superbee 0.3.0-pre.1 → 0.3.0-pre.3

package/README.md

@@ -37,6 +37,11 @@ and write through a small command-line tool.
   needs a network. The document schemas, called kinds, live inside the bundle, so it describes
   its own structure.
 
+Bees build comb one cell at a time. The comb holds what the colony gathers, and its shape shows
+the next bee where to build and what belongs where. Superbee works the same way: people and
+agents record what they learn in a structure that fits their domain, and that structure guides
+whoever works next. Each session builds on the last instead of starting over.
+
 The npm package is one self-contained executable with zero runtime dependencies, plus an Agent
 Skill, an instruction file your agent loads, that teaches it how to use the tool.
 

package/SKILL.md

@@ -86,6 +86,11 @@ asks to see it, invoke `show_document` or `show_view` in an MCP Apps host; other
 `superbee doc open <id>`.
 When the tone fits, a single 🐝 may mark a successful Superbee outcome.
 
+## Hosted checkouts
+
+- In a folder made by `superbee checkout` the host is the authority. On `AUTH_REQUIRED` (exit 4), relay `details.sign_in_url` to the person, then re-run the same command; `superbee setup hosted` signs in and picks the default workspace in one step.
+- Run `superbee sync` once at the end of a batch of edits. Any concurrent change to one document, even to different frontmatter keys, is a conflict: read `$REFS/hosted-checkout.md`, then `sync --inspect --doc <id>` and `--resolve keep|take|revise --doc <id>`. `--resolve` records a decision and never sends: run `superbee sync` after keep or revise. Deleted files sync as deletes; when sync reports `deletions_held`, never accept it yourself: name the documents and ask the person to run its `--accept-deletes` command in their own terminal (it asks them to type the count, and refuses your shell), else run `--restore-deletes`. A refusal that says to do something in the Superbee app is for the person: tell them, and never work around it.
+
 ## Host setup
 
 Persistent integrations require `npm install -g superbee` followed by `superbee setup`.

package/dist/publication-bridge.mjs

@@ -3701,6 +3701,7 @@ async function claimLockPath(lockPath, owner, waitMs, pollMs, policy) {
       await delay(pollMs);
       continue;
     }
+    const claimed = await fs.lstat(lockPath, { bigint: true }).catch(() => null);
     try {
       await fs.writeFile(path.join(lockPath, OWNER_FILE), `${JSON.stringify(owner)}
 `, {
@@ -3709,8 +3710,11 @@ async function claimLockPath(lockPath, owner, waitMs, pollMs, policy) {
         mode: 384
       });
     } catch (err) {
-      await fs.rm(lockPath, { recursive: true, force: true }).catch(() => {
+      const code = err.code;
+      if (code === "EEXIST") continue;
+      await rollBackOwnClaim(lockPath, owner, claimed, waitMs, pollMs, policy).catch(() => {
       });
+      if (code === "ENOENT" || code === "ENOTDIR") continue;
       throw err;
     }
     let inFlight;
@@ -3731,6 +3735,23 @@ async function claimLockPath(lockPath, owner, waitMs, pollMs, policy) {
     };
   }
 }
+async function rollBackOwnClaim(lockPath, owner, claimed, waitMs, pollMs, policy) {
+  const started = Date.now();
+  const record = await resolveOwnerRecord(lockPath, started, waitMs, pollMs);
+  if (record.state === "record") {
+    if (record.owner.token === owner.token) await removeReleasedLock(lockPath, owner, started, waitMs, pollMs, policy);
+    return;
+  }
+  if (record.state === "unreadable" || !await isClaimedDirectory(lockPath, claimed)) return;
+  const remnant = releasedLockRemnantPath(lockPath, owner);
+  await fs.rename(lockPath, remnant);
+  await fs.rm(remnant, { recursive: true, force: true });
+}
+async function isClaimedDirectory(lockPath, claimed) {
+  if (claimed === null || claimed.birthtimeNs <= 0n) return false;
+  const current = await fs.lstat(lockPath, { bigint: true }).catch(() => null);
+  return current !== null && current.isDirectory() && current.dev === claimed.dev && current.ino === claimed.ino && current.birthtimeNs === claimed.birthtimeNs;
+}
 function changedOwnerRefusal(lockPath, current) {
   return new FilesystemMutationLockError(
     `refusing to release filesystem mutation lock '${lockPath}' because its owner token changed; the mutation may have completed, inspect the lock before retrying.`,
@@ -5894,6 +5915,7 @@ var BridgeService = class {
           mode: config.mode,
           protocol: BRIDGE_PROTOCOL,
           grant: launch.capability === "bundle-propose" ? "propose" : "read",
+          ...config.mode === "dir" && this.options.host.kind === "oss" && launch.capability === "bundle-propose" ? { actionProtocol: "v1", actions: ["document.set-field", "document.set-body", "document.update"] } : {},
           host: this.hostDescriptor()
         })
       };

package/dist/publication.mjs

@@ -31655,6 +31655,7 @@ async function claimLockPath(lockPath, owner, waitMs, pollMs, policy) {
       await delay(pollMs);
       continue;
     }
+    const claimed = await fs.lstat(lockPath, { bigint: true }).catch(() => null);
     try {
       await fs.writeFile(path.join(lockPath, OWNER_FILE), `${JSON.stringify(owner)}
 `, {
@@ -31663,8 +31664,11 @@ async function claimLockPath(lockPath, owner, waitMs, pollMs, policy) {
         mode: 384
       });
     } catch (err) {
-      await fs.rm(lockPath, { recursive: true, force: true }).catch(() => {
+      const code2 = err.code;
+      if (code2 === "EEXIST") continue;
+      await rollBackOwnClaim(lockPath, owner, claimed, waitMs, pollMs, policy).catch(() => {
       });
+      if (code2 === "ENOENT" || code2 === "ENOTDIR") continue;
       throw err;
     }
     let inFlight;
@@ -31685,6 +31689,23 @@ async function claimLockPath(lockPath, owner, waitMs, pollMs, policy) {
     };
   }
 }
+async function rollBackOwnClaim(lockPath, owner, claimed, waitMs, pollMs, policy) {
+  const started = Date.now();
+  const record = await resolveOwnerRecord(lockPath, started, waitMs, pollMs);
+  if (record.state === "record") {
+    if (record.owner.token === owner.token) await removeReleasedLock(lockPath, owner, started, waitMs, pollMs, policy);
+    return;
+  }
+  if (record.state === "unreadable" || !await isClaimedDirectory(lockPath, claimed)) return;
+  const remnant = releasedLockRemnantPath(lockPath, owner);
+  await fs.rename(lockPath, remnant);
+  await fs.rm(remnant, { recursive: true, force: true });
+}
+async function isClaimedDirectory(lockPath, claimed) {
+  if (claimed === null || claimed.birthtimeNs <= 0n) return false;
+  const current = await fs.lstat(lockPath, { bigint: true }).catch(() => null);
+  return current !== null && current.isDirectory() && current.dev === claimed.dev && current.ino === claimed.ino && current.birthtimeNs === claimed.birthtimeNs;
+}
 function changedOwnerRefusal(lockPath, current) {
   return new FilesystemMutationLockError(
     `refusing to release filesystem mutation lock '${lockPath}' because its owner token changed; the mutation may have completed, inspect the lock before retrying.`,
@@ -43094,6 +43115,7 @@ var BridgeService = class {
           mode: config.mode,
           protocol: BRIDGE_PROTOCOL,
           grant: launch.capability === "bundle-propose" ? "propose" : "read",
+          ...config.mode === "dir" && this.options.host.kind === "oss" && launch.capability === "bundle-propose" ? { actionProtocol: "v1", actions: ["document.set-field", "document.set-body", "document.update"] } : {},
           host: this.hostDescriptor()
         })
       };