usebeeline 0.0.30 → 0.0.31

package/dist/usebeeline.mjs

@@ -3193,14 +3193,6 @@ function toolCallEntries(updates) {
   }
   return [...calls.values()];
 }
-function isMutatingPermissionRequest(request) {
-  const tool = request.toolCall;
-  const kind = tool?.kind?.toLowerCase();
-  if (kind && ["edit", "execute", "delete", "move"].includes(kind))
-    return true;
-  const description = [tool?.title, tool?.rawInput].filter((value) => value !== void 0).map((value) => typeof value === "string" ? value : JSON.stringify(value)).join(" ").toLowerCase();
-  return /(^|[^a-z])(str_replace|write|edit|shell|bash|execute|create|delete|remove|move|rename|patch|apply_patch)([^a-z]|$)/.test(description);
-}
 var AcpClient = class extends EventEmitter {
   child = null;
   buf = "";
@@ -3227,6 +3219,7 @@ var AcpClient = class extends EventEmitter {
   inheritProcessEnv;
   autoApprove;
   permissionHandler;
+  permissionAllowlist;
   constructor(opts) {
     super();
     const command = opts.agentCommand ?? opts.agentBinary;
@@ -3241,6 +3234,7 @@ var AcpClient = class extends EventEmitter {
     this.inheritProcessEnv = opts.inheritProcessEnv ?? process.env.BUZZY_BODY_AGENT_ENV_INHERIT === "1";
     this.autoApprove = opts.autoApprovePermissions ?? true;
     this.permissionHandler = opts.permissionHandler;
+    this.permissionAllowlist = opts.permissionAllowlist;
   }
   async start(timeoutMs = 6e4) {
     if (this.alive)
@@ -3679,7 +3673,14 @@ var AcpClient = class extends EventEmitter {
     if (tracked)
       p.toolCall = { ...tracked, ...p.toolCall };
     let decision = this.autoApprove ? "allow" : "reject";
-    if (this.permissionHandler) {
+    if (!this.autoApprove && this.permissionAllowlist) {
+      try {
+        decision = this.permissionAllowlist(p) ? "allow" : "reject";
+      } catch (error) {
+        this.emit("permission/error", error);
+        decision = "reject";
+      }
+    } else if (this.permissionHandler) {
       try {
         decision = await this.permissionHandler(p);
       } catch (error) {
@@ -4170,7 +4171,7 @@ var BEELINE_ROOM_CAPABILITIES = [
   "The repository filesystem is read-only in this Room session.",
   "You may address any Room member, including another agent, by writing @name in your reply; the server routes that mention to them.",
   "Tag another agent only when you need something from them: a question, a handoff, a task. Never tag to acknowledge, agree, or say you are ready. If nothing is actionable, do not reply.",
-  "The beeline-readonly-mcp inspection tools and beeline-agent Room action tools are mounted for this session.",
+  "The beeline-readonly-mcp inspection tools and beeline-agent Room action tools are mounted. You can use beeline-readonly-mcp to search and read the bound repository without opening a corner; beeline-agent provides the host-governed Room actions.",
   "When repository work is needed, you MUST call beeline-agent open_corner with a one-paragraph summary of the complete objective. The host-governed call is the only way to start write work.",
   "Never claim an action or reply happened unless the prompt or a tool result proves it."
 ].join(" ");
@@ -4781,6 +4782,7 @@ var READ_ONLY_PERMISSION_TITLES = new Set(READ_ONLY_TOOL_NAMES.flatMap((tool) =>
   `${READ_ONLY_MCP_SERVER_NAME}/${tool}`
 ]));
 var READ_ONLY_TOOL_SET = new Set(READ_ONLY_TOOL_NAMES);
+var TOOL_NAME_SEPARATORS = ["__", ".", "/", ":", " "];
 var READ_ONLY_SERVER_TITLE_PREFIXES = [
   `mcp__${READ_ONLY_MCP_SERVER_NAME}__`,
   `mcp__${READ_ONLY_MCP_TOOL_SERVER_NAME}__`,
@@ -4798,6 +4800,27 @@ function shellPayload(toolCall) {
   const record2 = rawInput;
   return typeof record2.command === "string" || typeof record2.cmd === "string";
 }
+function isReadOnlyMcpPermissionRequest(request) {
+  const toolCall = request.toolCall;
+  const title = toolCall?.title?.trim() ?? "";
+  const rawInput = toolCall?.rawInput;
+  const mcpCall = Boolean(rawInput) && typeof rawInput === "object" && !Array.isArray(rawInput) ? rawInput : void 0;
+  if (mcpCall?.server === READ_ONLY_MCP_SERVER_NAME && typeof mcpCall.tool === "string" && READ_ONLY_TOOL_SET.has(mcpCall.tool)) {
+    return true;
+  }
+  if (shellPayload(toolCall))
+    return false;
+  if (READ_ONLY_PERMISSION_TITLES.has(title))
+    return true;
+  if (READ_ONLY_SERVER_TITLE_PREFIXES.some((prefix) => title.startsWith(prefix))) {
+    for (const tool of READ_ONLY_TOOL_NAMES) {
+      if (title === tool || title.endsWith(`(${tool})`) || TOOL_NAME_SEPARATORS.some((separator) => title.endsWith(`${separator}${tool}`))) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
 function isBeelineAgentMcpPermissionRequest(request) {
   const toolCall = request.toolCall;
   const title = toolCall?.title?.trim() ?? "";
@@ -14329,6 +14352,9 @@ async function wait(ms, signal) {
 // apps/body/dist/monolith-room-turn.js
 import { mkdir as mkdir4 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
+function isRoomMcpPermissionRequest(request) {
+  return isReadOnlyMcpPermissionRequest(request) || isBeelineAgentMcpPermissionRequest(request);
+}
 function roomPrincipalMayAddressAgent(authority, humanPermitted) {
   return authority.member && (authority.principalKind === "agent" || authority.principalKind === "human" && humanPermitted);
 }
@@ -14447,7 +14473,7 @@ var MonolithRoomTurnLoop = class {
       agentCwd: this.options.cwd,
       agentLabel: command,
       autoApprovePermissions: false,
-      permissionHandler: (request) => Promise.resolve(isBeelineAgentMcpPermissionRequest(request) ? "allow" : isMutatingPermissionRequest(request) ? "reject" : "allow")
+      permissionAllowlist: isRoomMcpPermissionRequest
     };
     this.client = (this.options.createAcpClient ?? ((value) => new AcpClient(value)))(clientOptions);
     await this.client.start();
@@ -15244,7 +15270,7 @@ var RoomRuntimeCoordinator = class {
     }
     await mapWithConcurrency(desiredTopRooms, ROOM_JOIN_CONCURRENCY, async (roomId) => {
       if (!this.running.has(roomId))
-        this.startRoom(roomId);
+        await this.startRoom(roomId);
     });
     await mapWithConcurrency([...desiredCorners.values()], ROOM_JOIN_CONCURRENCY, async (corner) => {
       if (!this.running.has(corner.cornerId))
@@ -15284,10 +15310,9 @@ var RoomRuntimeCoordinator = class {
       ...agentHomeRoot ? { agentHomeRoot } : {}
     };
   }
-  startRoom(roomId) {
+  async startRoom(roomId) {
     const controller = new AbortController();
-    const record2 = this.roomRecord(roomId);
-    const cwd = record2?.repo.root ?? this.roomRoot(roomId);
+    const cwd = await this.materializeRoomCheckout(roomId);
     const startedAt = this.now();
     const loop = new MonolithRoomTurnLoop({
       roomId,
@@ -15324,6 +15349,44 @@ var RoomRuntimeCoordinator = class {
     });
     console.log(`[thin-core] serving monolith Room ${roomId}`);
   }
+  /**
+   * A Room is a repository inspection surface, so its session cwd must be the
+   * current server-bound repository rather than a legacy runtime path (or the
+   * otherwise-empty per-Room state directory). The daemon consumes the
+   * short-lived GitHub token itself; it is never included in the Room MCP or
+   * harness environment.
+   */
+  async materializeRoomCheckout(roomId) {
+    const repository = await this.options.daemonApi.execute("getRoomRepositoryState", { roomId });
+    if (repository.resolution !== "repository" || !repository.remote)
+      return this.roomRoot(roomId);
+    const remote = roomCheckoutRemote(repository.remote);
+    const targetBranch = repository.targetBranch || "main";
+    const checkoutId = createHash("sha256").update(`${remote}\0${targetBranch}`).digest("hex").slice(0, 24);
+    const path = resolve10(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
+    await mkdir5(dirname4(path), { recursive: true, mode: 448 });
+    const token = remote.startsWith("https://github.com/") ? await this.options.daemonApi.execute("getRoomGitHubToken", { roomId }) : void 0;
+    const env = token ? githubGitEnv(token.token) : process.env;
+    if (!existsSync4(resolve10(path, ".git"))) {
+      await execFileAsync3("git", ["clone", "--no-checkout", remote, path], {
+        env,
+        maxBuffer: 4 * 1024 * 1024
+      });
+    }
+    await execFileAsync3("git", [
+      "-C",
+      path,
+      "fetch",
+      "--prune",
+      "origin",
+      `+refs/heads/${targetBranch}:refs/remotes/origin/${targetBranch}`
+    ], { env, maxBuffer: 4 * 1024 * 1024 });
+    await execFileAsync3("git", ["-C", path, "checkout", "--detach", "--force", `origin/${targetBranch}`], {
+      env,
+      maxBuffer: 4 * 1024 * 1024
+    });
+    return path;
+  }
   async startCorner(corner) {
     if (this.running.has(corner.cornerId) || this.startingCorners.has(corner.cornerId))
       return;
@@ -15555,6 +15618,11 @@ function githubHttpsRemote(remote) {
   url.password = "";
   return url.toString().replace(/\/$/, "").replace(/\.git$/i, "") + ".git";
 }
+function roomCheckoutRemote(remote) {
+  if (remote.startsWith("file://"))
+    return remote;
+  return githubHttpsRemote(remote);
+}
 function githubGitEnv(token) {
   const authorization = Buffer.from(`x-access-token:${token}`).toString("base64");
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.0.30",
+  "version": "0.0.31",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "repository": {
     "type": "git",