baychat 0.29.1 → 0.29.3

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "baychat",
-  "version": "0.29.1",
+  "version": "0.29.3",
   "displayName": "BayChat",
   "description": "Wakes this Claude Code session the moment a BayChat message arrives: no Monitor, no 30-minute deadline. Uses the baychat CLI already on this computer (npm install -g baychat, then baychat login).",
   "author": {

package/dist/launch/claude-trust.js

@@ -37,6 +37,7 @@ exports.TRUST_KEY = void 0;
 exports.claudeConfigPath = claudeConfigPath;
 exports.trustKeysFor = trustKeysFor;
 exports.isFolderTrusted = isFolderTrusted;
+exports.trustWalk = trustWalk;
 exports.trustProblemText = trustProblemText;
 exports.trustFolder = trustFolder;
 const fs = __importStar(require("fs"));
@@ -113,16 +114,48 @@ function readConfig(file) {
     }
     return { ok: true, raw, json: json };
 }
-/** Read-only: has Claude Code's trust dialog been accepted for `folder` (under any of its names)? */
-function isFolderTrusted(folder, file = claudeConfigPath()) {
+/**
+ * Read-only: would Claude Code skip its trust dialog in `folder` (under any of its names)?
+ *
+ * Trust is INHERITED, as Claude Code checks it (verified in 2.1.289): a folder counts as trusted
+ * when it or any folder above it was accepted — but inside a git repository the walk stops at the
+ * repository's root, so a trusted home folder does not reach into a repo below it. Checking only
+ * the folder's own key refused every spot under an already-trusted home, where Claude Code never
+ * asks and so the person had no way to record it.
+ */
+function isFolderTrusted(folder, file = claudeConfigPath(), gitRootOf = findGitRoot) {
     const parsed = readConfig(file);
     if (!parsed.ok)
         return false;
     const projects = (parsed.json.projects ?? {});
-    return trustKeysFor(folder).some((key) => {
+    const accepted = (key) => {
         const entry = Object.prototype.hasOwnProperty.call(projects, key) ? projects[key] : undefined;
         return !!entry && typeof entry === "object" && entry[exports.TRUST_KEY] === true;
-    });
+    };
+    return trustKeysFor(folder).some((key) => trustWalk(key, gitRootOf).some(accepted));
+}
+/**
+ * `start` and the folders above it that Claude Code consults: up to the enclosing git root
+ * (inclusive) when there is one, else up to the filesystem root.
+ */
+function trustWalk(start, gitRootOf = findGitRoot) {
+    const from = path.resolve(start);
+    const stop = gitRootOf(from);
+    const out = [];
+    for (let dir = from;; dir = path.dirname(dir)) {
+        out.push(dir);
+        if (dir === stop || path.dirname(dir) === dir)
+            return out;
+    }
+}
+/** The nearest folder at or above `dir` holding a `.git` (a directory, or a file for worktrees). */
+function findGitRoot(dir) {
+    for (let d = dir;; d = path.dirname(d)) {
+        if (fs.existsSync(path.join(d, ".git")))
+            return d;
+        if (path.dirname(d) === d)
+            return null;
+    }
 }
 /** A sentence for each problem, for the person at the terminal. */
 function trustProblemText(reason, file) {
@@ -209,13 +242,14 @@ function serialiseLike(raw, value) {
     return raw.endsWith("\n") ? `${body}\n` : body;
 }
 /**
- * A number JSON.parse cannot hold exactly (more than 15 significant digits) would be silently
- * changed by the rewrite. Strings are blanked first so ids and tokens inside quotes don't count.
+ * A number the rewrite would not write back character for character: a 20-digit integer
+ * JSON.parse rounds, or a `1.0` / `1E5` JSON.stringify respells. Strings are blanked first so ids
+ * and tokens inside quotes don't count.
+ *
+ * Not a digit count: Claude Code itself writes costs like `41.32949860000002` (16+ significant
+ * digits) that round-trip exactly, so counting digits refused nearly every real file.
  */
 function hasLossyNumbers(raw) {
     const outsideStrings = raw.replace(/"(?:[^"\\]|\\.)*"/g, '""');
-    return (outsideStrings.match(/-?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?/g) ?? []).some((n) => {
-        const digits = n.replace(/^-/, "").split(/[eE]/)[0].replace(".", "").replace(/^0+/, "");
-        return digits.length > 15;
-    });
+    return (outsideStrings.match(/-?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?/g) ?? []).some((n) => JSON.stringify(Number(n)) !== n);
 }

package/dist/relay/launcher/approval-settings.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TERMINAL_SETTINGS_FILE = exports.JOIN_ALLOW = void 0;
+exports.TERMINAL_SETTINGS_FILE = exports.UNATTENDED_SETTINGS = exports.JOIN_ALLOW = void 0;
 exports.approvalPathFor = approvalPathFor;
 exports.launchDir = launchDir;
 exports.approvalSettingsPath = approvalSettingsPath;
@@ -94,10 +94,24 @@ function permissionHook(cli, flags) {
         ],
     };
 }
-/** The settings object for a session started from BayChat. Pure; the test pins its exact content. */
-function approvalSettings(sessionName, cli) {
+/**
+ * Claude Code nudges that stop a session with a menu nobody can answer, switched off for
+ * launched sessions only. "Teach auto mode about your environment?" (1 Yes / 2 Not now / 3 Don't
+ * show again) stopped Karmen's first WSL launch (2026-10-06). In Claude Code 2.1.289 that nudge,
+ * and the /auto-mode-setup tip, are offered only while `skillOverrides["auto-mode-setup"]` is not
+ * "off" (read from its code: the gate `x7()`). Off here costs nothing: the skill needs a person.
+ */
+exports.UNATTENDED_SETTINGS = { skillOverrides: { "auto-mode-setup": "off" } };
+/**
+ * The settings object for a session started from BayChat. Pure; the test pins its exact content.
+ * `bayEntry`: the MCP connection the session joins on, when it is not the default `baychat`
+ * (a computer logged in to several Bays) — its tools are join tools too.
+ */
+function approvalSettings(sessionName, cli, bayEntry) {
+    const extra = bayEntry && bayEntry !== "baychat" ? [`mcp__${bayEntry}__*`] : [];
     return {
-        permissions: { allow: [...exports.JOIN_ALLOW] },
+        ...exports.UNATTENDED_SETTINGS,
+        permissions: { allow: [...exports.JOIN_ALLOW, ...extra] },
         hooks: permissionHook(cli, ["--session", sessionName]),
     };
 }
@@ -129,9 +143,9 @@ function currentCliLaunch() {
     return { node: fs.realpathSync(process.execPath), entry: fs.realpathSync(process.argv[1] ?? "") };
 }
 /** Write the session's settings file (0600) and return its path. `sessionName` must already be validated. */
-function writeApprovalSettings(sessionName, cli, dir = launchDir()) {
+function writeApprovalSettings(sessionName, cli, dir = launchDir(), bayEntry) {
     const file = approvalSettingsPath(sessionName, dir);
-    writePrivateJson(dir, file, approvalSettings(sessionName, cli));
+    writePrivateJson(dir, file, approvalSettings(sessionName, cli, bayEntry));
     return file;
 }
 /** Delete the session's settings file. Idempotent: an absent file is already deleted. */

package/dist/relay/launcher/argv.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LAUNCH_SESSION_PREFIX = void 0;
+exports.UNATTENDED_NOTE = exports.LAUNCH_SESSION_PREFIX = void 0;
 exports.multiplexerSessionName = multiplexerSessionName;
 exports.baychatPrompt = baychatPrompt;
 exports.buildLaunchCommand = buildLaunchCommand;
@@ -29,13 +29,22 @@ exports.LAUNCH_SESSION_PREFIX = "bc-";
 function multiplexerSessionName(sessionName) {
     return `${exports.LAUNCH_SESSION_PREFIX}${sessionName}`;
 }
-/** The first message Claude Code receives: the BayChat skill, joining the chosen room. */
-function baychatPrompt(sessionName, join) {
-    if (!join)
-        return `/baychat ${sessionName}`;
-    if ("sessions" in join)
-        return `/baychat ${sessionName} --sessions`;
-    return `/baychat ${sessionName} --group "${join.group}"`;
+/**
+ * Said after every launched `/baychat` line. Nobody is at a launched session's keyboard, and
+ * before it joins nothing it asks can reach a phone (the approve-hook finds the session by name,
+ * so it refuses everything until then). A question there waits forever in a pane nobody sees —
+ * Karmen's first WSL test sat at "Which Bay?" (2026-10-06).
+ */
+exports.UNATTENDED_NOTE = "(Started from the BayChat app: nobody is at this keyboard. Never ask anything before you have joined; if you cannot join, say why in one line and stop.)";
+/**
+ * The first message Claude Code receives: the BayChat skill, joining the chosen room — on the
+ * named Bay connection when the computer has several, so the skill never asks which.
+ */
+function baychatPrompt(sessionName, join, bayEntry) {
+    const room = !join ? "" : "sessions" in join ? " --sessions" : ` --group "${join.group}"`;
+    const bay = bayEntry ? ` --bay ${bayEntry}` : "";
+    const connection = bayEntry ? ` Use only the ${bayEntry} connection (its mcp__${bayEntry}__ tools).` : "";
+    return `/baychat ${sessionName}${room}${bay} ${exports.UNATTENDED_NOTE}${connection}`;
 }
 function buildLaunchCommand(input) {
     const name = multiplexerSessionName(input.sessionName);
@@ -44,7 +53,7 @@ function buildLaunchCommand(input) {
         args: [
             ...input.channelArgs,
             ...(input.settingsFile ? ["--settings", input.settingsFile] : []),
-            baychatPrompt(input.sessionName, input.join),
+            baychatPrompt(input.sessionName, input.join, input.bayEntry),
         ],
         env: input.env,
     });

package/dist/relay/launcher/handle.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CONFIRM_DEADLINE_MS = exports.WARNING_POLL_MS = exports.WARNING_WATCH_MS = void 0;
 exports.handleLaunch = handleLaunch;
 exports.parseLaunch = parseLaunch;
+exports.launchBayEntry = launchBayEntry;
+const bays_1 = require("../../bays");
 const policy_1 = require("../../launch/policy");
 const argv_1 = require("./argv");
 const approval_settings_1 = require("./approval-settings");
@@ -49,6 +51,11 @@ function startSession(launch, deps) {
         return refused("RUNTIME_NOT_YET");
     if (launch.join && "group" in launch.join && (0, argv_1.roomTitleProblem)(launch.join.group))
         return refused("ROOM_INVALID");
+    const bay = launchBayEntry(launch.bay, deps.loadBays());
+    if (!bay) {
+        deps.log(`launch ${launch.id}: refused, this computer is not logged in to the Bay "${launch.bay?.name ?? ""}". Run \`baychat login\` here.`);
+        return refused("BAY_NOT_CONNECTED");
+    }
     const folder = deps.resolveFolder(spot);
     if (!folder.ok) {
         deps.log(`launch ${launch.id}: refused, ${folder.reason}`);
@@ -79,7 +86,7 @@ function startSession(launch, deps) {
         return refused("RUNTIME_MISSING");
     // Monitor: no channel flag and no channel marker — the session listens with listen_messages + Monitor.
     const channel = launch.listen === "monitor" ? { args: [], env: {} } : deps.channelLaunch(binary.path);
-    const settingsFile = (0, approval_settings_1.approvalPathFor)(launch.sessionName) === "hook" ? (0, approval_settings_1.writeApprovalSettings)(launch.sessionName, deps.cli, deps.launchDir) : undefined;
+    const settingsFile = (0, approval_settings_1.approvalPathFor)(launch.sessionName) === "hook" ? (0, approval_settings_1.writeApprovalSettings)(launch.sessionName, deps.cli, deps.launchDir, bay.entry) : undefined;
     const command = (0, argv_1.buildLaunchCommand)({
         multiplexer,
         sessionName: launch.sessionName,
@@ -89,6 +96,7 @@ function startSession(launch, deps) {
         env: { ...channel.env, PATH: deps.pathEnv },
         settingsFile,
         join: launch.join,
+        bayEntry: bay.entry,
     });
     const res = deps.run(command.file, command.args, { cwd: command.cwd, env: command.env });
     if (res.error || res.status !== 0) {
@@ -286,10 +294,31 @@ function parseLaunch(raw) {
         listen,
         requestedBy: { id: requestedBy.id, name: requestedBy.name },
         requestedByIsOwner: l.requestedByIsOwner === true,
+        ...parseBay(l.bay),
         // Only an explicit `true` authorises; a missing or odd value is a refusal.
         commandAuthorized: l.commandAuthorized === true,
     };
 }
+/**
+ * Which of this computer's Bay connections a launch joins on. `entry` is the MCP connection to
+ * name in the `/baychat` line — undefined when there is only one, so there is nothing to choose
+ * (a one-Bay computer's line stays exactly as before). Null: the launch's Bay has no connection
+ * here, and the session must not be started into some other Bay.
+ *
+ * The launcher runs in the DEFAULT Bay's relay, so a launch normally names that Bay; an older
+ * server names none, which means the same.
+ */
+function launchBayEntry(bay, bays) {
+    // No saved Bay set (an older login, or --token): the one `baychat` connection, as always.
+    if (bays.length === 0)
+        return { entry: undefined };
+    const found = bay ? bays.find((b) => b.bayId === bay.id) : bays.find((b) => b.isDefault);
+    if (!found)
+        return null;
+    if (bays.length < 2)
+        return { entry: undefined };
+    return { entry: found.isDefault ? bays_1.DEFAULT_MCP_ENTRY : (0, bays_1.bayEntryName)(found, bays) };
+}
 /** `null` is "join nothing"; undefined is a join that is present but malformed. */
 function parseJoin(raw) {
     if (raw === null || raw === undefined)
@@ -301,3 +330,8 @@ function parseJoin(raw) {
         return { sessions: true };
     return undefined;
 }
+/** An optional `{id, name}`; anything else is treated as absent (an older server sends none). */
+function parseBay(raw) {
+    const b = raw;
+    return b && typeof b.id === "string" && b.id !== "" ? { bay: { id: b.id, name: typeof b.name === "string" ? b.name : "" } } : {};
+}

package/dist/relay/launcher/loop.js

@@ -38,6 +38,7 @@ exports.startLauncher = startLauncher;
 const fs = __importStar(require("fs"));
 const api_1 = require("../../api");
 const launch_1 = require("../../channel/launch");
+const config_1 = require("../../config");
 const claude_trust_1 = require("../../launch/claude-trust");
 const policy_1 = require("../../launch/policy");
 const runtime_binary_1 = require("../../runtime-binary");
@@ -148,6 +149,7 @@ function realLoopDeps(log, signal) {
         loadPolicy: () => (0, policy_1.loadLaunchPolicy)(),
         resolveFolder: policy_1.resolveSpotFolder,
         isFolderTrusted: (folder) => (0, claude_trust_1.isFolderTrusted)(folder),
+        loadBays: () => (0, config_1.loadBayLogins)(),
         resolveBinary: (name) => (0, runtime_binary_1.resolveRuntimeBinary)(name, binaryEnv()),
         channelLaunch: (claudePath) => {
             const launch = (0, launch_1.channelLaunchFor)(claudePath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baychat",
-  "version": "0.29.1",
+  "version": "0.29.3",
   "description": "BayChat connector CLI — pair an agent session (Claude Code, Codex, Cursor) with BayChat, or have the relay run DeepSeek or the Cursor CLI for you",
   "bin": {
     "baychat": "dist/index.js"