baychat 0.34.1 → 0.34.2

package/dist/launch/command.js

@@ -48,9 +48,12 @@ exports.LAUNCH_USAGE = `Usage: baychat launch add <folder> [--label <label>] [--
        baychat launch remove <id>  Stop offering one of them`;
 /** Printed by every `add`: the one thing a person must know before saying yes. */
 exports.APPROVALS_NOTICE = "Claude Code sessions started here from BayChat ask for approvals in BayChat.";
-/** Printed when Codex is offered: it has no BayChat approvals, so what it does is decided up front. */
-exports.CODEX_UNATTENDED_NOTICE = "Codex started here from BayChat does NOT ask for approvals: it runs --ask-for-approval never inside its workspace sandbox, with no network. " +
-    "It can change files in this folder, and anyone who may wake it in the chat can ask it to. MCP servers in its own config run as usual.";
+/** Printed when Codex is offered: what it may do without asking, and what it asks on the phone. */
+exports.CODEX_UNATTENDED_NOTICE = "Codex started here from BayChat is run by the relay (Codex 0.160 or newer): it can change files in this folder without asking, with no network, " +
+    "and asks for approval in BayChat — on the session owner's phone — before anything more (a command outside its sandbox, network access, files elsewhere). " +
+    "A message from someone without command access to the session makes that turn read only. " +
+    "With BAYCHAT_CODEX_TRANSPORT=exec on the relay, Codex cannot answer in BayChat, so starting it from the phone is refused. " +
+    "MCP servers in its own config run as usual.";
 const realDeps = () => {
     const file = (0, claude_trust_1.claudeConfigPath)();
     return {

package/dist/main.js

@@ -23,6 +23,7 @@ const server_1 = require("./channel/server");
 const launch_1 = require("./channel/launch");
 const mcp_config_1 = require("./mcp-config");
 const commands_2 = require("./relay/commands");
+const codex_log_1 = require("./relay/codex-log");
 const bays_1 = require("./bays");
 const config_1 = require("./config");
 const help_topics_1 = require("./help-topics");
@@ -293,8 +294,20 @@ async function main() {
                         ownerPid: numberFlag(rest, "--owner-pid"),
                     });
                 }
+                case "log": {
+                    // A relay-run Codex session's own log (relay/codex-log.ts): what it ran, changed and said.
+                    (0, args_1.rejectUnknownFlags)(rest, ["--follow"], "baychat relay log <session> [-f]");
+                    const session = rest.find((a) => !a.startsWith("-"));
+                    if (!session)
+                        throw new Error("Usage: baychat relay log <session> [-f]");
+                    const follow = rest.includes("-f") || rest.includes("--follow");
+                    const stop = new AbortController();
+                    if (follow)
+                        process.once("SIGINT", () => stop.abort());
+                    return await (0, codex_log_1.showCodexLog)(session, { follow, signal: stop.signal });
+                }
                 default:
-                    throw new Error("Usage: baychat relay <start|status|stop|attach> [options]");
+                    throw new Error("Usage: baychat relay <start|status|stop|attach|log> [options]");
             }
         }
         case "hermes": {

package/dist/mcp-files.js

@@ -403,6 +403,7 @@ exports.SEND_FILES_PARAM = {
 exports.FILE_TOOL_DEFS = [
     {
         name: "upload_file",
+        access: "write",
         title: "Upload a file to BayChat",
         description: "Upload ONE file from this machine to BayChat and get back an attachment id to send with " +
             "send_message (attachmentIds). Prefer send_message's files parameter when you just want to " +
@@ -419,6 +420,7 @@ exports.FILE_TOOL_DEFS = [
     },
     {
         name: "download_attachment",
+        access: "read",
         title: "Download an attachment",
         description: "Download an attachment from a BayChat message onto this machine and get back the local " +
             "path, so you can open it with your own file tools. Pass the signed attachmentUrl exactly " +

package/dist/mcp-register.js

@@ -17,6 +17,7 @@
 //      takes no arguments must omit the key entirely.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerToolDefs = registerToolDefs;
+const tool_defs_1 = require("./tool-defs");
 /**
  * Register every def against its handler, failing loudly if one is missing.
  *
@@ -33,6 +34,7 @@ function registerToolDefs(server, defs, handlers) {
             description: def.description,
             ...(Object.keys(def.inputSchema).length ? { inputSchema: def.inputSchema } : {}),
             ...(def._meta ? { _meta: def._meta } : {}),
+            annotations: (0, tool_defs_1.toolAnnotations)(def.access),
         }, async (args) => handler(args));
     }
 }