usebeeline 0.0.1 → 0.0.2

package/README.md

@@ -3,11 +3,11 @@
 Connect a supported coding-agent harness to Beeline:
 
 ```sh
-npx usebeeline connect
+npx usebeeline connect <PAIRING_CODE_FROM_THE_APP>
 ```
 
-The package also exposes a `beeline` bin alias. The connect command opens a
-short-lived browser approval, installs the signed current daemon bundle into
+The package also exposes a `beeline` bin alias. The connect command uses the
+short-lived code minted by the Beeline app, installs the signed current daemon bundle into
 the canonical `~/.local` layout, and starts the supervised user service.
 
 The wizard asks exactly for the harness, any required provider credential, the

package/dist/usebeeline.mjs

@@ -1264,18 +1264,18 @@ function validateTableBytes(numPoints, fpBytes) {
   if (bytes > TABLE_BYTES_MAX)
     throw new Error("invalid window size: table would need ~" + Math.ceil(bytes / 2 ** 20) + " MiB, max " + TABLE_BYTES_MAX / 2 ** 20 + " MiB");
 }
-function probeRandomBytes(randomBytes8, length) {
-  if (randomBytes8 === void 0)
+function probeRandomBytes(randomBytes7, length) {
+  if (randomBytes7 === void 0)
     return void 0;
-  afunction(randomBytes8, "randomBytes");
+  afunction(randomBytes7, "randomBytes");
   try {
-    const probe = randomBytes8(length);
+    const probe = randomBytes7(length);
     if (!isBytes2(probe) || probe.length !== length)
       return void 0;
   } catch {
     return void 0;
   }
-  return randomBytes8;
+  return randomBytes7;
 }
 function validateMSMPoints(points, c2) {
   aarray(points, "points");
@@ -1431,9 +1431,9 @@ var init_curve = __esm({
       baseCanBeBlinded;
       bits;
       // Parametrized with a given Point class (not individual point)
-      constructor(Point, randomBytes8) {
+      constructor(Point, randomBytes7) {
         validatePointCons(Point);
-        this.randomBytes = probeRandomBytes(randomBytes8, BLIND_BYTES);
+        this.randomBytes = probeRandomBytes(randomBytes7, BLIND_BYTES);
         this.Point = Point;
         this.BASE = Point.BASE;
         this.ZERO = Point.ZERO;
@@ -1666,7 +1666,7 @@ function weierstrass(params, extraOpts = {}) {
     randomBytes: "function"
   });
   const { endo, allowInfinityPoint } = extraOpts;
-  const randomBytes8 = extraOpts.randomBytes === void 0 ? randomBytes2 : extraOpts.randomBytes;
+  const randomBytes7 = extraOpts.randomBytes === void 0 ? randomBytes2 : extraOpts.randomBytes;
   if (endo) {
     if (!Fp.is0(CURVE.a) || typeof endo.beta !== "bigint" || !Array.isArray(endo.basises)) {
       throw new Error('invalid endo: expected "beta": bigint and "basises": array');
@@ -2078,7 +2078,7 @@ function weierstrass(params, extraOpts = {}) {
     }
   }
   const normalize3 = (points) => normalizeZ(Point, points);
-  const wnaf = new ScalarMultiplier(Point, randomBytes8);
+  const wnaf = new ScalarMultiplier(Point, randomBytes7);
   if (wnaf.bits >= 6)
     Point.BASE.precompute(6);
   Object.freeze(Point.prototype);
@@ -4102,7 +4102,7 @@ function ecdsa2(Point, hash, ecdsaOpts = {}) {
     bits2int_modN: "function"
   });
   ecdsaOpts = Object.assign({}, ecdsaOpts);
-  const randomBytes8 = ecdsaOpts.randomBytes || randomBytes3;
+  const randomBytes7 = ecdsaOpts.randomBytes || randomBytes3;
   const hmac2 = ecdsaOpts.hmac || ((key, msg) => hmac(hash, key, msg));
   const { Fp, Fn } = Point;
   const { ORDER: CURVE_ORDER, BITS: fnBits } = Fn;
@@ -4244,7 +4244,7 @@ function ecdsa2(Point, hash, ecdsaOpts = {}) {
       throw new Error("invalid private key");
     const seedArgs = [int2octets(d), int2octets(h1int)];
     if (extraEntropy != null && extraEntropy !== false) {
-      const e = extraEntropy === true ? randomBytes8(lengths.secretKey) : extraEntropy;
+      const e = extraEntropy === true ? randomBytes7(lengths.secretKey) : extraEntropy;
       seedArgs.push(abytes3(e, void 0, "extraEntropy"));
     }
     const seed = concatBytes3(...seedArgs);
@@ -11338,7 +11338,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes8, createHash: createHash16 } = __require("crypto");
+    var { randomBytes: randomBytes7, createHash: createHash15 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -11876,7 +11876,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes8(16).toString("base64");
+      const key = randomBytes7(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -12006,7 +12006,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash16("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash15("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -12375,7 +12375,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter2 = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash16 } = __require("crypto");
+    var { createHash: createHash15 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -12682,7 +12682,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest2 = createHash16("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash15("sha1").update(key + GUID).digest("base64");
         const headers2 = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -22029,11 +22029,11 @@ function parseUpdateManifest(raw, platform) {
   }
   const bundle = entry;
   const file = typeof bundle.file === "string" ? bundle.file : "";
-  const sha2565 = typeof bundle.sha256 === "string" ? bundle.sha256.toLowerCase() : "";
+  const sha2564 = typeof bundle.sha256 === "string" ? bundle.sha256.toLowerCase() : "";
   if (!file || !/^[a-z0-9][a-z0-9._-]*$/i.test(file)) {
     throw new Error(`update manifest names an unusable bundle file: ${JSON.stringify(bundle.file)}`);
   }
-  if (!/^[0-9a-f]{64}$/.test(sha2565)) {
+  if (!/^[0-9a-f]{64}$/.test(sha2564)) {
     throw new Error(`update manifest carries no usable sha256 for ${platform}`);
   }
   const sourceCommit = typeof bundle.commit === "string" && bundle.commit ? bundle.commit : typeof manifest.sourceCommit === "string" ? manifest.sourceCommit : void 0;
@@ -22045,7 +22045,7 @@ function parseUpdateManifest(raw, platform) {
     bundles,
     bundle: {
       file,
-      sha256: sha2565,
+      sha256: sha2564,
       ...typeof bundle.bytes === "number" ? { bytes: bundle.bytes } : {},
       ...sourceCommit ? { commit: sourceCommit } : {},
       ...version ? { version } : {},
@@ -24397,10 +24397,10 @@ function parseArtifact(value) {
   const artifactId = token(input.artifactId);
   const revision = integer(input.revision, 1);
   const eventId = typeof input.eventId === "string" && HEX_64.test(input.eventId) ? input.eventId : void 0;
-  const sha2565 = typeof input.sha256 === "string" && SHA_256.test(input.sha256) ? input.sha256 : void 0;
-  if (!artifactId || revision === void 0 || !eventId || !sha2565)
+  const sha2564 = typeof input.sha256 === "string" && SHA_256.test(input.sha256) ? input.sha256 : void 0;
+  if (!artifactId || revision === void 0 || !eventId || !sha2564)
     return void 0;
-  return { artifactId, revision, eventId, sha256: sha2565 };
+  return { artifactId, revision, eventId, sha256: sha2564 };
 }
 function parseArtifacts(value) {
   if (!Array.isArray(value) || value.length === 0 || value.length > MAX_PERMISSION_LIST_ITEMS) {
@@ -30168,7 +30168,7 @@ function normalizeAttachmentReference(value) {
     return null;
   const thumbnailUrl = value.thumbnailUrl ? httpUrl2(value.thumbnailUrl) : void 0;
   const previewUrl = value.previewUrl ? httpUrl2(value.previewUrl) : void 0;
-  const sha2565 = value.sha256?.toLowerCase();
+  const sha2564 = value.sha256?.toLowerCase();
   const width = cleanSize(value.width ?? 0);
   const height = cleanSize(value.height ?? 0);
   return {
@@ -30177,7 +30177,7 @@ function normalizeAttachmentReference(value) {
     mimeType,
     size,
     ...previewUrl ? { previewUrl } : {},
-    ...sha2565 && /^[0-9a-f]{64}$/.test(sha2565) ? { sha256: sha2565 } : {},
+    ...sha2564 && /^[0-9a-f]{64}$/.test(sha2564) ? { sha256: sha2564 } : {},
     ...thumbnailUrl ? { thumbnailUrl } : {},
     ...value.width !== void 0 && width !== void 0 && width > 0 ? { width } : {},
     ...value.height !== void 0 && height !== void 0 && height > 0 ? { height } : {}
@@ -55857,7 +55857,6 @@ async function runPairCommand(args, llmEnvFile, agentPrivateKey) {
 
 // apps/body/dist/connect-command.js
 import { spawn as spawn12 } from "node:child_process";
-import { createHash as createHash15, randomBytes as randomBytes7 } from "node:crypto";
 import { chmod as chmod7, mkdir as mkdir18, readFile as readFile13, unlink as unlink5, writeFile as writeFile12 } from "node:fs/promises";
 import { dirname as dirname16, resolve as resolve37 } from "node:path";
 import { stdin as stdin4, stdout as stdout5 } from "node:process";
@@ -55999,9 +55998,6 @@ async function collectConnectWizard(prompts = clackPrompts, loadModels = loadCon
     soul: soul.trim()
   };
 }
-function sha2564(value) {
-  return createHash15("sha256").update(value).digest("hex");
-}
 async function jsonRequest(url, body, fetchImpl) {
   const response = await fetchImpl(url, {
     method: "POST",
@@ -56015,41 +56011,15 @@ async function jsonRequest(url, body, fetchImpl) {
   }
   return response.json();
 }
-async function openBrowser(url) {
-  const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
-  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
-  await new Promise((resolveOpen, rejectOpen) => {
-    const child = spawn12(command, args, { detached: true, stdio: "ignore" });
-    child.once("error", rejectOpen);
-    child.once("spawn", () => {
-      child.unref();
-      resolveOpen();
-    });
-  });
-}
-async function pollDeviceGrant(input) {
-  const deadline = Date.now() + input.start.expires_in * 1e3;
-  while (Date.now() < deadline) {
-    const response = await input.fetchImpl(`${input.baseUrl}/auth/device/token`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        device_code: input.start.device_code,
-        code_verifier: input.verifier
-      }),
-      signal: AbortSignal.timeout(3e4)
-    });
-    if (response.status === 428) {
-      await new Promise((resolveWait) => setTimeout(resolveWait, input.start.interval * 1e3));
-      continue;
-    }
-    if (!response.ok) {
-      const detail = await response.json().catch(() => ({}));
-      throw new Error(detail.message ?? detail.error ?? `authorization failed (HTTP ${response.status})`);
-    }
-    return response.json();
-  }
-  throw new Error("browser authorization expired; run `npx usebeeline connect` again");
+function requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl) {
+  return jsonRequest(`${baseUrl}/auth/agent/connect`, {
+    pairing_code: pairingCode.trim().toUpperCase(),
+    harness: selection.harness,
+    ...selection.provider ? { provider: selection.provider } : {},
+    model: selection.model,
+    soul: selection.soul,
+    agent_name: selection.name
+  }, fetchImpl);
 }
 async function installCurrentRelease(fetchImpl) {
   const manifestUrl = resolveManifestUrl(process.env);
@@ -56136,29 +56106,19 @@ async function brassSpinner(message2, action) {
     throw error;
   }
 }
-async function runConnectCommand(options = {}) {
+async function runConnectCommand(code, options = {}) {
   if (!stdin4.isTTY || !stdout5.isTTY) {
     throw new Error("`usebeeline connect` needs an interactive terminal");
   }
   intro(brass("Beeline connect"));
+  const pairingCode = code?.trim() || await clackPrompts.text({
+    message: brass("Pairing code from the app"),
+    validate: (value) => value.trim() ? void 0 : "Pairing code is required"
+  });
   const selection = await collectConnectWizard();
   const fetchImpl = options.fetchImpl ?? fetch;
   const baseUrl = (process.env.BEELINE_AUTH_URL ?? "https://server.usebeeline.app").replace(/\/$/, "");
-  const verifier = randomBytes7(32).toString("base64url");
-  const start = await brassSpinner("Preparing secure sign-in\u2026", () => jsonRequest(`${baseUrl}/auth/device/connect`, {
-    harness: selection.harness,
-    ...selection.provider ? { provider: selection.provider } : {},
-    model: selection.model,
-    soul: selection.soul,
-    agent_name: selection.name,
-    code_challenge: sha2564(verifier)
-  }, fetchImpl));
-  try {
-    await openBrowser(start.verification_uri_complete);
-  } catch {
-    console.log(`Open this link to connect: ${start.verification_uri_complete}`);
-  }
-  const grant = await brassSpinner("Connecting to your Beeline Workspace\u2026", () => pollDeviceGrant({ baseUrl, start, verifier, fetchImpl }));
+  const grant = await brassSpinner("Connecting to your Beeline Workspace\u2026", () => requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl));
   const installedBinary = await brassSpinner("Installing the Beeline daemon\u2026", () => installCurrentRelease(fetchImpl));
   const llmEnvFile = await writeProviderEnv(selection, grant.agent_pubkey);
   const grantPath = resolve37(defaultSupervisorRoot(process.env), "beeline", "connect", `grant-${process.pid}-${Date.now()}.json`);
@@ -57200,7 +57160,7 @@ ${import_picocolors6.default.dim("Usage:")}
   beeline archive <subchannel-uuid>         Archive subchannel
   beeline pair <BUZZ-XXXX-XXXX> [options]   Pair an agent (optionally to this repo)
                                             and start its durable daemon
-  beeline connect                           Install and connect an agent through the browser
+  beeline connect [BUZZ-XXXX-XXXX]          Install and connect an app-authorized agent
   beeline start [agent-pubkey]              Start \u2014 or RESTART when already running,
                                             stopping cleanly after in-flight work \u2014
                                             this repo's (or, outside a repo, this
@@ -57590,7 +57550,7 @@ async function main2() {
     return;
   }
   if (command === "connect") {
-    await runConnectCommand();
+    await runConnectCommand(args[1]);
     return;
   }
   if (command === "connect-finish") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "repository": {
     "type": "git",