usebeeline 0.0.35 → 0.0.37

package/dist/usebeeline.mjs

@@ -309,10 +309,10 @@ __export(self_update_exports, {
 });
 import { createHash as createHash2 } from "node:crypto";
 import { constants as fsConstants } from "node:fs";
-import { access, chmod as chmod3, lstat as lstat2, mkdir as mkdir8, open, readFile as readFile4, rename as rename3, rm as rm4, symlink as symlink2, writeFile as writeFile5 } from "node:fs/promises";
+import { access, chmod as chmod3, lstat as lstat2, mkdir as mkdir9, open, readFile as readFile4, rename as rename3, rm as rm4, symlink as symlink2, writeFile as writeFile6 } from "node:fs/promises";
 import { spawn as spawn4 } from "node:child_process";
 import { homedir as homedir9 } from "node:os";
-import { dirname as dirname8, join as join3, resolve as resolve14 } from "node:path";
+import { dirname as dirname8, join as join6, resolve as resolve14 } from "node:path";
 function anchorLayout(rawLibDir) {
   const libDir = resolve14(rawLibDir);
   const segments = libDir.split(/[/\\]/);
@@ -353,7 +353,7 @@ function hostPlatformKey() {
   return `${os}-${arch}`;
 }
 function bundleJsonCandidates(bundleDir) {
-  return [join3(bundleDir, "lib", "beeline", "bundle.json"), join3(bundleDir, "bundle.json")];
+  return [join6(bundleDir, "lib", "beeline", "bundle.json"), join6(bundleDir, "bundle.json")];
 }
 async function readBundleJson(bundleDir) {
   let raw;
@@ -377,7 +377,7 @@ async function readBundleJson(bundleDir) {
   }
 }
 function updateStatePath(layout) {
-  return join3(layout.releasesRoot, ".state", "update-state.json");
+  return join6(layout.releasesRoot, ".state", "update-state.json");
 }
 async function readUpdateState(layout) {
   try {
@@ -387,8 +387,8 @@ async function readUpdateState(layout) {
   }
 }
 async function writeUpdateState(layout, state) {
-  await mkdir8(join3(layout.releasesRoot, ".state"), { recursive: true });
-  await writeFile5(updateStatePath(layout), `${JSON.stringify(state, null, 2)}
+  await mkdir9(join6(layout.releasesRoot, ".state"), { recursive: true });
+  await writeFile6(updateStatePath(layout), `${JSON.stringify(state, null, 2)}
 `, "utf8");
 }
 async function readInstalledBundleIdentity(layout, _state = {}) {
@@ -469,7 +469,7 @@ function run(command, args, timeoutMs) {
   });
 }
 function entrypointCandidates(bundleDir) {
-  return [join3(bundleDir, BUNDLE_ENTRYPOINT), join3(bundleDir, "beeline-cli.mjs")];
+  return [join6(bundleDir, BUNDLE_ENTRYPOINT), join6(bundleDir, "beeline-cli.mjs")];
 }
 async function resolveBundleEntrypoint(bundleDir) {
   for (const candidate of entrypointCandidates(bundleDir)) {
@@ -491,8 +491,8 @@ async function stageRelease(layout, manifestUrl, published, opts = {}) {
   const fetchImpl = opts.fetchImpl ?? fetch;
   const log = opts.logger ?? ((line) => console.log(`[body] self-update: ${line}`));
   const releaseId = sanitizeReleaseId(published.commit ?? published.version ?? `release-${Date.now()}`);
-  const releaseDir = join3(layout.releasesRoot, releaseId);
-  const okMarker = join3(releaseDir, ".stage-ok");
+  const releaseDir = join6(layout.releasesRoot, releaseId);
+  const okMarker = join6(releaseDir, ".stage-ok");
   let previouslyVerified = false;
   try {
     const recorded = await readFile4(okMarker, "utf8");
@@ -501,8 +501,8 @@ async function stageRelease(layout, manifestUrl, published, opts = {}) {
     previouslyVerified = true;
   } catch {
   }
-  await mkdir8(releaseDir, { recursive: true });
-  const tempArchive = join3(layout.releasesRoot, `.download-${releaseId}-${process.pid}.tar.gz`);
+  await mkdir9(releaseDir, { recursive: true });
+  const tempArchive = join6(layout.releasesRoot, `.download-${releaseId}-${process.pid}.tar.gz`);
   try {
     log(`downloading ${published.file}`);
     const response = await fetchImpl(archiveUrlFor(manifestUrl, published.file), {
@@ -522,7 +522,7 @@ async function stageRelease(layout, manifestUrl, published, opts = {}) {
     if (actual !== published.sha256.toLowerCase()) {
       throw new Error(`checksum mismatch for ${published.file}: expected ${published.sha256}, got ${actual} \u2014 aborting without touching the installed bundle`);
     }
-    await writeFile5(tempArchive, Buffer.concat(chunks), { mode: 384 });
+    await writeFile6(tempArchive, Buffer.concat(chunks), { mode: 384 });
     const entries = (await new Promise((resolveList, rejectList) => {
       const child = spawn4("tar", ["-tzf", tempArchive], { stdio: ["ignore", "pipe", "inherit"] });
       let out = "";
@@ -542,18 +542,18 @@ async function stageRelease(layout, manifestUrl, published, opts = {}) {
       throw new Error(`extracting bundle failed: ${extract2.stderr}`);
     for (const relative3 of requiredBundlePaths()) {
       try {
-        await access(join3(releaseDir, relative3), fsConstants.F_OK);
+        await access(join6(releaseDir, relative3), fsConstants.F_OK);
       } catch {
         throw new Error(`staged bundle is missing ${relative3}`);
       }
     }
     if (opts.smokeTestCli !== false) {
-      const probe = await run(process.execPath, [join3(releaseDir, BUNDLE_ENTRYPOINT), "--version"], 6e4);
+      const probe = await run(process.execPath, [join6(releaseDir, BUNDLE_ENTRYPOINT), "--version"], 6e4);
       if (probe.status !== 0) {
         throw new Error(`staged bundle failed its startup smoke test (--version exited ${probe.status})${probe.stderr ? `: ${probe.stderr.trim()}` : ""}`);
       }
     }
-    await writeFile5(okMarker, `${published.sha256}
+    await writeFile6(okMarker, `${published.sha256}
 `, "utf8");
     log(`staged release ${releaseId} (sha256 verified)`);
     return releaseId;
@@ -581,26 +581,26 @@ function forwarderScript(tool) {
 }
 async function replaceFile(path, contents, mode) {
   const temp = `${path}.new-${process.pid}`;
-  await writeFile5(temp, contents, { mode });
+  await writeFile6(temp, contents, { mode });
   await chmod3(temp, mode);
   await rename3(temp, path);
 }
 async function activateRelease(layout, releaseId) {
-  const releaseDir = join3(layout.releasesRoot, releaseId);
-  await access(join3(releaseDir, BUNDLE_ENTRYPOINT), fsConstants.F_OK);
-  await mkdir8(layout.releasesRoot, { recursive: true });
-  await mkdir8(layout.binDir, { recursive: true });
+  const releaseDir = join6(layout.releasesRoot, releaseId);
+  await access(join6(releaseDir, BUNDLE_ENTRYPOINT), fsConstants.F_OK);
+  await mkdir9(layout.releasesRoot, { recursive: true });
+  await mkdir9(layout.binDir, { recursive: true });
   let previousReleaseId = await activeReleaseId(layout);
   const kind = await pathKind(layout.libDir);
   if (kind === "directory") {
     const legacyIdentity = await readBundleJson(layout.libDir);
     const legacyId = sanitizeReleaseId(legacyIdentity?.commit ?? legacyIdentity?.version ?? `legacy-${Date.now()}`);
-    const legacyDir = join3(layout.releasesRoot, legacyId);
+    const legacyDir = join6(layout.releasesRoot, legacyId);
     try {
       await access(legacyDir, fsConstants.F_OK);
       previousReleaseId = `${legacyId}-${Date.now()}`;
-      await rename3(layout.libDir, join3(layout.releasesRoot, previousReleaseId));
-      await normalizeLegacyBundleShape(join3(layout.releasesRoot, previousReleaseId));
+      await rename3(layout.libDir, join6(layout.releasesRoot, previousReleaseId));
+      await normalizeLegacyBundleShape(join6(layout.releasesRoot, previousReleaseId));
     } catch {
       await rename3(layout.libDir, legacyDir);
       await normalizeLegacyBundleShape(legacyDir);
@@ -609,18 +609,18 @@ async function activateRelease(layout, releaseId) {
   }
   const tempLink = `${layout.libDir}.new-${process.pid}`;
   await rm4(tempLink, { force: true });
-  await symlink2(join3("beeline-releases", releaseId), tempLink);
+  await symlink2(join6("beeline-releases", releaseId), tempLink);
   await rename3(tempLink, layout.libDir);
   await fsyncDir(dirname8(layout.libDir));
   await writeBinForwarders(layout, releaseDir);
   return { previousReleaseId };
 }
 async function normalizeLegacyBundleShape(bundleDir) {
-  const innerLib = join3(bundleDir, "lib", "beeline");
+  const innerLib = join6(bundleDir, "lib", "beeline");
   let anyFlat = false;
   for (const name of LEGACY_FLAT_BUNDLE_FILES) {
     try {
-      await access(join3(bundleDir, name), fsConstants.F_OK);
+      await access(join6(bundleDir, name), fsConstants.F_OK);
       anyFlat = true;
       break;
     } catch {
@@ -628,31 +628,31 @@ async function normalizeLegacyBundleShape(bundleDir) {
   }
   if (!anyFlat)
     return;
-  await mkdir8(innerLib, { recursive: true });
+  await mkdir9(innerLib, { recursive: true });
   for (const name of LEGACY_FLAT_BUNDLE_FILES) {
     try {
-      await access(join3(innerLib, name), fsConstants.F_OK);
+      await access(join6(innerLib, name), fsConstants.F_OK);
       continue;
     } catch {
     }
-    await rename3(join3(bundleDir, name), join3(innerLib, name)).catch(() => void 0);
+    await rename3(join6(bundleDir, name), join6(innerLib, name)).catch(() => void 0);
   }
 }
 async function writeBinForwarders(layout, activeBundleRoot) {
   for (const tool of FORWARDER_TOOLS) {
-    const target = join3(activeBundleRoot, "bin", tool);
+    const target = join6(activeBundleRoot, "bin", tool);
     try {
       await access(target, fsConstants.X_OK);
     } catch {
       continue;
     }
-    await replaceFile(join3(layout.binDir, tool), forwarderScript(tool), 493);
+    await replaceFile(join6(layout.binDir, tool), forwarderScript(tool), 493);
   }
 }
 async function repairInstallForwarders(layout, opts = {}) {
   if (await pathKind(layout.libDir) !== "symlink")
     return false;
-  const forwarderPath = join3(layout.binDir, "beeline");
+  const forwarderPath = join6(layout.binDir, "beeline");
   let current;
   try {
     current = await readFile4(forwarderPath, "utf8");
@@ -661,25 +661,25 @@ async function repairInstallForwarders(layout, opts = {}) {
   }
   if (current === forwarderScript("beeline"))
     return false;
-  await mkdir8(layout.binDir, { recursive: true });
+  await mkdir9(layout.binDir, { recursive: true });
   await writeBinForwarders(layout, layout.libDir);
   opts.logger?.(`[body] self-update: repaired <prefix>/bin forwarders to follow the active-bundle anchor (${layout.libDir})`);
   return true;
 }
 async function rollbackToPreviousRelease(layout, previousReleaseId) {
-  const releaseDir = join3(layout.releasesRoot, previousReleaseId);
+  const releaseDir = join6(layout.releasesRoot, previousReleaseId);
   const entrypoint = await resolveBundleEntrypoint(releaseDir);
   if (!entrypoint) {
     throw new Error(`release ${previousReleaseId} has no runnable CLI entrypoint`);
   }
   const tempLink = `${layout.libDir}.rollback-${process.pid}`;
   await rm4(tempLink, { force: true });
-  await symlink2(join3("beeline-releases", previousReleaseId), tempLink);
+  await symlink2(join6("beeline-releases", previousReleaseId), tempLink);
   await rename3(tempLink, layout.libDir);
   await fsyncDir(dirname8(layout.libDir));
 }
 function updateAttemptPath(layout) {
-  return join3(layout.releasesRoot, ".state", "update-attempt.json");
+  return join6(layout.releasesRoot, ".state", "update-attempt.json");
 }
 async function readUpdateAttempt(layout) {
   try {
@@ -693,10 +693,10 @@ async function readUpdateAttempt(layout) {
   }
 }
 async function writeUpdateAttempt(layout, record2) {
-  await mkdir8(join3(layout.releasesRoot, ".state"), { recursive: true });
+  await mkdir9(join6(layout.releasesRoot, ".state"), { recursive: true });
   const path = updateAttemptPath(layout);
   const staged = `${path}.${process.pid}.tmp`;
-  await writeFile5(staged, `${JSON.stringify(record2, null, 2)}
+  await writeFile6(staged, `${JSON.stringify(record2, null, 2)}
 `, { mode: 384 });
   await rename3(staged, path);
 }
@@ -956,7 +956,7 @@ var init_self_update = __esm({
 
 // apps/body/dist/cli.js
 import { dirname as dirname13, resolve as resolve21 } from "node:path";
-import { readFile as readFile9, unlink as unlink3, writeFile as writeFile11 } from "node:fs/promises";
+import { readFile as readFile9, unlink as unlink3, writeFile as writeFile12 } from "node:fs/promises";
 import { stdin as stdin4, stdout as stdout5 } from "node:process";
 
 // node_modules/@clack/core/dist/index.mjs
@@ -2954,6 +2954,12 @@ function cornerAutonomyModeCandidates(agentCommand) {
     return [];
   return ["agent", "edit", "code"];
 }
+function roomModeCandidates(agentCommand, options = {}) {
+  if (options.osSandbox && agentCommand && /(^|[/\\])codex-acp(\.[a-z]+)?$/i.test(agentCommand)) {
+    return ["agent-full-access"];
+  }
+  return ["read-only", "readonly"];
+}
 
 // apps/body/dist/harness-tool-scope.js
 var CLAUDE_TOOL_SCOPE_SETTINGS = { disableClaudeAiConnectors: true };
@@ -3268,6 +3274,7 @@ var AcpClient = class extends EventEmitter {
   sessionCommands = /* @__PURE__ */ new Map();
   supportsStandardSteering = false;
   supportsSessionLoading = false;
+  supportsImagePrompts = false;
   alive = false;
   /** Bounded tail of recent stderr, so a spawn/exit failure's rejection text
    *  carries the real reason (e.g. a harness's own "missing API key" notice)
@@ -3280,6 +3287,7 @@ var AcpClient = class extends EventEmitter {
   agentCwd;
   inheritProcessEnv;
   autoApprove;
+  osSandbox;
   permissionHandler;
   permissionAllowlist;
   constructor(opts) {
@@ -3295,6 +3303,7 @@ var AcpClient = class extends EventEmitter {
       this.agentCwd = opts.agentCwd;
     this.inheritProcessEnv = opts.inheritProcessEnv ?? process.env.BUZZY_BODY_AGENT_ENV_INHERIT === "1";
     this.autoApprove = opts.autoApprovePermissions ?? true;
+    this.osSandbox = opts.osSandbox ?? false;
     this.permissionHandler = opts.permissionHandler;
     this.permissionAllowlist = opts.permissionAllowlist;
   }
@@ -3354,6 +3363,7 @@ var AcpClient = class extends EventEmitter {
     this.supportsStandardSteering = steering?.supported === true;
     const agentCapabilities = initResult.agentCapabilities;
     this.supportsSessionLoading = agentCapabilities?.loadSession === true;
+    this.supportsImagePrompts = agentCapabilities?.promptCapabilities?.image === true;
     this.emit("initialized", initResult);
     this.notify("notifications/initialized", {});
   }
@@ -3400,6 +3410,10 @@ var AcpClient = class extends EventEmitter {
   canLoadSession() {
     return this.supportsSessionLoading;
   }
+  /** Whether this live ACP process accepts `image` prompt blocks (`promptCapabilities.image`). */
+  canPromptWithImages() {
+    return this.supportsImagePrompts;
+  }
   async sessionNew(opts) {
     const params = {
       cwd: opts.cwd,
@@ -3459,7 +3473,7 @@ var AcpClient = class extends EventEmitter {
     if (!mode)
       return;
     const modes = raw.modes;
-    const candidates = mode === "readonly" ? ["read-only", "readonly"] : cornerAutonomyModeCandidates(this.agentLabel);
+    const candidates = mode === "readonly" ? roomModeCandidates(this.agentLabel, { osSandbox: this.osSandbox }) : cornerAutonomyModeCandidates(this.agentLabel);
     const target = modes?.availableModes?.find((candidate) => candidate.id && candidates.includes(candidate.id))?.id;
     if (!target || modes?.currentModeId === target)
       return;
@@ -3506,7 +3520,7 @@ var AcpClient = class extends EventEmitter {
     try {
       const result = await this.request("session/prompt", {
         sessionId,
-        prompt: [{ type: "text", text: text2 }]
+        prompt: typeof text2 === "string" ? [{ type: "text", text: text2 }] : [...text2]
       }, timeoutMs, (id) => {
         requestId = id;
       });
@@ -3874,6 +3888,18 @@ function advertisedChoiceId(choice) {
     return choice.value;
   return void 0;
 }
+function sortModelChoicesNewestFirst(choices) {
+  return choices.map((choice, index) => ({ choice, index })).sort((left, right) => {
+    const leftParts = left.choice.id.match(/\d+/g)?.map(Number) ?? [];
+    const rightParts = right.choice.id.match(/\d+/g)?.map(Number) ?? [];
+    for (let index = 0; index < Math.max(leftParts.length, rightParts.length); index += 1) {
+      const delta = (rightParts[index] ?? -1) - (leftParts[index] ?? -1);
+      if (delta !== 0)
+        return delta;
+    }
+    return left.index - right.index;
+  }).map(({ choice }) => choice);
+}
 function parseAdvertisedConfigOptions(raw, preferredModelId, includeLaunchEffort = false) {
   const configOptions = raw?.configOptions;
   const result = [];
@@ -3903,7 +3929,7 @@ function parseAdvertisedConfigOptions(raw, preferredModelId, includeLaunchEffort
       id,
       category,
       ...typeof record2.currentValue === "string" ? { currentValue: record2.currentValue } : {},
-      options: choices
+      options: category === "model" ? sortModelChoicesNewestFirst(choices) : choices
     });
   }
   const models = raw?.models;
@@ -3929,7 +3955,7 @@ function parseAdvertisedConfigOptions(raw, preferredModelId, includeLaunchEffort
       id: GROK_SESSION_MODEL_AXIS_ID,
       category: "model",
       ...currentModelId ? { currentValue: currentModelId } : {},
-      options: modelChoices
+      options: sortModelChoicesNewestFirst(modelChoices)
     });
   }
   const effortModelId = preferredModelId ?? currentModelId;
@@ -4214,14 +4240,15 @@ async function applyRuntimeModelPreflight(config, agent, selection, validate = v
 import { execFile as execFile3 } from "node:child_process";
 import { createHash } from "node:crypto";
 import { existsSync as existsSync4, mkdirSync } from "node:fs";
-import { mkdir as mkdir5, rm as rm3 } from "node:fs/promises";
+import { mkdir as mkdir6, rm as rm3 } from "node:fs/promises";
 import { dirname as dirname4, resolve as resolve10 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 
 // apps/body/dist/monolith-corner-turn.js
 import { execFile as execFile2 } from "node:child_process";
-import { mkdir as mkdir3 } from "node:fs/promises";
+import { mkdir as mkdir4 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
+import { join as join4 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 
 // apps/body/dist/agent-home.js
@@ -4241,9 +4268,10 @@ var BEELINE_ROOM_CAPABILITIES = [
   "Tag another agent only when you need something from them: a question, a handoff, a task. Never tag to acknowledge, agree, or say you are ready. If nothing is actionable, do not reply.",
   "Tag the user only when you need a decision or input, or when the task they asked for is finished. Never tag for progress, acknowledgement, or questions the transcript already answers.",
   "Every MCP server mounted into this session is approved tool by tool - use operator and host tools freely; the read-only filesystem sandbox is the boundary, not a tool list. Network web search is enabled.",
+  "Files and photos people share are downloaded for you: read them at the local path named in the prompt (photos may also arrive inline); never fetch the reference URL.",
   "To send a file, call beeline-agent attach_file with a path inside your checkout; it is attached to your reply.",
   "To run something later or repeatedly, call beeline-agent create_schedule (interval in minutes or a 5-field cron, optional maxRuns); list_schedules / delete_schedule manage them.",
-  "When repository work is needed, you MUST call beeline-agent open_corner with a one-paragraph summary of the complete objective. The host-governed call is the only way to start write work.",
+  "When repository work is needed, you MUST call beeline-agent open_corner with a complete objective of no more than 24 words. The host-governed call is the only way to start write work.",
   "Never claim an action or reply happened unless the prompt or a tool result proves it."
 ].join(" ");
 var BEELINE_DM_CAPABILITIES = [
@@ -4251,6 +4279,7 @@ var BEELINE_DM_CAPABILITIES = [
   "This Room is strictly conversational: there is no repository binding and no corner can be opened from here.",
   "The repository filesystem is read-only in this session.",
   "Every MCP server mounted into this session is approved tool by tool - use operator and host tools freely; the read-only filesystem sandbox is the boundary, not a tool list. Network web search is enabled.",
+  "Files and photos people share are downloaded for you: read them at the local path named in the prompt (photos may also arrive inline); never fetch the reference URL.",
   "To send a file, call beeline-agent attach_file with a path inside your checkout; it is attached to your reply.",
   "Tag the person only when you need a decision or input, or when the task they asked for is finished.",
   "Never claim an action or reply happened unless the prompt or a tool result proves it."
@@ -4494,6 +4523,39 @@ var PI_CUSTOM_MODEL_CONFIG = {
   source: ".pi/agent/models.json",
   target: "models.json"
 };
+var OPENROUTER_RELIABLE_PROVIDERS = ["deepinfra", "novita"];
+function withReliableOpenRouterRouting(value) {
+  const root = value && typeof value === "object" && !Array.isArray(value) ? { ...value } : {};
+  const routing = {
+    only: [...OPENROUTER_RELIABLE_PROVIDERS],
+    order: [...OPENROUTER_RELIABLE_PROVIDERS],
+    allow_fallbacks: false,
+    require_parameters: true
+  };
+  if (Array.isArray(root.providers)) {
+    const providers2 = root.providers.map((provider) => provider && typeof provider === "object" ? { ...provider } : provider);
+    const index = providers2.findIndex((provider) => provider && typeof provider === "object" && provider.name === "openrouter");
+    const current2 = index >= 0 ? providers2[index] : { name: "openrouter" };
+    const compat2 = current2.compat && typeof current2.compat === "object" && !Array.isArray(current2.compat) ? { ...current2.compat } : {};
+    current2.compat = { ...compat2, openRouterRouting: routing };
+    if (index >= 0)
+      providers2[index] = current2;
+    else
+      providers2.push(current2);
+    root.providers = providers2;
+    return root;
+  }
+  const providers = root.providers && typeof root.providers === "object" ? { ...root.providers } : {};
+  const current = providers.openrouter && typeof providers.openrouter === "object" && !Array.isArray(providers.openrouter) ? { ...providers.openrouter } : {};
+  const compat = current.compat && typeof current.compat === "object" && !Array.isArray(current.compat) ? { ...current.compat } : {};
+  current.compat = {
+    ...compat,
+    openRouterRouting: routing
+  };
+  providers.openrouter = current;
+  root.providers = providers;
+  return root;
+}
 var CODEX_ROOM_AGENT_LOCKDOWN_TOML = "[agents]\nenabled = false\n";
 var CODEX_ROOM_WEB_SEARCH_TOML = "[features]\nstandalone_web_search = true\n";
 var HOME_SUBDIRS = ["user", "claude", "codex", "grok", "pi", "state", "cache", "tmp"];
@@ -4593,7 +4655,8 @@ async function provisionPiCustomModelConfig(root, operatorHome, failClosed) {
   try {
     const sourceStats = await lstat(source).catch(() => void 0);
     if (!sourceStats) {
-      await unlink(target).catch(() => void 0);
+      await writeIsolatedHarnessFile(target, `${JSON.stringify(withReliableOpenRouterRouting({}), null, 2)}
+`);
       return;
     }
     if (!sourceStats.isFile() || sourceStats.isSymbolicLink() || sourceStats.nlink !== 1) {
@@ -4603,7 +4666,9 @@ async function provisionPiCustomModelConfig(root, operatorHome, failClosed) {
     if (resolvedSource !== source) {
       throw new AgentHomeSecurityError(`Pi custom model config resolves through a link: ${source}`);
     }
-    await writeIsolatedHarnessFile(target, readFileSync4(resolvedSource, "utf8"));
+    const sourceValue = JSON.parse(readFileSync4(resolvedSource, "utf8"));
+    await writeIsolatedHarnessFile(target, `${JSON.stringify(withReliableOpenRouterRouting(sourceValue), null, 2)}
+`);
   } catch (error) {
     await unlink(target).catch(() => void 0);
     if (failClosed)
@@ -4829,6 +4894,88 @@ function harnessStateDirsFromEnv(env) {
   return { stateDirs, ...tmp ? { tmpDir: resolve6(tmp) } : {} };
 }
 
+// apps/body/dist/attachment-delivery.js
+import { mkdir as mkdir2, writeFile as writeFile2 } from "node:fs/promises";
+import { basename as basename4, extname, join as join2 } from "node:path";
+var MAX_ATTACHMENT_BYTES = 25 * 1024 * 1024;
+var FETCH_TIMEOUT_MS = 3e4;
+function safeFileName(attachment, index, taken) {
+  const raw = basename4(attachment.name ?? "").replace(/[^\w.-]+/g, "_").replace(/^\.+/, "");
+  let name = raw || `attachment-${index + 1}`;
+  if (taken.has(name)) {
+    const ext = extname(name);
+    name = `${name.slice(0, name.length - ext.length)}-${index + 1}${ext}`;
+  }
+  taken.add(name);
+  return name;
+}
+async function deliverAttachments(attachments, dir, fetchImpl = fetch) {
+  if (!attachments.length)
+    return [];
+  const taken = /* @__PURE__ */ new Set();
+  await mkdir2(dir, { recursive: true });
+  return Promise.all(attachments.map(async (attachment, index) => {
+    const tooLarge = (bytes) => ({
+      attachment,
+      reason: `skipped: ${bytes} bytes exceeds the ${MAX_ATTACHMENT_BYTES}-byte limit`
+    });
+    if (attachment.size && attachment.size > MAX_ATTACHMENT_BYTES)
+      return tooLarge(attachment.size);
+    try {
+      const response = await fetchImpl(attachment.url, {
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+      });
+      if (!response.ok)
+        throw new Error(`HTTP ${response.status}`);
+      const declared = Number(response.headers.get("content-length") ?? 0);
+      if (declared > MAX_ATTACHMENT_BYTES)
+        return tooLarge(declared);
+      const bytes = Buffer.from(await response.arrayBuffer());
+      if (bytes.length > MAX_ATTACHMENT_BYTES)
+        return tooLarge(bytes.length);
+      const path = join2(dir, safeFileName(attachment, index, taken));
+      await writeFile2(path, bytes);
+      const mimeType = attachment.mimeType ?? response.headers.get("content-type") ?? "";
+      return {
+        attachment,
+        path,
+        ...mimeType.startsWith("image/") ? { image: { data: bytes.toString("base64"), mimeType } } : {}
+      };
+    } catch (error) {
+      return {
+        attachment,
+        reason: `download failed: ${error instanceof Error ? error.message : String(error)}`
+      };
+    }
+  }));
+}
+function withoutImageData(delivered) {
+  return delivered.map(({ image: _image, ...rest }) => rest);
+}
+function attachmentPromptLines(attachments, delivered) {
+  if (!attachments.length)
+    return [];
+  const byUrl = new Map(delivered?.map((entry) => [entry.attachment.url, entry]) ?? []);
+  return [
+    "Attachments shared with this message (read the local file; the trailing URL is only a reference, do not download it):",
+    ...attachments.map((attachment) => {
+      const kind = attachment.mimeType?.startsWith("image/") ? "image" : "file";
+      const metadata = [attachment.mimeType, attachment.size ? `${attachment.size} bytes` : ""].filter(Boolean).join(", ");
+      const entry = byUrl.get(attachment.url);
+      const location = entry?.path ? `local file ${entry.path}` : entry?.reason ?? "no local copy in this session";
+      return `- ${kind}: ${attachment.name ?? "attachment"}${metadata ? ` (${metadata})` : ""}: ${location} (source ${attachment.url})`;
+    })
+  ];
+}
+function attachmentImageBlocks(delivered, harnessAcceptsImages) {
+  if (!harnessAcceptsImages)
+    return [];
+  return delivered.flatMap((entry) => entry.image ? [{ type: "image", data: entry.image.data, mimeType: entry.image.mimeType }] : []);
+}
+function promptWithImages(text2, images) {
+  return images.length ? [{ type: "text", text: text2 }, ...images] : text2;
+}
+
 // apps/body/dist/reply-sanitizer.js
 var CODEX_NOTICE = /^(?:⚠(?:️)?\s*)?(?:warning|notice):\s*(?:skill|tool|plugin) descriptions?\b.*\b(?:context budget|budget limit)\b/i;
 var CODEX_CONTINUATION = /^(?:codex can still (?:see|access|read)|(?:use|open|read)\s+\S*skill\.md\b)/i;
@@ -5311,7 +5458,7 @@ function detectBwrapSandbox(options = {}) {
 import { randomBytes as randomBytes5 } from "node:crypto";
 import { execFile } from "node:child_process";
 import { closeSync, openSync } from "node:fs";
-import { mkdir as mkdir2, readFile, readdir as readdir2, rename as rename2, stat, writeFile as writeFile2 } from "node:fs/promises";
+import { mkdir as mkdir3, readFile, readdir as readdir2, rename as rename2, stat, writeFile as writeFile3 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { dirname as dirname3, resolve as resolve9 } from "node:path";
 import { spawn as spawn2 } from "node:child_process";
@@ -9701,7 +9848,7 @@ function alphabet(letters) {
   };
 }
 // @__NO_SIDE_EFFECTS__
-function join2(separator = "") {
+function join3(separator = "") {
   astr("join", separator);
   return {
     encode: (from) => {
@@ -9831,8 +9978,8 @@ var base64 = hasBase64Builtin ? {
   decode(s) {
     return decodeBase64Builtin(s, false);
   }
-} : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ padding(6), /* @__PURE__ */ join2(""));
-var BECH_ALPHABET = /* @__PURE__ */ chain(/* @__PURE__ */ alphabet("qpzry9x8gf2tvdw0s3jn54khce6mua7l"), /* @__PURE__ */ join2(""));
+} : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ padding(6), /* @__PURE__ */ join3(""));
+var BECH_ALPHABET = /* @__PURE__ */ chain(/* @__PURE__ */ alphabet("qpzry9x8gf2tvdw0s3jn54khce6mua7l"), /* @__PURE__ */ join3(""));
 var POLYMOD_GENERATORS = [996825010, 642813549, 513874426, 1027748829, 705979059];
 function bech32Polymod(pre) {
   const b = pre >> 25;
@@ -13888,9 +14035,9 @@ function runtimeAgentCommand(runtime) {
 }
 async function writeRuntimeRecord(runtime) {
   const path = runtimeConfigPath(runtime.supervisorRoot, runtime.agent.publicKey);
-  await mkdir2(dirname3(path), { recursive: true, mode: 448 });
+  await mkdir3(dirname3(path), { recursive: true, mode: 448 });
   const staged = `${path}.${process.pid}.tmp`;
-  await writeFile2(staged, `${JSON.stringify(runtime, null, 2)}
+  await writeFile3(staged, `${JSON.stringify(runtime, null, 2)}
 `, { mode: 384 });
   await rename2(staged, path);
   return path;
@@ -14029,7 +14176,7 @@ async function stopRuntimeDaemon(path, opts = {}) {
 }
 async function launchRuntimeDaemon(configPath, opts = {}) {
   const directory = dirname3(configPath);
-  await mkdir2(directory, { recursive: true, mode: 448 });
+  await mkdir3(directory, { recursive: true, mode: 448 });
   const foreground = opts.foreground === true;
   const output = foreground ? "inherit" : openSync(resolve9(directory, "daemon.log"), "a", 384);
   const entrypoint = opts.entrypoint ?? process.argv[1];
@@ -14053,7 +14200,7 @@ async function launchRuntimeDaemon(configPath, opts = {}) {
 async function removeAgentRuntime(runtime) {
   const source = runtimeDirectory(runtime.supervisorRoot, runtime.agent.publicKey);
   const deletedRoot = resolve9(runtime.supervisorRoot, "beeline", "deleted-runtimes");
-  await mkdir2(deletedRoot, { recursive: true, mode: 448 });
+  await mkdir3(deletedRoot, { recursive: true, mode: 448 });
   const target = resolve9(deletedRoot, `${runtime.agent.publicKey}-${Date.now()}`);
   await rename2(source, target);
   return target;
@@ -14206,6 +14353,8 @@ var MonolithCornerTurnLoop = class {
   forcedStop = false;
   draftTail = Promise.resolve();
   activityTail = Promise.resolve();
+  /** Session scratch directory attachments are downloaded into (`TMPDIR/beeline-attachments`). */
+  attachmentDir;
   constructor(options) {
     this.options = options;
     this.agent = runtimeIdentity(options.runtime.agent);
@@ -14243,7 +14392,7 @@ var MonolithCornerTurnLoop = class {
       }),
       this.roster()
     ]);
-    await mkdir3(this.options.worktreePath, { recursive: true });
+    await mkdir4(this.options.worktreePath, { recursive: true });
     const homeOverlay = this.options.config.agentHomeRoot ? await prepareRoomAgentHome({
       root: this.options.config.agentHomeRoot,
       sharedSkills: this.options.config.sharedSkills ?? [],
@@ -14264,8 +14413,9 @@ var MonolithCornerTurnLoop = class {
     }, selection);
     const operatorHome = this.options.config.operatorHome ?? homedir5();
     const { stateDirs, tmpDir } = harnessStateDirsFromEnv(agentEnv);
+    this.attachmentDir = tmpDir ? join4(tmpDir, "beeline-attachments") : void 0;
     const homeStateDirs = harnessHomeStateDirs(command, agentEnv.HOME ?? operatorHome);
-    await Promise.all(homeStateDirs.map((dir) => mkdir3(dir, { recursive: true })));
+    await Promise.all(homeStateDirs.map((dir) => mkdir4(dir, { recursive: true })));
     const spawnCommand = wrapAgentCommand({
       bwrapPath: this.options.config.bwrapPath,
       spec: {
@@ -14330,6 +14480,7 @@ var MonolithCornerTurnLoop = class {
         "Work normally with the full coding tools. Commit and push only this feature branch. Use gh to open its pull request.",
         "PR-opening turn rule: as soon as a pull request exists, print its full GitHub URL as your final response and end the turn immediately. Do not call pr_checks_status in that same turn and do not wait for checks inside it. Then stay idle until a later corner fact or human message starts another turn.",
         'Never merge because local tests pass or because gh reports passing checks. On a later turn triggered by a server-posted checks-passed note, call beeline-agent pr_checks_status. Merge only when it returns checks="passed", held=false, and approvalPending=false.',
+        "Merge the PR yourself only after the checks-passed event shows every check green; if any check failed or is still running, say exactly which and stop - never merge red.",
         "If any human in this corner says hold or do not merge, do not merge until a later human explicitly resumes it.",
         "Do not tag the user when a corner turn finishes: the server posts the merge summary card and its push already cover completion. Tag a human only mid-turn, and only when you need a decision or input.",
         "A human approval in the app asks the server to merge. When approval is pending, wait for the server close request instead of racing it with gh. If checks passed, no hold exists, and no approval is pending, merge the pull request yourself with gh.",
@@ -14355,7 +14506,7 @@ var MonolithCornerTurnLoop = class {
       }
     };
   }
-  async prompt(requestId, trigger) {
+  async prompt(requestId, trigger, attachments = []) {
     const { api, cornerId } = this.options;
     await api.execute("postAgentTurnReceipt", {
       agentId: this.agent.publicKey,
@@ -14369,9 +14520,10 @@ var MonolithCornerTurnLoop = class {
         if (this.forcedStop)
           throw new Error("corner turn stopped for daemon handoff");
         this.busy = true;
-        const [conversation, roster] = await Promise.all([
+        const [conversation, roster, delivered] = await Promise.all([
           api.execute("getRoomConversation", { roomId: cornerId, limit: 200 }),
-          this.roster()
+          this.roster(),
+          this.attachmentDir && attachments.length ? deliverAttachments(attachments, join4(this.attachmentDir, requestId.replace(/[^\w-]/g, "_")), this.options.fetchImpl) : Promise.resolve([])
         ]);
         const names = new Map(roster.members.map((member) => [member.identityId, member.name]));
         const transcript = conversation.items.slice(-120).map((message) => `${names.get(message.authorId) ?? "Beeline"} [${message.type}]: ${message.body}`).join("\n");
@@ -14381,8 +14533,8 @@ var MonolithCornerTurnLoop = class {
 ${this.options.objective}`,
           transcript ? `Corner transcript:
 ${transcript}` : "",
-          `Newest trigger:
-${trigger}`,
+          [`Newest trigger:
+${trigger}`, ...attachmentPromptLines(attachments, delivered)].join("\n"),
           "Continue the objective. Obey the PR checks and human hold rules in your session instructions.",
           MAINTAIN_ASSIGNED_IDENTITY_DIRECTIVE
         ].filter(Boolean).join("\n\n");
@@ -14439,7 +14591,7 @@ ${trigger}`,
             });
           });
         };
-        const result = await this.client.sessionPrompt(sessionId, prompt, 12e4, (_delta, full) => {
+        const result = await this.client.sessionPrompt(sessionId, promptWithImages(prompt, attachmentImageBlocks(delivered, this.client.canPromptWithImages())), 12e4, (_delta, full) => {
           postNarrationSegments(full);
           this.draftTail = this.draftTail.catch(() => void 0).then(() => api.execute("postAgentDraft", {
             agentId: this.agent.publicKey,
@@ -14533,7 +14685,7 @@ ${pullRequest}`,
               });
               if (!authority.member || authority.principalKind !== "human")
                 continue;
-              await this.prompt(item.id, item.body);
+              await this.prompt(item.id, item.body, item.attachments);
               pollWithoutWait = true;
               continue;
             }
@@ -14574,8 +14726,9 @@ async function wait(ms, signal) {
 }
 
 // apps/body/dist/monolith-room-turn.js
-import { mkdir as mkdir4 } from "node:fs/promises";
+import { mkdir as mkdir5 } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
+import { join as join5 } from "node:path";
 
 // packages/api-contract/dist/scheduled-prompts.js
 var SCHEDULE_SCHEDULER_NAME = "Beeline Scheduler";
@@ -14641,6 +14794,10 @@ var MonolithRoomTurnLoop = class {
   draftTail = Promise.resolve();
   activeTurn;
   queuedTurns = [];
+  /** Session scratch directory attachments are downloaded into (`TMPDIR/beeline-attachments`). */
+  attachmentDir;
+  /** Local copies already delivered this session, by message id, so transcript renders reuse them. */
+  deliveredAttachments = /* @__PURE__ */ new Map();
   constructor(options) {
     this.options = options;
     this.agent = runtimeIdentity(options.runtime.agent);
@@ -14667,6 +14824,17 @@ var MonolithRoomTurnLoop = class {
       workspaceId: this.options.workspaceId
     });
   }
+  /** Download a message's attachments into the session scratch directory once. */
+  async deliver(item) {
+    if (!item.attachments.length || !this.attachmentDir)
+      return [];
+    const cached = this.deliveredAttachments.get(item.id);
+    if (cached)
+      return cached;
+    const delivered = await deliverAttachments(item.attachments, join5(this.attachmentDir, item.id.replace(/[^\w-]/g, "_")), this.options.fetchImpl);
+    this.deliveredAttachments.set(item.id, withoutImageData(delivered));
+    return delivered;
+  }
   async activate() {
     if (this.client?.isAlive && this.sessionId)
       return this.sessionId;
@@ -14679,7 +14847,7 @@ var MonolithRoomTurnLoop = class {
       this.options.api.execute("getRoomRepositoryState", { roomId: this.options.roomId })
     ]);
     const directMessage = Array.isArray(repositoryState.directParticipants) && repositoryState.directParticipants.length === 2;
-    await mkdir4(this.options.cwd, { recursive: true });
+    await mkdir5(this.options.cwd, { recursive: true });
     const homeOverlay = this.options.config.agentHomeRoot ? await prepareRoomAgentHome({
       root: this.options.config.agentHomeRoot,
       sharedSkills: this.options.config.sharedSkills ?? [],
@@ -14695,8 +14863,9 @@ var MonolithRoomTurnLoop = class {
     }, selection);
     const operatorHome = this.options.config.operatorHome ?? homedir6();
     const { stateDirs, tmpDir } = harnessStateDirsFromEnv(agentEnv);
+    this.attachmentDir = tmpDir ? join5(tmpDir, "beeline-attachments") : void 0;
     const homeStateDirs = harnessHomeStateDirs(command, agentEnv.HOME ?? operatorHome);
-    await Promise.all(homeStateDirs.map((dir) => mkdir4(dir, { recursive: true })));
+    await Promise.all(homeStateDirs.map((dir) => mkdir5(dir, { recursive: true })));
     const spawnCommand = wrapAgentCommand({
       bwrapPath: this.options.config.bwrapPath,
       spec: {
@@ -14716,6 +14885,9 @@ var MonolithRoomTurnLoop = class {
       agentEnv,
       agentCwd: this.options.cwd,
       agentLabel: command,
+      // `bwrapPath` is set only when `detectBwrapSandbox` passed its self-test
+      // (`config.ts`), which is exactly when `wrapAgentCommand` above wraps.
+      osSandbox: Boolean(this.options.config.bwrapPath),
       autoApprovePermissions: false,
       permissionAllowlist: isRoomMcpPermissionRequest
     };
@@ -14796,11 +14968,11 @@ var MonolithRoomTurnLoop = class {
     active.steers.push(item);
     active.steerTail = active.steerTail.catch(() => void 0).then(async () => {
       try {
-        const roster = await this.roster();
+        const [roster, delivered] = await Promise.all([this.roster(), this.deliver(item)]);
         const author = roster.members.find((member) => member.identityId === item.authorId)?.name ?? item.authorId.slice(0, 12);
         await this.client.sessionSteer(this.sessionId, [
           `Human steer received while the current turn is running from ${author}:`,
-          roomMessagePrompt("", item.body, item.attachments),
+          roomMessagePrompt("", item.body, item.attachments, delivered),
           "Adjust the current work now. Keep the original request and earlier messages as context."
         ].join("\n\n"));
       } catch (error) {
@@ -14829,18 +15001,19 @@ var MonolithRoomTurnLoop = class {
         activity: [{ kind: "thinking", title: "Working", status: "in_progress" }]
       });
       await this.options.scheduler.run(this.options.roomId, this.lifecycle(), async () => {
-        const [conversation, roster] = await Promise.all([
+        const [conversation, roster, delivered] = await Promise.all([
           api.execute("getRoomConversation", { roomId: this.options.roomId, limit: 200 }),
-          this.roster()
+          this.roster(),
+          this.deliver(item)
         ]);
         const names = new Map(roster.members.map((member) => [member.identityId, member.name]));
-        const transcript = conversation.items.filter((message) => message.type === "message" && message.id !== item.id && !active.steers.some((steerItem) => steerItem.id === message.id)).slice(-80).map((message) => roomMessagePrompt(names.get(message.authorId) ?? message.authorId.slice(0, 12), message.body, message.attachments)).join("\n");
+        const transcript = conversation.items.filter((message) => message.type === "message" && message.id !== item.id && !active.steers.some((steerItem) => steerItem.id === message.id)).slice(-80).map((message) => roomMessagePrompt(names.get(message.authorId) ?? message.authorId.slice(0, 12), message.body, message.attachments, this.deliveredAttachments.get(message.id))).join("\n");
         const prompt = [
           this.turnInstructionPrefix,
           transcript ? `Room conversation so far:
 ${transcript}` : "",
           `Newest message from ${isScheduledPrompt(item, this.agent.publicKey) ? SCHEDULE_SCHEDULER_NAME : names.get(item.authorId) ?? item.authorId.slice(0, 12)}:`,
-          roomMessagePrompt("", item.body, item.attachments),
+          roomMessagePrompt("", item.body, item.attachments, delivered),
           [
             "Write only the substantive Room message you want the human to read.",
             "Do not repeat or paraphrase these instructions.",
@@ -14850,7 +15023,7 @@ ${transcript}` : "",
         ].filter(Boolean).join("\n\n");
         const sessionId = this.sessionId;
         const turnId = item.id;
-        let nextPrompt = prompt;
+        let nextPrompt = promptWithImages(prompt, attachmentImageBlocks(delivered, this.client.canPromptWithImages()));
         let result;
         for (; ; ) {
           let promptError;
@@ -14884,7 +15057,7 @@ ${transcript}` : "",
             "The previous run was cancelled because its harness could not accept every live steer.",
             "Resume the same turn. Keep the original request and everything that happened before it was cancelled.",
             "Human messages that arrived after the original request, in transcript order:",
-            ...active.steers.map((steerItem) => roomMessagePrompt(steerItem.authorId.slice(0, 12), steerItem.body, steerItem.attachments)),
+            ...active.steers.map((steerItem) => roomMessagePrompt(steerItem.authorId.slice(0, 12), steerItem.body, steerItem.attachments, this.deliveredAttachments.get(steerItem.id))),
             "Continue now and answer the updated request without erasing the earlier context."
           ].join("\n\n");
         }
@@ -15004,20 +15177,10 @@ ${transcript}` : "",
     }
   }
 };
-function roomMessagePrompt(author, body, attachments) {
+function roomMessagePrompt(author, body, attachments, delivered) {
   const message = body.trim() || "(shared attachments)";
   const rendered = author ? `${author}: ${message}` : message;
-  if (!attachments.length)
-    return rendered;
-  return [
-    rendered,
-    "Attachments available to this turn (use the capability URL when the task requires the file):",
-    ...attachments.map((attachment) => {
-      const kind = attachment.mimeType?.startsWith("image/") ? "image" : "file";
-      const metadata = [attachment.mimeType, attachment.size ? `${attachment.size} bytes` : ""].filter(Boolean).join(", ");
-      return `- ${kind}: ${attachment.name ?? "attachment"}${metadata ? ` (${metadata})` : ""}: ${attachment.url}`;
-    })
-  ].join("\n");
+  return [rendered, ...attachmentPromptLines(attachments, delivered)].join("\n");
 }
 async function wait2(ms, signal) {
   if (signal?.aborted)
@@ -15617,7 +15780,7 @@ var RoomRuntimeCoordinator = class {
     const targetBranch = repository.targetBranch || "main";
     const checkoutId = createHash("sha256").update(`${remote}\0${targetBranch}`).digest("hex").slice(0, 24);
     const path = resolve10(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
-    await mkdir5(dirname4(path), { recursive: true, mode: 448 });
+    await mkdir6(dirname4(path), { recursive: true, mode: 448 });
     const token = remote.startsWith("https://github.com/") ? await this.options.daemonApi.execute("getRoomGitHubToken", { roomId }) : void 0;
     const env = token ? githubGitEnv(token.token) : process.env;
     if (!existsSync4(resolve10(path, ".git"))) {
@@ -15740,8 +15903,8 @@ var RoomRuntimeCoordinator = class {
     const repositoryHash = createHash("sha256").update(remote).digest("hex").slice(0, 24);
     const gitCommonDir = resolve10(this.runtime.supervisorRoot, "beeline", "repositories", `${repositoryHash}.git`);
     const path = resolve10(this.runtime.supervisorRoot, "beeline", "corners", input.cornerId);
-    await mkdir5(dirname4(gitCommonDir), { recursive: true, mode: 448 });
-    await mkdir5(dirname4(path), { recursive: true, mode: 448 });
+    await mkdir6(dirname4(gitCommonDir), { recursive: true, mode: 448 });
+    await mkdir6(dirname4(path), { recursive: true, mode: 448 });
     const authEnv = githubGitEnv(input.token);
     if (!existsSync4(resolve10(gitCommonDir, "HEAD"))) {
       await execFileAsync3("git", ["clone", "--bare", remote, gitCommonDir], {
@@ -16068,7 +16231,7 @@ var import_picocolors = __toESM(require_picocolors(), 1);
 
 // apps/body/dist/systemd.js
 import { execFile as execFile4 } from "node:child_process";
-import { mkdir as mkdir6, readFile as readFile2, writeFile as writeFile3 } from "node:fs/promises";
+import { mkdir as mkdir7, readFile as readFile2, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir7 } from "node:os";
 import { dirname as dirname5, resolve as resolve12 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
@@ -16141,8 +16304,8 @@ async function installAgentService(publicKey, options = {}) {
   const content = agentServiceUnit();
   const existing = await readFile2(path, "utf8").catch(() => "");
   if (existing !== content) {
-    await mkdir6(dirname5(path), { recursive: true, mode: 448 });
-    await writeFile3(path, content, { mode: 384 });
+    await mkdir7(dirname5(path), { recursive: true, mode: 448 });
+    await writeFile4(path, content, { mode: 384 });
   }
   const run2 = options.run ?? runSystemctl;
   await run2(["daemon-reload"]);
@@ -16297,7 +16460,7 @@ async function runStartCommand(args, interactiveUi) {
 // apps/body/dist/connect-command.js
 import { spawn as spawn5 } from "node:child_process";
 import { createHash as createHash3 } from "node:crypto";
-import { chmod as chmod4, mkdir as mkdir9, readFile as readFile5, unlink as unlink2, writeFile as writeFile6 } from "node:fs/promises";
+import { chmod as chmod4, mkdir as mkdir10, readFile as readFile5, unlink as unlink2, writeFile as writeFile7 } from "node:fs/promises";
 import { dirname as dirname9, resolve as resolve15 } from "node:path";
 import { stdin as stdin3, stdout as stdout4 } from "node:process";
 
@@ -16609,7 +16772,7 @@ async function pairDevice(grant, options = {}) {
 }
 
 // apps/body/dist/provider-key-store.js
-import { chmod as chmod2, mkdir as mkdir7, readFile as readFile3, writeFile as writeFile4 } from "node:fs/promises";
+import { chmod as chmod2, mkdir as mkdir8, readFile as readFile3, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname7, resolve as resolve13 } from "node:path";
 var PROVIDER_KEY_ENV_VARS = {
@@ -16645,8 +16808,8 @@ async function readSavedProviderKey(provider, env = process.env) {
 async function saveProviderKey(provider, key, env = process.env) {
   const path = providerKeyStorePath(env);
   const store = { ...await readProviderKeyStore(env), [provider]: key };
-  await mkdir7(dirname7(path), { recursive: true, mode: 448 });
-  await writeFile4(path, `${JSON.stringify(store, null, 2)}
+  await mkdir8(dirname7(path), { recursive: true, mode: 448 });
+  await writeFile5(path, `${JSON.stringify(store, null, 2)}
 `, { mode: 384 });
   await chmod2(path, 384);
 }
@@ -16929,8 +17092,8 @@ function providerEnvironment(selection) {
   };
 }
 async function writePrivateJson(path, value) {
-  await mkdir9(dirname9(path), { recursive: true, mode: 448 });
-  await writeFile6(path, `${JSON.stringify(value, null, 2)}
+  await mkdir10(dirname9(path), { recursive: true, mode: 448 });
+  await writeFile7(path, `${JSON.stringify(value, null, 2)}
 `, { mode: 384 });
   await chmod4(path, 384);
 }
@@ -16939,9 +17102,9 @@ async function writeProviderEnv(selection, agentPubkey) {
   if (Object.keys(values).length === 0)
     return void 0;
   const path = resolve15(defaultSupervisorRoot(process.env), "beeline", "connect", `${agentPubkey}.env`);
-  await mkdir9(dirname9(path), { recursive: true, mode: 448 });
+  await mkdir10(dirname9(path), { recursive: true, mode: 448 });
   const contents = Object.entries(values).map(([key, value]) => `${key}=${JSON.stringify(value)}`).join("\n");
-  await writeFile6(path, `${contents}
+  await writeFile7(path, `${contents}
 `, { mode: 384 });
   await chmod4(path, 384);
   return path;
@@ -17064,11 +17227,11 @@ init_self_update_manifest();
 // apps/body/dist/managed-update.js
 init_self_update();
 import { spawn as spawn6 } from "node:child_process";
-import { mkdir as mkdir11, rm as rm5, stat as stat2, writeFile as writeFile8 } from "node:fs/promises";
+import { mkdir as mkdir12, rm as rm5, stat as stat2, writeFile as writeFile9 } from "node:fs/promises";
 import { dirname as dirname11, resolve as resolve17 } from "node:path";
 
 // apps/body/dist/update-rollback-alert.js
-import { mkdir as mkdir10, readFile as readFile6, rename as rename4, writeFile as writeFile7 } from "node:fs/promises";
+import { mkdir as mkdir11, readFile as readFile6, rename as rename4, writeFile as writeFile8 } from "node:fs/promises";
 import { dirname as dirname10, resolve as resolve16 } from "node:path";
 function updateRollbackAlertPath(runtimeDir) {
   return resolve16(runtimeDir, "update-rollback-alert.json");
@@ -17076,8 +17239,8 @@ function updateRollbackAlertPath(runtimeDir) {
 async function writeAlert(runtimeDir, alert) {
   const path = updateRollbackAlertPath(runtimeDir);
   const staged = `${path}.${process.pid}.tmp`;
-  await mkdir10(dirname10(path), { recursive: true });
-  await writeFile7(staged, `${JSON.stringify(alert, null, 2)}
+  await mkdir11(dirname10(path), { recursive: true });
+  await writeFile8(staged, `${JSON.stringify(alert, null, 2)}
 `, { mode: 384 });
   await rename4(staged, path);
 }
@@ -17116,11 +17279,11 @@ async function withInstallLock(layout, work, options = {}) {
   const now2 = options.now ?? Date.now;
   const lock = resolve17(layout.releasesRoot, ".state", "install.lock");
   const deadline = now2() + (options.waitMs ?? 1e4);
-  await mkdir11(dirname11(lock), { recursive: true });
+  await mkdir12(dirname11(lock), { recursive: true });
   for (; ; ) {
     try {
-      await mkdir11(lock);
-      await writeFile8(resolve17(lock, "owner"), `${process.pid}
+      await mkdir12(lock);
+      await writeFile9(resolve17(lock, "owner"), `${process.pid}
 ${now2()}
 `, "utf8");
       break;
@@ -17451,7 +17614,7 @@ async function proveLoadedReleaseReady(layout, runtimeDir, loadedRelease, option
   });
   if (!accepted)
     return false;
-  await writeFile8(resolve17(runtimeDir, "daemon-ready.json"), `${JSON.stringify({
+  await writeFile9(resolve17(runtimeDir, "daemon-ready.json"), `${JSON.stringify({
     readyAt: (options.now ?? Date.now)(),
     loadedRelease,
     functionalProof: options.functionalProof
@@ -17656,7 +17819,7 @@ async function runUpdateCommand(args) {
 init_self_update();
 
 // apps/body/dist/daemon-failure.js
-import { mkdir as mkdir12, readFile as readFile7, rename as rename5, rm as rm6, writeFile as writeFile9 } from "node:fs/promises";
+import { mkdir as mkdir13, readFile as readFile7, rename as rename5, rm as rm6, writeFile as writeFile10 } from "node:fs/promises";
 import { dirname as dirname12, resolve as resolve18 } from "node:path";
 var DAEMON_FAILURE_LIMIT = 3;
 var DAEMON_FAILURE_WINDOW_MS = 5 * 6e4;
@@ -17677,8 +17840,8 @@ async function readFailureRecord(runtimeDir) {
 async function writeFailureRecord(runtimeDir, record2) {
   const path = daemonFailurePath(runtimeDir);
   const staged = `${path}.${process.pid}.tmp`;
-  await mkdir12(dirname12(path), { recursive: true, mode: 448 });
-  await writeFile9(staged, `${JSON.stringify(record2, null, 2)}
+  await mkdir13(dirname12(path), { recursive: true, mode: 448 });
+  await writeFile10(staged, `${JSON.stringify(record2, null, 2)}
 `, { mode: 384 });
   await rename5(staged, path);
 }
@@ -17700,7 +17863,7 @@ async function clearDaemonStartFailures(runtimeDir) {
 }
 
 // apps/body/dist/update-functional-probe.js
-import { mkdir as mkdir13, rm as rm7 } from "node:fs/promises";
+import { mkdir as mkdir14, rm as rm7 } from "node:fs/promises";
 import { homedir as homedir10 } from "node:os";
 import { resolve as resolve19 } from "node:path";
 var UPDATE_PROBE_SESSION_TIMEOUT_MS = 1e4;
@@ -17728,7 +17891,7 @@ async function runUpdateFunctionalProbe(input) {
   const cwd = resolve19(root, "checkout");
   const homeRoot = resolve19(root, "agent-home");
   await rm7(root, { recursive: true, force: true });
-  await mkdir13(cwd, { recursive: true, mode: 448 });
+  await mkdir14(cwd, { recursive: true, mode: 448 });
   let client;
   try {
     const agentEnv = {
@@ -17754,7 +17917,7 @@ async function runUpdateFunctionalProbe(input) {
       const { stateDirs, tmpDir } = harnessStateDirsFromEnv(agentEnv);
       const operatorHome = input.config.operatorHome ?? homedir10();
       const homeStateDirs = harnessHomeStateDirs(command, agentEnv.HOME ?? operatorHome);
-      await Promise.all(homeStateDirs.map((dir) => mkdir13(dir, { recursive: true })));
+      await Promise.all(homeStateDirs.map((dir) => mkdir14(dir, { recursive: true })));
       spawnCommand = wrapAgentCommand({
         bwrapPath: input.config.bwrapPath,
         spec: {
@@ -17818,7 +17981,7 @@ async function runUpdateFunctionalProbe(input) {
 }
 
 // apps/body/dist/release-status.js
-import { readFile as readFile8, readdir as readdir3, rename as rename6, writeFile as writeFile10 } from "node:fs/promises";
+import { readFile as readFile8, readdir as readdir3, rename as rename6, writeFile as writeFile11 } from "node:fs/promises";
 import { resolve as resolve20 } from "node:path";
 var DAEMON_RELEASE_STATUS_FILE = "release-status.json";
 var RELEASE_VERSION = /^v\d+\.\d+\.\d+$/;
@@ -17838,7 +18001,7 @@ async function writeDaemonReleaseStatus(runtimeDir, agentPubkey, identity, optio
   };
   const target = resolve20(runtimeDir, DAEMON_RELEASE_STATUS_FILE);
   const temporary = `${target}.${status.pid}.tmp`;
-  await writeFile10(temporary, `${JSON.stringify(status, null, 2)}
+  await writeFile11(temporary, `${JSON.stringify(status, null, 2)}
 `, { mode: 384 });
   await rename6(temporary, target);
   return status;
@@ -17891,7 +18054,7 @@ async function runStoredDaemon(pathOrPointer) {
   runtime = activated.runtime;
   const daemonApi = activated.client;
   const agent = runtimeAgentCommand(runtime);
-  await writeFile11(resolve21(dirname13(configPath), "daemon.pid"), `${process.pid}
+  await writeFile12(resolve21(dirname13(configPath), "daemon.pid"), `${process.pid}
 `, { mode: 384 });
   const env = {
     ...process.env,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.0.35",
+  "version": "0.0.37",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "repository": {
     "type": "git",