo.js}

@@ -145,23 +145,80 @@ async function resolveWebrtc(link, keyword, label) {
 		label
 	};
 }
+/** What a secret is replaced with in `ay remote ls` / `add` output. */
+const MASK = "***";
+/**
+* A saved remote URL with every embedded secret replaced by MASK, so listing
+* remotes doesn't print a usable credential into a terminal, a log, or an
+* agent's transcript. Covers every form `ay remote add` stores:
+*   webrtc://<room>:<token>@<host>               → webrtc://<room>:***@<host>
+*   https://…/w/#<room>:<token>[@<sighost>]      → https://…/w/#<room>:***[@<sighost>]
+*   https://…/room/#room=<id>&s=<token>[&sig=…]  → …#room=<id>&s=***[&sig=…]
+*   https://…/#k=<token>                         → https://…/#k=***
+*   http://<token>@host:port                     → http://***@host:port
+* The room id is kept: it is shown elsewhere as the remote's label and is not
+* enough to join without the token.
+*/
+function maskRemoteUrl(url) {
+	if (/^webrtc:\/\//i.test(url)) return url.replace(/^(webrtc:\/\/[^:]*:)[^@]*/i, `$1${MASK}`);
+	if (!/^https?:\/\//i.test(url)) return url;
+	const hashAt = url.indexOf("#");
+	const base = (hashAt >= 0 ? url.slice(0, hashAt) : url).replace(/^(https?:\/\/)[^/@]+@/i, `$1${MASK}@`);
+	if (hashAt < 0) return base;
+	const frag = url.slice(hashAt + 1);
+	if (/^\??[A-Za-z_]+=/.test(frag)) return `${base}#${maskFragmentParams(frag)}`;
+	if (/^[^:@]*:/.test(frag)) return `${base}#${frag.replace(/^([^:@]*:)[^@]*/, `$1${MASK}`)}`;
+	return `${base}#${maskFragmentParams(frag)}`;
+}
+/** Secret-bearing fragment keys: `s` (room secret) and `k` (`ay share` token). */
+const SECRET_KEYS = new Set(["s", "k"]);
+/**
+* Mask the values of SECRET_KEYS in a key=value fragment. Keys are compared
+* after the same decoding URLSearchParams applies when the link is USED
+* (`%73=` is `s=`, `+` is a space), so an encoded spelling can't slip a
+* working secret past the mask.
+*/
+function maskFragmentParams(frag) {
+	const lead = frag.startsWith("?") ? "?" : "";
+	return lead + frag.slice(lead.length).split("&").map((part) => {
+		const eq = part.indexOf("=");
+		const rawKey = eq >= 0 ? part.slice(0, eq) : part;
+		const key = decodeMaybe(rawKey.replace(/\+/g, " ")).trim().toLowerCase();
+		return SECRET_KEYS.has(key) ? `${rawKey}=${MASK}` : part;
+	}).join("&");
+}
+/** A bare token for display: MASK, or the token itself with --show-secrets. */
+function displayToken(token, showSecrets) {
+	return showSecrets ? token : MASK;
+}
 async function cmdRemote(rest) {
 	const sub = rest[0];
 	if (sub === "-h" || sub === "--help") {
-		process.stdout.write("Usage: ay remote <subcommand>\n\nManage saved remote server aliases.\n\nSubcommands:\n  ay remote ls                                           list configured remotes\n  ay remote add <alias> http://<token>@<host>:<port>    add an http remote\n  ay remote add <alias> webrtc://<room>:<token>@<host>  add a WebRTC share remote\n  ay remote add <alias> https://agent-yes.com/w/#<room>:<token>   (share link form)\n  ay remote add <alias> https://<host>/ay/#k=<token>     (an `ay share` URL)\n  ay remote rm <alias>                                   remove a remote\n\nOnce added, use the alias anywhere a keyword is accepted:\n  ay ls   <alias>\n  ay tail <alias>:<keyword>\n  ay send <alias>:<keyword> \"message\"\n");
+		process.stdout.write("Usage: ay remote <subcommand>\n\nManage saved remote server aliases.\n\nSubcommands:\n  ay remote ls [--show-secrets]                          list configured remotes\n                                                         (tokens are masked unless --show-secrets)\n  ay remote add <alias> http://<token>@<host>:<port>    add an http remote\n  ay remote add <alias> webrtc://<room>:<token>@<host>  add a WebRTC share remote\n  ay remote add <alias> https://agent-yes.com/w/#<room>:<token>   (share link form)\n  ay remote add <alias> https://<host>/ay/#k=<token>     (an `ay share` URL)\n  ay remote rm <alias>                                   remove a remote\n\nOnce added, use the alias anywhere a keyword is accepted:\n  ay ls   <alias>\n  ay tail <alias>:<keyword>\n  ay send <alias>:<keyword> \"message\"\n");
 		return 0;
 	}
-	if (!sub || sub === "ls" || sub === "list") {
+	if (!sub || sub === "ls" || sub === "list" || sub.startsWith("-")) {
+		const flags = sub && !sub.startsWith("-") ? rest.slice(1) : rest;
+		const unknown = flags.filter((f) => f !== "--show-secrets");
+		if (unknown.length) {
+			process.stderr.write(`ay remote ls: unknown argument '${unknown[0]}' (only --show-secrets)\n`);
+			return 1;
+		}
+		const showSecrets = flags.includes("--show-secrets");
 		const remotes = await readRemotes();
 		if (remotes.size === 0) {
 			process.stdout.write("no remotes configured\n");
 			process.stderr.write("\n  ay remote add <alias> http://<token>@<host>:<port>   # add a remote\n  ay serve                                           # start server (prints token)\n");
 			return 0;
 		}
+		let masked = false;
 		for (const [alias, cfg] of remotes) {
-			const preview = cfg.token.length > 8 ? cfg.token.slice(0, 8) + "..." : cfg.token;
-			process.stdout.write(`${alias}\t${cfg.url}\ttoken:${preview}\n`);
+			const url = showSecrets ? cfg.url : maskRemoteUrl(cfg.url);
+			const token = cfg.token ? `\ttoken:${displayToken(cfg.token, showSecrets)}` : "";
+			masked ||= url !== cfg.url || !!cfg.token && !showSecrets;
+			process.stdout.write(`${alias}\t${url}${token}\n`);
 		}
+		if (masked) process.stderr.write(`\n  ay remote ls --show-secrets   # reveal tokens\n`);
 		return 0;
 	}
 	if (sub === "add") {
@@ -176,7 +233,7 @@ async function cmdRemote(rest) {
 				url: rawUrl,
 				token: ""
 			});
-			process.stdout.write(`remote '${alias}' added → ${rawUrl} (webrtc)\n`);
+			process.stdout.write(`remote '${alias}' added → ${maskRemoteUrl(rawUrl)} (webrtc)\n`);
 			process.stderr.write(`\n  ay ls ${alias}            # list agents on ${alias}\n`);
 			return 0;
 		}
@@ -263,5 +320,5 @@ async function cmdConnect(rest) {
 }
 
 //#endregion
-export { parseDirectRemoteSpec as a, resolveRemoteSpec as c, deleteRemoteAlias as i, writeRemoteAlias as l, cmdRemote as n, parseShareUrl as o, defaultConnectAlias as r, readRemotes as s, cmdConnect as t };
-//# sourceMappingURL=remotes-DrYe_nfw.js.map
+export { deleteRemoteAlias as a, parseShareUrl as c, writeRemoteAlias as d, defaultConnectAlias as i, readRemotes as l, cmdConnect as n, maskRemoteUrl as o, cmdRemote as r, parseDirectRemoteSpec as s, MASK as t, resolveRemoteSpec as u };
+//# sourceMappingURL=remotes-B4v0Nowo.js.map

package/dist/remotes-DnMQWaqQ.js

@@ -0,0 +1,5 @@
+import "./e2e-z1xpwSAg.js";
+import "./webrtcLink-DFRyWNMs.js";
+import { a as deleteRemoteAlias, c as parseShareUrl, d as writeRemoteAlias, i as defaultConnectAlias, l as readRemotes, n as cmdConnect, o as maskRemoteUrl, r as cmdRemote, s as parseDirectRemoteSpec, t as MASK, u as resolveRemoteSpec } from "./remotes-B4v0Nowo.js";
+
+export { cmdConnect, cmdRemote };

package/dist/{rustBinary-Dr02NzrL.js → rustBinary-BYXCnEzJ.js}

@@ -1,4 +1,4 @@
-import "./versionChecker-DG0FqSFh.js";
-import { a as findSpawnHiddenLauncher, c as getBinDir, d as getRustBinary, f as hasValidMacSignature, i as findRustBinary, l as getBinaryName, n as downloadBinary, o as findTrayLauncher, r as findAyrsBinary, s as gcOldBinaryDirs, t as devBuildInfo, u as getDownloadUrl } from "./rustBinary-B11mjcEo.js";
+import "./versionChecker-pTpboio4.js";
+import { a as findSpawnHiddenLauncher, c as getBinDir, d as getRustBinary, f as hasValidMacSignature, i as findRustBinary, l as getBinaryName, n as downloadBinary, o as findTrayLauncher, r as findAyrsBinary, s as gcOldBinaryDirs, t as devBuildInfo, u as getDownloadUrl } from "./rustBinary-DGb3sdEw.js";
 
 export { findAyrsBinary, gcOldBinaryDirs };

package/dist/{rustBinary-B11mjcEo.js → rustBinary-DGb3sdEw.js}

@@ -1,4 +1,4 @@
-import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-DG0FqSFh.js";
+import { i as getInstalledPackage, n as compareVersions } from "./versionChecker-pTpboio4.js";
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, readdirSync, rmSync, statSync, unlinkSync } from "fs";
 import { chmod, copyFile } from "fs/promises";
@@ -371,4 +371,4 @@ async function getRustBinary(options = {}) {
 
 //#endregion
 export { findSpawnHiddenLauncher as a, getBinDir as c, getRustBinary as d, hasValidMacSignature as f, findRustBinary as i, getBinaryName as l, downloadBinary as n, findTrayLauncher as o, findAyrsBinary as r, gcOldBinaryDirs as s, devBuildInfo as t, getDownloadUrl as u };
-//# sourceMappingURL=rustBinary-B11mjcEo.js.map
+//# sourceMappingURL=rustBinary-DGb3sdEw.js.map

package/dist/{schedule-D_sSOC99.js → schedule-BQEUD3h2.js}

@@ -1,13 +1,13 @@
 import "./logger-CDIsZ-Pp.js";
-import "./versionChecker-DG0FqSFh.js";
-import "./ts-CH-PKBYA.js";
+import "./versionChecker-pTpboio4.js";
+import "./ts-CPR985mz.js";
 import "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
 import "./globalPidIndex-CRH9L9tn.js";
 import "./pidStore-DXWqzTSz.js";
 import "./messageLog-Brx3w6zT.js";
 import "./todoStore-DF6vxHgV.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DTx7dDDB.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C-5idp3R.js";
 import { f as resolveSpawnCwd } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
 import { createHash } from "node:crypto";
@@ -154,4 +154,4 @@ async function cmdSchedule(rest) {
 
 //#endregion
 export { cmdSchedule };
-//# sourceMappingURL=schedule-D_sSOC99.js.map
+//# sourceMappingURL=schedule-BQEUD3h2.js.map

package/dist/{serve-k4gygoUs.js → serve-DknfTqkm.js}

@@ -1,7 +1,7 @@
 import "./logger-CDIsZ-Pp.js";
-import { i as getInstalledPackage } from "./versionChecker-DG0FqSFh.js";
-import { a as findSpawnHiddenLauncher } from "./rustBinary-B11mjcEo.js";
-import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-CH-PKBYA.js";
+import { i as getInstalledPackage } from "./versionChecker-pTpboio4.js";
+import { a as findSpawnHiddenLauncher } from "./rustBinary-DGb3sdEw.js";
+import { c as permissionBadge, i as answerAsk, o as listAsks, u as CLAUDE_SESSION_PIN_ENV } from "./ts-CPR985mz.js";
 import { t as agentYesHome$1 } from "./agentYesHome-BNtn19J4.js";
 import { u as removeControlCharacters } from "./todoAutomation-CbVVS4re.js";
 import "./JsonlStore-BqF7AQ6E.js";
@@ -12,19 +12,19 @@ import { t as pgidForWrapper } from "./reaper-UimuuTfO.js";
 import "./todoStore-DF6vxHgV.js";
 import "./e2e-z1xpwSAg.js";
 import "./configShared-DKTgiz7K.js";
-import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-DTx7dDDB.js";
-import { B as readLogForRender, F as listRecords, G as renderLogTailLines, H as readPtysize, J as resolveOne, K as renderRawLog, M as isUserTyping, O as isSlashCommand, S as extractTaskCounts, U as recentMessageEdges, V as readNotes, W as recentReadEdges, ct as framePaste, et as snapshotStatus, g as deriveLiveStatus, lt as shouldFramePaste, ot as writeToIpc, p as controlCodeFromName, q as renderRawLogLines, st as withIpcLock, u as cliDefaults, ut as TYPING_BADGE, x as extractNeedsInput, y as extractBadges } from "./subcommands-BDBElI5o.js";
+import { t as SUPPORTED_CLIS } from "./SUPPORTED_CLIS-C-5idp3R.js";
+import { $ as renderRawLogLines, I as isUserTyping, J as readPtysize, K as readLogForRender, M as isSlashCommand, Q as renderRawLog, S as extractBadges, T as extractTaskCounts, X as recentReadEdges, Y as recentMessageEdges, Z as renderLogTailLines, d as cliDefaults, et as resolveOne, ft as writeToIpc, gt as TYPING_BADGE, ht as shouldFramePaste, m as controlCodeFromName, mt as framePaste, ot as snapshotStatus, pt as withIpcLock, q as readNotes, v as deriveLiveStatus, w as extractNeedsInput, z as listRecords } from "./subcommands-CFVFLCuJ.js";
 import { c as isTransientLockMkdirError } from "./notifyStore-2SWKGwZI.js";
 import { i as toWebrtcUrl, n as isWebrtcSpec } from "./webrtcLink-DFRyWNMs.js";
-import "./remotes-DrYe_nfw.js";
+import "./remotes-B4v0Nowo.js";
 import { i as frameVisitorMessage, s as verifyCapability, t as MAX_CALLBACK_MSG_BYTES } from "./callbackCore-Bl2gGcxg.js";
-import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-Dy-_YnNE.js";
+import { n as isCallbackRevoked, r as loadCallbackSecretReadOnly } from "./callback-BoCEpJ3Z.js";
 import { n as sampleTrees } from "./procStats-CyD8h5nx.js";
 import { a as getProvisionRoot, d as isProvisionAllowed, f as resolveSpawnCwd, i as getProvisionHook, l as hasProvisionHook, o as getSpawnHook, t as allowsSkipPermissions, u as hasSpawnHook } from "./workspaceConfig-DTvPtr5j.js";
 import { n as liveEnv, t as ensureNodeRuntime } from "./nodeRuntime-CipjIwfO.js";
-import { i as importProvisionModule } from "./ws-MeGtTLaB.js";
+import { i as importProvisionModule } from "./ws-BhV8FLVX.js";
 import { r as spawnRejectionReason } from "./spawnGate-YpHopveO.js";
-import { i as launchTray } from "./trayApp-WEJSETjO.js";
+import { i as launchTray } from "./trayApp-wUiHykPM.js";
 import yargs from "yargs";
 import { appendFile, mkdir, open, readFile, readdir, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { arch, cpus, freemem, homedir, hostname, loadavg, platform, totalmem, uptime, userInfo } from "os";
@@ -1299,19 +1299,28 @@ function explicitWebrtcUrl(args) {
 		}
 	}
 }
-async function fetchDaemonVersion(port, token) {
-	if (port === null) return null;
+const DAEMON_PROBE_TIMEOUT_MS = 15e3;
+async function probeDaemon(port, token, timeoutMs = DAEMON_PROBE_TIMEOUT_MS) {
+	if (port === null) return { kind: "down" };
 	try {
 		const r = await fetch(`http://127.0.0.1:${port}/api/version`, {
 			headers: { Authorization: `Bearer ${token}` },
-			signal: AbortSignal.timeout(3e3)
+			signal: AbortSignal.timeout(timeoutMs)
 		});
-		if (!r.ok) return null;
-		return (await r.json()).version ?? null;
-	} catch {
-		return null;
+		if (!r.ok) return { kind: "down" };
+		return {
+			kind: "ok",
+			version: (await r.json()).version ?? null
+		};
+	} catch (e) {
+		const name = e?.name;
+		return name === "TimeoutError" || name === "AbortError" ? { kind: "slow" } : { kind: "down" };
 	}
 }
+async function fetchDaemonVersion(port, token) {
+	const p = await probeDaemon(port, token);
+	return p.kind === "ok" ? p.version : null;
+}
 async function cmdServeStartStop(sub) {
 	const mgr = resolveDaemonManager();
 	if (!mgr) {
@@ -1576,7 +1585,8 @@ async function cmdServeStatus(args) {
 	const webrtcish = a.some((x) => x.startsWith("--webrtc") || x.startsWith("--share"));
 	const httpish = a.some((x) => x.startsWith("--http") || x.startsWith("--share")) || !a.some((x) => x.startsWith("--webrtc"));
 	const mode = httpish && webrtcish ? "http+webrtc" : webrtcish ? "webrtc" : "http";
-	const runningVersion = httpish && token ? await fetchDaemonVersion(port, token) : null;
+	const probe = httpish && token ? await probeDaemon(port, token) : { kind: "down" };
+	const runningVersion = probe.kind === "ok" ? probe.version : null;
 	const current = getInstalledPackage().version;
 	const share = shareLinkStatus(shareLink, installed, webrtcish);
 	if (json) {
@@ -1588,6 +1598,7 @@ async function cmdServeStatus(args) {
 			port: httpish ? port : null,
 			localUrl: httpish ? localUrl : null,
 			reachable: runningVersion !== null,
+			probe: probe.kind,
 			runningVersion,
 			currentVersion: current,
 			upToDate: runningVersion !== null && runningVersion === current,
@@ -1611,7 +1622,10 @@ async function cmdServeStatus(args) {
 		const tag = runningVersion === current ? "up to date" : `outdated (current v${current})`;
 		w(`http api:     reachable ${local ? `via ${localUrl}` : `on 127.0.0.1:${port}`} — v${runningVersion} (${tag})`);
 	} else if (mode === "webrtc") w(`http api:     none (webrtc-only)`);
-	else w(`http api:     not reachable ${local ? `via ${localUrl}` : `on 127.0.0.1:${port}`} (not running)`);
+	else {
+		const where = local ? `via ${localUrl}` : `on 127.0.0.1:${port}`;
+		w(probe.kind === "slow" ? `http api:     listening ${where} but did not answer within ${DAEMON_PROBE_TIMEOUT_MS / 1e3}s — the daemon is up and the host is overloaded, not down` : `http api:     not reachable ${where} (not running)`);
+	}
 	w(`token:        ${token ?? "(none yet — created on first serve)"}`);
 	if (share.link) if (share.stale) {
 		w(`share link:   (stale) ${share.link}`);
@@ -1690,7 +1704,7 @@ Options:
 		const { planRustServe } = await import("./serveRust-DDQiZmMf.js");
 		const plan = planRustServe(rest);
 		if (plan.kind === "rust") {
-			const { findAyrsBinary } = await import("./rustBinary-Dr02NzrL.js");
+			const { findAyrsBinary } = await import("./rustBinary-BYXCnEzJ.js");
 			const ayrs = findAyrsBinary();
 			if (ayrs) return runAyrsServe(ayrs, plan.argv);
 			process.stderr.write("ay serve: ayrs binary not found — running the TypeScript server (bun run build:rs, or reinstall, to get the Rust daemon)\n");
@@ -2665,7 +2679,7 @@ Options:
 			}
 		});
 		if (req.method === "GET" && p === "/api/ws") {
-			const ws = await import("./ws-yrujgAH8.js");
+			const ws = await import("./ws-B3n0JCmy.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2685,7 +2699,7 @@ Options:
 		if (req.method === "GET" && p === "/api/ws/status") {
 			const dirRaw = url.searchParams.get("path");
 			if (!dirRaw) return new Response("missing ?path=<workspace dir>", { status: 400 });
-			const ws = await import("./ws-yrujgAH8.js");
+			const ws = await import("./ws-B3n0JCmy.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -2707,7 +2721,7 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/ws/repos") {
-			const ws = await import("./ws-yrujgAH8.js");
+			const ws = await import("./ws-B3n0JCmy.js");
 			try {
 				await ws.loadProvision();
 			} catch (e) {
@@ -2788,7 +2802,7 @@ Options:
 			const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(repoParam);
 			if (!m || m[1] === "." || m[1] === ".." || m[2] === "." || m[2] === "..") return new Response("missing/invalid ?repo=<owner>/<repo>", { status: 400 });
 			const [, owner, repo] = m;
-			const ws = await import("./ws-yrujgAH8.js");
+			const ws = await import("./ws-B3n0JCmy.js");
 			let prov;
 			try {
 				prov = await ws.loadProvision();
@@ -3706,7 +3720,7 @@ Options:
 			const perm = body.perm ?? "r";
 			if (perm !== "r" && perm !== "rw") return new Response(`invalid perm ${perm} (want r or rw)`, { status: 400 });
 			try {
-				const { createScopedShare } = await import("./agentShare-Im44LLoH.js");
+				const { createScopedShare } = await import("./agentShare-Bt_vRAdp.js");
 				const share = await createScopedShare({
 					agent: body.agent,
 					perm,
@@ -3721,12 +3735,12 @@ Options:
 			}
 		}
 		if (req.method === "GET" && p === "/api/shares") {
-			const { listShares } = await import("./agentShare-Im44LLoH.js");
+			const { listShares } = await import("./agentShare-Bt_vRAdp.js");
 			return Response.json(listShares());
 		}
 		const revokeM = /^\/api\/share\/([^/]+)$/.exec(p);
 		if (req.method === "DELETE" && revokeM) {
-			const { revokeShare } = await import("./agentShare-Im44LLoH.js");
+			const { revokeShare } = await import("./agentShare-Bt_vRAdp.js");
 			const ok = revokeShare(decodeURIComponent(revokeM[1]));
 			return new Response(ok ? "revoked" : "no such share", { status: ok ? 200 : 404 });
 		}
@@ -4038,7 +4052,7 @@ Options:
 	const shutdown = (resolve) => {
 		if (heartbeat) clearInterval(heartbeat);
 		closeShare?.();
-		import("./agentShare-Im44LLoH.js").then((m) => m.revokeAllShares()).catch(() => {});
+		import("./agentShare-Bt_vRAdp.js").then((m) => m.revokeAllShares()).catch(() => {});
 		server?.stop();
 		Promise.resolve(releaseHostLock?.()).catch(() => {}).then(resolve);
 	};
@@ -4051,4 +4065,4 @@ Options:
 
 //#endregion
 export { cmdServe, inspectServeDaemon, loadTokenReadOnly, mintScopedTermToken, resolveDaemonHttpBase, resolveLocalServeUrl };
-//# sourceMappingURL=serve-k4gygoUs.js.map
+//# sourceMappingURL=serve-DknfTqkm.js.map

package/dist/{setup-p9twNh8t.js → setup-B13FgF2W.js}

@@ -97,7 +97,7 @@ async function cmdSetup(rest) {
 	} catch {}
 	if (noShare) return 0;
 	process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
-	const { cmdServe } = await import("./serve-k4gygoUs.js");
+	const { cmdServe } = await import("./serve-DknfTqkm.js");
 	return cmdServe([
 		"install",
 		"--share",
@@ -107,4 +107,4 @@ async function cmdSetup(rest) {
 
 //#endregion
 export { cmdSetup };
-//# sourceMappingURL=setup-p9twNh8t.js.map
+//# sourceMappingURL=setup-B13FgF2W.js.map

package/dist/{shareCmd-C2t7SnKt.js → shareCmd-CKsoN9x4.js}

@@ -243,7 +243,7 @@ shown first and needs a y at a [y/N] prompt.
 Options:
   --port N      HTTP port (default: ${DEFAULT_SHARE_PORT}, or the daemon's)\n  --path /ay    tailscale mount path (default: ${DEFAULT_TS_PATH})\n  -y, --yes     approve the shown commands without prompting\n  --json        print {mode, url} as JSON\n\nThe URL carries this host's serve token: whoever holds it can read and steer\nevery agent here. Rotate: rm ~/.agent-yes/.serve-token && ay serve install\n`;
 async function cmdShareStatus(mount) {
-	const { inspectServeDaemon } = await import("./serve-k4gygoUs.js");
+	const { inspectServeDaemon } = await import("./serve-DknfTqkm.js");
 	const [d, ts] = await Promise.all([inspectServeDaemon(), detectTailscale()]);
 	const line = (k, v) => process.stdout.write(`${k.padEnd(11)}${v}\n`);
 	if (d.args === null) {
@@ -287,7 +287,7 @@ async function cmdShare(rest) {
 		process.stderr.write(`ay share: unknown mode '${mode}' — one of ${SHARE_MODES.join(", ")}\n`);
 		return 1;
 	}
-	const { inspectServeDaemon, cmdServe } = await import("./serve-k4gygoUs.js");
+	const { inspectServeDaemon, cmdServe } = await import("./serve-DknfTqkm.js");
 	const [daemon, ts] = await Promise.all([inspectServeDaemon(), detectTailscale()]);
 	const lanIp = pickLanIp(networkInterfaces());
 	if (!mode) {
@@ -412,4 +412,4 @@ async function cmdShare(rest) {
 
 //#endregion
 export { cmdShare };
-//# sourceMappingURL=shareCmd-C2t7SnKt.js.map
+//# sourceMappingURL=shareCmd-CKsoN9x4.js.map