usebeeline 0.0.30 → 0.0.32

package/dist/usebeeline.mjs

@@ -3193,14 +3193,6 @@ function toolCallEntries(updates) {
   }
   return [...calls.values()];
 }
-function isMutatingPermissionRequest(request) {
-  const tool = request.toolCall;
-  const kind = tool?.kind?.toLowerCase();
-  if (kind && ["edit", "execute", "delete", "move"].includes(kind))
-    return true;
-  const description = [tool?.title, tool?.rawInput].filter((value) => value !== void 0).map((value) => typeof value === "string" ? value : JSON.stringify(value)).join(" ").toLowerCase();
-  return /(^|[^a-z])(str_replace|write|edit|shell|bash|execute|create|delete|remove|move|rename|patch|apply_patch)([^a-z]|$)/.test(description);
-}
 var AcpClient = class extends EventEmitter {
   child = null;
   buf = "";
@@ -3227,6 +3219,7 @@ var AcpClient = class extends EventEmitter {
   inheritProcessEnv;
   autoApprove;
   permissionHandler;
+  permissionAllowlist;
   constructor(opts) {
     super();
     const command = opts.agentCommand ?? opts.agentBinary;
@@ -3241,6 +3234,7 @@ var AcpClient = class extends EventEmitter {
     this.inheritProcessEnv = opts.inheritProcessEnv ?? process.env.BUZZY_BODY_AGENT_ENV_INHERIT === "1";
     this.autoApprove = opts.autoApprovePermissions ?? true;
     this.permissionHandler = opts.permissionHandler;
+    this.permissionAllowlist = opts.permissionAllowlist;
   }
   async start(timeoutMs = 6e4) {
     if (this.alive)
@@ -3679,7 +3673,14 @@ var AcpClient = class extends EventEmitter {
     if (tracked)
       p.toolCall = { ...tracked, ...p.toolCall };
     let decision = this.autoApprove ? "allow" : "reject";
-    if (this.permissionHandler) {
+    if (!this.autoApprove && this.permissionAllowlist) {
+      try {
+        decision = this.permissionAllowlist(p) ? "allow" : "reject";
+      } catch (error) {
+        this.emit("permission/error", error);
+        decision = "reject";
+      }
+    } else if (this.permissionHandler) {
       try {
         decision = await this.permissionHandler(p);
       } catch (error) {
@@ -4170,15 +4171,22 @@ var BEELINE_ROOM_CAPABILITIES = [
   "The repository filesystem is read-only in this Room session.",
   "You may address any Room member, including another agent, by writing @name in your reply; the server routes that mention to them.",
   "Tag another agent only when you need something from them: a question, a handoff, a task. Never tag to acknowledge, agree, or say you are ready. If nothing is actionable, do not reply.",
-  "The beeline-readonly-mcp inspection tools and beeline-agent Room action tools are mounted for this session.",
+  "Tag the user only when you need a decision or input, or when the task they asked for is finished. Never tag for progress, acknowledgement, or questions the transcript already answers.",
+  "The beeline-readonly-mcp inspection tools and beeline-agent Room action tools are mounted. You can use beeline-readonly-mcp to search and read the bound repository without opening a corner; beeline-agent provides the host-governed Room actions.",
+  "To send a file, call beeline-agent attach_file with a path inside your checkout; it is attached to your reply.",
   "When repository work is needed, you MUST call beeline-agent open_corner with a one-paragraph summary of the complete objective. The host-governed call is the only way to start write work.",
   "Never claim an action or reply happened unless the prompt or a tool result proves it."
 ].join(" ");
-var BEELINE_CAPABILITIES_PRIMER = `Consult the release-versioned using-beeline skill (SKILL.md) when you need the managed Room mechanics. ${BEELINE_ROOM_CAPABILITIES}`;
-function beelineCapabilityContextForHarness(agentCommand) {
+function beelinePrimer(repository) {
+  const repositoryLine = repository ? ` This Room is bound to ${repository.name} (branch ${repository.branch}); you have a read-only checkout at the session root.` : "";
+  return `Consult the release-versioned using-beeline skill (SKILL.md) when you need the managed Room mechanics. ${BEELINE_ROOM_CAPABILITIES}${repositoryLine}`;
+}
+var BEELINE_CAPABILITIES_PRIMER = beelinePrimer();
+function beelineCapabilityContextForHarness(agentCommand, repository) {
+  const primer = beelinePrimer(repository);
   return {
-    sessionPrompt: BEELINE_CAPABILITIES_PRIMER,
-    ...harnessHonorsSessionSystemPrompt(agentCommand) ? {} : { compatibilityTurnPrefix: BEELINE_CAPABILITIES_PRIMER }
+    sessionPrompt: primer,
+    ...harnessHonorsSessionSystemPrompt(agentCommand) ? {} : { compatibilityTurnPrefix: primer }
   };
 }
 function runningBeelineReleaseId(env = process.env, read = (path) => readFileSync3(path, "utf8")) {
@@ -4781,6 +4789,7 @@ var READ_ONLY_PERMISSION_TITLES = new Set(READ_ONLY_TOOL_NAMES.flatMap((tool) =>
   `${READ_ONLY_MCP_SERVER_NAME}/${tool}`
 ]));
 var READ_ONLY_TOOL_SET = new Set(READ_ONLY_TOOL_NAMES);
+var TOOL_NAME_SEPARATORS = ["__", ".", "/", ":", " "];
 var READ_ONLY_SERVER_TITLE_PREFIXES = [
   `mcp__${READ_ONLY_MCP_SERVER_NAME}__`,
   `mcp__${READ_ONLY_MCP_TOOL_SERVER_NAME}__`,
@@ -4798,27 +4807,46 @@ function shellPayload(toolCall) {
   const record2 = rawInput;
   return typeof record2.command === "string" || typeof record2.cmd === "string";
 }
+function isReadOnlyMcpPermissionRequest(request) {
+  const toolCall = request.toolCall;
+  const title = toolCall?.title?.trim() ?? "";
+  const rawInput = toolCall?.rawInput;
+  const mcpCall = Boolean(rawInput) && typeof rawInput === "object" && !Array.isArray(rawInput) ? rawInput : void 0;
+  if (mcpCall?.server === READ_ONLY_MCP_SERVER_NAME && typeof mcpCall.tool === "string" && READ_ONLY_TOOL_SET.has(mcpCall.tool)) {
+    return true;
+  }
+  if (shellPayload(toolCall))
+    return false;
+  if (READ_ONLY_PERMISSION_TITLES.has(title))
+    return true;
+  if (READ_ONLY_SERVER_TITLE_PREFIXES.some((prefix) => title.startsWith(prefix))) {
+    for (const tool of READ_ONLY_TOOL_NAMES) {
+      if (title === tool || title.endsWith(`(${tool})`) || TOOL_NAME_SEPARATORS.some((separator) => title.endsWith(`${separator}${tool}`))) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+var AGENT_SURFACE_TOOL_NAMES = ["open_corner", "pr_checks_status", "attach_file"];
 function isBeelineAgentMcpPermissionRequest(request) {
   const toolCall = request.toolCall;
   const title = toolCall?.title?.trim() ?? "";
   const rawInput = toolCall?.rawInput;
   if (rawInput && typeof rawInput === "object" && !Array.isArray(rawInput)) {
     const call = rawInput;
-    if (call.server === BEELINE_AGENT_MCP_SERVER_NAME && (call.tool === "open_corner" || call.tool === "pr_checks_status")) {
+    if (call.server === BEELINE_AGENT_MCP_SERVER_NAME && typeof call.tool === "string" && AGENT_SURFACE_TOOL_NAMES.includes(call.tool)) {
       return true;
     }
   }
   if (shellPayload(toolCall))
     return false;
   const normalized = BEELINE_AGENT_MCP_SERVER_NAME.replaceAll("-", "_");
-  return [
-    `mcp__${BEELINE_AGENT_MCP_SERVER_NAME}__open_corner`,
-    `mcp__${normalized}__open_corner`,
-    `mcp.${BEELINE_AGENT_MCP_SERVER_NAME}.open_corner`,
-    `mcp__${BEELINE_AGENT_MCP_SERVER_NAME}__pr_checks_status`,
-    `mcp__${normalized}__pr_checks_status`,
-    `mcp.${BEELINE_AGENT_MCP_SERVER_NAME}.pr_checks_status`
-  ].includes(title);
+  return AGENT_SURFACE_TOOL_NAMES.flatMap((tool) => [
+    `mcp__${BEELINE_AGENT_MCP_SERVER_NAME}__${tool}`,
+    `mcp__${normalized}__${tool}`,
+    `mcp.${BEELINE_AGENT_MCP_SERVER_NAME}.${tool}`
+  ]).includes(title);
 }
 
 // apps/body/dist/room-session.js
@@ -4841,7 +4869,8 @@ function beelineAgentMcpServer(config, api, context) {
       { name: "BEELINE_DAEMON_AGENT_ID", value: connection.agentId },
       { name: "BEELINE_DAEMON_ROOM_ID", value: context.roomId },
       { name: "BEELINE_DAEMON_WORKSPACE_ID", value: context.workspaceId },
-      ...context.cornerId ? [{ name: "BEELINE_DAEMON_CORNER_ID", value: context.cornerId }] : []
+      ...context.cornerId ? [{ name: "BEELINE_DAEMON_CORNER_ID", value: context.cornerId }] : [],
+      ...context.attachRoot ? [{ name: "BEELINE_ATTACH_ROOT", value: context.attachRoot }] : []
     ]
   };
 }
@@ -13997,6 +14026,10 @@ async function cornerToolActivity(call, worktreePath) {
     ...paths.length ? { files: paths.map((path) => ({ path })) } : {}
   };
 }
+var CORNER_CLOSE_POLL_BASE_MS = 12e3;
+function cornerClosePollMs(random = Math.random) {
+  return CORNER_CLOSE_POLL_BASE_MS + Math.floor(random() * 3e3);
+}
 var MonolithCornerTurnLoop = class {
   options;
   agent;
@@ -14110,7 +14143,8 @@ var MonolithCornerTurnLoop = class {
       beelineAgentMcpServer(this.options.config, this.options.api, {
         roomId: this.options.parentRoomId,
         workspaceId: this.options.workspaceId,
-        cornerId: this.options.cornerId
+        cornerId: this.options.cornerId,
+        attachRoot: this.options.worktreePath
       })
     ];
     const self = roster.members.find((member) => member.identityId === this.agent.publicKey);
@@ -14127,6 +14161,7 @@ var MonolithCornerTurnLoop = class {
         "PR-opening turn rule: as soon as a pull request exists, print its full GitHub URL as your final response and end the turn immediately. Do not call pr_checks_status in that same turn and do not wait for checks inside it. Then stay idle until a later corner fact or human message starts another turn.",
         'Never merge because local tests pass or because gh reports passing checks. On a later turn triggered by a server-posted checks-passed note, call beeline-agent pr_checks_status. Merge only when it returns checks="passed", held=false, and approvalPending=false.',
         "If any human in this corner says hold or do not merge, do not merge until a later human explicitly resumes it.",
+        "Do not tag the user when a corner turn finishes: the server posts the merge summary card and its push already cover completion. Tag a human only mid-turn, and only when you need a decision or input.",
         "A human approval in the app asks the server to merge. When approval is pending, wait for the server close request instead of racing it with gh. If checks passed, no hold exists, and no approval is pending, merge the pull request yourself with gh.",
         "Never push directly to the target branch. Never merge a different pull request."
       ].filter(Boolean).join("\n\n")
@@ -14180,7 +14215,7 @@ ${trigger}`,
           "Continue the objective. Obey the PR checks and human hold rules in your session instructions."
         ].filter(Boolean).join("\n\n");
         const sessionId = this.sessionId;
-        const turnId = `${this.agent.publicKey}:${cornerId}`;
+        const turnId = requestId;
         const publishedToolCalls = /* @__PURE__ */ new Set();
         const publishToolCalls = (calls, settledOnly) => {
           calls.forEach((call, index) => {
@@ -14270,6 +14305,7 @@ ${pullRequest}`,
       await this.prompt(history.items.find((item) => item.requestId)?.requestId ?? cornerId.replaceAll("-", ""), this.options.objective);
     }
     try {
+      let pollWithoutWait = false;
       while (!signal?.aborted) {
         try {
           const inbox = await api.execute("getCornerCloseRequests", {
@@ -14291,14 +14327,18 @@ ${pullRequest}`,
               if (!authority.member || authority.principalKind !== "human")
                 continue;
               await this.prompt(item.id, item.body);
+              pollWithoutWait = true;
               continue;
             }
-            if (/\bchecks?\b/i.test(item.body))
+            if (/\bchecks?\b/i.test(item.body)) {
               await this.prompt(item.id, item.body);
+              pollWithoutWait = true;
+            }
           }
           cursor3 = inbox.cursor ?? cursor3;
           this.options.onPoll();
-          await wait(this.options.pollMs ?? 1e3, signal);
+          await wait(pollWithoutWait ? 0 : this.options.pollMs ?? cornerClosePollMs(), signal);
+          pollWithoutWait = false;
         } catch (error) {
           if (signal?.aborted)
             break;
@@ -14329,6 +14369,9 @@ async function wait(ms, signal) {
 // apps/body/dist/monolith-room-turn.js
 import { mkdir as mkdir4 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
+function isRoomMcpPermissionRequest(request) {
+  return isReadOnlyMcpPermissionRequest(request) || isBeelineAgentMcpPermissionRequest(request);
+}
 function roomPrincipalMayAddressAgent(authority, humanPermitted) {
   return authority.member && (authority.principalKind === "agent" || authority.principalKind === "human" && humanPermitted);
 }
@@ -14338,7 +14381,7 @@ function escapeRegExp(value) {
 function agentReplyMentionIds(text2, roster, authorId) {
   const aliases = /* @__PURE__ */ new Map();
   for (const member of roster.members) {
-    if (member.kind !== "agent" || member.identityId === authorId)
+    if (member.identityId === authorId)
       continue;
     for (const raw of [member.name, member.handle, member.soul?.name]) {
       const display = raw?.trim().replace(/^@/, "");
@@ -14402,12 +14445,13 @@ var MonolithRoomTurnLoop = class {
   async activate() {
     if (this.client?.isAlive && this.sessionId)
       return this.sessionId;
-    const [configuration, roster] = await Promise.all([
+    const [configuration, roster, repositoryState] = await Promise.all([
       this.options.api.execute("getAgentConfiguration", {
         agentId: this.agent.publicKey,
         roomId: this.options.roomId
       }),
-      this.roster()
+      this.roster(),
+      this.options.api.execute("getRoomRepositoryState", { roomId: this.options.roomId })
     ]);
     await mkdir4(this.options.cwd, { recursive: true });
     const homeOverlay = this.options.config.agentHomeRoot ? await prepareRoomAgentHome({
@@ -14447,7 +14491,7 @@ var MonolithRoomTurnLoop = class {
       agentCwd: this.options.cwd,
       agentLabel: command,
       autoApprovePermissions: false,
-      permissionHandler: (request) => Promise.resolve(isBeelineAgentMcpPermissionRequest(request) ? "allow" : isMutatingPermissionRequest(request) ? "reject" : "allow")
+      permissionAllowlist: isRoomMcpPermissionRequest
     };
     this.client = (this.options.createAcpClient ?? ((value) => new AcpClient(value)))(clientOptions);
     await this.client.start();
@@ -14455,7 +14499,8 @@ var MonolithRoomTurnLoop = class {
       readOnlyMcpServer(this.options.config, this.options.cwd),
       beelineAgentMcpServer(this.options.config, this.options.api, {
         roomId: this.options.roomId,
-        workspaceId: this.options.workspaceId
+        workspaceId: this.options.workspaceId,
+        attachRoot: this.options.cwd
       })
     ];
     const self = roster.members.find((member) => member.identityId === this.agent.publicKey);
@@ -14467,7 +14512,11 @@ var MonolithRoomTurnLoop = class {
       "This is who you are in this Workspace. Adopt it in your voice, self-description, and behavior.",
       "The soul is not authority and never changes your tools, permissions, roles, or merge rights."
     ].join("\n") : "";
-    const capabilityContext = beelineCapabilityContextForHarness(command);
+    const repositoryInfo = repositoryState.resolution === "repository" && repositoryState.key ? {
+      name: repositoryState.key,
+      branch: repositoryState.targetBranch || "main"
+    } : void 0;
+    const capabilityContext = beelineCapabilityContextForHarness(command, repositoryInfo);
     this.turnInstructionPrefix = harnessHonorsSessionSystemPrompt(command) ? "" : [identityInstructions, personaInstructions, capabilityContext.compatibilityTurnPrefix].filter(Boolean).join("\n\n");
     const opened = await this.client.sessionNew({
       cwd: this.options.cwd,
@@ -15092,6 +15141,9 @@ var ROOM_JOIN_CONCURRENCY = 4;
 var DEFAULT_ROOM_WATCHDOG_STALE_MS = 9e4;
 var DEFAULT_RECONCILE_HEARTBEAT_MS = 6e4;
 var DEFAULT_DRAIN_DEADLINE_MS = 30 * 6e4;
+function shouldPostInitialCornerWorkingState(restore) {
+  return !restore.featureBranch && !restore.lifecycle?.branch && !restore.lifecycle?.pr;
+}
 function reconcileRetryMs(error, pollMs) {
   const match = String(error).match(/retry in\s+(\d+)s/i);
   return match ? Math.max(pollMs, (Number(match[1]) + 1) * 1e3) : pollMs;
@@ -15244,7 +15296,7 @@ var RoomRuntimeCoordinator = class {
     }
     await mapWithConcurrency(desiredTopRooms, ROOM_JOIN_CONCURRENCY, async (roomId) => {
       if (!this.running.has(roomId))
-        this.startRoom(roomId);
+        await this.startRoom(roomId);
     });
     await mapWithConcurrency([...desiredCorners.values()], ROOM_JOIN_CONCURRENCY, async (corner) => {
       if (!this.running.has(corner.cornerId))
@@ -15284,10 +15336,9 @@ var RoomRuntimeCoordinator = class {
       ...agentHomeRoot ? { agentHomeRoot } : {}
     };
   }
-  startRoom(roomId) {
+  async startRoom(roomId) {
     const controller = new AbortController();
-    const record2 = this.roomRecord(roomId);
-    const cwd = record2?.repo.root ?? this.roomRoot(roomId);
+    const cwd = await this.materializeRoomCheckout(roomId);
     const startedAt = this.now();
     const loop = new MonolithRoomTurnLoop({
       roomId,
@@ -15324,6 +15375,44 @@ var RoomRuntimeCoordinator = class {
     });
     console.log(`[thin-core] serving monolith Room ${roomId}`);
   }
+  /**
+   * A Room is a repository inspection surface, so its session cwd must be the
+   * current server-bound repository rather than a legacy runtime path (or the
+   * otherwise-empty per-Room state directory). The daemon consumes the
+   * short-lived GitHub token itself; it is never included in the Room MCP or
+   * harness environment.
+   */
+  async materializeRoomCheckout(roomId) {
+    const repository = await this.options.daemonApi.execute("getRoomRepositoryState", { roomId });
+    if (repository.resolution !== "repository" || !repository.remote)
+      return this.roomRoot(roomId);
+    const remote = roomCheckoutRemote(repository.remote);
+    const targetBranch = repository.targetBranch || "main";
+    const checkoutId = createHash("sha256").update(`${remote}\0${targetBranch}`).digest("hex").slice(0, 24);
+    const path = resolve10(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
+    await mkdir5(dirname4(path), { recursive: true, mode: 448 });
+    const token = remote.startsWith("https://github.com/") ? await this.options.daemonApi.execute("getRoomGitHubToken", { roomId }) : void 0;
+    const env = token ? githubGitEnv(token.token) : process.env;
+    if (!existsSync4(resolve10(path, ".git"))) {
+      await execFileAsync3("git", ["clone", "--no-checkout", remote, path], {
+        env,
+        maxBuffer: 4 * 1024 * 1024
+      });
+    }
+    await execFileAsync3("git", [
+      "-C",
+      path,
+      "fetch",
+      "--prune",
+      "origin",
+      `+refs/heads/${targetBranch}:refs/remotes/origin/${targetBranch}`
+    ], { env, maxBuffer: 4 * 1024 * 1024 });
+    await execFileAsync3("git", ["-C", path, "checkout", "--detach", "--force", `origin/${targetBranch}`], {
+      env,
+      maxBuffer: 4 * 1024 * 1024
+    });
+    return path;
+  }
   async startCorner(corner) {
     if (this.running.has(corner.cornerId) || this.startingCorners.has(corner.cornerId))
       return;
@@ -15357,12 +15446,14 @@ var RoomRuntimeCoordinator = class {
         featureBranch,
         token: granted.token
       });
-      await this.options.daemonApi.execute("postCornerRemoteState", {
-        cornerId: corner.cornerId,
-        branch: featureBranch,
-        state: "working",
-        checks: "unknown"
-      });
+      if (shouldPostInitialCornerWorkingState(restore)) {
+        await this.options.daemonApi.execute("postCornerRemoteState", {
+          cornerId: corner.cornerId,
+          branch: featureBranch,
+          state: "working",
+          checks: "unknown"
+        });
+      }
       const controller = new AbortController();
       const startedAt = this.now();
       const loop = new MonolithCornerTurnLoop({
@@ -15555,6 +15646,11 @@ function githubHttpsRemote(remote) {
   url.password = "";
   return url.toString().replace(/\/$/, "").replace(/\.git$/i, "") + ".git";
 }
+function roomCheckoutRemote(remote) {
+  if (remote.startsWith("file://"))
+    return remote;
+  return githubHttpsRemote(remote);
+}
 function githubGitEnv(token) {
   const authorization = Buffer.from(`x-access-token:${token}`).toString("base64");
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.0.30",
+  "version": "0.0.32",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "repository": {
     "type": "git",