baychat 0.34.1 → 0.35.0

package/dist/commands.js

@@ -37,6 +37,7 @@ const protocol_1 = require("./protocol");
 const connection_qr_1 = require("./connection-qr");
 const config_1 = require("./config");
 const bay_mcp_1 = require("./bay-mcp");
+const client_scope_1 = require("./client-scope");
 const windows_cmd_1 = require("./windows-cmd");
 const context_1 = require("./context");
 const runtime_install_1 = require("./runtime-install");
@@ -922,14 +923,21 @@ function completeDeviceLogin(device, options) {
         const names = bays.map((b) => (b.isDefault ? `${b.bayName} (default)` : b.bayName)).join(", ");
         console.log(`  This computer can join: ${names}`);
     }
-    refreshConnectedClients(device.baseUrl, device.token);
-    if (options.registerClaude !== false)
-        registerWithClaude(device.baseUrl, device.token);
-    (0, bay_mcp_1.applyBayEntries)(device.baseUrl, options.previousBays ?? [], bays, {
-        claude: options.registerClaude !== false,
-        io: exports.realConfigIo,
-        env: (0, client_paths_1.currentPathEnv)(),
-    });
+    // A login on its own setup or server never rewrites the computer's global client configs.
+    const isolated = (0, client_scope_1.isolatedLoginReason)(device.baseUrl);
+    if (isolated) {
+        console.log((0, client_scope_1.isolatedLoginNotice)(isolated));
+    }
+    else {
+        refreshConnectedClients(device.baseUrl, device.token);
+        if (options.registerClaude !== false)
+            registerWithClaude(device.baseUrl, device.token);
+        (0, bay_mcp_1.applyBayEntries)(device.baseUrl, options.previousBays ?? [], bays, {
+            claude: options.registerClaude !== false,
+            io: exports.realConfigIo,
+            env: (0, client_paths_1.currentPathEnv)(),
+        });
+    }
     if (options.hint !== false) {
         console.log("\n  Run /baychat <name> in any session.");
         if (bays.length > 1)

package/dist/connect-link.js

@@ -0,0 +1,205 @@
+"use strict";
+// `baychat connect <link>` — "Connect my agent" in one paste (docs/features/CONNECT_MY_AGENT.md).
+//
+// The person, signed in to BayChat, makes a one-time link and pastes ONE sentence holding it into
+// their coding agent. The agent runs `npx -y baychat@latest connect <link>`, and this file does the
+// rest without a question: spend the link for this computer's login (the same login the QR gives),
+// run the ordinary `connect claude` / `connect codex` setup on top of it, join the Bay under the
+// name the person chose, and say so in the Bay.
+//
+// THE LINK IS A SECRET until it is spent, so this never prints it: anything that names it shows the
+// first four characters only (`maskConnectToken`). The token lives in the link's #fragment, which
+// no server sees; it travels once, in a POST body, to the redeem endpoint.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.realConnectLinkDeps = exports.CONNECT_LINK_CLIENTS = void 0;
+exports.looksLikeConnectLink = looksLikeConnectLink;
+exports.maskConnectToken = maskConnectToken;
+exports.parseConnectLink = parseConnectLink;
+exports.describeRedeemError = describeRedeemError;
+exports.helloLine = helloLine;
+exports.cmdConnectLink = cmdConnectLink;
+exports.joinAndGreetOverMcp = joinAndGreetOverMcp;
+const index_js_1 = require("@modelcontextprotocol/sdk/client/index.js");
+const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/client/streamableHttp.js");
+const api_1 = require("./api");
+const config_1 = require("./config");
+const device_login_1 = require("./device-login");
+const machine_name_1 = require("./machine-name");
+/** The runtimes a link can connect, by the name in its path (`/connect/<client>`). */
+exports.CONNECT_LINK_CLIENTS = { "claude-code": "claude", codex: "codex" };
+/** Whether a `connect` argument is a link rather than a runtime name. */
+function looksLikeConnectLink(arg) {
+    return /^https?:\/\//i.test(arg.trim()) && /\/connect\//.test(arg);
+}
+/**
+ * Where a link may come from and send this computer. A link is pasted by a person into an agent, so
+ * a forged one must not be able to point the login, the MCP config and every later tool call at
+ * somebody else's server: production links are baychat.io's, and only a link made on THIS computer
+ * (loopback) may name another API (`api=`, for local testing).
+ */
+const LINK_HOSTS = new Set(["baychat.io", "www.baychat.io"]);
+const isLoopback = (host) => host === "localhost" || host === "127.0.0.1" || host === "[::1]";
+/** "abcd…" — the most of a link token any output may show. */
+function maskConnectToken(token) {
+    return `${token.slice(0, 4)}…`;
+}
+/**
+ * Read a connect link: `https://baychat.io/connect/<client>#t=<token>[&api=<url>]`. The error never
+ * repeats the link, since a mistyped link may still hold a valid token.
+ */
+function parseConnectLink(raw) {
+    let url;
+    try {
+        url = new URL(raw.trim());
+    }
+    catch {
+        throw new Error("That is not a BayChat connect link. Copy the whole sentence from BayChat again.");
+    }
+    if (!LINK_HOSTS.has(url.hostname) && !isLoopback(url.hostname)) {
+        throw new Error("That link is not from BayChat (baychat.io). Make a connect link in BayChat and paste that one.");
+    }
+    const client = /^\/connect\/([a-z-]+)\/?$/.exec(url.pathname)?.[1];
+    const fragment = new URLSearchParams(url.hash.replace(/^#/, ""));
+    const token = fragment.get("t") ?? "";
+    if (!client || !token) {
+        throw new Error("That is not a BayChat connect link. Copy the whole sentence from BayChat again.");
+    }
+    if (!(client in exports.CONNECT_LINK_CLIENTS)) {
+        throw new Error(`This link is for "${client}", which this BayChat CLI cannot connect yet. Update it: npx -y baychat@latest connect <link>.`);
+    }
+    const api = fragment.get("api");
+    let apiBase = config_1.DEFAULT_API_URL;
+    if (api) {
+        let parsed;
+        try {
+            parsed = new URL(api);
+        }
+        catch {
+            throw new Error("The link's api= is not a URL.");
+        }
+        if (!["http:", "https:"].includes(parsed.protocol) || !isLoopback(parsed.hostname) || !isLoopback(url.hostname)) {
+            throw new Error("Only a link made for local testing (localhost) may name its own API.");
+        }
+        apiBase = parsed.origin;
+    }
+    return { client: client, token, apiBase };
+}
+/** What a refused redeem means, in words an agent can pass on to its person. */
+function describeRedeemError(error) {
+    if (error instanceof api_1.ApiError) {
+        switch (error.code) {
+            case "CONNECT_LINK_INVALID":
+                return "This connect link has expired or was already used. Ask the person to make a new one in BayChat (Agents → Add agent); links last 30 minutes and work once.";
+            case "SESSION_LIMIT_REACHED":
+            case "SESSION_CAP_REACHED":
+                return `BayChat refused: ${error.message} The link is still good for 30 minutes after it was made: end a session or upgrade, then run the same command again.`;
+            case "AGENT_DISABLED":
+                return "An agent with this name was switched off in BayChat. Ask the person to switch it on (Settings → Agents) or make a link with another name.";
+            case "CONNECT_NAME_TAKEN":
+                return "Too many agents in this Bay already use that name. Ask the person to make a link with another name.";
+        }
+        if (error.status === 429)
+            return "Too many tries — wait ten minutes and run the same command again.";
+        return `BayChat refused the link (${error.status}): ${error.message}`;
+    }
+    return error instanceof Error ? error.message : String(error);
+}
+function helloLine(name, runtime, computer) {
+    const app = runtime === "claude" ? "Claude Code" : "Codex";
+    return `Connected ✅ I'm ${name}, ${app} on ${computer}. Restart ${app} (or start a session from the BayChat app) and I'll answer here.`;
+}
+/** `baychat connect <link>`. 0 = connected, 1 = refused (the reason is printed), 2 = setup failed. */
+async function cmdConnectLink(raw, deps, opts = {}) {
+    let link;
+    try {
+        link = parseConnectLink(raw);
+    }
+    catch (e) {
+        deps.log(e instanceof Error ? e.message : String(e));
+        return 1;
+    }
+    const runtime = exports.CONNECT_LINK_CLIENTS[link.client];
+    const computer = (0, machine_name_1.machineName)();
+    deps.log(`Connecting this computer with link ${maskConnectToken(link.token)}`);
+    let redeemed;
+    try {
+        redeemed = await deps.redeem(link.apiBase, link.token, computer, opts.name?.trim() || undefined);
+    }
+    catch (e) {
+        deps.log(describeRedeemError(e));
+        return 1;
+    }
+    // The API this link was checked against, never one the answer names: a server cannot move this
+    // computer's login somewhere else.
+    const base = link.apiBase;
+    const { device } = deps.save(redeemed, base);
+    deps.log(`✓ This computer is signed in to BayChat as ${device.user.name}${redeemed.bay ? ` (Bay "${redeemed.bay.name}")` : ""}.`);
+    const asked = opts.name?.trim();
+    if (asked && !redeemed.selfNamed && redeemed.requestedName !== asked) {
+        // Either the person named it on the link (their name wins), or BayChat did not accept this one.
+        deps.log(`  This agent is "${redeemed.agentName}" (BayChat's choice, not "${asked}").`);
+    }
+    else if (redeemed.agentName !== redeemed.requestedName) {
+        deps.log(`  "${redeemed.requestedName}" is somebody else's agent in this Bay, so this one is "${redeemed.agentName}".`);
+    }
+    const code = await deps.setUp(runtime, base);
+    if (code !== 0) {
+        deps.log("The login is saved, but the setup did not finish. Run: npx -y baychat@latest doctor");
+        return 2;
+    }
+    // The group comes only from the server's record of the link, never from anything typed here.
+    const g = redeemed.group ?? null;
+    const group = g ? ("id" in g ? g.id : g.newTitle) : undefined;
+    const where = g ? ("id" in g ? (g.title ?? "the group") : g.newTitle) : null;
+    try {
+        await deps.joinAndGreet(base, device.token, redeemed.agentName, helloLine(redeemed.agentName, runtime, computer), group);
+    }
+    catch (e) {
+        deps.log(`Joined nothing yet: ${describeRedeemError(e)}`);
+        deps.log("The computer is connected. After a restart the agent can join with /baychat <name>.");
+        return 2;
+    }
+    deps.log(`✓ "${redeemed.agentName}" is in your Bay${where ? ` (group "${where}")` : ""} and said hello.`);
+    deps.log(`  Tell the person: restart ${runtime === "claude" ? "Claude Code" : "Codex"} (or start a session from the BayChat app) so it can answer there.`);
+    return 0;
+}
+/** The real join + hello: the remote MCP's own `join_session` and `send_message`, as the device. */
+async function joinAndGreetOverMcp(base, deviceToken, name, hello, group) {
+    const client = new index_js_1.Client({ name: "baychat-connect", version: "1" });
+    await client.connect(new streamableHttp_js_1.StreamableHTTPClientTransport(new URL("/api/mcp", base), {
+        requestInit: { headers: { Authorization: `Bearer ${deviceToken}` }, signal: AbortSignal.timeout(20_000) },
+    }));
+    try {
+        const joined = await client.callTool({ name: "join_session", arguments: { session: name, ...(group ? { group } : {}) } });
+        const text = joined.content.map((c) => c.text ?? "").join("\n");
+        if (joined.isError)
+            throw new Error(text || "BayChat refused the join.");
+        const structured = (joined.structuredContent ?? {});
+        // A group join names the group's conversation in its text; a private join also returns it
+        // as `directConversationId`. The group wins when there is one.
+        const conversationId = /conversation (\S+?)\./.exec(text)?.[1] ||
+            (typeof structured.directConversationId === "string" && structured.directConversationId) ||
+            undefined;
+        if (!conversationId)
+            throw new Error("BayChat joined the session but named no chat to greet in.");
+        const sent = await client.callTool({
+            name: "send_message",
+            arguments: { session: name, conversationId, content: hello },
+        });
+        if (sent.isError)
+            throw new Error("Joined, but the hello was refused.");
+        return conversationId;
+    }
+    finally {
+        // Closing a finished MCP session can only fail on a dropped connection; the work is done.
+        await client.close().catch((e) => console.error(`(closing the BayChat connection: ${e instanceof Error ? e.message : String(e)})`));
+    }
+}
+const realConnectLinkDeps = (setUp) => ({
+    redeem: api_1.redeemConnectLink,
+    save: device_login_1.saveApprovedDeviceLogin,
+    setUp,
+    joinAndGreet: joinAndGreetOverMcp,
+    log: (line) => console.log(line),
+});
+exports.realConnectLinkDeps = realConnectLinkDeps;

package/dist/connect-plan.js

@@ -57,11 +57,11 @@ function parseConnectArgs(args) {
                 throw new Error("Choose --start or --finish once.");
             result.mode = arg === "--start" ? "start" : "finish";
         }
-        else if (arg === "--folder" || arg === "--max-mode" || arg === "--mode" || arg === "--session") {
+        else if (arg === "--folder" || arg === "--max-mode" || arg === "--mode" || arg === "--session" || arg === "--name") {
             const value = args[++index];
             if (!value?.trim() || value.startsWith("--"))
                 throw new Error(`Supply ${arg} with a value.`);
-            const key = arg === "--folder" ? "folder" : arg === "--max-mode" ? "maxMode" : arg === "--mode" ? "agentMode" : "session";
+            const key = arg === "--folder" ? "folder" : arg === "--max-mode" ? "maxMode" : arg === "--mode" ? "agentMode" : arg === "--name" ? "name" : "session";
             if (result[key])
                 throw new Error(`Supply ${arg} once.`);
             result[key] = value;

package/dist/connect.js

@@ -55,6 +55,7 @@ Object.defineProperty(exports, "cmdConnectClaude", { enumerable: true, get: func
 const connect_cursor_1 = require("./connect-cursor");
 const connect_dsh_1 = require("./connect-dsh");
 const connect_hermes_1 = require("./connect-hermes");
+const connect_link_1 = require("./connect-link");
 /** Clients `connect` can configure. `claude` is an alias users reach for. */
 const CLIENT_ALIASES = {
     codex: "codex",
@@ -216,6 +217,13 @@ async function cmdConnect(clientArg, opts = {}) {
         console.log(renderConnectMenu());
         return 0;
     }
+    // A one-paste connect link (docs/features/CONNECT_MY_AGENT.md): it carries the login, the runtime
+    // and the name, so it takes no other option and asks nothing.
+    if ((0, connect_link_1.looksLikeConnectLink)(clientArg)) {
+        if (opts.mode)
+            throw new Error("A connect link does not take --start/--finish.");
+        return (0, connect_link_1.cmdConnectLink)(clientArg, (0, connect_link_1.realConnectLinkDeps)((runtime, base) => runtime === "claude" ? (0, connect_claude_1.cmdConnectClaude)({ base }) : cmdConnect("codex", { base })), opts.name ? { name: opts.name } : {});
+    }
     // Claude Code first: it is not an MCP-config client, so it must not reach
     // `parseConnectClient`, which would reject it.
     if (isClaudeConnectTarget(clientArg))

package/dist/device-login.js

@@ -36,6 +36,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseBayLogins = parseBayLogins;
 exports.startDeviceLogin = startDeviceLogin;
 exports.finishDeviceLogin = finishDeviceLogin;
+exports.saveApprovedDeviceLogin = saveApprovedDeviceLogin;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const node_crypto_1 = require("node:crypto");
@@ -156,6 +157,24 @@ async function finishDeviceLogin(baseUrl) {
         return { status: "approved", device: single, ...(bays ? { bays } : {}) };
     });
 }
+/**
+ * Save a login that arrived already approved — a spent connect link (connect-link.ts) — exactly as a
+ * QR pickup is saved: the same shape check, the same per-Bay set, the same private files.
+ */
+function saveApprovedDeviceLogin(approved, baseUrl) {
+    const parsed = deviceSchema.safeParse({
+        token: approved.token,
+        user: approved.user,
+        expiresAt: approved.expiresAt,
+        bays: parseBayLogins(approved.bays, approved.token),
+        baseUrl: normalizeBase(baseUrl),
+    });
+    if (!parsed.success)
+        throw new Error("BayChat returned an invalid login. Make a new connect link and try again.");
+    const { bays, ...single } = parsed.data;
+    (0, config_1.saveDeviceCredentials)(single, bays);
+    return { device: single, ...(bays ? { bays } : {}) };
+}
 function pendingPath() {
     return path.join((0, config_1.configDir)(), "login-pending.json");
 }

package/dist/launch/command.js

@@ -48,9 +48,12 @@ exports.LAUNCH_USAGE = `Usage: baychat launch add <folder> [--label <label>] [--
        baychat launch remove <id>  Stop offering one of them`;
 /** Printed by every `add`: the one thing a person must know before saying yes. */
 exports.APPROVALS_NOTICE = "Claude Code sessions started here from BayChat ask for approvals in BayChat.";
-/** Printed when Codex is offered: it has no BayChat approvals, so what it does is decided up front. */
-exports.CODEX_UNATTENDED_NOTICE = "Codex started here from BayChat does NOT ask for approvals: it runs --ask-for-approval never inside its workspace sandbox, with no network. " +
-    "It can change files in this folder, and anyone who may wake it in the chat can ask it to. MCP servers in its own config run as usual.";
+/** Printed when Codex is offered: what it may do without asking, and what it asks on the phone. */
+exports.CODEX_UNATTENDED_NOTICE = "Codex started here from BayChat is run by the relay (Codex 0.160 or newer): it can change files in this folder without asking, with no network, " +
+    "and asks for approval in BayChat — on the session owner's phone — before anything more (a command outside its sandbox, network access, files elsewhere). " +
+    "A message from someone without command access to the session makes that turn read only. " +
+    "With BAYCHAT_CODEX_TRANSPORT=exec on the relay, Codex cannot answer in BayChat, so starting it from the phone is refused. " +
+    "MCP servers in its own config run as usual.";
 const realDeps = () => {
     const file = (0, claude_trust_1.claudeConfigPath)();
     return {

package/dist/main.js

@@ -23,8 +23,10 @@ const server_1 = require("./channel/server");
 const launch_1 = require("./channel/launch");
 const mcp_config_1 = require("./mcp-config");
 const commands_2 = require("./relay/commands");
+const codex_log_1 = require("./relay/codex-log");
 const bays_1 = require("./bays");
 const config_1 = require("./config");
+const api_1 = require("./api");
 const help_topics_1 = require("./help-topics");
 const cli_help_1 = require("./cli-help");
 const args_1 = require("./args");
@@ -100,7 +102,9 @@ async function main() {
             const runtime = (0, args_1.flag)(args, "--runtime") ?? (0, owner_pid_1.detectRuntime)(profiles_1.RUNTIME_PROFILES);
             if (!runtime)
                 throw new Error("Cannot detect this runtime. Pass --runtime, or choose a BayChat session name.");
-            console.log(await (0, session_name_1.automaticSessionName)(runtime));
+            // Checked against this person's sessions, so a session that joined before keeps its name.
+            const device = (0, config_1.loadDeviceCredentials)();
+            console.log(await (0, session_name_1.automaticSessionName)(runtime, undefined, device ? () => (0, api_1.mySessionNames)(device.baseUrl, device.token) : undefined));
             return 0;
         }
         case "onboard":
@@ -293,8 +297,20 @@ async function main() {
                         ownerPid: numberFlag(rest, "--owner-pid"),
                     });
                 }
+                case "log": {
+                    // A relay-run Codex session's own log (relay/codex-log.ts): what it ran, changed and said.
+                    (0, args_1.rejectUnknownFlags)(rest, ["--follow"], "baychat relay log <session> [-f]");
+                    const session = rest.find((a) => !a.startsWith("-"));
+                    if (!session)
+                        throw new Error("Usage: baychat relay log <session> [-f]");
+                    const follow = rest.includes("-f") || rest.includes("--follow");
+                    const stop = new AbortController();
+                    if (follow)
+                        process.once("SIGINT", () => stop.abort());
+                    return await (0, codex_log_1.showCodexLog)(session, { follow, signal: stop.signal });
+                }
                 default:
-                    throw new Error("Usage: baychat relay <start|status|stop|attach> [options]");
+                    throw new Error("Usage: baychat relay <start|status|stop|attach|log> [options]");
             }
         }
         case "hermes": {

package/dist/mcp-files.js

@@ -403,6 +403,7 @@ exports.SEND_FILES_PARAM = {
 exports.FILE_TOOL_DEFS = [
     {
         name: "upload_file",
+        access: "write",
         title: "Upload a file to BayChat",
         description: "Upload ONE file from this machine to BayChat and get back an attachment id to send with " +
             "send_message (attachmentIds). Prefer send_message's files parameter when you just want to " +
@@ -419,6 +420,7 @@ exports.FILE_TOOL_DEFS = [
     },
     {
         name: "download_attachment",
+        access: "read",
         title: "Download an attachment",
         description: "Download an attachment from a BayChat message onto this machine and get back the local " +
             "path, so you can open it with your own file tools. Pass the signed attachmentUrl exactly " +

package/dist/mcp-register.js

@@ -17,6 +17,7 @@
 //      takes no arguments must omit the key entirely.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerToolDefs = registerToolDefs;
+const tool_defs_1 = require("./tool-defs");
 /**
  * Register every def against its handler, failing loudly if one is missing.
  *
@@ -33,6 +34,7 @@ function registerToolDefs(server, defs, handlers) {
             description: def.description,
             ...(Object.keys(def.inputSchema).length ? { inputSchema: def.inputSchema } : {}),
             ...(def._meta ? { _meta: def._meta } : {}),
+            annotations: (0, tool_defs_1.toolAnnotations)(def.access),
         }, async (args) => handler(args));
     }
 }