beecork 2.8.1 → 2.8.2

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { writeFile as writeFile5, chmod as chmod4 } from "node:fs/promises";
+import { writeFile as writeFile6, chmod as chmod4 } from "node:fs/promises";
 import { createInterface } from "node:readline/promises";
 
 // src/paths.ts
@@ -187,10 +187,10 @@ async function findShadowingInstalls() {
   const names = process.platform === "win32" ? ["beecork.cmd", "beecork"] : ["beecork"];
   const seenRoots = /* @__PURE__ */ new Set([running]);
   const others = [];
-  for (const dir of (process.env.PATH ?? "").split(delimiter).filter(Boolean)) {
+  for (const dir2 of (process.env.PATH ?? "").split(delimiter).filter(Boolean)) {
     for (const name of names) {
       try {
-        const bin = join(dir, name);
+        const bin = join(dir2, name);
         const root = dirname(dirname(await realpath(bin)));
         if (seenRoots.has(root)) continue;
         seenRoots.add(root);
@@ -241,9 +241,9 @@ async function checkForUpdate(current) {
     void fetchLatest().then(async (latest) => {
       if (!latest) return;
       try {
-        const file = cacheFile();
-        await mkdir(dirname(file), { recursive: true });
-        await writeFile(file, JSON.stringify({ checkedAt: Date.now(), latest }), "utf8");
+        const file2 = cacheFile();
+        await mkdir(dirname(file2), { recursive: true });
+        await writeFile(file2, JSON.stringify({ checkedAt: Date.now(), latest }), "utf8");
       } catch {
       }
     });
@@ -615,7 +615,7 @@ function printBanner(model, version, sources) {
 }
 
 // src/agent.ts
-import { readFile as readFile5 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 
 // src/input.ts
 import { emitKeypressEvents } from "node:readline";
@@ -635,10 +635,10 @@ function inputLayout(text, before, promptW, cols2) {
   const curPhysCol = curCol % c;
   return { totalPhys, curPhysRow, curPhysCol };
 }
-function moveVertIndex(buf2, cur2, dir) {
+function moveVertIndex(buf2, cur2, dir2) {
   const lines = buf2.split("\n");
   const { row, col } = rowColOf(buf2.slice(0, cur2));
-  const target = row + dir;
+  const target = row + dir2;
   if (target < 0 || target >= lines.length) return null;
   let idx = 0;
   for (let i = 0; i < target; i++) idx += lines[i].length + 1;
@@ -896,8 +896,8 @@ function readPrompt(opts) {
         if (isPrintableCodePoint(str.codePointAt(0))) insert2(str);
       }
     }
-    function moveVert(dir) {
-      const idx = moveVertIndex(buf2, cur2, dir);
+    function moveVert(dir2) {
+      const idx = moveVertIndex(buf2, cur2, dir2);
       if (idx === null) return;
       cur2 = idx;
       render2();
@@ -1195,11 +1195,11 @@ function createMarkdownStream(write) {
 }
 
 // src/tools.ts
-import { readFile as readFile3, writeFile as writeFile2, appendFile, readdir as readdir2, mkdir as mkdir3, stat, rename, chmod } from "node:fs/promises";
+import { readFile as readFile4, writeFile as writeFile3, appendFile, readdir as readdir2, mkdir as mkdir4, stat, rename, chmod } from "node:fs/promises";
 import { createReadStream } from "node:fs";
 import { createInterface as createLineReader } from "node:readline";
 import { spawn as spawn4 } from "node:child_process";
-import { join as join4 } from "node:path";
+import { join as join5 } from "node:path";
 import { lookup as dnsLookup } from "node:dns";
 import { request as httpRequest } from "node:http";
 import { request as httpsRequest } from "node:https";
@@ -1338,10 +1338,10 @@ async function loadSkills() {
     [join2(process.cwd(), ".beecork", "skills"), "project"],
     [bundledDir, "bundled"]
   ];
-  for (const [dir, source] of dirs) {
+  for (const [dir2, source] of dirs) {
     let entries;
     try {
-      entries = await readdir(dir, { withFileTypes: true });
+      entries = await readdir(dir2, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -1354,10 +1354,10 @@ async function loadSkills() {
         continue;
       }
       try {
-        const raw = (await readFile2(join2(dir, e.name), "utf8")).trim();
+        const raw = (await readFile2(join2(dir2, e.name), "utf8")).trim();
         if (!raw) continue;
         const { description, modelInvocable, body } = parseSkill(raw);
-        registry.set(name, { name, content: body, description, modelInvocable, path: join2(dir, e.name), source });
+        registry.set(name, { name, content: body, description, modelInvocable, path: join2(dir2, e.name), source });
       } catch {
       }
     }
@@ -1747,6 +1747,53 @@ async function doEnsure() {
   return { up: false, started: true, pid, reason: "spawn-failed" };
 }
 
+// src/projectSites.ts
+import { readFile as readFile3, writeFile as writeFile2, mkdir as mkdir3 } from "node:fs/promises";
+import { join as join4 } from "node:path";
+var dir = () => join4(process.cwd(), ".beecork");
+var file = () => join4(dir(), "skeleton.json");
+function toOrigin(input) {
+  const s = String(input || "").trim();
+  if (!s) return "";
+  const withScheme = /^https?:\/\//i.test(s) ? s : "http://" + s;
+  try {
+    const o = new URL(withScheme).origin;
+    return o === "null" ? "" : o;
+  } catch {
+    return "";
+  }
+}
+function isLoopbackOrigin(origin) {
+  const o = toOrigin(origin);
+  if (!o) return false;
+  let host;
+  try {
+    host = new URL(o).hostname;
+  } catch {
+    return false;
+  }
+  host = host.replace(/^\[|\]$/g, "").toLowerCase();
+  return host === "localhost" || host.endsWith(".localhost") || host === "0.0.0.0" || host === "::1" || /^127\./.test(host);
+}
+async function loadProjectOrigins() {
+  try {
+    const cfg = JSON.parse(await readFile3(file(), "utf8"));
+    if (!Array.isArray(cfg.origins)) return [];
+    return [...new Set(cfg.origins.map(toOrigin).filter(Boolean))];
+  } catch {
+    return [];
+  }
+}
+async function addProjectOrigin(origin) {
+  const o = toOrigin(origin);
+  if (!o || isLoopbackOrigin(o)) return false;
+  const cur2 = await loadProjectOrigins();
+  if (cur2.includes(o)) return false;
+  await mkdir3(dir(), { recursive: true });
+  await writeFile2(file(), JSON.stringify({ origins: [...cur2, o] }, null, 2) + "\n");
+  return true;
+}
+
 // src/tools.ts
 function runShell(command, opts) {
   return new Promise((resolve2, reject) => {
@@ -1818,7 +1865,7 @@ function runShell(command, opts) {
 var fail = (verb, err) => `Error ${verb}: ${err.message}`;
 async function atomicWrite(abs, content) {
   const tmp = `${abs}.beecork-${process.pid}.tmp`;
-  await writeFile2(tmp, content, "utf8");
+  await writeFile3(tmp, content, "utf8");
   try {
     await chmod(tmp, (await stat(abs)).mode);
   } catch {
@@ -1847,8 +1894,8 @@ function lineOffsets(text) {
   for (let i = 0; i < text.length; i++) if (text[i] === "\n") starts.push(i + 1);
   return starts;
 }
-function matchWhitespace(file, oldText, newText) {
-  const fileLines = file.split("\n");
+function matchWhitespace(file2, oldText, newText) {
+  const fileLines = file2.split("\n");
   const oldLines = oldText.split("\n");
   const n = oldLines.length;
   const trim = (l) => l.trim();
@@ -1894,15 +1941,15 @@ function matchWhitespace(file, oldText, newText) {
     if (mode === "strip") return l.startsWith(shift) ? l.slice(shift.length) : l;
     return l;
   }).join("\n");
-  const offs = lineOffsets(file);
+  const offs = lineOffsets(file2);
   const start = offs[s];
-  const end = s + n < offs.length ? offs[s + n] - 1 : file.length;
+  const end = s + n < offs.length ? offs[s + n] - 1 : file2.length;
   return { ok: true, start, end, after: reindented, healedVia: "whitespace" };
 }
-function closestRegion(file, oldText) {
+function closestRegion(file2, oldText) {
   const anchor = oldText.split("\n").map((l) => l.trim()).find((l) => l !== "");
   if (!anchor) return void 0;
-  const fileLines = file.split("\n");
+  const fileLines = file2.split("\n");
   const fmt = (i) => `${String(i + 1).padStart(5)}  ${fileLines[i]}`;
   const exact = [];
   for (let i = 0; i < fileLines.length && exact.length < 3; i++) {
@@ -1923,23 +1970,23 @@ function closestRegion(file, oldText) {
   }
   return best >= 0 && bestScore >= Math.max(2, Math.ceil(words.length / 2)) ? fmt(best) : void 0;
 }
-function resolveEdit(file, oldText, newText) {
+function resolveEdit(file2, oldText, newText) {
   if (oldText === "") return { ok: false, reason: "not_found" };
-  const exact = allIndexOf(file, oldText);
+  const exact = allIndexOf(file2, oldText);
   if (exact.length === 1) return { ok: true, start: exact[0], end: exact[0] + oldText.length, after: newText, healedVia: "exact" };
   if (exact.length > 1) return { ok: false, reason: "ambiguous", count: exact.length };
   const strippedOld = stripReadPrefix(oldText);
   if (strippedOld !== null && strippedOld !== oldText) {
-    const hits = allIndexOf(file, strippedOld);
+    const hits = allIndexOf(file2, strippedOld);
     if (hits.length === 1) {
       const strippedNew = newText.split("\n").map((l) => l.replace(READ_PREFIX, "")).join("\n");
       return { ok: true, start: hits[0], end: hits[0] + strippedOld.length, after: strippedNew, healedVia: "prefix" };
     }
     if (hits.length > 1) return { ok: false, reason: "ambiguous", count: hits.length };
   }
-  const ws = matchWhitespace(file, oldText, newText);
+  const ws = matchWhitespace(file2, oldText, newText);
   if (ws) return ws;
-  return { ok: false, reason: "not_found", closest: closestRegion(file, oldText) };
+  return { ok: false, reason: "not_found", closest: closestRegion(file2, oldText) };
 }
 var todos = [];
 function httpGet(rawUrl, maxBytes, signal) {
@@ -2033,7 +2080,7 @@ async function walkTree(abs, prefix, items, cap) {
     const e = kept[i];
     const last = i === kept.length - 1;
     items.push({ prefix: prefix + (last ? "\u2514\u2500 " : "\u251C\u2500 "), name: e.name + (e.isDirectory() ? "/" : ""), isDir: e.isDirectory() });
-    if (e.isDirectory()) await walkTree(join4(abs, e.name), prefix + (last ? "   " : "\u2502  "), items, cap);
+    if (e.isDirectory()) await walkTree(join5(abs, e.name), prefix + (last ? "   " : "\u2502  "), items, cap);
   }
 }
 function parseRange(args, defLimit) {
@@ -2166,7 +2213,7 @@ var toolDefs = [
       const MAX = config.searchMaxResults;
       const deadline = Date.now() + config.searchTimeoutMs;
       let truncated = false;
-      async function walk(dir) {
+      async function walk(dir2) {
         if (results.length >= MAX) return;
         if (Date.now() > deadline) {
           truncated = true;
@@ -2174,7 +2221,7 @@ var toolDefs = [
         }
         let entries;
         try {
-          entries = await readdir2(dir, { withFileTypes: true });
+          entries = await readdir2(dir2, { withFileTypes: true });
         } catch {
           return;
         }
@@ -2185,7 +2232,7 @@ var toolDefs = [
             return;
           }
           if (IGNORE.has(e.name)) continue;
-          const full = `${dir}/${e.name}`;
+          const full = `${dir2}/${e.name}`;
           if (e.isDirectory()) {
             await walk(full);
           } else if (e.isFile()) {
@@ -2194,7 +2241,7 @@ var toolDefs = [
             if (info && info.size > config.searchMaxFileBytes) continue;
             let lines;
             try {
-              lines = (await readFile3(full, "utf8")).split("\n");
+              lines = (await readFile4(full, "utf8")).split("\n");
             } catch {
               continue;
             }
@@ -2262,7 +2309,7 @@ var toolDefs = [
     run: async (args) => {
       try {
         const { abs } = resolveInRoot(String(args.path ?? "."));
-        const original = await readFile3(abs, "utf8");
+        const original = await readFile4(abs, "utf8");
         const res = resolveEdit(original, String(args.old_text ?? ""), String(args.new_text ?? ""));
         if (!res.ok) {
           if (res.reason === "ambiguous") {
@@ -2465,21 +2512,21 @@ ${list}`;
     },
     run: async (args) => {
       try {
-        const dir = join4(process.cwd(), ".beecork");
-        await mkdir3(dir, { recursive: true });
-        const file = join4(dir, "memory.md");
+        const dir2 = join5(process.cwd(), ".beecork");
+        await mkdir4(dir2, { recursive: true });
+        const file2 = join5(dir2, "memory.md");
         const fact = String(args.fact).trim();
         if (!fact) return 'Error: remember needs a non-empty "fact".';
         let current = "";
         try {
-          current = await readFile3(file, "utf8");
+          current = await readFile4(file2, "utf8");
         } catch {
         }
         if (current.length + fact.length + 3 > config.memoryMaxChars) {
           return `Error: memory is at its ${config.memoryMaxChars}-char budget. Consolidate first: read .beecork/memory.md, merge duplicate/overlapping lines and drop anything stale or no-longer-true, write_file the shorter version back, then call remember again with this fact.`;
         }
-        if (!current) await writeFile2(file, "# beecork memory\n\n", "utf8");
-        await appendFile(file, `- ${fact}
+        if (!current) await writeFile3(file2, "# beecork memory\n\n", "utf8");
+        await appendFile(file2, `- ${fact}
 `, "utf8");
         return `Remembered: ${fact}`;
       } catch (err) {
@@ -2580,13 +2627,14 @@ ${skill.content}`;
   },
   {
     name: "read_dev_signals",
-    description: "Read the browser's recent console errors and failed network requests for the user's app (localhost or production), captured live by the Beecork Skeleton extension \u2014 so you can SEE what's actually happening instead of guessing. Call this whenever the user reports a bug a browser would surface (blank page, broken button, failed save, a 500, a visual glitch). If it isn't connected yet it returns setup steps to relay to the user. Pull on demand; don't spam it.",
+    description: "Read the browser's recent console errors and failed network requests for the user's app (localhost or production), captured live by the Beecork Skeleton extension \u2014 so you can SEE what's actually happening instead of guessing. Call this whenever the user reports a bug a browser would surface (blank page, broken button, failed save, a 500, a visual glitch). If it isn't connected yet it returns setup steps to relay to the user. Pull on demand; don't spam it. The inbox is SHARED across projects, so pass `origin` (this project's site, e.g. its dev URL or production URL) to see only THIS app's signals \u2014 otherwise you may get other apps' noise too.",
     parameters: {
       type: "object",
       properties: {
         kind: { type: "string", description: 'Filter: "network", "console", "pageError", "log", or "all" (default all).' },
         since_minutes: { type: "number", description: "Only signals from the last N minutes (optional)." },
-        limit: { type: "number", description: "Max signals to return (default 30, max 200)." }
+        limit: { type: "number", description: "Max signals to return (default 30, max 200)." },
+        origin: { type: "string", description: "Scope to one or more sites (comma-separated for several frontends), e.g. http://localhost:8000 or https://app.example.com. Defaults to this project's remembered production site(s) if set; pass localhost explicitly since dev ports aren't remembered." }
       },
       required: []
     },
@@ -2596,9 +2644,12 @@ ${skill.content}`;
       const kind = args.kind ? String(args.kind) : "";
       const limit = Math.min(Math.max(Number(args.limit) || 30, 1), 200);
       const sinceMin = Number(args.since_minutes) || 0;
-      const params = new URLSearchParams({ limit: String(limit) });
+      const explicit = args.origin ? String(args.origin).split(",").map((s) => toOrigin(s)).filter(Boolean) : [];
+      const scope = explicit.length ? explicit : await loadProjectOrigins();
+      const params = new URLSearchParams({ limit: String(scope.length ? Math.min(200, limit * 4) : limit) });
       if (kind && kind !== "all") params.set("kind", kind);
       if (sinceMin > 0) params.set("since", String(Date.now() - sinceMin * 6e4));
+      if (scope.length) params.set("origin", scope.join(","));
       const timeout = AbortSignal.timeout(Math.min(config.webTimeoutMs, 5e3));
       let data;
       try {
@@ -2610,9 +2661,12 @@ ${skill.content}`;
         return DEV_SIGNALS_SETUP;
       }
       const now = Date.now();
-      const signals = (data.signals ?? []).filter((s) => s && s.kind !== "watch");
+      let signals = (data.signals ?? []).filter((s) => s && s.kind !== "watch");
+      if (scope.length) signals = signals.filter((s) => scope.some((o) => String(s.page || s.url || "").startsWith(o)));
+      signals = signals.slice(-limit);
+      const scopeLabel = scope.length ? ` from ${scope.join(", ")}` : "";
       if (signals.length === 0) {
-        return `The inbox is running${ens.started ? " (I just started it)" : ""}, but no ${kind && kind !== "all" ? `"${kind}" ` : ""}signals were captured${sinceMin ? ` in the last ${sinceMin} min` : ""} yet.
+        return `The inbox is running${ens.started ? " (I just started it)" : ""}, but no ${kind && kind !== "all" ? `"${kind}" ` : ""}signals${scopeLabel} were captured${sinceMin ? ` in the last ${sinceMin} min` : ""} yet.
 
 If the Beecork Skeleton extension isn't loaded yet, connect it:
 ${EXTENSION_STEPS}
@@ -2625,8 +2679,15 @@ Already connected? Reproduce the issue in the browser (or open the app), then ca
         const text = String(s.text ?? "").replace(/\s+/g, " ").slice(0, 300);
         return `[${s.kind}] ${text}${s.url ? `  @ ${s.url}` : ""}  (${ago2(s.ts)})`;
       });
-      return `${signals.length} browser signal(s), newest last:
-${lines.join("\n")}`;
+      let hint = "";
+      if (!scope.length) {
+        const distinct = [...new Set(signals.map((s) => toOrigin(String(s.page || s.url || ""))).filter(Boolean))];
+        if (distinct.length > 1) hint = `
+
+(These span ${distinct.length} sites: ${distinct.join(", ")}. To see only THIS project's, pass origin:"<its site>" \u2014 or call watch_site once and I'll remember it for this folder.)`;
+      }
+      return `${signals.length} browser signal(s)${scopeLabel}, newest last:
+${lines.join("\n")}${hint}`;
     }
   },
   {
@@ -2663,7 +2724,9 @@ ${lines.join("\n")}`;
       } catch {
         return DEV_SIGNALS_SETUP;
       }
-      return `Requested watching ${origin} for ${minutes} min. If the user has approved that site in the extension, it will start capturing shortly \u2014 have them reproduce the issue in a tab on ${origin} (or open it), then call read_dev_signals. If nothing shows up, the site isn't approved yet: ask the user to open it and click "Pair this site" in the Beecork Skeleton popup.`;
+      const remembered = await addProjectOrigin(origin).catch(() => false);
+      const memo = remembered ? ` I'll remember ${origin} as this project's site, so read_dev_signals here now scopes to it automatically.` : "";
+      return `Requested watching ${origin} for ${minutes} min.${memo} If the user has approved that site in the extension, it will start capturing shortly \u2014 have them reproduce the issue in a tab on ${origin} (or open it), then call read_dev_signals. If nothing shows up, the site isn't approved yet: ask the user to open it and click "Pair this site" in the Beecork Skeleton popup.`;
     }
   }
 ];
@@ -3028,49 +3091,49 @@ ${summary}` }, ...recent];
 }
 
 // src/memory.ts
-import { readFile as readFile4, writeFile as writeFile3, readdir as readdir3, mkdir as mkdir4, chmod as chmod2, rename as rename2, unlink } from "node:fs/promises";
+import { readFile as readFile5, writeFile as writeFile4, readdir as readdir3, mkdir as mkdir5, chmod as chmod2, rename as rename2, unlink } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
-import { join as join5, dirname as dirname4 } from "node:path";
+import { join as join6, dirname as dirname4 } from "node:path";
 var BEECORK = ".beecork";
 function ancestorDirs() {
   const home = homedir6();
   const dirs = [];
-  let dir = process.cwd();
-  while (dir !== home && dir !== dirname4(dir)) {
-    dirs.push(dir);
-    dir = dirname4(dir);
+  let dir2 = process.cwd();
+  while (dir2 !== home && dir2 !== dirname4(dir2)) {
+    dirs.push(dir2);
+    dir2 = dirname4(dir2);
   }
   return dirs.reverse();
 }
 function corkPaths() {
-  return [join5(homedir6(), BEECORK, "cork.md"), ...ancestorDirs().map((d) => join5(d, "cork.md"))];
+  return [join6(homedir6(), BEECORK, "cork.md"), ...ancestorDirs().map((d) => join6(d, "cork.md"))];
 }
 function beecorkPaths(name) {
-  return [join5(homedir6(), BEECORK, name), ...ancestorDirs().map((d) => join5(d, BEECORK, name))];
+  return [join6(homedir6(), BEECORK, name), ...ancestorDirs().map((d) => join6(d, BEECORK, name))];
 }
 function standardInstructionPaths() {
-  return ancestorDirs().flatMap((d) => [join5(d, "AGENTS.md"), join5(d, "CLAUDE.md")]);
+  return ancestorDirs().flatMap((d) => [join6(d, "AGENTS.md"), join6(d, "CLAUDE.md")]);
 }
 async function loadInstructions() {
   const home = homedir6();
-  const homeBeecork = join5(home, ".beecork");
+  const homeBeecork = join6(home, ".beecork");
   const trusted = [];
   const project = [];
   const sources = [];
   const MAX_FILE = 8e3;
   const MAX_TOTAL = 24e3;
   let total = 0;
-  for (const file of [...corkPaths(), ...standardInstructionPaths(), ...beecorkPaths("memory.md")]) {
+  for (const file2 of [...corkPaths(), ...standardInstructionPaths(), ...beecorkPaths("memory.md")]) {
     try {
-      let content = (await readFile4(file, "utf8")).trim();
+      let content = (await readFile5(file2, "utf8")).trim();
       if (!content) continue;
       if (content.length > MAX_FILE) content = content.slice(0, MAX_FILE) + "\n\u2026(truncated)";
       if (total + content.length > MAX_TOTAL) content = content.slice(0, Math.max(0, MAX_TOTAL - total)) + "\n\u2026(truncated)";
       total += content.length;
-      const block = `## From ${tildify(file)}
+      const block = `## From ${tildify(file2)}
 ${content}`;
-      (file.startsWith(homeBeecork) ? trusted : project).push(block);
-      sources.push(file);
+      (file2.startsWith(homeBeecork) ? trusted : project).push(block);
+      sources.push(file2);
       if (total >= MAX_TOTAL) break;
     } catch {
     }
@@ -3079,7 +3142,7 @@ ${content}`;
 }
 async function readJsonFile(path) {
   try {
-    return JSON.parse(await readFile4(path, "utf8"));
+    return JSON.parse(await readFile5(path, "utf8"));
   } catch (err) {
     if (err.code !== "ENOENT") {
       console.error(color.yellow(`\u26A0 ignoring malformed ${tildify(path)}: ${err.message}`));
@@ -3106,60 +3169,60 @@ async function loadSettings() {
   return { model, reasoningEffort, alwaysAllow, projectAlwaysAllowIgnored };
 }
 function userConfigPath() {
-  return join5(homedir6(), BEECORK, "config.json");
+  return join6(homedir6(), BEECORK, "config.json");
 }
 async function loadUserConfig() {
   return await readJsonFile(userConfigPath()) ?? {};
 }
 async function saveUserConfig(patch) {
-  const file = userConfigPath();
-  await mkdir4(dirname4(file), { recursive: true });
+  const file2 = userConfigPath();
+  await mkdir5(dirname4(file2), { recursive: true });
   const merged = { ...await loadUserConfig(), ...patch };
-  const tmp = `${file}.tmp`;
-  await writeFile3(tmp, JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
+  const tmp = `${file2}.tmp`;
+  await writeFile4(tmp, JSON.stringify(merged, null, 2), { encoding: "utf8", mode: 384 });
   await chmod2(tmp, 384).catch(() => {
   });
-  await rename2(tmp, file);
+  await rename2(tmp, file2);
 }
 async function saveModelPreference(model) {
   try {
-    const file = join5(homedir6(), BEECORK, "settings.json");
-    await mkdir4(dirname4(file), { recursive: true });
-    const current = await readJsonFile(file) ?? {};
-    await writeFile3(file, JSON.stringify({ ...current, model }, null, 2), "utf8");
+    const file2 = join6(homedir6(), BEECORK, "settings.json");
+    await mkdir5(dirname4(file2), { recursive: true });
+    const current = await readJsonFile(file2) ?? {};
+    await writeFile4(file2, JSON.stringify({ ...current, model }, null, 2), "utf8");
   } catch {
   }
 }
 async function saveReasoningPreference(reasoningEffort) {
   try {
-    const file = join5(homedir6(), BEECORK, "settings.json");
-    await mkdir4(dirname4(file), { recursive: true });
-    const current = await readJsonFile(file) ?? {};
-    await writeFile3(file, JSON.stringify({ ...current, reasoningEffort }, null, 2), "utf8");
+    const file2 = join6(homedir6(), BEECORK, "settings.json");
+    await mkdir5(dirname4(file2), { recursive: true });
+    const current = await readJsonFile(file2) ?? {};
+    await writeFile4(file2, JSON.stringify({ ...current, reasoningEffort }, null, 2), "utf8");
   } catch {
   }
 }
-var sessionsDir = () => join5(process.cwd(), BEECORK, "sessions");
+var sessionsDir = () => join6(process.cwd(), BEECORK, "sessions");
 async function saveSession(messages) {
   try {
-    const dir = sessionsDir();
-    await mkdir4(dir, { recursive: true });
-    const file = join5(dir, `${Date.now()}.json`);
-    const tmp = `${file}.tmp`;
-    await writeFile3(tmp, JSON.stringify(messages), "utf8");
+    const dir2 = sessionsDir();
+    await mkdir5(dir2, { recursive: true });
+    const file2 = join6(dir2, `${Date.now()}.json`);
+    const tmp = `${file2}.tmp`;
+    await writeFile4(tmp, JSON.stringify(messages), "utf8");
     await chmod2(tmp, 384).catch(() => {
     });
-    await rename2(tmp, file);
-    await pruneSessions(dir).catch(() => {
+    await rename2(tmp, file2);
+    await pruneSessions(dir2).catch(() => {
     });
   } catch {
   }
 }
 var MAX_SESSIONS = 50;
-async function pruneSessions(dir) {
-  const files = (await readdir3(dir)).filter((f) => f.endsWith(".json"));
+async function pruneSessions(dir2) {
+  const files = (await readdir3(dir2)).filter((f) => f.endsWith(".json"));
   if (files.length <= MAX_SESSIONS) return;
-  for (const f of files.sort().slice(0, files.length - MAX_SESSIONS)) await unlink(join5(dir, f)).catch(() => {
+  for (const f of files.sort().slice(0, files.length - MAX_SESSIONS)) await unlink(join6(dir2, f)).catch(() => {
   });
 }
 function sanitizeSession(raw) {
@@ -3196,10 +3259,10 @@ function dropIncompleteToolTail(messages) {
   }
   return messages;
 }
-async function readSession(file) {
+async function readSession(file2) {
   try {
-    const path = join5(sessionsDir(), file);
-    const parsed = sanitizeSession(JSON.parse(await readFile4(path, "utf8")));
+    const path = join6(sessionsDir(), file2);
+    const parsed = sanitizeSession(JSON.parse(await readFile5(path, "utf8")));
     await chmod2(path, 384).catch(() => {
     });
     return parsed;
@@ -3235,11 +3298,11 @@ async function listSessions() {
     return [];
   }
 }
-async function loadSession(file) {
-  return await readSession(file) ?? [];
+async function loadSession(file2) {
+  return await readSession(file2) ?? [];
 }
 function projectApprovalsPath() {
-  return join5(homedir6(), BEECORK, "project-approvals.json");
+  return join6(homedir6(), BEECORK, "project-approvals.json");
 }
 async function loadProjectApprovals() {
   const all = await readJsonFile(projectApprovalsPath());
@@ -3248,14 +3311,14 @@ async function loadProjectApprovals() {
 }
 async function addProjectApproval(tool) {
   try {
-    const file = projectApprovalsPath();
-    await mkdir4(dirname4(file), { recursive: true });
-    const all = await readJsonFile(file) ?? {};
+    const file2 = projectApprovalsPath();
+    await mkdir5(dirname4(file2), { recursive: true });
+    const all = await readJsonFile(file2) ?? {};
     const list = new Set(Array.isArray(all[projectRoot]) ? all[projectRoot] : []);
     list.add(tool);
     all[projectRoot] = [...list];
-    await writeFile3(file, JSON.stringify(all, null, 2), "utf8");
-    await chmod2(file, 384).catch(() => {
+    await writeFile4(file2, JSON.stringify(all, null, 2), "utf8");
+    await chmod2(file2, 384).catch(() => {
     });
   } catch {
   }
@@ -3305,7 +3368,7 @@ async function askApproval(ask, call, reason, offerAlways = true) {
     console.log(color.yellow(`   edit ${stripControl(String(args.path ?? ""))}:`));
     console.log(diffPreview(lineDiff(stripControl(String(args.old_text ?? "")), stripControl(String(args.new_text ?? "")))));
   } else if (call.function.name === "write_file") {
-    const existing = (await readFile5(resolveInRoot(String(args.path ?? ".")).abs, "utf8").catch(() => "")).slice(0, 2e5);
+    const existing = (await readFile6(resolveInRoot(String(args.path ?? ".")).abs, "utf8").catch(() => "")).slice(0, 2e5);
     console.log(color.yellow(`   write ${stripControl(String(args.path ?? ""))} ${existing ? "(overwrite)" : "(new file)"}:`));
     console.log(diffPreview(lineDiff(stripControl(existing), stripControl(String(args.content ?? "")))));
   } else {
@@ -3967,7 +4030,7 @@ function stopChrome() {
 var chromeEnabled = () => config.statuslineEnabled && !!process.stdout.isTTY;
 
 // src/commands.ts
-import { writeFile as writeFile4, mkdir as mkdir5, chmod as chmod3 } from "node:fs/promises";
+import { writeFile as writeFile5, mkdir as mkdir6, chmod as chmod3 } from "node:fs/promises";
 async function pick(opts) {
   if (chromeEnabled()) {
     const v = await chromePick(opts.items.map((it) => ({ label: it.label, hint: it.hint, value: it.value })), opts.initial, opts.title);
@@ -4092,15 +4155,15 @@ async function handleCommand(input, messages) {
     replayConversation(restored);
     console.log(color.green(`\u2191 resumed ${restored.length} messages \u2014 the bee has this context now. Continue below.`) + "\n");
   } else if (cmd === "/good" || cmd === "/bad") {
-    const dir = cmd === "/bad" ? "eval/failures" : "eval/good";
+    const dir2 = cmd === "/bad" ? "eval/failures" : "eval/good";
     try {
-      await mkdir5(dir, { recursive: true });
-      const file = `${dir}/${Date.now()}.json`;
-      await writeFile4(file, JSON.stringify({ rating: cmd.slice(1), model: state.model, messages }, null, 2), "utf8");
-      await chmod3(file, 384).catch(() => {
+      await mkdir6(dir2, { recursive: true });
+      const file2 = `${dir2}/${Date.now()}.json`;
+      await writeFile5(file2, JSON.stringify({ rating: cmd.slice(1), model: state.model, messages }, null, 2), "utf8");
+      await chmod3(file2, 384).catch(() => {
       });
       console.log(
-        color.cyan(`saved this conversation \u2192 ${file}`) + (cmd === "/bad" ? " (turn it into an eval task later)" : "") + "\n"
+        color.cyan(`saved this conversation \u2192 ${file2}`) + (cmd === "/bad" ? " (turn it into an eval task later)" : "") + "\n"
       );
     } catch (err) {
       console.log(color.red(`couldn't save: ${err.message}`) + "\n");
@@ -4284,7 +4347,7 @@ ${instr.trusted}`;
     saved = true;
     try {
       if (config.traceFile) {
-        await writeFile5(config.traceFile, JSON.stringify(trace), "utf8");
+        await writeFile6(config.traceFile, JSON.stringify(trace), "utf8");
         await chmod4(config.traceFile, 384).catch(() => {
         });
       } else if (messages.length > 1) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "beecork",
-  "version": "2.8.1",
+  "version": "2.8.2",
   "description": "beecork — a from-scratch CLI coding agent: multi-model (OpenRouter), BYOK, path-confined tools, built part by part.",
   "type": "module",
   "bin": {

package/skeleton/bridge.mjs

@@ -96,9 +96,14 @@ const server = http.createServer((req, res) => {
     const kind = q.get("kind");
     const since = Number(q.get("since")) || 0;
     const limit = Math.min(Math.max(Number(q.get("limit")) || 50, 1), 1000);
+    // Scope to one or more origins (comma-separated) so a project sees only its own site's signals.
+    const origins = (q.get("origin") || "").split(",").map((s) => s.trim()).filter(Boolean);
     let items = buffer.map((l) => { try { return JSON.parse(l); } catch { return null; } }).filter(Boolean);
     if (kind && kind !== "all") items = items.filter((s) => s.kind === kind);
     if (since) items = items.filter((s) => (s.ts || 0) >= since);
+    // Match the TAB the signal came from (s.page) when present, else the request/resource url. Keying
+    // on the tab origin is what makes scoping correct for cross-origin API calls a page makes.
+    if (origins.length) items = items.filter((s) => origins.some((o) => String(s.page || s.url || "").startsWith(o)));
     items = items.slice(-limit);
     return void res.writeHead(200, { "Content-Type": "application/json" }).end(JSON.stringify({ signals: items }));
   }

package/skills/browser-signals.md

@@ -21,6 +21,23 @@ the real errors:
 
 Pull it **on demand** while debugging — don't call it in a loop or on every turn.
 
+## Seeing only THIS project's signals (scoping)
+
+The inbox is **shared** across every project that uses beecork, so signals from other apps you
+have open can show up too. Scope to the project you're in:
+
+- Pass **`origin`** — the site(s) this project runs on, e.g.
+  `read_dev_signals({ origin: "http://localhost:8000" })`, or comma-separated for several frontends:
+  `{ origin: "http://localhost:3000,http://localhost:3001" }`. Get it from the project itself (dev
+  script / framework config) or from the user.
+- **Production sites are remembered per folder; localhost is not.** Once you `watch_site` a production
+  URL, beecork saves that origin to `.beecork/skeleton.json` and later `read_dev_signals` calls in that
+  folder auto-scope to it. **localhost is deliberately never remembered** — dev ports get reused across
+  projects (`:8000` might be a different app tomorrow), so a saved localhost binding would mis-attribute
+  another app's signals. Pass the localhost `origin` each session instead (you know it from the project).
+- If you call it unscoped and the feed spans multiple sites, the result lists the origins so you (or the
+  user) can pick this project's.
+
 ## Watching an on-demand / production site
 
 Localhost/dev sites the user approved are watched automatically. A **production** (or