usebeeline 0.0.2 → 0.0.4

package/dist/usebeeline.mjs

@@ -25286,6 +25286,258 @@ function parseScheduledTurnReceipt(event) {
 // packages/buzz-client/dist/agent.js
 init_dist();
 
+// packages/api-contract/dist/phone-types.js
+var ROOM_VIEW_MESSAGE_LIMIT = 30;
+var ROOM_VIEW_BRIEFING_LIMIT = 10;
+var ROOM_VIEW_WORKSPACE_LIMIT = 50;
+var ROOM_VIEW_CHAT_LIMIT = 200;
+var ROOM_VIEW_MEMBER_LIMIT = 200;
+var ROOM_VIEW_AGENT_LIMIT = 200;
+var ROOM_VIEW_REQUEST_TIMEOUT_MS = 8e3;
+
+// packages/api-contract/dist/phone-guards.js
+var HEX = /^[0-9a-f]{64}$/;
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function integer3(value) {
+  return Number.isSafeInteger(value) && value >= 0;
+}
+function optionalString(value) {
+  return value === void 0 || typeof value === "string";
+}
+function httpUrl(value) {
+  if (typeof value !== "string")
+    return false;
+  try {
+    const protocol = new URL(value).protocol;
+    return protocol === "http:" || protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function attachment(value) {
+  const item = record(value);
+  return Boolean(item && httpUrl(item.url) && typeof item.name === "string" && item.name.length > 0 && typeof item.mimeType === "string" && /^[^/\s]+\/[^/\s]+$/.test(item.mimeType) && integer3(item.size) && (item.previewUrl === void 0 || httpUrl(item.previewUrl)) && (item.thumbnailUrl === void 0 || httpUrl(item.thumbnailUrl)) && (item.sha256 === void 0 || typeof item.sha256 === "string" && HEX.test(item.sha256)) && (item.width === void 0 || integer3(item.width) && item.width > 0) && (item.height === void 0 || integer3(item.height) && item.height > 0));
+}
+function activity(value) {
+  const item = record(value);
+  const rollup = item?.rollup === void 0 ? void 0 : record(item.rollup);
+  const plan = item?.plan === void 0 ? void 0 : record(item.plan);
+  return Boolean(item && (item.kind === "thinking" || item.kind === "tool" || item.kind === "output" || item.kind === "summary") && typeof item.title === "string" && optionalString(item.operation) && optionalString(item.status) && (item.thoughtMs === void 0 || integer3(item.thoughtMs)) && (rollup === void 0 || rollup !== null && Object.values(rollup).every(integer3)) && (item.observed === void 0 || Array.isArray(item.observed) && item.observed.every((candidate) => {
+    const observed = record(candidate);
+    return Boolean(observed && typeof observed.verb === "string" && optionalString(observed.target) && optionalString(observed.result));
+  })) && (item.files === void 0 || Array.isArray(item.files) && item.files.every((candidate) => {
+    const file = record(candidate);
+    return Boolean(file && typeof file.path === "string" && optionalString(file.status));
+  })) && (plan === void 0 || plan !== null && optionalString(plan.objective) && Array.isArray(plan.items) && plan.items.every((candidate) => {
+    const planItem = record(candidate);
+    return Boolean(planItem && typeof planItem.step === "string" && (planItem.status === "pending" || planItem.status === "in_progress" || planItem.status === "completed"));
+  })));
+}
+function identity(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.pubkey === "string" && HEX.test(item.pubkey) && (item.kind === "human" || item.kind === "agent") && typeof item.name === "string" && optionalString(item.handle) && optionalString(item.avatar));
+}
+function header(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.id === "string" && UUID.test(item.id) && typeof item.workspaceId === "string" && UUID.test(item.workspaceId) && (item.parentId === void 0 || typeof item.parentId === "string" && UUID.test(item.parentId)) && typeof item.name === "string" && optionalString(item.about) && optionalString(item.avatar) && (item.visibility === void 0 || item.visibility === "public" || item.visibility === "invite-only") && typeof item.archived === "boolean" && integer3(item.createdAt) && integer3(item.updatedAt));
+}
+function member(value) {
+  const item = record(value);
+  const presence = item?.presence === void 0 ? void 0 : record(item.presence);
+  return Boolean(item && identity(item.identity) && (item.role === "owner" || item.role === "admin" || item.role === "member") && (presence === void 0 || presence && (presence.status === "online" || presence.status === "offline") && integer3(presence.observedAt) && (presence.roomId === void 0 || typeof presence.roomId === "string" && UUID.test(presence.roomId))));
+}
+function messageCorner(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.id === "string" && UUID.test(item.id) && (item.status === "open" || item.status === "working" || item.status === "waiting" || item.status === "idle" || item.status === "concluded" || item.status === "closed"));
+}
+function messagePermission(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.permissionId === "string" && item.permissionId.length > 0 && typeof item.requestId === "string" && item.requestId.length > 0 && identity(item.agent) && item.agent.kind === "agent" && identity(item.requester) && item.requester.kind === "human" && (item.decider === void 0 || identity(item.decider) && item.decider.kind === "human") && typeof item.tool === "string" && item.tool.length > 0 && optionalString(item.repository) && (item.purpose === void 0 || item.purpose === "squire-spending") && (item.status === "pending" || item.status === "allowed" || item.status === "denied" || item.status === "expired" || item.status === "failed") && (item.cornerId === void 0 || typeof item.cornerId === "string" && UUID.test(item.cornerId)));
+}
+function targetBranch(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.proposalId === "string" && item.proposalId.length > 0 && typeof item.from === "string" && typeof item.to === "string" && item.to.length > 0 && optionalString(item.repository) && (item.agent === void 0 || identity(item.agent)) && (item.requester === void 0 || identity(item.requester)));
+}
+function githubUrl(value) {
+  if (typeof value !== "string")
+    return false;
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && url.hostname === "github.com";
+  } catch {
+    return false;
+  }
+}
+function githubEvent(value) {
+  const item = record(value);
+  if (!item || item.type !== "pull-request" && item.type !== "issue" || typeof item.actor !== "string" || typeof item.title !== "string" || !githubUrl(item.url)) {
+    return false;
+  }
+  return item.type === "pull-request" && (item.action === "opened" || item.action === "closed" || item.action === "merged") || item.type === "issue" && (item.action === "opened" || item.action === "closed");
+}
+function daemonFact(value) {
+  const item = record(value);
+  const pullRequest = item?.pullRequest === void 0 ? void 0 : record(item.pullRequest);
+  if (!item || item.type !== "corner-complete" && item.type !== "checks-failing" && item.type !== "worktree-cleaned" && item.type !== "corner-open" || typeof item.cornerId !== "string" || !UUID.test(item.cornerId) || typeof item.objective !== "string" || !item.objective.trim() || item.outcome !== void 0 && item.outcome !== "landed" && item.outcome !== "abandoned" || !optionalString(item.name) || item.type === "corner-open" && (typeof item.name !== "string" || !item.name.trim()) || pullRequest !== void 0 && (!pullRequest || pullRequest.number !== void 0 && (!Number.isSafeInteger(pullRequest.number) || Number(pullRequest.number) <= 0) || !optionalString(pullRequest.title) || !githubUrl(pullRequest.url) || !optionalString(pullRequest.targetBranch)) || item.subgoals !== void 0 && (!Array.isArray(item.subgoals) || !item.subgoals.every((subgoal) => {
+    const entry = record(subgoal);
+    return Boolean(entry && typeof entry.step === "string" && entry.step.trim() && (entry.status === "pending" || entry.status === "in_progress" || entry.status === "completed"));
+  }))) {
+    return false;
+  }
+  return item.type !== "corner-complete" || item.outcome === "landed" || item.outcome === "abandoned";
+}
+function isRoomViewMessage(value) {
+  const item = record(value);
+  const reference = item?.reference === void 0 ? void 0 : record(item.reference);
+  const reply = item?.reply === void 0 ? void 0 : record(item.reply);
+  return Boolean(item && typeof item.id === "string" && HEX.test(item.id) && typeof item.text === "string" && integer3(item.createdAt) && identity(item.author) && (item.presentation === "message" || item.presentation === "system" || item.presentation === "activity" || item.presentation === "card") && (reference === void 0 || reference && typeof reference.channelId === "string" && UUID.test(reference.channelId) && reference.eventId === item.id && typeof reference.rootId === "string" && HEX.test(reference.rootId)) && (reply === void 0 || reply && typeof reply.channelId === "string" && UUID.test(reply.channelId) && typeof reply.eventId === "string" && HEX.test(reply.eventId) && typeof reply.rootId === "string" && HEX.test(reply.rootId)) && optionalString(item.liveTurnId) && optionalString(item.requestId) && (item.attachments === void 0 || Array.isArray(item.attachments) && item.attachments.every(attachment)) && (item.mentionPubkeys === void 0 || Array.isArray(item.mentionPubkeys) && item.mentionPubkeys.every((pubkey2) => typeof pubkey2 === "string" && HEX.test(pubkey2))) && (item.activity === void 0 || Array.isArray(item.activity) && item.activity.every(activity)) && (item.durableFact === void 0 || item.durableFact === "failure" || item.durableFact === "merge" || item.durableFact === "action") && (item.corner === void 0 || messageCorner(item.corner)) && (item.permission === void 0 || messagePermission(item.permission)) && (item.targetBranch === void 0 || targetBranch(item.targetBranch)) && (item.githubEvent === void 0 || githubEvent(item.githubEvent)) && (item.daemonFact === void 0 || daemonFact(item.daemonFact)));
+}
+function scopedMessage(value, roomId) {
+  return typeof roomId === "string" && isRoomViewMessage(value) && (value.reference === void 0 || value.reference.channelId === roomId) && (value.reply === void 0 || value.reply.channelId === roomId);
+}
+function watchFilters(value) {
+  return Array.isArray(value) && value.length <= 32 && value.every((candidate) => {
+    const filter = record(candidate);
+    if (!filter)
+      return false;
+    return Object.entries(filter).every(([key, entry]) => {
+      if (key === "kinds")
+        return Array.isArray(entry) && entry.every(integer3);
+      if (key === "authors" || key === "#h" || key === "#d" || key === "#p" || key === "#t") {
+        return Array.isArray(entry) && entry.every((item) => typeof item === "string");
+      }
+      return false;
+    });
+  });
+}
+function viewer(value) {
+  const item = record(value);
+  const permissions = record(item?.permissions);
+  return Boolean(item && identity(item.identity) && (item.role === "owner" || item.role === "admin" || item.role === "member") && permissions && typeof permissions.send === "boolean" && typeof permissions.manage === "boolean");
+}
+function directMessage(value) {
+  const item = record(value);
+  return Boolean(item && Array.isArray(item.participants) && item.participants.length === 2 && item.participants.every((pubkey2) => typeof pubkey2 === "string" && HEX.test(pubkey2)) && item.participants[0] < item.participants[1]);
+}
+function directMessageForViewer(value, viewerValue) {
+  const viewerItem = record(viewerValue);
+  const viewerIdentity = record(viewerItem?.identity);
+  return directMessage(value) && typeof viewerIdentity?.pubkey === "string" && value.participants.includes(viewerIdentity.pubkey);
+}
+function agentTurn(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.requestId === "string" && HEX.test(item.requestId) && typeof item.agentPubkey === "string" && HEX.test(item.agentPubkey) && (item.status === "working" || item.status === "complete" || item.status === "failed") && integer3(item.createdAt) && optionalString(item.generationId));
+}
+function workspace(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.id === "string" && UUID.test(item.id) && typeof item.name === "string" && optionalString(item.avatar) && (item.visibility === "public" || item.visibility === "invite-only") && (item.role === "owner" || item.role === "admin" || item.role === "member") && integer3(item.updatedAt));
+}
+function latest(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.id === "string" && HEX.test(item.id) && typeof item.text === "string" && integer3(item.createdAt) && identity(item.author));
+}
+function chat(value) {
+  const item = record(value);
+  return Boolean(item && header(item.room) && (item.latestMessage === void 0 || latest(item.latestMessage)) && integer3(item.memberCount) && integer3(item.cornerCount) && typeof item.unread === "boolean" && optionalString(item.repositoryName) && (item.agentState === void 0 || item.agentState === "needs-you" || item.agentState === "working"));
+}
+function corner(value) {
+  const item = record(value);
+  return Boolean(item && header(item.corner) && cornerLifecycle(item.lifecycle) && (item.status === "open" || item.status === "working" || item.status === "waiting" || item.status === "idle" || item.status === "concluded" || item.status === "closed") && (item.statusAt === void 0 || integer3(item.statusAt)) && (item.reason === void 0 || item.reason === "review" || item.reason === "question" || item.reason === "failure") && (item.agent === void 0 || identity(item.agent)) && (item.latestMessage === void 0 || latest(item.latestMessage)));
+}
+function cornerLifecycle(value) {
+  const item = record(value);
+  const pr = item?.pr === void 0 ? void 0 : record(item.pr);
+  return Boolean(item && (item.lifecycle === "working" || item.lifecycle === "in-review" || item.lifecycle === "unknown" || item.lifecycle === "done") && (item.checks === "passing" || item.checks === "failing" || item.checks === "pending" || item.checks === "unknown") && optionalString(item.branch) && (item.outcome === void 0 || item.outcome === "landed" || item.outcome === "abandoned") && optionalString(item.reason) && (pr === void 0 || pr && integer3(pr.number) && pr.number > 0 && githubUrl(pr.url) && typeof pr.title === "string" && pr.title.length > 0 && typeof pr.targetBranch === "string" && pr.targetBranch.length > 0 && typeof pr.headSha === "string" && /^[0-9a-f]{40}$/i.test(pr.headSha) && optionalString(pr.mergedAt) && optionalString(pr.mergedBy)));
+}
+function repository(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.key === "string" && item.key.length > 0 && typeof item.name === "string" && item.name.length > 0 && typeof item.remote === "string" && item.remote.length > 0 && typeof item.targetBranch === "string" && item.targetBranch.length > 0 && integer3(item.updatedAt) && (item.githubInstallationId === void 0 || integer3(item.githubInstallationId)) && typeof item.githubEventsEnabled === "boolean");
+}
+function repositoryResolution(value) {
+  return value === "repository" || value === "none" || value === "unverified";
+}
+function modelSelection(value) {
+  const item = record(value);
+  return Boolean(item && optionalString(item.model) && optionalString(item.effort));
+}
+function modelOption(value) {
+  const item = record(value);
+  return Boolean(item && typeof item.id === "string" && item.id.length > 0 && typeof item.category === "string" && item.category.length > 0 && optionalString(item.currentValue) && Array.isArray(item.options) && item.options.every((candidate) => {
+    const option = record(candidate);
+    return Boolean(option && typeof option.id === "string" && option.id.length > 0 && optionalString(option.name));
+  }));
+}
+function isRoomView(value) {
+  const item = record(value);
+  return Boolean(item && header(item.room) && Array.isArray(item.messages) && item.messages.length <= ROOM_VIEW_MESSAGE_LIMIT && item.messages.every((candidate) => scopedMessage(candidate, record(item.room)?.id)) && Array.isArray(item.latestAgentTurns) && item.latestAgentTurns.length <= ROOM_VIEW_AGENT_LIMIT && item.latestAgentTurns.every(agentTurn) && Array.isArray(item.members) && item.members.length <= ROOM_VIEW_MEMBER_LIMIT && item.members.every(member) && viewer(item.viewer) && (item.directMessage === void 0 || directMessageForViewer(item.directMessage, item.viewer)) && (item.parent === void 0 || header(item.parent)) && (item.briefing === void 0 || Array.isArray(item.briefing) && item.briefing.length <= ROOM_VIEW_BRIEFING_LIMIT && item.briefing.every(isRoomViewMessage)) && (item.cornerPlan === void 0 || activity({ kind: "output", title: "Plan", plan: item.cornerPlan })) && Array.isArray(item.corners) && item.corners.every(corner) && (item.repository === void 0 || repository(item.repository)) && repositoryResolution(item.repositoryResolution) && (item.cornerLifecycle === void 0 || cornerLifecycle(item.cornerLifecycle)) && watchFilters(item.watchFilters));
+}
+function isRoomHistoryView(value) {
+  const item = record(value);
+  const before = item?.nextBefore === void 0 ? void 0 : record(item.nextBefore);
+  return Boolean(item && typeof item.roomId === "string" && UUID.test(item.roomId) && Array.isArray(item.messages) && item.messages.length <= ROOM_VIEW_MESSAGE_LIMIT && item.messages.every((candidate) => scopedMessage(candidate, item.roomId)) && (before === void 0 || before && integer3(before.createdAt) && typeof before.id === "string" && HEX.test(before.id)));
+}
+function isWorkspaceListView(value) {
+  const item = record(value);
+  return Boolean(item && Array.isArray(item.workspaces) && item.workspaces.length <= ROOM_VIEW_WORKSPACE_LIMIT && item.workspaces.every(workspace) && typeof item.truncated === "boolean" && identity(item.viewer) && watchFilters(item.watchFilters));
+}
+function isWorkspaceView(value) {
+  const item = record(value);
+  const managerSettings = item?.managerSettings === void 0 ? void 0 : record(item.managerSettings);
+  return Boolean(item && workspace(item.workspace) && integer3(record(item.workspace)?.createdAt) && optionalString(record(item.workspace)?.about) && (managerSettings === void 0 || managerSettings && (managerSettings.visibility === "public" || managerSettings.visibility === "invite-only")) && Array.isArray(item.members) && item.members.length <= ROOM_VIEW_MEMBER_LIMIT && item.members.every(member) && Array.isArray(item.agents) && item.agents.length <= ROOM_VIEW_AGENT_LIMIT && item.agents.every(member) && typeof item.membersTruncated === "boolean" && typeof item.agentsTruncated === "boolean" && viewer(item.viewer) && watchFilters(item.watchFilters));
+}
+function isChatListView(value) {
+  const item = record(value);
+  return Boolean(item && workspace(item.workspace) && Array.isArray(item.chats) && item.chats.length <= ROOM_VIEW_CHAT_LIMIT && item.chats.every(chat) && typeof item.truncated === "boolean" && identity(item.viewer) && watchFilters(item.watchFilters));
+}
+function isCornerListView(value) {
+  const item = record(value);
+  return Boolean(item && header(item.room) && Array.isArray(item.corners) && item.corners.every(corner) && viewer(item.viewer) && watchFilters(item.watchFilters));
+}
+function isAgentDetailView(value) {
+  const item = record(value);
+  const soul = item?.soul === void 0 ? void 0 : record(item.soul);
+  return Boolean(item && typeof item.workspaceId === "string" && UUID.test(item.workspaceId) && member(item.agent) && item.agent.identity.kind === "agent" && Array.isArray(item.catalog) && item.catalog.length <= 100 && item.catalog.every(modelOption) && (soul === void 0 || soul !== null && typeof soul.name === "string" && soul.name.length > 0 && typeof soul.instructions === "string" && soul.instructions.length > 0 && typeof soul.avatarSeed === "string" && soul.avatarSeed.length > 0 && (soul.avatar === void 0 || httpUrl(soul.avatar))) && (item.runtimeSelection === void 0 || modelSelection(item.runtimeSelection)) && (item.selected === void 0 || modelSelection(item.selected)) && watchFilters(item.watchFilters));
+}
+function isInviteView(value) {
+  const item = record(value);
+  if (!item || typeof item.name !== "string" || !integer3(item.expiresAt) || !optionalString(item.avatar))
+    return false;
+  return Object.keys(item).every((key) => key === "name" || key === "avatar" || key === "expiresAt");
+}
+function isAgentPairingClaimWireView(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const candidate = value;
+  return typeof candidate.workspaceId === "string" && UUID.test(candidate.workspaceId) && typeof candidate.pairedBy === "string" && HEX.test(candidate.pairedBy) && typeof candidate.joined === "boolean" && (candidate.attachedRoomIds === void 0 || Array.isArray(candidate.attachedRoomIds) && candidate.attachedRoomIds.every((roomId) => typeof roomId === "string" && UUID.test(roomId)));
+}
+function isAgentPairingAbandonView(value) {
+  return Boolean(value) && typeof value === "object" && typeof value.abandoned === "boolean";
+}
+
+// packages/api-contract/dist/agent-pairing-code.js
+var AGENT_PAIRING_CODE_ENTROPY_BYTES = 8;
+var CURRENT_AGENT_PAIRING_CODE = /^[0-9A-F]{8}-[0-9A-F]{8}$/;
+var LEGACY_AGENT_PAIRING_CODE = /^BUZZ-(?:[0-9A-F]{8}-[0-9A-F]{8}|[A-HJ-NP-Z2-9]{4}-[A-HJ-NP-Z2-9]{4})$/;
+function normalizeAgentPairingCode(value) {
+  if (typeof value !== "string")
+    return void 0;
+  const normalized = value.trim().toUpperCase();
+  return isAgentPairingCode(normalized) ? normalized : void 0;
+}
+function isAgentPairingCode(value) {
+  return typeof value === "string" && (CURRENT_AGENT_PAIRING_CODE.test(value) || LEGACY_AGENT_PAIRING_CODE.test(value));
+}
+function createAgentPairingCode(entropy) {
+  if (entropy.length !== AGENT_PAIRING_CODE_ENTROPY_BYTES) {
+    throw new Error(`pairing code entropy must be ${AGENT_PAIRING_CODE_ENTROPY_BYTES} bytes`);
+  }
+  const encoded = Array.from(entropy, (byte) => byte.toString(16).padStart(2, "0")).join("").toUpperCase();
+  return `${encoded.slice(0, 8)}-${encoded.slice(8)}`;
+}
+
 // packages/buzz-client/dist/community.js
 init_utils();
 init_sha2();
@@ -27744,365 +27996,132 @@ async function findCommunityInvite(http, tokenHash, readerPubkey) {
   return latestInviteRecord(legacy, tokenHash);
 }
 async function listCommunityInvites(ctx, communityId) {
-  const events = await query(ctx, [
-    {
-      kinds: [KIND_COMMUNITY_INVITE],
-      authors: [ctx.identity.publicKey],
-      "#t": [TAG_COMMUNITY_INVITE],
-      limit: 500
-    }
-  ]);
-  const latestByToken = /* @__PURE__ */ new Map();
-  for (const event of events) {
-    const record2 = parseCommunityInvite(event);
-    if (!record2 || record2.communityId !== communityId)
-      continue;
-    const current = latestByToken.get(record2.tokenHash);
-    if (!current || record2.event.created_at > current.event.created_at || record2.event.created_at === current.event.created_at && record2.event.id > current.event.id) {
-      latestByToken.set(record2.tokenHash, record2);
-    }
-  }
-  const currentTime = now3();
-  return [...latestByToken.values()].filter((record2) => !record2.revoked && record2.expiresAt > currentTime).sort((a2, b) => b.event.created_at - a2.event.created_at);
-}
-async function revokeCommunityInvite(ctx, communityId, tokenHash) {
-  if (!/^[0-9a-f]{64}$/.test(tokenHash))
-    throw new Error("invalid invite");
-  const members = await communityMembers(ctx, communityId);
-  const actor = members.find((member2) => member2.pubkey === ctx.identity.publicKey);
-  if (actor?.role !== "owner" && actor?.role !== "admin") {
-    throw new Error("only a Workspace owner or admin can revoke invites");
-  }
-  const invite = (await listCommunityInvites(ctx, communityId)).find((record2) => record2.tokenHash === tokenHash);
-  if (!invite)
-    throw new Error("invite is no longer active");
-  const createdAt = Math.max(nextCommunityTimestamp(), invite.event.created_at + 1);
-  lastCommunityMutationTimestamp = createdAt;
-  const event = sign3(ctx, KIND_COMMUNITY_INVITE, [
-    ["h", communityId],
-    ["t", TAG_COMMUNITY_INVITE],
-    ["d", tokenHash],
-    [TAG_COMMUNITY, communityId],
-    ["expiration", String(Math.max(invite.expiresAt, createdAt + 1))],
-    ["role", "member"],
-    ["revoked", "true"]
-  ], "", createdAt);
-  await publishEvent(ctx.http, event);
-}
-async function createInvite(ctx, communityId, options) {
-  const community = await getCommunity(ctx, communityId);
-  if (!community)
-    throw new Error(`community not found: ${communityId}`);
-  const members = await communityMembers(ctx, communityId);
-  if (!members.some((member2) => member2.pubkey === ctx.identity.publicKey)) {
-    throw new Error("only a community member can mint an invite");
-  }
-  const createdAt = now3();
-  const expiresAt = inviteExpiry(options, createdAt);
-  const token2 = randomToken();
-  const tokenHash = inviteTokenHash(token2);
-  const event = sign3(ctx, KIND_COMMUNITY_INVITE, [
-    ["h", communityId],
-    ["t", TAG_COMMUNITY_INVITE],
-    ["d", tokenHash],
-    [TAG_COMMUNITY, communityId],
-    ["expiration", String(expiresAt)],
-    ["role", "member"]
-  ], "", createdAt);
-  await publishEvent(ctx.http, event);
-  return {
-    token: token2,
-    tokenHash,
-    communityId,
-    expiresAt,
-    mintedBy: ctx.identity.publicKey,
-    event
-  };
-}
-async function redeemInvite(ctx, token2) {
-  if (!token2 || token2.length > 512)
-    throw new Error("invalid invite token");
-  const tokenHash = inviteTokenHash(token2);
-  const invite = await findCommunityInvite(ctx.http, tokenHash, ctx.identity.publicKey);
-  if (!invite)
-    throw new Error("invalid invite token");
-  const members = await communityMembers(ctx, invite.communityId);
-  if (!members.some((member2) => member2.pubkey === invite.mintedBy)) {
-    throw new Error("invite minter is not a community member");
-  }
-  if ((await getChannelMetadata(ctx, invite.communityId))?.archived) {
-    throw archivedWorkspaceError();
-  }
-  if (members.some((member2) => member2.pubkey === ctx.identity.publicKey)) {
-    await assertCommunityMemberInChannels(ctx, invite.communityId, ctx.identity.publicKey);
-    return {
-      communityId: invite.communityId,
-      mintedBy: invite.mintedBy,
-      expiresAt: invite.expiresAt,
-      joined: false,
-      alreadyMember: true
-    };
-  }
-  if (invite.expiresAt <= now3())
-    throw new Error("invite has expired");
-  try {
-    await setMemberRole(ctx, invite.communityId, ctx.identity.publicKey, "member", {
-      extraTags: [
-        ["invite", tokenHash],
-        [TAG_COMMUNITY, invite.communityId]
-      ]
-    });
-  } catch (error) {
-    if (isArchivedChannelError(error))
-      throw archivedWorkspaceError();
-    throw error;
-  }
-  await waitUntilMember(ctx, invite.communityId, ctx.identity.publicKey);
-  await assertCommunityMemberInChannels(ctx, invite.communityId, ctx.identity.publicKey);
-  return {
-    communityId: invite.communityId,
-    mintedBy: invite.mintedBy,
-    expiresAt: invite.expiresAt,
-    joined: true,
-    alreadyMember: false
-  };
-}
-
-// packages/buzz-client/dist/room-view.js
-init_dist();
-
-// packages/api-contract/dist/phone-types.js
-var ROOM_VIEW_MESSAGE_LIMIT = 30;
-var ROOM_VIEW_BRIEFING_LIMIT = 10;
-var ROOM_VIEW_WORKSPACE_LIMIT = 50;
-var ROOM_VIEW_CHAT_LIMIT = 200;
-var ROOM_VIEW_MEMBER_LIMIT = 200;
-var ROOM_VIEW_AGENT_LIMIT = 200;
-var ROOM_VIEW_REQUEST_TIMEOUT_MS = 8e3;
-
-// packages/api-contract/dist/phone-guards.js
-var HEX = /^[0-9a-f]{64}$/;
-var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
-function record(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-}
-function integer3(value) {
-  return Number.isSafeInteger(value) && value >= 0;
-}
-function optionalString(value) {
-  return value === void 0 || typeof value === "string";
-}
-function httpUrl(value) {
-  if (typeof value !== "string")
-    return false;
-  try {
-    const protocol = new URL(value).protocol;
-    return protocol === "http:" || protocol === "https:";
-  } catch {
-    return false;
-  }
-}
-function attachment(value) {
-  const item = record(value);
-  return Boolean(item && httpUrl(item.url) && typeof item.name === "string" && item.name.length > 0 && typeof item.mimeType === "string" && /^[^/\s]+\/[^/\s]+$/.test(item.mimeType) && integer3(item.size) && (item.previewUrl === void 0 || httpUrl(item.previewUrl)) && (item.thumbnailUrl === void 0 || httpUrl(item.thumbnailUrl)) && (item.sha256 === void 0 || typeof item.sha256 === "string" && HEX.test(item.sha256)) && (item.width === void 0 || integer3(item.width) && item.width > 0) && (item.height === void 0 || integer3(item.height) && item.height > 0));
-}
-function activity(value) {
-  const item = record(value);
-  const rollup = item?.rollup === void 0 ? void 0 : record(item.rollup);
-  const plan = item?.plan === void 0 ? void 0 : record(item.plan);
-  return Boolean(item && (item.kind === "thinking" || item.kind === "tool" || item.kind === "output" || item.kind === "summary") && typeof item.title === "string" && optionalString(item.operation) && optionalString(item.status) && (item.thoughtMs === void 0 || integer3(item.thoughtMs)) && (rollup === void 0 || rollup !== null && Object.values(rollup).every(integer3)) && (item.observed === void 0 || Array.isArray(item.observed) && item.observed.every((candidate) => {
-    const observed = record(candidate);
-    return Boolean(observed && typeof observed.verb === "string" && optionalString(observed.target) && optionalString(observed.result));
-  })) && (item.files === void 0 || Array.isArray(item.files) && item.files.every((candidate) => {
-    const file = record(candidate);
-    return Boolean(file && typeof file.path === "string" && optionalString(file.status));
-  })) && (plan === void 0 || plan !== null && optionalString(plan.objective) && Array.isArray(plan.items) && plan.items.every((candidate) => {
-    const planItem = record(candidate);
-    return Boolean(planItem && typeof planItem.step === "string" && (planItem.status === "pending" || planItem.status === "in_progress" || planItem.status === "completed"));
-  })));
-}
-function identity(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.pubkey === "string" && HEX.test(item.pubkey) && (item.kind === "human" || item.kind === "agent") && typeof item.name === "string" && optionalString(item.handle) && optionalString(item.avatar));
-}
-function header(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.id === "string" && UUID.test(item.id) && typeof item.workspaceId === "string" && UUID.test(item.workspaceId) && (item.parentId === void 0 || typeof item.parentId === "string" && UUID.test(item.parentId)) && typeof item.name === "string" && optionalString(item.about) && optionalString(item.avatar) && (item.visibility === void 0 || item.visibility === "public" || item.visibility === "invite-only") && typeof item.archived === "boolean" && integer3(item.createdAt) && integer3(item.updatedAt));
-}
-function member(value) {
-  const item = record(value);
-  const presence = item?.presence === void 0 ? void 0 : record(item.presence);
-  return Boolean(item && identity(item.identity) && (item.role === "owner" || item.role === "admin" || item.role === "member") && (presence === void 0 || presence && (presence.status === "online" || presence.status === "offline") && integer3(presence.observedAt) && (presence.roomId === void 0 || typeof presence.roomId === "string" && UUID.test(presence.roomId))));
-}
-function messageCorner(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.id === "string" && UUID.test(item.id) && (item.status === "open" || item.status === "working" || item.status === "waiting" || item.status === "idle" || item.status === "concluded" || item.status === "closed"));
-}
-function messagePermission(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.permissionId === "string" && item.permissionId.length > 0 && typeof item.requestId === "string" && item.requestId.length > 0 && identity(item.agent) && item.agent.kind === "agent" && identity(item.requester) && item.requester.kind === "human" && (item.decider === void 0 || identity(item.decider) && item.decider.kind === "human") && typeof item.tool === "string" && item.tool.length > 0 && optionalString(item.repository) && (item.purpose === void 0 || item.purpose === "squire-spending") && (item.status === "pending" || item.status === "allowed" || item.status === "denied" || item.status === "expired" || item.status === "failed") && (item.cornerId === void 0 || typeof item.cornerId === "string" && UUID.test(item.cornerId)));
-}
-function targetBranch(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.proposalId === "string" && item.proposalId.length > 0 && typeof item.from === "string" && typeof item.to === "string" && item.to.length > 0 && optionalString(item.repository) && (item.agent === void 0 || identity(item.agent)) && (item.requester === void 0 || identity(item.requester)));
-}
-function githubUrl(value) {
-  if (typeof value !== "string")
-    return false;
-  try {
-    const url = new URL(value);
-    return url.protocol === "https:" && url.hostname === "github.com";
-  } catch {
-    return false;
-  }
-}
-function githubEvent(value) {
-  const item = record(value);
-  if (!item || item.type !== "pull-request" && item.type !== "issue" || typeof item.actor !== "string" || typeof item.title !== "string" || !githubUrl(item.url)) {
-    return false;
-  }
-  return item.type === "pull-request" && (item.action === "opened" || item.action === "closed" || item.action === "merged") || item.type === "issue" && (item.action === "opened" || item.action === "closed");
-}
-function daemonFact(value) {
-  const item = record(value);
-  const pullRequest = item?.pullRequest === void 0 ? void 0 : record(item.pullRequest);
-  if (!item || item.type !== "corner-complete" && item.type !== "checks-failing" && item.type !== "worktree-cleaned" && item.type !== "corner-open" || typeof item.cornerId !== "string" || !UUID.test(item.cornerId) || typeof item.objective !== "string" || !item.objective.trim() || item.outcome !== void 0 && item.outcome !== "landed" && item.outcome !== "abandoned" || !optionalString(item.name) || item.type === "corner-open" && (typeof item.name !== "string" || !item.name.trim()) || pullRequest !== void 0 && (!pullRequest || pullRequest.number !== void 0 && (!Number.isSafeInteger(pullRequest.number) || Number(pullRequest.number) <= 0) || !optionalString(pullRequest.title) || !githubUrl(pullRequest.url) || !optionalString(pullRequest.targetBranch)) || item.subgoals !== void 0 && (!Array.isArray(item.subgoals) || !item.subgoals.every((subgoal) => {
-    const entry = record(subgoal);
-    return Boolean(entry && typeof entry.step === "string" && entry.step.trim() && (entry.status === "pending" || entry.status === "in_progress" || entry.status === "completed"));
-  }))) {
-    return false;
-  }
-  return item.type !== "corner-complete" || item.outcome === "landed" || item.outcome === "abandoned";
-}
-function isRoomViewMessage(value) {
-  const item = record(value);
-  const reference = item?.reference === void 0 ? void 0 : record(item.reference);
-  const reply = item?.reply === void 0 ? void 0 : record(item.reply);
-  return Boolean(item && typeof item.id === "string" && HEX.test(item.id) && typeof item.text === "string" && integer3(item.createdAt) && identity(item.author) && (item.presentation === "message" || item.presentation === "system" || item.presentation === "activity" || item.presentation === "card") && (reference === void 0 || reference && typeof reference.channelId === "string" && UUID.test(reference.channelId) && reference.eventId === item.id && typeof reference.rootId === "string" && HEX.test(reference.rootId)) && (reply === void 0 || reply && typeof reply.channelId === "string" && UUID.test(reply.channelId) && typeof reply.eventId === "string" && HEX.test(reply.eventId) && typeof reply.rootId === "string" && HEX.test(reply.rootId)) && optionalString(item.liveTurnId) && optionalString(item.requestId) && (item.attachments === void 0 || Array.isArray(item.attachments) && item.attachments.every(attachment)) && (item.mentionPubkeys === void 0 || Array.isArray(item.mentionPubkeys) && item.mentionPubkeys.every((pubkey2) => typeof pubkey2 === "string" && HEX.test(pubkey2))) && (item.activity === void 0 || Array.isArray(item.activity) && item.activity.every(activity)) && (item.durableFact === void 0 || item.durableFact === "failure" || item.durableFact === "merge" || item.durableFact === "action") && (item.corner === void 0 || messageCorner(item.corner)) && (item.permission === void 0 || messagePermission(item.permission)) && (item.targetBranch === void 0 || targetBranch(item.targetBranch)) && (item.githubEvent === void 0 || githubEvent(item.githubEvent)) && (item.daemonFact === void 0 || daemonFact(item.daemonFact)));
-}
-function scopedMessage(value, roomId) {
-  return typeof roomId === "string" && isRoomViewMessage(value) && (value.reference === void 0 || value.reference.channelId === roomId) && (value.reply === void 0 || value.reply.channelId === roomId);
-}
-function watchFilters(value) {
-  return Array.isArray(value) && value.length <= 32 && value.every((candidate) => {
-    const filter = record(candidate);
-    if (!filter)
-      return false;
-    return Object.entries(filter).every(([key, entry]) => {
-      if (key === "kinds")
-        return Array.isArray(entry) && entry.every(integer3);
-      if (key === "authors" || key === "#h" || key === "#d" || key === "#p" || key === "#t") {
-        return Array.isArray(entry) && entry.every((item) => typeof item === "string");
-      }
-      return false;
-    });
-  });
-}
-function viewer(value) {
-  const item = record(value);
-  const permissions = record(item?.permissions);
-  return Boolean(item && identity(item.identity) && (item.role === "owner" || item.role === "admin" || item.role === "member") && permissions && typeof permissions.send === "boolean" && typeof permissions.manage === "boolean");
-}
-function directMessage(value) {
-  const item = record(value);
-  return Boolean(item && Array.isArray(item.participants) && item.participants.length === 2 && item.participants.every((pubkey2) => typeof pubkey2 === "string" && HEX.test(pubkey2)) && item.participants[0] < item.participants[1]);
-}
-function directMessageForViewer(value, viewerValue) {
-  const viewerItem = record(viewerValue);
-  const viewerIdentity = record(viewerItem?.identity);
-  return directMessage(value) && typeof viewerIdentity?.pubkey === "string" && value.participants.includes(viewerIdentity.pubkey);
-}
-function agentTurn(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.requestId === "string" && HEX.test(item.requestId) && typeof item.agentPubkey === "string" && HEX.test(item.agentPubkey) && (item.status === "working" || item.status === "complete" || item.status === "failed") && integer3(item.createdAt) && optionalString(item.generationId));
-}
-function workspace(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.id === "string" && UUID.test(item.id) && typeof item.name === "string" && optionalString(item.avatar) && (item.visibility === "public" || item.visibility === "invite-only") && (item.role === "owner" || item.role === "admin" || item.role === "member") && integer3(item.updatedAt));
-}
-function latest(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.id === "string" && HEX.test(item.id) && typeof item.text === "string" && integer3(item.createdAt) && identity(item.author));
-}
-function chat(value) {
-  const item = record(value);
-  return Boolean(item && header(item.room) && (item.latestMessage === void 0 || latest(item.latestMessage)) && integer3(item.memberCount) && integer3(item.cornerCount) && typeof item.unread === "boolean" && optionalString(item.repositoryName) && (item.agentState === void 0 || item.agentState === "needs-you" || item.agentState === "working"));
-}
-function corner(value) {
-  const item = record(value);
-  return Boolean(item && header(item.corner) && cornerLifecycle(item.lifecycle) && (item.status === "open" || item.status === "working" || item.status === "waiting" || item.status === "idle" || item.status === "concluded" || item.status === "closed") && (item.statusAt === void 0 || integer3(item.statusAt)) && (item.reason === void 0 || item.reason === "review" || item.reason === "question" || item.reason === "failure") && (item.agent === void 0 || identity(item.agent)) && (item.latestMessage === void 0 || latest(item.latestMessage)));
-}
-function cornerLifecycle(value) {
-  const item = record(value);
-  const pr = item?.pr === void 0 ? void 0 : record(item.pr);
-  return Boolean(item && (item.lifecycle === "working" || item.lifecycle === "in-review" || item.lifecycle === "unknown" || item.lifecycle === "done") && (item.checks === "passing" || item.checks === "failing" || item.checks === "pending" || item.checks === "unknown") && optionalString(item.branch) && (item.outcome === void 0 || item.outcome === "landed" || item.outcome === "abandoned") && optionalString(item.reason) && (pr === void 0 || pr && integer3(pr.number) && pr.number > 0 && githubUrl(pr.url) && typeof pr.title === "string" && pr.title.length > 0 && typeof pr.targetBranch === "string" && pr.targetBranch.length > 0 && typeof pr.headSha === "string" && /^[0-9a-f]{40}$/i.test(pr.headSha) && optionalString(pr.mergedAt) && optionalString(pr.mergedBy)));
-}
-function repository(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.key === "string" && item.key.length > 0 && typeof item.name === "string" && item.name.length > 0 && typeof item.remote === "string" && item.remote.length > 0 && typeof item.targetBranch === "string" && item.targetBranch.length > 0 && integer3(item.updatedAt) && (item.githubInstallationId === void 0 || integer3(item.githubInstallationId)) && typeof item.githubEventsEnabled === "boolean");
-}
-function repositoryResolution(value) {
-  return value === "repository" || value === "none" || value === "unverified";
-}
-function modelSelection(value) {
-  const item = record(value);
-  return Boolean(item && optionalString(item.model) && optionalString(item.effort));
-}
-function modelOption(value) {
-  const item = record(value);
-  return Boolean(item && typeof item.id === "string" && item.id.length > 0 && typeof item.category === "string" && item.category.length > 0 && optionalString(item.currentValue) && Array.isArray(item.options) && item.options.every((candidate) => {
-    const option = record(candidate);
-    return Boolean(option && typeof option.id === "string" && option.id.length > 0 && optionalString(option.name));
-  }));
-}
-function isRoomView(value) {
-  const item = record(value);
-  return Boolean(item && header(item.room) && Array.isArray(item.messages) && item.messages.length <= ROOM_VIEW_MESSAGE_LIMIT && item.messages.every((candidate) => scopedMessage(candidate, record(item.room)?.id)) && Array.isArray(item.latestAgentTurns) && item.latestAgentTurns.length <= ROOM_VIEW_AGENT_LIMIT && item.latestAgentTurns.every(agentTurn) && Array.isArray(item.members) && item.members.length <= ROOM_VIEW_MEMBER_LIMIT && item.members.every(member) && viewer(item.viewer) && (item.directMessage === void 0 || directMessageForViewer(item.directMessage, item.viewer)) && (item.parent === void 0 || header(item.parent)) && (item.briefing === void 0 || Array.isArray(item.briefing) && item.briefing.length <= ROOM_VIEW_BRIEFING_LIMIT && item.briefing.every(isRoomViewMessage)) && (item.cornerPlan === void 0 || activity({ kind: "output", title: "Plan", plan: item.cornerPlan })) && Array.isArray(item.corners) && item.corners.every(corner) && (item.repository === void 0 || repository(item.repository)) && repositoryResolution(item.repositoryResolution) && (item.cornerLifecycle === void 0 || cornerLifecycle(item.cornerLifecycle)) && watchFilters(item.watchFilters));
-}
-function isRoomHistoryView(value) {
-  const item = record(value);
-  const before = item?.nextBefore === void 0 ? void 0 : record(item.nextBefore);
-  return Boolean(item && typeof item.roomId === "string" && UUID.test(item.roomId) && Array.isArray(item.messages) && item.messages.length <= ROOM_VIEW_MESSAGE_LIMIT && item.messages.every((candidate) => scopedMessage(candidate, item.roomId)) && (before === void 0 || before && integer3(before.createdAt) && typeof before.id === "string" && HEX.test(before.id)));
-}
-function isWorkspaceListView(value) {
-  const item = record(value);
-  return Boolean(item && Array.isArray(item.workspaces) && item.workspaces.length <= ROOM_VIEW_WORKSPACE_LIMIT && item.workspaces.every(workspace) && typeof item.truncated === "boolean" && identity(item.viewer) && watchFilters(item.watchFilters));
-}
-function isWorkspaceView(value) {
-  const item = record(value);
-  const managerSettings = item?.managerSettings === void 0 ? void 0 : record(item.managerSettings);
-  return Boolean(item && workspace(item.workspace) && integer3(record(item.workspace)?.createdAt) && optionalString(record(item.workspace)?.about) && (managerSettings === void 0 || managerSettings && (managerSettings.visibility === "public" || managerSettings.visibility === "invite-only")) && Array.isArray(item.members) && item.members.length <= ROOM_VIEW_MEMBER_LIMIT && item.members.every(member) && Array.isArray(item.agents) && item.agents.length <= ROOM_VIEW_AGENT_LIMIT && item.agents.every(member) && typeof item.membersTruncated === "boolean" && typeof item.agentsTruncated === "boolean" && viewer(item.viewer) && watchFilters(item.watchFilters));
-}
-function isChatListView(value) {
-  const item = record(value);
-  return Boolean(item && workspace(item.workspace) && Array.isArray(item.chats) && item.chats.length <= ROOM_VIEW_CHAT_LIMIT && item.chats.every(chat) && typeof item.truncated === "boolean" && identity(item.viewer) && watchFilters(item.watchFilters));
-}
-function isCornerListView(value) {
-  const item = record(value);
-  return Boolean(item && header(item.room) && Array.isArray(item.corners) && item.corners.every(corner) && viewer(item.viewer) && watchFilters(item.watchFilters));
-}
-function isAgentDetailView(value) {
-  const item = record(value);
-  const soul = item?.soul === void 0 ? void 0 : record(item.soul);
-  return Boolean(item && typeof item.workspaceId === "string" && UUID.test(item.workspaceId) && member(item.agent) && item.agent.identity.kind === "agent" && Array.isArray(item.catalog) && item.catalog.length <= 100 && item.catalog.every(modelOption) && (soul === void 0 || soul !== null && typeof soul.name === "string" && soul.name.length > 0 && typeof soul.instructions === "string" && soul.instructions.length > 0 && typeof soul.avatarSeed === "string" && soul.avatarSeed.length > 0 && (soul.avatar === void 0 || httpUrl(soul.avatar))) && (item.runtimeSelection === void 0 || modelSelection(item.runtimeSelection)) && (item.selected === void 0 || modelSelection(item.selected)) && watchFilters(item.watchFilters));
+  const events = await query(ctx, [
+    {
+      kinds: [KIND_COMMUNITY_INVITE],
+      authors: [ctx.identity.publicKey],
+      "#t": [TAG_COMMUNITY_INVITE],
+      limit: 500
+    }
+  ]);
+  const latestByToken = /* @__PURE__ */ new Map();
+  for (const event of events) {
+    const record2 = parseCommunityInvite(event);
+    if (!record2 || record2.communityId !== communityId)
+      continue;
+    const current = latestByToken.get(record2.tokenHash);
+    if (!current || record2.event.created_at > current.event.created_at || record2.event.created_at === current.event.created_at && record2.event.id > current.event.id) {
+      latestByToken.set(record2.tokenHash, record2);
+    }
+  }
+  const currentTime = now3();
+  return [...latestByToken.values()].filter((record2) => !record2.revoked && record2.expiresAt > currentTime).sort((a2, b) => b.event.created_at - a2.event.created_at);
 }
-function isInviteView(value) {
-  const item = record(value);
-  if (!item || typeof item.name !== "string" || !integer3(item.expiresAt) || !optionalString(item.avatar))
-    return false;
-  return Object.keys(item).every((key) => key === "name" || key === "avatar" || key === "expiresAt");
+async function revokeCommunityInvite(ctx, communityId, tokenHash) {
+  if (!/^[0-9a-f]{64}$/.test(tokenHash))
+    throw new Error("invalid invite");
+  const members = await communityMembers(ctx, communityId);
+  const actor = members.find((member2) => member2.pubkey === ctx.identity.publicKey);
+  if (actor?.role !== "owner" && actor?.role !== "admin") {
+    throw new Error("only a Workspace owner or admin can revoke invites");
+  }
+  const invite = (await listCommunityInvites(ctx, communityId)).find((record2) => record2.tokenHash === tokenHash);
+  if (!invite)
+    throw new Error("invite is no longer active");
+  const createdAt = Math.max(nextCommunityTimestamp(), invite.event.created_at + 1);
+  lastCommunityMutationTimestamp = createdAt;
+  const event = sign3(ctx, KIND_COMMUNITY_INVITE, [
+    ["h", communityId],
+    ["t", TAG_COMMUNITY_INVITE],
+    ["d", tokenHash],
+    [TAG_COMMUNITY, communityId],
+    ["expiration", String(Math.max(invite.expiresAt, createdAt + 1))],
+    ["role", "member"],
+    ["revoked", "true"]
+  ], "", createdAt);
+  await publishEvent(ctx.http, event);
 }
-function isAgentPairingClaimWireView(value) {
-  if (!value || typeof value !== "object")
-    return false;
-  const candidate = value;
-  return typeof candidate.workspaceId === "string" && UUID.test(candidate.workspaceId) && typeof candidate.pairedBy === "string" && HEX.test(candidate.pairedBy) && typeof candidate.joined === "boolean" && (candidate.attachedRoomIds === void 0 || Array.isArray(candidate.attachedRoomIds) && candidate.attachedRoomIds.every((roomId) => typeof roomId === "string" && UUID.test(roomId)));
+async function createInvite(ctx, communityId, options) {
+  const community = await getCommunity(ctx, communityId);
+  if (!community)
+    throw new Error(`community not found: ${communityId}`);
+  const members = await communityMembers(ctx, communityId);
+  if (!members.some((member2) => member2.pubkey === ctx.identity.publicKey)) {
+    throw new Error("only a community member can mint an invite");
+  }
+  const createdAt = now3();
+  const expiresAt = inviteExpiry(options, createdAt);
+  const token2 = randomToken();
+  const tokenHash = inviteTokenHash(token2);
+  const event = sign3(ctx, KIND_COMMUNITY_INVITE, [
+    ["h", communityId],
+    ["t", TAG_COMMUNITY_INVITE],
+    ["d", tokenHash],
+    [TAG_COMMUNITY, communityId],
+    ["expiration", String(expiresAt)],
+    ["role", "member"]
+  ], "", createdAt);
+  await publishEvent(ctx.http, event);
+  return {
+    token: token2,
+    tokenHash,
+    communityId,
+    expiresAt,
+    mintedBy: ctx.identity.publicKey,
+    event
+  };
 }
-function isAgentPairingAbandonView(value) {
-  return Boolean(value) && typeof value === "object" && typeof value.abandoned === "boolean";
+async function redeemInvite(ctx, token2) {
+  if (!token2 || token2.length > 512)
+    throw new Error("invalid invite token");
+  const tokenHash = inviteTokenHash(token2);
+  const invite = await findCommunityInvite(ctx.http, tokenHash, ctx.identity.publicKey);
+  if (!invite)
+    throw new Error("invalid invite token");
+  const members = await communityMembers(ctx, invite.communityId);
+  if (!members.some((member2) => member2.pubkey === invite.mintedBy)) {
+    throw new Error("invite minter is not a community member");
+  }
+  if ((await getChannelMetadata(ctx, invite.communityId))?.archived) {
+    throw archivedWorkspaceError();
+  }
+  if (members.some((member2) => member2.pubkey === ctx.identity.publicKey)) {
+    await assertCommunityMemberInChannels(ctx, invite.communityId, ctx.identity.publicKey);
+    return {
+      communityId: invite.communityId,
+      mintedBy: invite.mintedBy,
+      expiresAt: invite.expiresAt,
+      joined: false,
+      alreadyMember: true
+    };
+  }
+  if (invite.expiresAt <= now3())
+    throw new Error("invite has expired");
+  try {
+    await setMemberRole(ctx, invite.communityId, ctx.identity.publicKey, "member", {
+      extraTags: [
+        ["invite", tokenHash],
+        [TAG_COMMUNITY, invite.communityId]
+      ]
+    });
+  } catch (error) {
+    if (isArchivedChannelError(error))
+      throw archivedWorkspaceError();
+    throw error;
+  }
+  await waitUntilMember(ctx, invite.communityId, ctx.identity.publicKey);
+  await assertCommunityMemberInChannels(ctx, invite.communityId, ctx.identity.publicKey);
+  return {
+    communityId: invite.communityId,
+    mintedBy: invite.mintedBy,
+    expiresAt: invite.expiresAt,
+    joined: true,
+    alreadyMember: false
+  };
 }
 
 // packages/buzz-client/dist/room-view.js
+init_dist();
 var AGENT_PAIRING_ROOM_ROLLBACK_CAPABILITY = "pairing-room-rollback";
 var RoomViewHttpError = class extends Error {
   status;
@@ -28354,7 +28373,6 @@ function personHandle(name, pubkey2) {
 
 // packages/buzz-client/dist/agent.js
 var DEFAULT_PAIRING_TTL_SECONDS = 10 * 60;
-var PAIRING_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
 var KIND_NOSTR_PROFILE = 0;
 var lastSoulTimestamp = 0;
 function now4() {
@@ -28370,10 +28388,7 @@ function optionalHttpUrl(value) {
 function randomPairingCode() {
   const bytes = new Uint8Array(8);
   globalThis.crypto.getRandomValues(bytes);
-  let value = "";
-  for (const byte of bytes)
-    value += PAIRING_ALPHABET[byte % PAIRING_ALPHABET.length];
-  return `BUZZ-${value.slice(0, 4)}-${value.slice(4)}`;
+  return createAgentPairingCode(bytes);
 }
 function pairingExpiry(expiresInSeconds, createdAt) {
   if (!Number.isSafeInteger(expiresInSeconds) || expiresInSeconds < 60 || expiresInSeconds > 3600) {
@@ -28488,7 +28503,7 @@ async function createAgentRecord(ctx, communityId, options = {}, pairingHash) {
   await publishEvent(ctx.http, event);
   return parseAgent(event);
 }
-async function createAgentPairingCode(ctx, communityId, expiresInSeconds = DEFAULT_PAIRING_TTL_SECONDS) {
+async function createAgentPairingCode2(ctx, communityId, expiresInSeconds = DEFAULT_PAIRING_TTL_SECONDS) {
   const community = await getCommunity(ctx, communityId);
   if (!community)
     throw new Error(`community not found: ${communityId}`);
@@ -28553,8 +28568,8 @@ async function matchingAgentPairingRedemptions(ctx, tokenHash) {
   return events.filter((event) => tagValue(event, "pairing") === tokenHash);
 }
 async function redeemAgentPairingCode(ctx, rawCode, options = {}) {
-  const code = rawCode.trim().toUpperCase();
-  if (!/^BUZZ-[A-HJ-NP-Z2-9]{4}-[A-HJ-NP-Z2-9]{4}$/.test(code)) {
+  const code = normalizeAgentPairingCode(rawCode);
+  if (!code) {
     throw new Error("invalid agent pairing code");
   }
   const tokenHash = inviteTokenHash(code);
@@ -30659,7 +30674,7 @@ var BuzzClient = class {
     return attachAgentToChannel(this.ctx, channelId, agentPubkey, communityId);
   }
   createAgentPairingCode(communityId, expiresInSeconds) {
-    return createAgentPairingCode(this.ctx, communityId, expiresInSeconds);
+    return createAgentPairingCode2(this.ctx, communityId, expiresInSeconds);
   }
   redeemAgentPairingCode(code, options) {
     return redeemAgentPairingCode(this.ctx, code, options);
@@ -43531,6 +43546,12 @@ function isRepositoryMutationRequest(content) {
   }
   return new RegExp(String.raw`^${REQUEST_LEAD}(?:open|create|launch|start)\s+(?:up\s+)?(?:a\s+|the\s+)?(?:new\s+)?(?:edit\s+)?corner\b`, "i").test(normalized);
 }
+function isExplicitCornerOpenRequest(content) {
+  const normalized = normalizeRoomRequest(content);
+  const directCornerCommand = new RegExp(String.raw`^${REQUEST_LEAD}(?:open|create|launch|start)\s+(?:up\s+)?(?:a\s+|the\s+)?(?:new\s+)?corner\b`, "i");
+  const startWorkInCornerCommand = new RegExp(String.raw`^${REQUEST_LEAD}start\s+(?:(?:the|this|that)\s+)?(?:work|working)\b.{0,200}\b(?:in|inside|within)\s+(?:a\s+|the\s+)?(?:new\s+)?corner\b`, "i");
+  return directCornerCommand.test(normalized) || startWorkInCornerCommand.test(normalized);
+}
 function isNonRetryableRelayError(error) {
   const failure = asRelayPublishError(error);
   return !failure.retryable && (failure.status !== void 0 || failure.kind === "CLIENT_VALIDATION" || failure.kind === "NEGATIVE_ACK");
@@ -43664,11 +43685,7 @@ function isChannelAddressedMessage(event, agentPubkey, roomParticipants = [], in
 function isChannelWorkIntent(event, agentPubkey, roomParticipants = [], indexedMessages = []) {
   if (!isChannelAddressedMessage(event, agentPubkey, roomParticipants, indexedMessages))
     return false;
-  const content = event.content.normalize("NFKC").replace(/\s+/g, " ").trim().replace(/^@[\p{L}\p{N}_-]+[,:]?\s+/u, "");
-  const requestLead = String.raw`(?:(?:please|kindly)\s+|(?:can|could|would|will)\s+you\s+|i\s+(?:want|need)\s+you\s+to\s+|i(?:['’]d| would)\s+like\s+you\s+to\s+)?`;
-  const directCornerCommand = new RegExp(String.raw`^${requestLead}(?:open|create|launch|start)\s+(?:up\s+)?(?:a\s+|the\s+)?(?:new\s+)?corner\b`, "i");
-  const startWorkInCornerCommand = new RegExp(String.raw`^${requestLead}start\s+(?:(?:the|this|that)\s+)?(?:work|working)\b.{0,200}\b(?:in|inside|within)\s+(?:a\s+|the\s+)?(?:new\s+)?corner\b`, "i");
-  return directCornerCommand.test(content) || startWorkInCornerCommand.test(content);
+  return isExplicitCornerOpenRequest(event.content);
 }
 async function createAgentSubchannel(agentIdentity, parentChannelId, name, openingHumanPubkey, communityId, task, extraTags = []) {
   if (!openingHumanPubkey || openingHumanPubkey === agentIdentity.publicKey) {
@@ -47272,6 +47289,18 @@ Deliver artifacts from this corner; there is no branch to land.`;
       const named = editPolicy === "named-repository" ? namedRepositoryTargetFromRoomRequest(request.content) : void 0;
       if (!named) {
         console.log(`[body] Room ${tlcChannelId} has no repository target for corner work`);
+        const text2 = "This Room has no repository yet - bind one in Room settings.";
+        if (this.daemonApi) {
+          await this.daemonApi.execute("postRoomMessage", {
+            roomId: tlcChannelId,
+            requestId: request.eventId,
+            text: text2,
+            presentation: "message"
+          });
+        } else {
+          const event = await this.durableState.reserveReply(tlcChannelId, request.eventId, buildAgentMessage(tlcChannelId, this.agentIdentity, text2, request.eventId, [], [["request", request.eventId]], request.replyRootId));
+          await publishEvent2(event, this.agentIdentity);
+        }
         return { status: "handled", outcome: { openedCorner: false, producedReply: true } };
       }
     }
@@ -47718,6 +47747,13 @@ Deliver artifacts from this corner; there is no branch to land.`;
   }
   /** Human decision path retained for a named repository outside the Room binding. */
   async cornerOpenAudience(roomId, requesterPubkey) {
+    if (this.daemonApi) {
+      const authority = await this.daemonApi.execute("getRoomAuthority", {
+        roomId,
+        principalId: requesterPubkey
+      });
+      return authority.member && authority.principalKind === "human" ? [requesterPubkey] : [];
+    }
     const members = await listMembers(this.agentClientContext(), roomId);
     const candidates = members.filter((member2) => member2.pubkey === requesterPubkey || member2.role === "admin" || member2.role === "owner");
     const checked = await Promise.all(candidates.map(async (member2) => ({
@@ -47756,9 +47792,10 @@ Deliver artifacts from this corner; there is no branch to land.`;
           message: published.message
         };
       }
-      const permissionId = randomUUID5();
+      const permissionId = this.daemonApi ? createHash10("sha256").update(`corner-permission\0${input.roomId}\0${input.request.eventId}`).digest("hex") : randomUUID5();
       const repository2 = input.roomRepo ? this.repoId(input.roomRepo) : "repo-less";
-      const audience = await this.cornerOpenAudience(input.roomId, input.request.authorPubkey);
+      const principalId = input.request.delegation?.rootHumanPubkey ?? input.request.authorPubkey;
+      const audience = await this.cornerOpenAudience(input.roomId, principalId);
       if (audience.length === 0) {
         throw new AgentToolKnownFailure("approval_audience_unavailable", "No eligible human is available to decide this corner request.", true);
       }
@@ -47766,7 +47803,18 @@ Deliver artifacts from this corner; there is no branch to land.`;
       const requester = requesterAttribution?.handle ?? fallbackPersonName(input.request.authorPubkey);
       const agent = (await this.roomAuthorAttributions(input.roomId, [this.agentIdentity.publicKey])).get(this.agentIdentity.publicKey)?.name ?? fallbackAgentName(this.agentIdentity.publicKey);
       const message2 = `@${requester.replace(/^@/, "")} asked ${agent} to open a corner for: ` + input.objective;
-      const card = buildControlMessage("permission-request", input.roomId, this.agentIdentity, message2, [
+      const card = this.daemonApi ? await this.daemonApi.execute("postPermissionRequest", {
+        roomId: input.roomId,
+        principalId,
+        permissionId,
+        requestId: input.request.eventId,
+        scope: {
+          type: "operation.execute",
+          connectorId: input.tool,
+          target: repository2,
+          payloadDigest: createHash10("sha256").update(input.objective).digest("hex")
+        }
+      }) : buildControlMessage("permission-request", input.roomId, this.agentIdentity, message2, [
         ["t", WRITE_PERMISSION_REQUEST_TAG],
         ["permission", permissionId],
         ["request", input.request.eventId],
@@ -47779,7 +47827,8 @@ Deliver artifacts from this corner; there is no branch to land.`;
         ...this.delegatedReplyTags(input.request),
         ...audience.map((pubkey2) => ["p", pubkey2])
       ]);
-      await publishEvent2(card, this.agentIdentity);
+      if (!this.daemonApi)
+        await publishEvent2(card, this.agentIdentity);
       void this.finishCornerApproval({ ...input, permissionId, repository: repository2, audience }).catch((error) => console.error("[body] corner approval settlement failed:", error));
       return { request_id: permissionId, event_id: card.id, message: message2 };
     })();
@@ -47792,6 +47841,8 @@ Deliver artifacts from this corner; there is no branch to land.`;
    * the signed pending card already authored for this exact member request.
    */
   async publishedCornerApproval(input) {
+    if (this.daemonApi)
+      return void 0;
     const repository2 = input.roomRepo ? this.repoId(input.roomRepo) : "repo-less";
     const events = await this.agentRelay.queryEvents([
       {
@@ -47811,9 +47862,11 @@ Deliver artifacts from this corner; there is no branch to land.`;
     return { permissionId, eventId: event.id, message: event.content, repository: repository2, audience };
   }
   async finishCornerApproval(input) {
+    const principalId = input.request.delegation?.rootHumanPubkey ?? input.request.authorPubkey;
     let deciderPubkey;
     const decision = await this.waitForWritePermissionDecision(input.roomId, input.permissionId, input.request.eventId, input.repository, 10 * 6e4, {
       allowedResponders: new Set(input.audience),
+      principalId,
       captureDecider: (pubkey2) => {
         deciderPubkey = pubkey2;
       }
@@ -47823,44 +47876,61 @@ Deliver artifacts from this corner; there is no branch to land.`;
     if (decision === "allow") {
       try {
         const info = await this.openSubchannelForRequest(input.roomId, input.roomRepo, input.objective, input.request, { objective: input.objective, suppressOpenCard: true });
-        await this.postWritePermissionStatus(input.roomId, input.permissionId, input.request.eventId, input.tool, input.repository, "allowed", `Corner approved by @${deciderHandle.replace(/^@/, "")} \u2014 view \u2192`, info.subchannelId, deciderPubkey, input.request.authorPubkey);
+        await this.postWritePermissionStatus(input.roomId, input.permissionId, input.request.eventId, input.tool, input.repository, "allowed", `Corner approved by @${deciderHandle.replace(/^@/, "")} \u2014 view \u2192`, info.subchannelId, deciderPubkey, principalId);
         this.startCornerTaskOnce(info, input.objective, cornerOpenTaskPrompt(info.taskDescription, input.objective), {
           requestId: input.request.eventId,
           originalRequestId: input.request.eventId,
           cause: "corner-opening"
         });
       } catch (error) {
-        await this.postWritePermissionStatus(input.roomId, input.permissionId, input.request.eventId, input.tool, input.repository, "failed", `Corner approved by @${deciderHandle.replace(/^@/, "")}, but it could not start: ${this.safePermissionFailure(error)}`, void 0, deciderPubkey, input.request.authorPubkey);
+        await this.postWritePermissionStatus(input.roomId, input.permissionId, input.request.eventId, input.tool, input.repository, "failed", `Corner approved by @${deciderHandle.replace(/^@/, "")}, but it could not start: ${this.safePermissionFailure(error)}`, void 0, deciderPubkey, principalId);
       }
       return;
     }
-    await this.postWritePermissionStatus(input.roomId, input.permissionId, input.request.eventId, input.tool, input.repository, decision === "deny" ? "denied" : "expired", decision === "deny" ? `Corner denied by @${deciderHandle.replace(/^@/, "")}.` : "The corner request expired without a decision.", void 0, deciderPubkey, input.request.authorPubkey);
+    await this.postWritePermissionStatus(input.roomId, input.permissionId, input.request.eventId, input.tool, input.repository, decision === "deny" ? "denied" : "expired", decision === "deny" ? `Corner denied by @${deciderHandle.replace(/^@/, "")}.` : "The corner request expired without a decision.", void 0, deciderPubkey, principalId);
   }
   async requestEditCornerApproval(input) {
     const { tlcChannelId, turn, repository: repository2, tool, objective, namedTarget, pendingMessage } = input;
-    const permissionId = randomUUID5();
-    const audience = await this.cornerOpenAudience(tlcChannelId, turn.request.authorPubkey);
+    const permissionId = this.daemonApi ? createHash10("sha256").update(`edit-permission\0${tlcChannelId}\0${turn.request.eventId}`).digest("hex") : randomUUID5();
+    const principalId = turn.request.delegation?.rootHumanPubkey ?? turn.request.authorPubkey;
+    const audience = await this.cornerOpenAudience(tlcChannelId, principalId);
     if (audience.length === 0) {
       throw new AgentToolKnownFailure("approval_audience_unavailable", "No eligible human is available to decide this corner request.", true);
     }
-    const requesterAttribution = turn.request.delegation ? (await this.roomAuthorAttributions(tlcChannelId, [turn.request.authorPubkey])).get(turn.request.authorPubkey) : turn.request.authorAttribution;
-    const requester = requesterAttribution?.handle ?? fallbackPersonName(turn.request.authorPubkey);
-    await postControlMessage("permission-request", tlcChannelId, this.agentIdentity, `@${requester.replace(/^@/, "")} asked ${this.agentIdentity.name || "the agent"} to open a corner for: ${objective || pendingMessage}`, [
-      ["t", WRITE_PERMISSION_REQUEST_TAG],
-      ["permission", permissionId],
-      ["request", turn.request.eventId],
-      ["requester", turn.request.authorPubkey],
-      ["agent", this.agentIdentity.publicKey],
-      ...audience.map((pubkey2) => ["p", pubkey2]),
-      ["tool", tool],
-      ["repo", repository2],
-      ["objective", objective],
-      ["status", "pending"],
-      ...this.delegatedReplyTags(turn.request)
-    ]);
+    const requesterAttribution = turn.request.delegation ? (await this.roomAuthorAttributions(tlcChannelId, [principalId])).get(principalId) : turn.request.authorAttribution;
+    const requester = requesterAttribution?.handle ?? fallbackPersonName(principalId);
+    if (this.daemonApi) {
+      await this.daemonApi.execute("postPermissionRequest", {
+        roomId: tlcChannelId,
+        principalId,
+        permissionId,
+        requestId: turn.request.eventId,
+        scope: {
+          type: "operation.execute",
+          connectorId: tool,
+          target: repository2,
+          payloadDigest: createHash10("sha256").update(objective || pendingMessage).digest("hex")
+        }
+      });
+    } else {
+      await postControlMessage("permission-request", tlcChannelId, this.agentIdentity, `@${requester.replace(/^@/, "")} asked ${this.agentIdentity.name || "the agent"} to open a corner for: ${objective || pendingMessage}`, [
+        ["t", WRITE_PERMISSION_REQUEST_TAG],
+        ["permission", permissionId],
+        ["request", turn.request.eventId],
+        ["requester", turn.request.authorPubkey],
+        ["agent", this.agentIdentity.publicKey],
+        ...audience.map((pubkey2) => ["p", pubkey2]),
+        ["tool", tool],
+        ["repo", repository2],
+        ["objective", objective],
+        ["status", "pending"],
+        ...this.delegatedReplyTags(turn.request)
+      ]);
+    }
     let deciderPubkey;
     const decision = await this.waitForWritePermissionDecision(tlcChannelId, permissionId, turn.request.eventId, repository2, 10 * 6e4, {
       allowedResponders: new Set(audience),
+      principalId,
       captureDecider: (pubkey2) => {
         deciderPubkey = pubkey2;
       }
@@ -47876,7 +47946,7 @@ Deliver artifacts from this corner; there is no branch to land.`;
           suppressOpenCard: true
         }) : await this.openSubchannel(tlcChannelId, boundRepo, objective, { ...turn.request, content: objective }, { objective, suppressOpenCard: true });
         turn.transitionedToCorner = true;
-        await this.postWritePermissionStatus(tlcChannelId, permissionId, turn.request.eventId, tool, repository2, "allowed", `Corner approved by @${deciderHandle.replace(/^@/, "")} \u2014 view \u2192`, info.subchannelId, deciderPubkey, turn.request.authorPubkey).catch((statusError) => console.error("[body] failed to publish direct corner navigation:", statusError));
+        await this.postWritePermissionStatus(tlcChannelId, permissionId, turn.request.eventId, tool, repository2, "allowed", `Corner approved by @${deciderHandle.replace(/^@/, "")} \u2014 view \u2192`, info.subchannelId, deciderPubkey, principalId).catch((statusError) => console.error("[body] failed to publish direct corner navigation:", statusError));
         this.startCornerTaskOnce(info, objective, cornerOpenTaskPrompt(info.taskDescription, objective), {
           requestId: turn.request.eventId,
           originalRequestId: turn.request.eventId,
@@ -47889,10 +47959,10 @@ Deliver artifacts from this corner; there is no branch to land.`;
       return;
     }
     if (decision === "deny") {
-      await this.postWritePermissionStatus(tlcChannelId, permissionId, turn.request.eventId, tool, repository2, "denied", `Corner denied by @${deciderHandle.replace(/^@/, "")}.`, void 0, deciderPubkey, turn.request.authorPubkey);
+      await this.postWritePermissionStatus(tlcChannelId, permissionId, turn.request.eventId, tool, repository2, "denied", `Corner denied by @${deciderHandle.replace(/^@/, "")}.`, void 0, deciderPubkey, principalId);
       return;
     }
-    await this.postWritePermissionStatus(tlcChannelId, permissionId, turn.request.eventId, tool, repository2, "expired", `The edit request for ${repository2} expired. The Agent remains read-only.`, void 0, void 0, turn.request.authorPubkey);
+    await this.postWritePermissionStatus(tlcChannelId, permissionId, turn.request.eventId, tool, repository2, "expired", `The edit request for ${repository2} expired. The Agent remains read-only.`, void 0, void 0, principalId);
   }
   permissionToolLabel(permission) {
     const title = permission.toolCall?.title?.trim();
@@ -48203,6 +48273,26 @@ Deliver artifacts from this corner; there is no branch to land.`;
     return summarizeGitFailure(raw).replace(/https?:\/\/\S+/gi, "the configured remote").replace(/(?:[A-Za-z0-9._~+/=-]+):(?:[A-Za-z0-9._~+/=-]+)@/g, "[credentials]@").replace(/\s+/g, " ").trim().slice(0, 240) || "the repository could not be cloned or accessed";
   }
   postWritePermissionStatus(tlcChannelId, permissionId, requestId, tool, repository2, status, message2, subchannelId, deciderPubkey, requesterPubkey) {
+    if (this.daemonApi) {
+      const publishStatus = async () => {
+        if (requesterPubkey && (status === "allowed" || status === "failed" || status === "expired")) {
+          await this.daemonApi.execute("postPermissionExecution", {
+            roomId: tlcChannelId,
+            principalId: requesterPubkey,
+            permissionId,
+            status: status === "allowed" ? "succeeded" : "failed",
+            result: message2
+          });
+        }
+        await this.daemonApi.execute("postRoomMessage", {
+          roomId: tlcChannelId,
+          requestId,
+          text: message2,
+          presentation: "system"
+        });
+      };
+      return publishStatus();
+    }
     return postControlMessage("permission-status", tlcChannelId, this.agentIdentity, message2, [
       ["t", WRITE_PERMISSION_REQUEST_TAG],
       ["permission", permissionId],
@@ -48227,6 +48317,53 @@ Deliver artifacts from this corner; there is no branch to land.`;
    * pending decision until timeout.
    */
   async waitForWritePermissionDecision(tlcChannelId, permissionId, requestId, repository2, timeoutMs = 10 * 6e4, options = {}) {
+    if (this.daemonApi) {
+      if (!options.principalId)
+        throw new Error("monolith permission wait requires a principal");
+      const deadline2 = Date.now() + timeoutMs;
+      return new Promise((resolvePromise, rejectPromise) => {
+        let settled = false;
+        let polling = false;
+        const finish = (result) => {
+          if (settled)
+            return;
+          settled = true;
+          clearTimeout(timer);
+          clearInterval(backstop);
+          resolvePromise(result);
+        };
+        const pollOnce = async () => {
+          if (settled || polling)
+            return;
+          polling = true;
+          try {
+            const authority = await this.daemonApi.execute("getPermissionAuthority", {
+              roomId: tlcChannelId,
+              principalId: options.principalId,
+              permissionId
+            });
+            if (authority.status === "authorized")
+              finish("allow");
+            if (authority.status === "denied")
+              finish("deny");
+          } catch (error) {
+            if (!isTransientPermissionPollError(error)) {
+              settled = true;
+              clearTimeout(timer);
+              clearInterval(backstop);
+              rejectPromise(error);
+            }
+          } finally {
+            polling = false;
+          }
+        };
+        const timer = setTimeout(() => finish("timeout"), Math.max(0, deadline2 - Date.now()));
+        timer.unref?.();
+        const backstop = setInterval(() => void pollOnce(), WRITE_PERMISSION_BACKSTOP_POLL_MS);
+        backstop.unref?.();
+        void pollOnce();
+      });
+    }
     const startedAt = Math.floor(Date.now() / 1e3) - 1;
     const deadline = Date.now() + timeoutMs;
     const matchingDecision = async (event) => {
@@ -48819,72 +48956,88 @@ Deliver artifacts from this corner; there is no branch to land.`;
   async runMonolithRoomLoop(channelId, boundRepo, editPolicy, opts) {
     const api = this.daemonApi;
     let cursor3 = await this.durableState.daemonInboxCursor(channelId);
-    await api.execute("postAgentPresence", {
-      agentId: this.agentIdentity.publicKey,
-      roomId: channelId,
-      status: this.config.modelUnavailable ? "offline" : "online"
-    });
-    if (!cursor3) {
-      const activation = await api.execute("getRoomInbox", {
+    const availableStatus = this.config.modelUnavailable ? "offline" : "online";
+    const postPresence = async (status) => {
+      await api.execute("postAgentPresence", {
+        agentId: this.agentIdentity.publicKey,
         roomId: channelId,
-        startAtLatest: true
+        status
       });
-      if (activation.cursor) {
-        cursor3 = activation.cursor;
-        await this.durableState.setDaemonInboxCursor(channelId, cursor3);
-      }
-    }
-    while (!opts.signal?.aborted && !this.disposed) {
-      try {
-        const inbox = await api.execute("getRoomInbox", {
+      this.onRoomPresence?.(channelId, status);
+    };
+    await postPresence(availableStatus);
+    let presenceTail = Promise.resolve();
+    const heartbeat = setInterval(() => {
+      presenceTail = presenceTail.then(() => postPresence(availableStatus)).catch((error) => console.error(`[body] monolith Room ${channelId} presence heartbeat failed:`, error));
+    }, AGENT_PRESENCE_HEARTBEAT_MS);
+    heartbeat.unref?.();
+    try {
+      if (!cursor3) {
+        const activation = await api.execute("getRoomInbox", {
           roomId: channelId,
-          ...cursor3 ? { after: cursor3 } : {},
-          limit: 200
+          startAtLatest: true
         });
-        for (const item of inbox.items) {
-          if (item.authorId === this.agentIdentity.publicKey || item.type !== "message" || item.mentionIds.length > 0 && !item.mentionIds.includes(this.agentIdentity.publicKey) || this.processedRequestIds.has(item.id))
-            continue;
-          const authority = await api.execute("getRoomAuthority", {
+        if (activation.cursor) {
+          cursor3 = activation.cursor;
+          await this.durableState.setDaemonInboxCursor(channelId, cursor3);
+        }
+      }
+      while (!opts.signal?.aborted && !this.disposed) {
+        try {
+          const inbox = await api.execute("getRoomInbox", {
             roomId: channelId,
-            principalId: item.authorId
+            ...cursor3 ? { after: cursor3 } : {},
+            limit: 200
           });
-          if (!authority.member || authority.principalKind !== "human")
-            continue;
-          if (!this.senderAccessAllowed(item.authorId))
-            continue;
-          const attachments = item.attachments.map((attachment2) => ({
-            url: attachment2.url,
-            name: attachment2.name ?? "attachment",
-            mimeType: attachment2.mimeType ?? "application/octet-stream",
-            size: attachment2.size ?? 0,
-            ...attachment2.thumbnailUrl ? { thumbnailUrl: attachment2.thumbnailUrl } : {}
-          }));
-          const request = {
-            eventId: item.id,
-            authorPubkey: item.authorId,
-            content: item.body.trim(),
-            attachments,
-            createdAt: item.createdAt,
-            ...item.rootMessageId ? { replyRootId: item.rootMessageId } : {}
-          };
-          const workIntent = !isReadOnlyInformationRequest(item.body);
-          const outcome = await this.replyInRoom(channelId, boundRepo, request, editPolicy === "repository" && workIntent, editPolicy, void 0, workIntent);
-          if (outcome.producedReply)
-            this.processedRequestIds.add(item.id);
-        }
-        if (inbox.cursor) {
-          cursor3 = inbox.cursor;
-          await this.durableState.setDaemonInboxCursor(channelId, cursor3);
+          for (const item of inbox.items) {
+            if (item.authorId === this.agentIdentity.publicKey || item.type !== "message" || item.mentionIds.length > 0 && !item.mentionIds.includes(this.agentIdentity.publicKey) || this.processedRequestIds.has(item.id))
+              continue;
+            const authority = await api.execute("getRoomAuthority", {
+              roomId: channelId,
+              principalId: item.authorId
+            });
+            if (!authority.member || authority.principalKind !== "human")
+              continue;
+            if (!this.senderAccessAllowed(item.authorId))
+              continue;
+            const attachments = item.attachments.map((attachment2) => ({
+              url: attachment2.url,
+              name: attachment2.name ?? "attachment",
+              mimeType: attachment2.mimeType ?? "application/octet-stream",
+              size: attachment2.size ?? 0,
+              ...attachment2.thumbnailUrl ? { thumbnailUrl: attachment2.thumbnailUrl } : {}
+            }));
+            const request = {
+              eventId: item.id,
+              authorPubkey: item.authorId,
+              content: item.body.trim(),
+              attachments,
+              createdAt: item.createdAt,
+              ...item.rootMessageId ? { replyRootId: item.rootMessageId } : {}
+            };
+            const workIntent = isExplicitCornerOpenRequest(item.body);
+            const outcome = await this.replyInRoom(channelId, boundRepo, request, workIntent, editPolicy, void 0, workIntent);
+            if (outcome.producedReply)
+              this.processedRequestIds.add(item.id);
+          }
+          if (inbox.cursor) {
+            cursor3 = inbox.cursor;
+            await this.durableState.setDaemonInboxCursor(channelId, cursor3);
+          }
+          this.onRoomPollSuccess?.(channelId);
+          await this.waitForPoll(opts.pollMs ?? 1e3, opts.signal);
+        } catch (error) {
+          if (opts.signal?.aborted || this.disposed)
+            break;
+          this.onRoomPollFailure?.(channelId, 1e3);
+          console.error(`[body] monolith Room ${channelId} poll failed:`, error);
+          await this.waitForPoll(1e3, opts.signal);
         }
-        this.onRoomPollSuccess?.(channelId);
-        await this.waitForPoll(opts.pollMs ?? 1e3, opts.signal);
-      } catch (error) {
-        if (opts.signal?.aborted || this.disposed)
-          break;
-        this.onRoomPollFailure?.(channelId, 1e3);
-        console.error(`[body] monolith Room ${channelId} poll failed:`, error);
-        await this.waitForPoll(1e3, opts.signal);
       }
+    } finally {
+      clearInterval(heartbeat);
+      await presenceTail;
+      await postPresence("offline").catch((error) => console.error(`[body] monolith Room ${channelId} shutdown presence failed:`, error));
     }
   }
   /** One long-running body loop owns request discovery, steering, and merge closure. */
@@ -51176,6 +51329,55 @@ async function assertRuntimeStorageWritable(supervisorRoot, agentPubkey) {
     await rm7(probe, { force: true }).catch(() => void 0);
   }
 }
+async function stageMonolithAgentRuntime(input) {
+  const supervisorRoot = input.supervisorRoot ? resolve28(input.supervisorRoot) : defaultSupervisorRoot(input.env);
+  const baseUrl = new URL(input.monolithBaseUrl).origin;
+  if (baseUrl !== input.monolithBaseUrl || !/^https?:$/.test(new URL(baseUrl).protocol)) {
+    throw new Error("monolith base URL must be an HTTP or HTTPS origin");
+  }
+  if (!/^bde_[A-Za-z0-9_-]{43}$/.test(input.daemonExchangeToken)) {
+    throw new Error("daemon exchange token is invalid");
+  }
+  const configPath = resolve28(runtimeDirectory(supervisorRoot, input.agentIdentity.publicKey), "runtime.json");
+  if (await agentRuntimeExists(supervisorRoot, input.agentIdentity.publicKey)) {
+    const existing = await readRuntimeRecord(configPath);
+    const transport = existing.transport;
+    const sameRuntime = existing.communityId === input.workspaceId && existing.pairedBy === input.pairedBy && existing.agent.publicKey === input.agentIdentity.publicKey && existing.agent.secretKeyHex === Buffer.from(input.agentIdentity.secretKey).toString("hex") && existing.body.publicKey === input.bodyIdentity.publicKey && transport?.kind === "monolith" && transport.baseUrl === baseUrl && ("daemonToken" in transport || transport.exchangeToken === input.daemonExchangeToken);
+    if (!sameRuntime) {
+      throw new Error(`agent identity ${input.agentIdentity.publicKey} already has another runtime`);
+    }
+    return { runtime: existing, configPath };
+  }
+  await assertRuntimeStorageWritable(supervisorRoot, input.agentIdentity.publicKey);
+  const runtime = {
+    version: 2,
+    communityId: input.workspaceId,
+    pairedBy: input.pairedBy,
+    agent: storeIdentity(input.agentIdentity, DEFAULT_AGENT_IDENTITY_NAME),
+    body: storeIdentity(input.bodyIdentity, DEFAULT_BODY_IDENTITY_NAME),
+    rooms: [],
+    supervisorRoot,
+    // Required only by legacy records. Monolith runtimes never construct a
+    // relay client, so retaining the server origin here cannot route traffic.
+    relayBaseUrl: baseUrl,
+    transport: {
+      kind: "monolith",
+      baseUrl,
+      exchangeToken: input.daemonExchangeToken
+    },
+    ...input.llmEnvFile ? { llmEnvFile: input.llmEnvFile } : {},
+    accessPolicy: DEFAULT_ACCESS_POLICY,
+    ...input.modelSelection?.model || input.modelSelection?.effort ? { modelSelection: input.modelSelection } : {},
+    agentKind: input.agentKind,
+    agentCommand: input.agentCommand,
+    agentArgs: [...input.agentArgs ?? []],
+    agentBinary: input.agentBinary,
+    mcpBinary: input.mcpBinary,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const writtenPath = await writeRuntimeRecord(runtime);
+  return { runtime, configPath: writtenPath };
+}
 async function writeRuntimePointer(gitCommonDir, agentPubkey, targetConfigPath) {
   const directory = runtimeDirectory(gitCommonDir, agentPubkey);
   const path = resolve28(directory, "runtime.json");
@@ -55703,33 +55905,49 @@ async function pairOneAgent(input) {
     throw error;
   }
 }
-async function completeDevicePairing(grant) {
-  const selectedAgent = await selectPairAgentCommand({
+async function completeDevicePairing(grant, options = {}) {
+  const selectedAgent = options.selectedAgent ?? await selectPairAgentCommand({
     explicitKind: grant.harness,
     env: process.env,
     cwd: process.cwd(),
     interactive: true,
     confirmInstall: async () => true
   });
-  const result = await pairOneAgent({
-    code: grant.pairingCode,
-    selectedAgent,
-    agentIdentity: identityFromKey(grant.agentSecretKey, grant.agentName),
-    bodyIdentity: identityFromKey(grant.bodySecretKey, DEFAULT_BODY_IDENTITY_NAME),
-    cwd: process.cwd(),
-    repo: null,
-    progressLabel: "Connecting agent\u2026",
-    progressDone: (pid) => `Connected (pid ${pid}).`,
+  const localConfig = options.localConfig ?? loadBodyConfig({
+    workspaceRoot: process.cwd(),
+    ...grant.llmEnvFile ? { llmEnvFile: grant.llmEnvFile } : {},
+    agent: selectedAgent
+  });
+  await (options.validateSelection ?? validateModelSelection)(selectedAgent, localConfig.agentEnv, {
+    model: grant.model
+  });
+  const agentIdentity = identityFromKey(grant.agentSecretKey, grant.agentName);
+  const staged = await stageMonolithAgentRuntime({
+    workspaceId: grant.workspaceId,
+    pairedBy: grant.pairedBy,
+    monolithBaseUrl: grant.monolithBaseUrl,
+    daemonExchangeToken: grant.daemonExchangeToken,
     ...grant.llmEnvFile ? { llmEnvFile: grant.llmEnvFile } : {},
-    access: "creator",
+    agentBinary: localConfig.agentBinary,
+    agentKind: selectedAgent.kind,
+    agentCommand: selectedAgent.command,
+    agentArgs: selectedAgent.args,
     modelSelection: { model: grant.model },
-    agentProfile: { displayName: grant.agentName, personality: grant.soul },
-    interactiveUi: false
+    mcpBinary: localConfig.mcpBinary,
+    agentIdentity,
+    bodyIdentity: identityFromKey(grant.bodySecretKey, DEFAULT_BODY_IDENTITY_NAME),
+    ...options.supervisorRoot ? { supervisorRoot: options.supervisorRoot } : {}
   });
-  if (result.pairing.communityId !== grant.workspaceId) {
-    throw new Error("approved Workspace did not match the pairing grant");
+  const activated = await activateDaemonTransport(staged.configPath, options.fetchImpl);
+  if (!activated)
+    throw new Error("monolith daemon transport activation failed");
+  let pid;
+  try {
+    pid = await (options.launch ?? (async (configPath, publicKey) => process.platform === "linux" && process.env.BEELINE_SYSTEMD_USER !== "0" ? installAgentService(publicKey) : launchRuntimeDaemon(configPath)))(staged.configPath, agentIdentity.publicKey);
+  } catch (error) {
+    throw new Error(`agent ${agentIdentity.publicKey} is connected, but its daemon did not start: ${error instanceof Error ? error.message : String(error)}. Run \`beeline start --agent ${agentIdentity.publicKey}\`.`, { cause: error });
   }
-  return result;
+  return { runtime: activated.runtime, configPath: staged.configPath, pid };
 }
 function printPairResult(result) {
   console.log(`[buzz] paired agent ${import_picocolors3.default.bold(result.pairing.agent.displayName)}`);
@@ -56012,8 +56230,11 @@ async function jsonRequest(url, body, fetchImpl) {
   return response.json();
 }
 function requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl) {
+  const normalizedPairingCode = normalizeAgentPairingCode(pairingCode);
+  if (!normalizedPairingCode)
+    throw new Error("invalid pairing code");
   return jsonRequest(`${baseUrl}/auth/agent/connect`, {
-    pairing_code: pairingCode.trim().toUpperCase(),
+    pairing_code: normalizedPairingCode,
     harness: selection.harness,
     ...selection.provider ? { provider: selection.provider } : {},
     model: selection.model,
@@ -56113,7 +56334,7 @@ async function runConnectCommand(code, options = {}) {
   intro(brass("Beeline connect"));
   const pairingCode = code?.trim() || await clackPrompts.text({
     message: brass("Pairing code from the app"),
-    validate: (value) => value.trim() ? void 0 : "Pairing code is required"
+    validate: (value) => normalizeAgentPairingCode(value) ? void 0 : "Enter the pairing code shown in the app"
   });
   const selection = await collectConnectWizard();
   const fetchImpl = options.fetchImpl ?? fetch;
@@ -56123,7 +56344,6 @@ async function runConnectCommand(code, options = {}) {
   const llmEnvFile = await writeProviderEnv(selection, grant.agent_pubkey);
   const grantPath = resolve37(defaultSupervisorRoot(process.env), "beeline", "connect", `grant-${process.pid}-${Date.now()}.json`);
   await writePrivateJson(grantPath, {
-    pairingCode: grant.pairing_code,
     agentSecretKey: grant.agent_secret_key,
     bodySecretKey: grant.body_secret_key,
     agentName: grant.agent_name,
@@ -56132,6 +56352,9 @@ async function runConnectCommand(code, options = {}) {
     soul: grant.soul,
     workspaceId: grant.workspace_id,
     workspaceName: grant.workspace_name,
+    pairedBy: grant.paired_by,
+    monolithBaseUrl: baseUrl,
+    daemonExchangeToken: grant.daemon_exchange_token,
     ...llmEnvFile ? { llmEnvFile } : {}
   });
   await brassSpinner("Starting your agent\u2026", () => runInstalledFinish(installedBinary, grantPath));
@@ -56144,7 +56367,13 @@ function isDevicePairingGrant(value) {
   if (!value || typeof value !== "object")
     return false;
   const grant = value;
-  return typeof grant.pairingCode === "string" && typeof grant.agentSecretKey === "string" && /^[0-9a-f]{64}$/.test(grant.agentSecretKey) && typeof grant.bodySecretKey === "string" && /^[0-9a-f]{64}$/.test(grant.bodySecretKey) && typeof grant.agentName === "string" && CONNECT_HARNESSES.includes(grant.harness) && typeof grant.model === "string" && typeof grant.soul === "string" && typeof grant.workspaceId === "string" && typeof grant.workspaceName === "string";
+  let monolithOrigin = "";
+  try {
+    monolithOrigin = new URL(grant.monolithBaseUrl ?? "").origin;
+  } catch {
+    return false;
+  }
+  return typeof grant.agentSecretKey === "string" && /^[0-9a-f]{64}$/.test(grant.agentSecretKey) && typeof grant.bodySecretKey === "string" && /^[0-9a-f]{64}$/.test(grant.bodySecretKey) && typeof grant.agentName === "string" && CONNECT_HARNESSES.includes(grant.harness) && typeof grant.model === "string" && typeof grant.soul === "string" && typeof grant.workspaceId === "string" && typeof grant.workspaceName === "string" && typeof grant.pairedBy === "string" && /^[0-9a-f]{64}$/.test(grant.pairedBy) && typeof grant.monolithBaseUrl === "string" && grant.monolithBaseUrl === monolithOrigin && /^https?:$/.test(new URL(monolithOrigin).protocol) && typeof grant.daemonExchangeToken === "string" && /^bde_[A-Za-z0-9_-]{43}$/.test(grant.daemonExchangeToken);
 }
 async function runConnectFinishCommand(path) {
   if (!path)
@@ -57160,7 +57389,7 @@ ${import_picocolors6.default.dim("Usage:")}
   beeline archive <subchannel-uuid>         Archive subchannel
   beeline pair <BUZZ-XXXX-XXXX> [options]   Pair an agent (optionally to this repo)
                                             and start its durable daemon
-  beeline connect [BUZZ-XXXX-XXXX]          Install and connect an app-authorized agent
+  beeline connect [XXXXXXXX-XXXXXXXX]       Install and connect an app-authorized agent
   beeline start [agent-pubkey]              Start \u2014 or RESTART when already running,
                                             stopping cleanly after in-flight work \u2014
                                             this repo's (or, outside a repo, this