baychat 0.29.0 → 0.29.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "baychat",
-  "version": "0.29.0",
+  "version": "0.29.2",
   "displayName": "BayChat",
   "description": "Wakes this Claude Code session the moment a BayChat message arrives: no Monitor, no 30-minute deadline. Uses the baychat CLI already on this computer (npm install -g baychat, then baychat login).",
   "author": {

package/dist/launch/claude-trust.js

@@ -37,6 +37,7 @@ exports.TRUST_KEY = void 0;
 exports.claudeConfigPath = claudeConfigPath;
 exports.trustKeysFor = trustKeysFor;
 exports.isFolderTrusted = isFolderTrusted;
+exports.trustWalk = trustWalk;
 exports.trustProblemText = trustProblemText;
 exports.trustFolder = trustFolder;
 const fs = __importStar(require("fs"));
@@ -113,16 +114,48 @@ function readConfig(file) {
     }
     return { ok: true, raw, json: json };
 }
-/** Read-only: has Claude Code's trust dialog been accepted for `folder` (under any of its names)? */
-function isFolderTrusted(folder, file = claudeConfigPath()) {
+/**
+ * Read-only: would Claude Code skip its trust dialog in `folder` (under any of its names)?
+ *
+ * Trust is INHERITED, as Claude Code checks it (verified in 2.1.289): a folder counts as trusted
+ * when it or any folder above it was accepted — but inside a git repository the walk stops at the
+ * repository's root, so a trusted home folder does not reach into a repo below it. Checking only
+ * the folder's own key refused every spot under an already-trusted home, where Claude Code never
+ * asks and so the person had no way to record it.
+ */
+function isFolderTrusted(folder, file = claudeConfigPath(), gitRootOf = findGitRoot) {
     const parsed = readConfig(file);
     if (!parsed.ok)
         return false;
     const projects = (parsed.json.projects ?? {});
-    return trustKeysFor(folder).some((key) => {
+    const accepted = (key) => {
         const entry = Object.prototype.hasOwnProperty.call(projects, key) ? projects[key] : undefined;
         return !!entry && typeof entry === "object" && entry[exports.TRUST_KEY] === true;
-    });
+    };
+    return trustKeysFor(folder).some((key) => trustWalk(key, gitRootOf).some(accepted));
+}
+/**
+ * `start` and the folders above it that Claude Code consults: up to the enclosing git root
+ * (inclusive) when there is one, else up to the filesystem root.
+ */
+function trustWalk(start, gitRootOf = findGitRoot) {
+    const from = path.resolve(start);
+    const stop = gitRootOf(from);
+    const out = [];
+    for (let dir = from;; dir = path.dirname(dir)) {
+        out.push(dir);
+        if (dir === stop || path.dirname(dir) === dir)
+            return out;
+    }
+}
+/** The nearest folder at or above `dir` holding a `.git` (a directory, or a file for worktrees). */
+function findGitRoot(dir) {
+    for (let d = dir;; d = path.dirname(d)) {
+        if (fs.existsSync(path.join(d, ".git")))
+            return d;
+        if (path.dirname(d) === d)
+            return null;
+    }
 }
 /** A sentence for each problem, for the person at the terminal. */
 function trustProblemText(reason, file) {
@@ -209,13 +242,14 @@ function serialiseLike(raw, value) {
     return raw.endsWith("\n") ? `${body}\n` : body;
 }
 /**
- * A number JSON.parse cannot hold exactly (more than 15 significant digits) would be silently
- * changed by the rewrite. Strings are blanked first so ids and tokens inside quotes don't count.
+ * A number the rewrite would not write back character for character: a 20-digit integer
+ * JSON.parse rounds, or a `1.0` / `1E5` JSON.stringify respells. Strings are blanked first so ids
+ * and tokens inside quotes don't count.
+ *
+ * Not a digit count: Claude Code itself writes costs like `41.32949860000002` (16+ significant
+ * digits) that round-trip exactly, so counting digits refused nearly every real file.
  */
 function hasLossyNumbers(raw) {
     const outsideStrings = raw.replace(/"(?:[^"\\]|\\.)*"/g, '""');
-    return (outsideStrings.match(/-?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?/g) ?? []).some((n) => {
-        const digits = n.replace(/^-/, "").split(/[eE]/)[0].replace(".", "").replace(/^0+/, "");
-        return digits.length > 15;
-    });
+    return (outsideStrings.match(/-?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?/g) ?? []).some((n) => JSON.stringify(Number(n)) !== n);
 }

package/dist/relay/autostart.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AUTOSTART_IMPLEMENTATIONS = exports.WINDOWS_RELAY_LAUNCHER = exports.MAC_SEARCH_PATH = exports.LingerUnavailable = exports.SYSTEMD_UNIT_NAME = exports.SERVICE_LABEL = void 0;
+exports.replaceLaunchAgent = replaceLaunchAgent;
 exports.launchdLogPath = launchdLogPath;
 exports.autostartForPlatform = autostartForPlatform;
 exports.relayCommand = relayCommand;
@@ -194,14 +195,7 @@ const launchd = {
         fs.mkdirSync(path.dirname(target), { recursive: true });
         fs.writeFileSync(target, launchd.unit(cmd), { mode: 0o644 });
         prepareLaunchdLog();
-        const domain = `gui/${os.userInfo().uid}`;
-        // Replacing an agent means removing the old one first; bootout on a label
-        // that was never loaded exits non-zero, which is not a failure here.
-        await execFileAsync("launchctl", [
-            "bootout",
-            `${domain}/${exports.SERVICE_LABEL}`,
-        ]).catch(() => undefined);
-        await execFileAsync("launchctl", ["bootstrap", domain, target]);
+        await replaceLaunchAgent(`gui/${os.userInfo().uid}`, exports.SERVICE_LABEL, target);
     },
     async uninstall() {
         const domain = `gui/${os.userInfo().uid}`;
@@ -212,6 +206,51 @@ const launchd = {
         fs.rmSync(launchd.unitPath(), { force: true });
     },
 };
+const realLaunchctl = {
+    launchctl: async (args) => {
+        await execFileAsync("launchctl", args);
+    },
+    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+};
+/** How long to wait for launchd to finish removing the old agent, and how often to look. */
+const UNLOAD_WAIT_MS = 10_000;
+const UNLOAD_POLL_MS = 250;
+/** Bootstrap attempts, and the pause before each retry. */
+const BOOTSTRAP_RETRY_DELAYS_MS = [1_000, 2_000];
+/**
+ * Remove the loaded agent `label` (if any) and bootstrap `plist` in its place.
+ *
+ * ── WHY IT WAITS AND RETRIES ──────────────────────────────────────────────────────────
+ * `baychat update` on a Mac mini (0.28.0 → 0.29.0, 2026-10-05) failed the restart with
+ * "bootstrap failed: 5: Input/output error"; `baychat relay start` a moment later worked.
+ * launchd answers a bootstrap with EIO while the same label is still being torn down, and
+ * `bootout` can return before that teardown has finished. So: bootout, then wait until
+ * `launchctl print` no longer finds the label (bounded), then bootstrap — retrying twice,
+ * because "no longer printed" and "accepts a new bootstrap" are not quite the same instant.
+ * The last failure is rethrown unchanged, so a real refusal (a bad plist) still surfaces.
+ */
+async function replaceLaunchAgent(domain, label, plist, deps = realLaunchctl) {
+    // Bootout on a label that was never loaded exits non-zero, which is not a failure here.
+    await deps.launchctl(["bootout", `${domain}/${label}`]).catch(() => undefined);
+    for (let waited = 0; waited < UNLOAD_WAIT_MS; waited += UNLOAD_POLL_MS) {
+        const stillLoaded = await deps.launchctl(["print", `${domain}/${label}`]).then(() => true, () => false);
+        if (!stillLoaded)
+            break;
+        await deps.sleep(UNLOAD_POLL_MS);
+    }
+    for (let attempt = 0;; attempt++) {
+        try {
+            await deps.launchctl(["bootstrap", domain, plist]);
+            return;
+        }
+        catch (err) {
+            const delay = BOOTSTRAP_RETRY_DELAYS_MS[attempt];
+            if (delay === undefined)
+                throw err;
+            await deps.sleep(delay);
+        }
+    }
+}
 /**
  * The PATH the relay — and every session it wakes — runs with on macOS.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baychat",
-  "version": "0.29.0",
+  "version": "0.29.2",
   "description": "BayChat connector CLI — pair an agent session (Claude Code, Codex, Cursor) with BayChat, or have the relay run DeepSeek or the Cursor CLI for you",
   "bin": {
     "baychat": "dist/index.js"