baychat 0.33.3 → 0.34.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "baychat",
-  "version": "0.33.3",
+  "version": "0.34.1",
   "displayName": "BayChat",
   "description": "Wakes this Claude Code session the moment a BayChat message arrives: no Monitor, no 30-minute deadline. Uses the baychat CLI already on this computer (npm install -g baychat, then baychat login).",
   "author": {

package/dist/channel/relay-link.js

@@ -155,6 +155,7 @@ class RelayLink {
                 runtime: "claude",
                 ...(this.opts.pane ? { pane: this.opts.pane } : {}),
                 ...(this.opts.ownerPid !== undefined ? { ownerPid: this.opts.ownerPid } : {}),
+                ...(this.opts.cwd ? { cwd: this.opts.cwd } : {}),
             };
             (0, socket_1.writeFrame)(socket, frame);
         });

package/dist/channel/server.js

@@ -107,7 +107,7 @@ const LISTEN_TOOL = {
  * parent are the session's (owner-pid.ts walks the live process tree to prove the latter).
  */
 function realCommandLink(log) {
-    return (session, bay, hooks) => new relay_link_1.RelayLink({ socketPath: relaySocketFor(bay), session, pane: (0, terminal_pane_1.detectPane)(), ownerPid: (0, owner_pid_1.currentOwnerPid)("claude"), ...hooks, log });
+    return (session, bay, hooks) => new relay_link_1.RelayLink({ socketPath: relaySocketFor(bay), session, pane: (0, terminal_pane_1.detectPane)(), ownerPid: (0, owner_pid_1.currentOwnerPid)("claude"), cwd: process.cwd(), ...hooks, log });
 }
 /** The relay that serves a Bay's sessions: the default relay, or that Bay's own (relay/bay-relays.ts). */
 function relaySocketFor(bay) {
@@ -213,6 +213,17 @@ async function mintTicket(deps, { bay, session, cursor, commands }) {
     }
     catch (err) {
         const status = httpStatus(err);
+        // The Bay requires two-step login and this person has not set it up (API
+        // mfa-policy.service.ts, 403 MFA_REQUIRED). Logging in again would not help; setting it up
+        // does, and the same computer login works again the moment it is done.
+        if (status === 403 && /MFA_REQUIRED/.test(err instanceof Error ? err.message : String(err))) {
+            return {
+                ok: false,
+                fatal: true,
+                detail: "Stopped: this Bay requires two-step login. Set it up in the BayChat app (Settings → Two-step login), " +
+                    "then start this session again.",
+            };
+        }
         if (status === 401 || status === 403) {
             return { ok: false, fatal: true, detail: "BayChat refused this computer's login. Run `baychat login`." };
         }

package/dist/claude-onboarding.js

@@ -17,9 +17,9 @@ exports.CLAUDE_JOIN_STEPS = `1. Use **remote BayChat MCP + native Monitor** (a W
 2. Preserve the requested name and the exact group title or id. For automatic naming, run
    only \`baychat session-name --runtime claude\` to obtain the verified name.
    A bare invocation lists sessions and stops; it never joins.
-   For a supplied name call \`join_session({session: "<name>", sessions: true})\`.
+   For a supplied name alone call \`join_session({session: "<name>"})\`: your private chat with your owner.
    For a supplied group use \`join_session({session: "<name>", group: "<exact title or id>"})\`.
-   For explicit \`--private\`, omit both \`sessions\` and \`group\`.
+   For explicit \`--sessions\`, pass \`sessions: true\` (the shared Sessions group).
    When the owner explicitly asks to CREATE a group, instead call
    \`create_group({session: "<name>", title: "<exact title>"})\`: it creates the session and joins it in one call.
    Do not ask again when the owner already requested creation. A supplied group title

package/dist/codex-onboarding.js

@@ -17,8 +17,8 @@ exports.CODEX_JOIN_STEPS = `1. Preserve BOTH arguments. The first argument is th
 3. Join with ONE MCP call, \`join_session\`, passing \`runtime: "codex"\` and \`threadId\`
    (the value from step 2). For \`$baychat codex "vps_baychat"\` call exactly:
    \`join_session({ session: "codex", group: "vps_baychat", runtime: "codex", threadId: "<CODEX_THREAD_ID>" })\`
-   With only a chosen name pass \`sessions: true\` instead of \`group\`. With \`--private\`
-   pass neither. For automatic naming run \`baychat session-name --runtime codex\` (local,
+   With only a chosen name pass neither \`group\` nor \`sessions\` (your private chat with your
+   owner). With \`--sessions\` pass \`sessions: true\` instead of \`group\`. For automatic naming run \`baychat session-name --runtime codex\` (local,
    sandbox-safe) and use the name it prints, with \`group: "<title>"\` or \`sessions: true\`.
    Do not drop the name, swap the arguments, or join Sessions when a group was supplied.
    A bare invocation lists sessions and stops.

package/dist/launch/command.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.trustByHand = exports.APPROVALS_NOTICE = exports.LAUNCH_USAGE = void 0;
+exports.trustByHand = exports.CODEX_UNATTENDED_NOTICE = exports.APPROVALS_NOTICE = exports.LAUNCH_USAGE = void 0;
 exports.cmdLaunch = cmdLaunch;
 const path = __importStar(require("path"));
 const args_1 = require("../args");
@@ -41,12 +41,16 @@ const multiplexer_launch_1 = require("../multiplexer-launch");
 const policy_1 = require("../relay/acp/policy");
 const claude_trust_1 = require("./claude-trust");
 const policy_2 = require("./policy");
-exports.LAUNCH_USAGE = `Usage: baychat launch add <folder> [--label <label>] [--runtime claude,codex] [--max <n>]
+exports.LAUNCH_USAGE = `Usage: baychat launch add <folder> [--label <label>] [--runtime claude,codex] [--max <n>] [--unattended]
                                   Let BayChat start sessions in <folder> from the app
+                                  (--unattended: also let it start Codex there, which then never asks)
        baychat launch list         The folders BayChat may start sessions in
        baychat launch remove <id>  Stop offering one of them`;
 /** Printed by every `add`: the one thing a person must know before saying yes. */
-exports.APPROVALS_NOTICE = "Sessions started here from BayChat ask for approvals in BayChat.";
+exports.APPROVALS_NOTICE = "Claude Code sessions started here from BayChat ask for approvals in BayChat.";
+/** Printed when Codex is offered: it has no BayChat approvals, so what it does is decided up front. */
+exports.CODEX_UNATTENDED_NOTICE = "Codex started here from BayChat does NOT ask for approvals: it runs --ask-for-approval never inside its workspace sandbox, with no network. " +
+    "It can change files in this folder, and anyone who may wake it in the chat can ask it to. MCP servers in its own config run as usual.";
 const realDeps = () => {
     const file = (0, claude_trust_1.claudeConfigPath)();
     return {
@@ -81,8 +85,13 @@ async function addSpot(args, deps) {
     const label = (0, args_1.flag)(args, "--label");
     const runtimeList = (0, args_1.flag)(args, "--runtime");
     const maxRaw = (0, args_1.flag)(args, "--max");
+    const unattended = args.includes("--unattended");
     const valued = new Set([label, runtimeList, maxRaw].filter((v) => v !== undefined));
     const folderArg = args.find((a) => !a.startsWith("--") && !valued.has(a));
+    if (unattended && !(runtimeList ?? "").split(",").map((r) => r.trim()).includes("codex")) {
+        deps.print("--unattended is for Codex: add it with --runtime including codex.");
+        return 1;
+    }
     if (!folderArg)
         throw new Error(exports.LAUNCH_USAGE);
     const folder = (0, policy_1.validateNewRoot)(folderArg);
@@ -114,11 +123,17 @@ async function addSpot(args, deps) {
         path: folder.path,
         runtimes: [...new Set(requested)],
         maxSessions,
+        ...(unattended ? { unattendedCodex: true } : {}),
     };
     (0, policy_2.saveLaunchPolicy)((0, policy_2.upsertSpot)(policy, spot), deps.policyFile);
     deps.print(`${existing ? "Updated" : "Added"} "${spot.label}" (${spot.id}): ${spot.path}`);
     deps.print(`  Agents: ${spot.runtimes.join(", ")} · at most ${spot.maxSessions} at once`);
     deps.print(`  ${exports.APPROVALS_NOTICE}`);
+    if (spot.runtimes.includes("codex")) {
+        deps.print(spot.unattendedCodex
+            ? `  ${exports.CODEX_UNATTENDED_NOTICE}`
+            : "  Codex is listed but not allowed to start unattended here; add --unattended (read what it means first) to start it from BayChat.");
+    }
     if (spot.runtimes.includes("claude"))
         await offerClaudeTrust(spot.path, deps);
     return 0;

package/dist/launch/policy.js

@@ -136,7 +136,7 @@ function resolveSpotFolder(spot) {
 function parseSpot(entry) {
     if (!entry || typeof entry !== "object")
         return null;
-    const { id, label, path: p, runtimes, maxSessions } = entry;
+    const { id, label, path: p, runtimes, maxSessions, unattendedCodex } = entry;
     if (typeof id !== "string" || !exports.SPOT_ID_RE.test(id))
         return null;
     if (typeof label !== "string" || label.trim().length === 0 || label.length > exports.SPOT_LABEL_MAX)
@@ -148,5 +148,7 @@ function parseSpot(entry) {
         return null;
     if (typeof maxSessions !== "number" || !Number.isInteger(maxSessions) || maxSessions < 1 || maxSessions > exports.MAX_SESSIONS_PER_COMPUTER)
         return null;
-    return { id, label, path: p, runtimes: [...new Set(runtimes)], maxSessions };
+    if (unattendedCodex !== undefined && unattendedCodex !== true)
+        return null;
+    return { id, label, path: p, runtimes: [...new Set(runtimes)], maxSessions, ...(unattendedCodex ? { unattendedCodex } : {}) };
 }

package/dist/multiplexer-launch.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.TMUX_SESSION_VAR = void 0;
 exports.launchAgent = launchAgent;
 exports.runHere = runHere;
 exports.multiplexerArgv = multiplexerArgv;
@@ -75,6 +76,8 @@ const readline = __importStar(require("readline"));
 const config_1 = require("./config");
 const terminal_pane_1 = require("./relay/terminal-pane");
 const runtime_binary_1 = require("./runtime-binary");
+/** Set in the agent's environment to the tmux session our CLI created for it (read by detectPane). */
+exports.TMUX_SESSION_VAR = "BAYCHAT_TMUX_SESSION";
 /**
  * Start `program` where session commands can reach it — inside tmux or screen when possible —
  * and return its exit status. Never refuses to start the agent: every failure on the way falls
@@ -119,20 +122,29 @@ function runHere(program, deps = realLaunchDeps()) {
 function multiplexerArgv(multiplexer, naming, program, 
 /** Needed only for a `fresh` name (its pid suffix and the tmux uniqueness check). */
 deps) {
-    const vars = Object.entries(program.env).map(([k, v]) => `${k}=${v}`);
-    const command = vars.length ? ["env", ...vars, program.binary, ...program.args] : [program.binary, ...program.args];
+    const commandWith = (extra) => {
+        const vars = Object.entries({ ...program.env, ...extra }).map(([k, v]) => `${k}=${v}`);
+        return vars.length ? ["env", ...vars, program.binary, ...program.args] : [program.binary, ...program.args];
+    };
+    // The tmux session's exact name rides into the agent as BAYCHAT_TMUX_SESSION, so the relay can
+    // tell later that a pane is in the session OUR CLI made, not one of the person's own that happens
+    // to share the name (an End from the app closes only the former: stop-registered.ts).
+    const tmuxCommand = (session) => commandWith({ [exports.TMUX_SESSION_VAR]: session });
     if (naming.kind === "detached") {
-        return multiplexer === "tmux" ? ["new", "-d", "-s", naming.name, "-c", naming.cwd, ...command] : ["-dmS", naming.name, ...command];
+        return multiplexer === "tmux" ? ["new", "-d", "-s", naming.name, "-c", naming.cwd, ...tmuxCommand(naming.name)] : ["-dmS", naming.name, ...commandWith({})];
     }
     if (!deps)
         throw new Error("multiplexerArgv: a fresh or reattached session needs the launch deps");
     if (multiplexer === "tmux") {
-        return naming.kind === "reattach"
-            ? // `-A` attaches to an existing session of that name instead of failing, so running this
-                // twice returns you to your agent rather than erroring at you.
-                ["new", "-A", "-s", naming.name, ...command]
-            : ["new", "-s", uniqueTmuxName(naming.prefix, deps), ...command];
+        if (naming.kind === "reattach") {
+            // `-A` attaches to an existing session of that name instead of failing, so running this
+            // twice returns you to your agent rather than erroring at you.
+            return ["new", "-A", "-s", naming.name, ...tmuxCommand(naming.name)];
+        }
+        const name = uniqueTmuxName(naming.prefix, deps);
+        return ["new", "-s", name, ...tmuxCommand(name)];
     }
+    const command = commandWith({});
     // screen tells same-named sessions apart by pid, so a fresh one needs no uniqueness check.
     return naming.kind === "reattach" ? ["-S", naming.name, "-R", ...command] : ["-S", `${naming.prefix}-${deps.pid}`, ...command];
 }