baychat 0.29.2 → 0.29.4

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "baychat",
-  "version": "0.29.2",
+  "version": "0.29.4",
   "displayName": "BayChat",
   "description": "Wakes this Claude Code session the moment a BayChat message arrives: no Monitor, no 30-minute deadline. Uses the baychat CLI already on this computer (npm install -g baychat, then baychat login).",
   "author": {

package/dist/bay-deleted.js

@@ -0,0 +1,95 @@
+"use strict";
+// A Bay login whose Bay an owner deleted (the API's docs/features/BAY_DELETE_AND_DEFAULT.md).
+//
+// The relay is the one that finds out — its poll answers 410 BAY_DELETED — and `baychat bays`
+// is where a person looks, so the relay leaves a note here and clears it the next time a poll
+// succeeds (an owner restored the Bay). The note is keyed by a SHA-256 prefix of the login's
+// token, never the token itself: this file is not a secret and must not hold one.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bayDeletedNotesPath = bayDeletedNotesPath;
+exports.markBayDeleted = markBayDeleted;
+exports.clearBayDeleted = clearBayDeleted;
+exports.bayDeletedSince = bayDeletedSince;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_1 = require("./config");
+function bayDeletedNotesPath() {
+    return path.join((0, config_1.configDir)(), "deleted-bays.json");
+}
+function keyOf(token) {
+    return crypto.createHash("sha256").update(token).digest("hex").slice(0, 16);
+}
+function readNotes() {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(bayDeletedNotesPath(), "utf8"));
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function writeNotes(notes) {
+    const file = bayDeletedNotesPath();
+    if (Object.keys(notes).length === 0) {
+        fs.rmSync(file, { force: true });
+        return;
+    }
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, `${JSON.stringify(notes, null, 2)}\n`, { mode: 0o600 });
+}
+/** The relay met 410 BAY_DELETED with this login. Keeps the first time it was seen. */
+function markBayDeleted(token, now = new Date()) {
+    const notes = readNotes();
+    const key = keyOf(token);
+    if (notes[key])
+        return;
+    notes[key] = now.toISOString();
+    writeNotes(notes);
+}
+/** A poll with this login succeeded: the Bay is not (or no longer) deleted. Cheap when unmarked. */
+function clearBayDeleted(token) {
+    const notes = readNotes();
+    const key = keyOf(token);
+    if (!notes[key])
+        return;
+    delete notes[key];
+    writeNotes(notes);
+}
+/** When the relay first found this login's Bay deleted, or null. */
+function bayDeletedSince(token) {
+    return readNotes()[keyOf(token)] ?? null;
+}

package/dist/bays-command.js

@@ -7,6 +7,7 @@ exports.cmdBays = cmdBays;
 const config_1 = require("./config");
 const bays_1 = require("./bays");
 const bay_mcp_1 = require("./bay-mcp");
+const bay_deleted_1 = require("./bay-deleted");
 const commands_1 = require("./commands");
 const client_paths_1 = require("./client-paths");
 exports.BAYS_USAGE = `Usage: baychat bays                 List the Bay logins on this computer
@@ -22,7 +23,8 @@ exports.BAYS_USAGE = `Usage: baychat bays                 List the Bay logins on
 function cmdBays(args) {
     const [sub, ...rest] = args;
     if (sub === undefined) {
-        for (const line of (0, bays_1.renderBayList)((0, config_1.loadBayLogins)(), (0, config_1.loadDeviceCredentials)()))
+        const lines = (0, bays_1.renderBayList)((0, config_1.loadBayLogins)(), (0, config_1.loadDeviceCredentials)(), Date.now(), (bay) => (0, bay_deleted_1.bayDeletedSince)(bay.token));
+        for (const line of lines)
             console.log(line);
         return 0;
     }

package/dist/bays.js

@@ -114,7 +114,9 @@ function withDefaultBay(bays, device, target) {
     };
 }
 /** `baychat bays` — one line per Bay login, the default marked. Pure, for testing. */
-function renderBayList(bays, device, now = Date.now()) {
+function renderBayList(bays, device, now = Date.now(), 
+/** When the relay found this login's Bay deleted by an owner (bay-deleted.ts), or null. */
+deletedSince = () => null) {
     if (bays.length === 0) {
         if (!device)
             return ["This computer is not logged in to BayChat — run `baychat login`."];
@@ -127,7 +129,11 @@ function renderBayList(bays, device, now = Date.now()) {
     const width = Math.max(...bays.map((b) => b.bayName.length));
     for (const bay of bays) {
         const entry = bay.isDefault || bays.length < 2 ? exports.DEFAULT_MCP_ENTRY : bayEntryName(bay, bays);
-        lines.push(`  ${bay.isDefault ? "*" : " "} ${bay.bayName.padEnd(width)}  ${expiryText(bay.expiresAt, now)}  MCP: ${entry}`);
+        const deleted = deletedSince(bay);
+        const state = deleted
+            ? `DELETED by its owner on ${deleted.slice(0, 10)} — an owner can restore it in the app for 30 days`
+            : expiryText(bay.expiresAt, now);
+        lines.push(`  ${bay.isDefault ? "*" : " "} ${bay.bayName.padEnd(width)}  ${state}  MCP: ${entry}`);
     }
     lines.push("* = default Bay (a session that names no Bay joins it).");
     if (bays.length > 1)

package/dist/relay/daemon.js

@@ -42,6 +42,7 @@ const fs = __importStar(require("fs"));
 const net = __importStar(require("net"));
 const path = __importStar(require("path"));
 const config_1 = require("../config");
+const bay_deleted_1 = require("../bay-deleted");
 const context_report_1 = require("../context-report");
 const codex_context_1 = require("./codex-context");
 const session_commands_1 = require("./session-commands");
@@ -372,10 +373,15 @@ class RelayDaemon {
             onPoll: (cursor) => {
                 this.cursor = cursor;
                 this.polls += 1;
+                // A poll that answers means the Bay is live — restored, if it had been deleted.
+                (0, bay_deleted_1.clearBayDeleted)(device.token);
             },
             onError: (err, willRetry) => {
                 this.lastError = `${errText(err)}${willRetry ? " (retrying)" : ""}`;
                 this.log(this.lastError);
+                // An owner deleted this login's Bay: leave a note `baychat bays` can show.
+                if (err?.code === "BAY_DELETED")
+                    (0, bay_deleted_1.markBayDeleted)(device.token);
             },
             onTransport: (kind, detail) => {
                 this.transport = kind;

package/dist/relay/launcher/approval-settings.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TERMINAL_SETTINGS_FILE = exports.JOIN_ALLOW = void 0;
+exports.TERMINAL_SETTINGS_FILE = exports.UNATTENDED_SETTINGS = exports.JOIN_ALLOW = void 0;
 exports.approvalPathFor = approvalPathFor;
 exports.launchDir = launchDir;
 exports.approvalSettingsPath = approvalSettingsPath;
@@ -94,10 +94,24 @@ function permissionHook(cli, flags) {
         ],
     };
 }
-/** The settings object for a session started from BayChat. Pure; the test pins its exact content. */
-function approvalSettings(sessionName, cli) {
+/**
+ * Claude Code nudges that stop a session with a menu nobody can answer, switched off for
+ * launched sessions only. "Teach auto mode about your environment?" (1 Yes / 2 Not now / 3 Don't
+ * show again) stopped Karmen's first WSL launch (2026-10-06). In Claude Code 2.1.289 that nudge,
+ * and the /auto-mode-setup tip, are offered only while `skillOverrides["auto-mode-setup"]` is not
+ * "off" (read from its code: the gate `x7()`). Off here costs nothing: the skill needs a person.
+ */
+exports.UNATTENDED_SETTINGS = { skillOverrides: { "auto-mode-setup": "off" } };
+/**
+ * The settings object for a session started from BayChat. Pure; the test pins its exact content.
+ * `bayEntry`: the MCP connection the session joins on, when it is not the default `baychat`
+ * (a computer logged in to several Bays) — its tools are join tools too.
+ */
+function approvalSettings(sessionName, cli, bayEntry) {
+    const extra = bayEntry && bayEntry !== "baychat" ? [`mcp__${bayEntry}__*`] : [];
     return {
-        permissions: { allow: [...exports.JOIN_ALLOW] },
+        ...exports.UNATTENDED_SETTINGS,
+        permissions: { allow: [...exports.JOIN_ALLOW, ...extra] },
         hooks: permissionHook(cli, ["--session", sessionName]),
     };
 }
@@ -129,9 +143,9 @@ function currentCliLaunch() {
     return { node: fs.realpathSync(process.execPath), entry: fs.realpathSync(process.argv[1] ?? "") };
 }
 /** Write the session's settings file (0600) and return its path. `sessionName` must already be validated. */
-function writeApprovalSettings(sessionName, cli, dir = launchDir()) {
+function writeApprovalSettings(sessionName, cli, dir = launchDir(), bayEntry) {
     const file = approvalSettingsPath(sessionName, dir);
-    writePrivateJson(dir, file, approvalSettings(sessionName, cli));
+    writePrivateJson(dir, file, approvalSettings(sessionName, cli, bayEntry));
     return file;
 }
 /** Delete the session's settings file. Idempotent: an absent file is already deleted. */

package/dist/relay/launcher/argv.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LAUNCH_SESSION_PREFIX = void 0;
+exports.UNATTENDED_NOTE = exports.LAUNCH_SESSION_PREFIX = void 0;
 exports.multiplexerSessionName = multiplexerSessionName;
 exports.baychatPrompt = baychatPrompt;
 exports.buildLaunchCommand = buildLaunchCommand;
@@ -29,13 +29,22 @@ exports.LAUNCH_SESSION_PREFIX = "bc-";
 function multiplexerSessionName(sessionName) {
     return `${exports.LAUNCH_SESSION_PREFIX}${sessionName}`;
 }
-/** The first message Claude Code receives: the BayChat skill, joining the chosen room. */
-function baychatPrompt(sessionName, join) {
-    if (!join)
-        return `/baychat ${sessionName}`;
-    if ("sessions" in join)
-        return `/baychat ${sessionName} --sessions`;
-    return `/baychat ${sessionName} --group "${join.group}"`;
+/**
+ * Said after every launched `/baychat` line. Nobody is at a launched session's keyboard, and
+ * before it joins nothing it asks can reach a phone (the approve-hook finds the session by name,
+ * so it refuses everything until then). A question there waits forever in a pane nobody sees —
+ * Karmen's first WSL test sat at "Which Bay?" (2026-10-06).
+ */
+exports.UNATTENDED_NOTE = "(Started from the BayChat app: nobody is at this keyboard. Never ask anything before you have joined; if you cannot join, say why in one line and stop.)";
+/**
+ * The first message Claude Code receives: the BayChat skill, joining the chosen room — on the
+ * named Bay connection when the computer has several, so the skill never asks which.
+ */
+function baychatPrompt(sessionName, join, bayEntry) {
+    const room = !join ? "" : "sessions" in join ? " --sessions" : ` --group "${join.group}"`;
+    const bay = bayEntry ? ` --bay ${bayEntry}` : "";
+    const connection = bayEntry ? ` Use only the ${bayEntry} connection (its mcp__${bayEntry}__ tools).` : "";
+    return `/baychat ${sessionName}${room}${bay} ${exports.UNATTENDED_NOTE}${connection}`;
 }
 function buildLaunchCommand(input) {
     const name = multiplexerSessionName(input.sessionName);
@@ -44,7 +53,7 @@ function buildLaunchCommand(input) {
         args: [
             ...input.channelArgs,
             ...(input.settingsFile ? ["--settings", input.settingsFile] : []),
-            baychatPrompt(input.sessionName, input.join),
+            baychatPrompt(input.sessionName, input.join, input.bayEntry),
         ],
         env: input.env,
     });

package/dist/relay/launcher/handle.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CONFIRM_DEADLINE_MS = exports.WARNING_POLL_MS = exports.WARNING_WATCH_MS = void 0;
 exports.handleLaunch = handleLaunch;
 exports.parseLaunch = parseLaunch;
+exports.launchBayEntry = launchBayEntry;
+const bays_1 = require("../../bays");
 const policy_1 = require("../../launch/policy");
 const argv_1 = require("./argv");
 const approval_settings_1 = require("./approval-settings");
@@ -49,6 +51,11 @@ function startSession(launch, deps) {
         return refused("RUNTIME_NOT_YET");
     if (launch.join && "group" in launch.join && (0, argv_1.roomTitleProblem)(launch.join.group))
         return refused("ROOM_INVALID");
+    const bay = launchBayEntry(launch.bay, deps.loadBays());
+    if (!bay) {
+        deps.log(`launch ${launch.id}: refused, this computer is not logged in to the Bay "${launch.bay?.name ?? ""}". Run \`baychat login\` here.`);
+        return refused("BAY_NOT_CONNECTED");
+    }
     const folder = deps.resolveFolder(spot);
     if (!folder.ok) {
         deps.log(`launch ${launch.id}: refused, ${folder.reason}`);
@@ -79,7 +86,7 @@ function startSession(launch, deps) {
         return refused("RUNTIME_MISSING");
     // Monitor: no channel flag and no channel marker — the session listens with listen_messages + Monitor.
     const channel = launch.listen === "monitor" ? { args: [], env: {} } : deps.channelLaunch(binary.path);
-    const settingsFile = (0, approval_settings_1.approvalPathFor)(launch.sessionName) === "hook" ? (0, approval_settings_1.writeApprovalSettings)(launch.sessionName, deps.cli, deps.launchDir) : undefined;
+    const settingsFile = (0, approval_settings_1.approvalPathFor)(launch.sessionName) === "hook" ? (0, approval_settings_1.writeApprovalSettings)(launch.sessionName, deps.cli, deps.launchDir, bay.entry) : undefined;
     const command = (0, argv_1.buildLaunchCommand)({
         multiplexer,
         sessionName: launch.sessionName,
@@ -89,6 +96,7 @@ function startSession(launch, deps) {
         env: { ...channel.env, PATH: deps.pathEnv },
         settingsFile,
         join: launch.join,
+        bayEntry: bay.entry,
     });
     const res = deps.run(command.file, command.args, { cwd: command.cwd, env: command.env });
     if (res.error || res.status !== 0) {
@@ -286,10 +294,31 @@ function parseLaunch(raw) {
         listen,
         requestedBy: { id: requestedBy.id, name: requestedBy.name },
         requestedByIsOwner: l.requestedByIsOwner === true,
+        ...parseBay(l.bay),
         // Only an explicit `true` authorises; a missing or odd value is a refusal.
         commandAuthorized: l.commandAuthorized === true,
     };
 }
+/**
+ * Which of this computer's Bay connections a launch joins on. `entry` is the MCP connection to
+ * name in the `/baychat` line — undefined when there is only one, so there is nothing to choose
+ * (a one-Bay computer's line stays exactly as before). Null: the launch's Bay has no connection
+ * here, and the session must not be started into some other Bay.
+ *
+ * The launcher runs in the DEFAULT Bay's relay, so a launch normally names that Bay; an older
+ * server names none, which means the same.
+ */
+function launchBayEntry(bay, bays) {
+    // No saved Bay set (an older login, or --token): the one `baychat` connection, as always.
+    if (bays.length === 0)
+        return { entry: undefined };
+    const found = bay ? bays.find((b) => b.bayId === bay.id) : bays.find((b) => b.isDefault);
+    if (!found)
+        return null;
+    if (bays.length < 2)
+        return { entry: undefined };
+    return { entry: found.isDefault ? bays_1.DEFAULT_MCP_ENTRY : (0, bays_1.bayEntryName)(found, bays) };
+}
 /** `null` is "join nothing"; undefined is a join that is present but malformed. */
 function parseJoin(raw) {
     if (raw === null || raw === undefined)
@@ -301,3 +330,8 @@ function parseJoin(raw) {
         return { sessions: true };
     return undefined;
 }
+/** An optional `{id, name}`; anything else is treated as absent (an older server sends none). */
+function parseBay(raw) {
+    const b = raw;
+    return b && typeof b.id === "string" && b.id !== "" ? { bay: { id: b.id, name: typeof b.name === "string" ? b.name : "" } } : {};
+}

package/dist/relay/launcher/loop.js

@@ -38,6 +38,7 @@ exports.startLauncher = startLauncher;
 const fs = __importStar(require("fs"));
 const api_1 = require("../../api");
 const launch_1 = require("../../channel/launch");
+const config_1 = require("../../config");
 const claude_trust_1 = require("../../launch/claude-trust");
 const policy_1 = require("../../launch/policy");
 const runtime_binary_1 = require("../../runtime-binary");
@@ -148,6 +149,7 @@ function realLoopDeps(log, signal) {
         loadPolicy: () => (0, policy_1.loadLaunchPolicy)(),
         resolveFolder: policy_1.resolveSpotFolder,
         isFolderTrusted: (folder) => (0, claude_trust_1.isFolderTrusted)(folder),
+        loadBays: () => (0, config_1.loadBayLogins)(),
         resolveBinary: (name) => (0, runtime_binary_1.resolveRuntimeBinary)(name, binaryEnv()),
         channelLaunch: (claudePath) => {
             const launch = (0, launch_1.channelLaunchFor)(claudePath);

package/dist/relay/updates.js

@@ -68,7 +68,14 @@ function sleepUnlessAborted(ms, signal) {
  * means it resumes by itself when a Bay suspension is lifted.
  */
 function standingRefusal(err) {
-    if (!(err instanceof api_1.ApiError) || err.status !== 403)
+    if (!(err instanceof api_1.ApiError))
+        return null;
+    // 410 BAY_DELETED: an owner deleted the Bay this laptop is logged in to (the API's
+    // docs/features/BAY_DELETE_AND_DEFAULT.md). Not a bad credential either — an owner can restore
+    // the Bay for 30 days and this same login works again — so it pauses like a suspension.
+    if (err.status === 410 && err.code === "BAY_DELETED")
+        return "deleted";
+    if (err.status !== 403)
         return null;
     if (err.code === "ACCOUNT_SUSPENDED")
         return "account";
@@ -76,6 +83,19 @@ function standingRefusal(err) {
         return "bay";
     return null;
 }
+/** What the paused relay says, per standing refusal. */
+function standingMessage(standing, minutes) {
+    if (standing === "account") {
+        return `this BayChat account has been suspended — the relay is paused and will check again in ${minutes} min. ` +
+            "Logging in again will not help; if you think this is a mistake, contact support@baychat.io.";
+    }
+    if (standing === "deleted") {
+        return `the Bay this machine is logged in to was deleted by its owner — the relay is paused and will check again in ${minutes} min ` +
+            "(an owner can restore it in the app for 30 days). To use another of your Bays here: baychat bays default <name>.";
+    }
+    return `the Bay this machine is logged in to has been suspended — the relay is paused and will check again in ${minutes} min. ` +
+        "If you think this is a mistake, contact support@baychat.io.";
+}
 /**
  * Transient failures are ridden out, not surfaced. A 502 while the api
  * container restarts, a network throw, a 429 — all mean "later", not "stop".
@@ -171,11 +191,11 @@ async function runUpdatesLoop(opts) {
             const standing = standingRefusal(err);
             if (standing) {
                 const minutes = Math.round(suspendedRecheckMs / 60_000);
-                onError?.(new Error(standing === "account"
-                    ? `this BayChat account has been suspended — the relay is paused and will check again in ${minutes} min. ` +
-                        "Logging in again will not help; if you think this is a mistake, contact support@baychat.io."
-                    : `the Bay this machine is logged in to has been suspended — the relay is paused and will check again in ${minutes} min. ` +
-                        "If you think this is a mistake, contact support@baychat.io."), true);
+                // The error keeps the server's code, so the daemon can tell a deleted Bay apart
+                // (`baychat bays` marks it) without reading the sentence.
+                onError?.(Object.assign(new Error(standingMessage(standing, minutes)), {
+                    code: standing === "account" ? "ACCOUNT_SUSPENDED" : standing === "deleted" ? "BAY_DELETED" : "BAY_SUSPENDED",
+                }), true);
                 await sleepUnlessAborted(suspendedRecheckMs, signal);
                 backoff = BACKOFF_MIN_MS;
                 continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baychat",
-  "version": "0.29.2",
+  "version": "0.29.4",
   "description": "BayChat connector CLI — pair an agent session (Claude Code, Codex, Cursor) with BayChat, or have the relay run DeepSeek or the Cursor CLI for you",
   "bin": {
     "baychat": "dist/index.js"