usebeeline 0.0.46 → 0.0.48

package/dist/usebeeline.mjs

@@ -2952,8 +2952,12 @@ function parseSandboxMaskEnv(env) {
 }
 
 // apps/body/dist/access-policy.js
+var AGENT_ACCESS_POLICIES = ["everyone", "creator", "allowlist"];
 var DEFAULT_ACCESS_POLICY = "creator";
 var LEGACY_ACCESS_POLICY = "everyone";
+function isAgentAccessPolicy(value) {
+  return AGENT_ACCESS_POLICIES.includes(value);
+}
 var ACCESS_REFUSAL_WINDOW_MS = 60 * 60 * 1e3;
 function isSenderPermitted(policy, senderPubkey, ownerPubkey, allowlist = void 0) {
   if (!senderPubkey)
@@ -13059,7 +13063,7 @@ async function stageMonolithAgentRuntime(input) {
     supervisorRoot,
     transport: { kind: "monolith", baseUrl, exchangeToken: input.daemonExchangeToken },
     ...input.llmEnvFile ? { llmEnvFile: input.llmEnvFile } : {},
-    accessPolicy: DEFAULT_ACCESS_POLICY,
+    accessPolicy: input.accessPolicy ?? DEFAULT_ACCESS_POLICY,
     agentBinary: input.agentBinary,
     agentKind: input.agentKind,
     agentCommand: input.agentCommand,
@@ -17117,8 +17121,16 @@ async function waitForWake(api, cornerId, signal) {
   try {
     await api.execute("waitForCornerWake", { cornerId });
   } catch {
+    await never(signal);
   }
 }
+async function never(signal) {
+  if (signal?.aborted)
+    return;
+  await new Promise((resolveNever) => {
+    signal?.addEventListener("abort", () => resolveNever(), { once: true });
+  });
+}
 async function wait(ms, signal) {
   if (signal?.aborted)
     return;
@@ -17142,6 +17154,24 @@ import { join as join6 } from "node:path";
 var SCHEDULE_SCHEDULER_NAME = "Beeline Scheduler";
 var SCHEDULE_RAN_VERB = "ran a schedule for";
 
+// packages/api-contract/dist/system-events.js
+var SERVER_EVENT_KINDS = [
+  "joined",
+  "schedule-ran",
+  "corner-opened",
+  "check-passed",
+  "check-failed",
+  "merged",
+  "grant-decided"
+];
+function isServerEventKind(value) {
+  return SERVER_EVENT_KINDS.includes(value);
+}
+var RESUME_KINDS = ["grant-decided"];
+function isResumeKind(value) {
+  return RESUME_KINDS.includes(value);
+}
+
 // apps/body/dist/monolith-room-turn.js
 function isRoomMcpPermissionRequest(request, mountedServers = ROOM_MOUNTED_MCP_SERVERS) {
   if (isSquireMcpPermissionRequest(request))
@@ -17152,11 +17182,35 @@ function roomPrincipalMayAddressAgent(authority, humanPermitted) {
   return authority.member && (authority.principalKind === "agent" || authority.principalKind === "human" && humanPermitted);
 }
 function isScheduledPrompt(item, agentId) {
-  return item.type === "system" && item.systemEvent?.verb === SCHEDULE_RAN_VERB && item.mentionIds.includes(agentId);
+  if (item.type !== "system" || !item.mentionIds.includes(agentId))
+    return false;
+  if (item.systemEvent?.kind)
+    return item.systemEvent.kind === "schedule-ran";
+  return item.systemEvent?.verb === SCHEDULE_RAN_VERB;
+}
+function inboxItemAuthorName(item, agentId, names) {
+  if (isScheduledPrompt(item, agentId))
+    return SCHEDULE_SCHEDULER_NAME;
+  const subject = item.systemEvent?.subject;
+  if (item.type === "system" && subject?.name)
+    return subject.name;
+  return names.get(item.authorId) ?? item.authorId.slice(0, 12);
 }
 function inboxItemPromptBody(item, agentId) {
   return isScheduledPrompt(item, agentId) ? item.systemEvent?.consequence ?? item.body : item.body;
 }
+function isSubscribedEvent(item, agentId) {
+  const kind = item.systemEvent?.kind;
+  return item.type === "system" && kind !== void 0 && !isResumeKind(kind) && item.mentionIds.includes(agentId);
+}
+function inboxItemSkipsSenderPolicy(item, agentId) {
+  if (isGrantDecisionLine(item, agentId))
+    return true;
+  if (item.type !== "system" || !item.mentionIds.includes(agentId))
+    return false;
+  const kind = item.systemEvent?.kind;
+  return kind === void 0 ? isScheduledPrompt(item, agentId) : isServerEventKind(kind);
+}
 function isGrantDecisionLine(item, agentId) {
   return item.type === "system" && item.mentionIds.includes(agentId) && parseGrantDecisionLine(item.body) !== void 0;
 }
@@ -17165,7 +17219,7 @@ function inboxItemTriggersTurn(item, agentId) {
     return false;
   if (!item.mentionIds.includes(agentId))
     return false;
-  return item.type === "message" || isScheduledPrompt(item, agentId) || isGrantDecisionLine(item, agentId);
+  return item.type === "message" || isSubscribedEvent(item, agentId) || isScheduledPrompt(item, agentId) || isGrantDecisionLine(item, agentId);
 }
 function pendingGrantToolCall(call) {
   if (!/(?:^|[._:/-])request_grant$/i.test(call.title ?? ""))
@@ -17657,7 +17711,7 @@ var MonolithRoomTurnLoop = class {
           const buildPrompt = () => [
             this.turnInstructionPrefix,
             WarmTranscript.render(this.warmTranscript.select(this.sessionId, transcriptRows), "Room conversation so far:", "New in the Room since your last turn (the earlier conversation is already in this session):"),
-            `Newest message from ${isScheduledPrompt(item, this.agent.publicKey) ? SCHEDULE_SCHEDULER_NAME : names.get(item.authorId) ?? item.authorId.slice(0, 12)}:`,
+            `Newest message from ${inboxItemAuthorName(item, this.agent.publicKey, names)}:`,
             roomMessagePrompt("", inboxItemPromptBody(item, this.agent.publicKey), item.attachments, delivered, this.acceptsImages()),
             grantDecision ? [
               "This is the answer to your grant request; your paused work resumes now.",
@@ -17819,7 +17873,7 @@ var MonolithRoomTurnLoop = class {
           for (const item of inbox.items) {
             if (!inboxItemTriggersTurn(item, this.agent.publicKey))
               continue;
-            if (!isScheduledPrompt(item, this.agent.publicKey) && !isGrantDecisionLine(item, this.agent.publicKey)) {
+            if (!inboxItemSkipsSenderPolicy(item, this.agent.publicKey)) {
               const authority = await api.execute("getRoomAuthority", {
                 roomId,
                 principalId: item.authorId
@@ -19476,6 +19530,7 @@ async function pairDevice(grant, options = {}) {
     agentCommand: selectedAgent.command,
     agentArgs: selectedAgent.args,
     modelSelection: { model: grant.model },
+    ...grant.accessPolicy ? { accessPolicy: grant.accessPolicy } : {},
     mcpBinary: localConfig.mcpBinary,
     agentIdentity,
     bodyIdentity: identityFromKey(grant.bodySecretKey, DEFAULT_BODY_IDENTITY_NAME2),
@@ -19760,7 +19815,12 @@ async function jsonRequest(url, body, fetchImpl) {
   }
   return response.json();
 }
-function requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl) {
+function parseConnectSubscriptions(value) {
+  return [
+    ...new Set((value ?? "").split(",").map((entry) => entry.trim().toLowerCase()).filter(Boolean))
+  ];
+}
+function requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl, eventSubscriptions = []) {
   const normalizedPairingCode = normalizeAgentPairingCode(pairingCode);
   if (!normalizedPairingCode)
     throw new Error("invalid pairing code");
@@ -19770,7 +19830,8 @@ function requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl) {
     harness: selection.harness,
     ...selection.provider ? { provider: selection.provider } : {},
     model: selection.model,
-    avatar_seed: avatarSeed
+    avatar_seed: avatarSeed,
+    ...eventSubscriptions.length ? { event_subscriptions: [...eventSubscriptions] } : {}
   }, fetchImpl);
 }
 async function renameConnectedAgent(baseUrl, pairingCode, name, fetchImpl) {
@@ -19877,12 +19938,12 @@ async function runConnectCommand(code, options = {}) {
   }
   const restoreRails = paintWizardBrass();
   try {
-    await runConnectWizard(code, options.fetchImpl ?? fetch);
+    await runConnectWizard(code, options.fetchImpl ?? fetch, options.subscribe ?? [], options.accessPolicy);
   } finally {
     restoreRails();
   }
 }
-async function runConnectWizard(code, fetchImpl) {
+async function runConnectWizard(code, fetchImpl, eventSubscriptions, accessPolicy) {
   intro(brass("Beeline connect"));
   const pairingCode = code?.trim() || await clackPrompts.text({
     message: brass("Pairing code from the app"),
@@ -19890,7 +19951,7 @@ async function runConnectWizard(code, fetchImpl) {
   });
   const selection = await collectConnectWizard(clackPrompts, loadConnectModelCatalog, fileConnectKeyStore, process.env, (input) => verifyProviderKey({ ...input, fetchImpl }));
   const baseUrl = (process.env.BEELINE_AUTH_URL ?? "https://server.usebeeline.app").replace(/\/$/, "");
-  const claimed = await brassSpinner("Connecting to your Beeline Workspace\u2026", () => requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl), (connectedGrant) => `Connected to ${connectedGrant.workspace_name}`);
+  const claimed = await brassSpinner("Connecting to your Beeline Workspace\u2026", () => requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl, eventSubscriptions), (connectedGrant) => `Connected to ${connectedGrant.workspace_name}`);
   const grant = { ...claimed, agent_name: await confirmSeededName(baseUrl, pairingCode, claimed, fetchImpl) };
   const installedRelease = await brassSpinner("Installing the Beeline daemon\u2026", () => installCurrentRelease(fetchImpl), (release) => `Installed Beeline helper ${release.version}`);
   const llmEnvFile = await writeProviderEnv(selection, grant.agent_pubkey);
@@ -19907,7 +19968,8 @@ async function runConnectWizard(code, fetchImpl) {
     pairedBy: grant.paired_by,
     monolithBaseUrl: baseUrl,
     daemonExchangeToken: grant.daemon_exchange_token,
-    ...llmEnvFile ? { llmEnvFile } : {}
+    ...llmEnvFile ? { llmEnvFile } : {},
+    ...accessPolicy ? { accessPolicy } : {}
   });
   await brassSpinner("Starting your agent\u2026", () => runInstalledFinish(installedRelease.binary, grantPath), () => `Started ${grant.agent_name}`);
   console.log("");
@@ -19947,6 +20009,8 @@ function isDevicePairingGrant(value) {
   if (!value || typeof value !== "object")
     return false;
   const grant = value;
+  if (grant.accessPolicy !== void 0 && !isAgentAccessPolicy(grant.accessPolicy))
+    return false;
   let monolithOrigin = "";
   try {
     monolithOrigin = new URL(grant.monolithBaseUrl ?? "").origin;
@@ -21059,7 +21123,12 @@ function usage(exitCode = 1) {
 ${import_picocolors3.default.bold("Beeline \u2014 thin Room agent.")}
 
 ${import_picocolors3.default.dim("Usage:")}
-  beeline connect [XXXXXXXX-XXXXXXXX]       Install and connect an app-authorized agent
+  beeline connect [XXXXXXXX-XXXXXXXX] [--subscribe <kinds>] [--access <policy>]
+                                            Install and connect an app-authorized agent;
+                                            --subscribe takes a comma-separated list of
+                                            event kinds it reacts to (e.g. joined);
+                                            --access is everyone|creator|allowlist
+                                            (default creator)
   beeline start [agent-pubkey]              Start \u2014 or RESTART when already running,
                                             stopping cleanly after in-flight work \u2014
                                             this repo's (or, outside a repo, this
@@ -21300,7 +21369,18 @@ async function main() {
     return;
   }
   if (command === "connect") {
-    await runConnectCommand(args[1]);
+    const subscribeFlag = args.indexOf("--subscribe");
+    const subscribe = subscribeFlag >= 0 ? parseConnectSubscriptions(args[subscribeFlag + 1]) : [];
+    const accessFlag = args.indexOf("--access");
+    const accessPolicy = accessFlag >= 0 ? args[accessFlag + 1] : void 0;
+    if (accessFlag >= 0 && !isAgentAccessPolicy(accessPolicy)) {
+      throw new Error(`--access must be one of ${AGENT_ACCESS_POLICIES.join(", ")}`);
+    }
+    const code = args[1] && !args[1].startsWith("--") ? args[1] : void 0;
+    await runConnectCommand(code, {
+      ...subscribe.length ? { subscribe } : {},
+      ...isAgentAccessPolicy(accessPolicy) ? { accessPolicy } : {}
+    });
     return;
   }
   if (command === "connect-finish") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.0.46",
+  "version": "0.0.48",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "homepage": "https://usebeeline.app",
   "bugs": {