usebeeline 0.0.61 → 0.0.63

package/README.md

@@ -41,12 +41,12 @@ npx usebeeline connect
 
 The command asks for the pairing code shown in the Beeline app, then four questions and no more:
 
-| Step | What it asks |
-| --- | --- |
-| Harness | Claude Code, Codex, Goose, Pi, or Grok |
-| Provider | Goose and Pi only — OpenRouter (default), OpenAI, Anthropic, Google, or xAI |
-| API key | Goose and Pi only — verified against the provider, then saved to `~/.config/beeline/providers.json` (mode `0600`) |
-| Model | Whatever the harness advertises, filtered as you type; OpenRouter defaults to GLM 5.3 Flash |
+| Step     | What it asks                                                                                                      |
+| -------- | ----------------------------------------------------------------------------------------------------------------- |
+| Harness  | Claude Code, Codex, Goose, Pi, or Grok                                                                            |
+| Provider | Goose and Pi only — OpenRouter (default), OpenAI, Anthropic, Google, or xAI                                       |
+| API key  | Goose and Pi only — verified against the provider, then saved to `~/.config/beeline/providers.json` (mode `0600`) |
+| Model    | Whatever the harness advertises, filtered as you type; OpenRouter defaults to GLM 5.3 Flash                       |
 
 It does **not** ask for a name or a soul. The server assigns the agent one of twelve animals nobody in your Workspace is already wearing, and prints it:
 
@@ -102,7 +102,7 @@ The corner receives a GitHub App token scoped to **that one repository**, instal
 - **When the sandbox cannot be built, the daemon says so and keeps serving.** A host with no `bwrap`, or a kernel that refuses unprivileged user namespaces, is logged once at start and every session afterwards runs unwrapped; the read-only rule then rests on the harness's own permission callback, which Codex, Claude Code, and Grok honour. Pi does not ask before it writes, so a Pi Room is only as read-only as its sandbox.
 - **Write access requires a corner.** A corner is a separate worktree on its own branch with a repository-scoped GitHub App token, and it is opened by an explicit host-governed call, never inferred.
 - **Reach outside the sandbox is a grant.** The agent asks — `path`, `host`, `secret`, `device`, `budget`, or `command` — and a card goes to its owner in the Room with the exact ask and the reason. You approve once, always, or deny, and the decision is a line in the transcript. Approving a command grant is word-for-word: an approved `npm test` does not approve `npm test && curl …`, and a command carrying shell metacharacters is refused before it is ever offered.
-- **Yolo mode** flips a single agent to auto-approval, is settable only by the agent's owner or a Workspace manager, and never covers a budget grant.
+- **Yolo mode** flips a single agent to auto-approval and is settable only by that agent's owner. In a public Workspace, yolo is forced off without changing the owner's preference, so it resumes when the Workspace returns to invite-only; it never covers a budget grant.
 - **Provider keys never reach Beeline's servers.** They live in your config directory at mode `0600` and reach only the harness process you already trust with them.
 - **Honest about what is not built yet:** today a `command` grant is the one kind that actually changes what a running agent may do. `path`, `host`, `secret`, `device`, and `budget` grants are requested, decided, and recorded, but are not yet applied to the sandbox.
 
@@ -124,24 +124,24 @@ Two MCP surfaces are mounted into every agent session.
 
 `beeline-readonly-mcp` — reading, in a Room and in a corner:
 
-| Tool | What it does |
-| --- | --- |
-| `list_files`, `read_file` | Walk and read the checkout |
-| `search_text` | Search the checkout |
-| `git_log`, `git_show`, `git_diff`, `git_status` | Read repository history and state |
-| `read_agent_file` | Read the agent's approved skills or Workspace memory |
-| `write_memory` | Replace the agent's private Workspace `MEMORY.md` — the only memory write a Room allows |
+| Tool                                            | What it does                                                                            |
+| ----------------------------------------------- | --------------------------------------------------------------------------------------- |
+| `list_files`, `read_file`                       | Walk and read the checkout                                                              |
+| `search_text`                                   | Search the checkout                                                                     |
+| `git_log`, `git_show`, `git_diff`, `git_status` | Read repository history and state                                                       |
+| `read_agent_file`                               | Read the agent's approved skills or Workspace memory                                    |
+| `write_memory`                                  | Replace the agent's private Workspace `MEMORY.md` — the only memory write a Room allows |
 
 `beeline-agent` — acting, host-governed:
 
-| Tool | Where | What it does |
-| --- | --- | --- |
-| `open_corner` | Top-level Rooms | Open one write-enabled corner with a ≤24-word objective |
-| `pr_checks_status` | Corners | Read the server-posted checks verdict and human hold state |
-| `attach_file` | Everywhere | Attach one file from the checkout or scratch dir to the reply |
-| `create_schedule`, `list_schedules`, `delete_schedule` | Everywhere | Run a prompt again later — interval minutes or a 5-field cron |
-| `request_grant` | Everywhere | Ask the owner for reach outside the sandbox |
-| `run_granted_command` | Everywhere | Run a command an approved grant covers, outside the sandbox |
+| Tool                                                   | Where           | What it does                                                  |
+| ------------------------------------------------------ | --------------- | ------------------------------------------------------------- |
+| `open_corner`                                          | Top-level Rooms | Open one write-enabled corner with a ≤24-word objective       |
+| `pr_checks_status`                                     | Corners         | Read the server-posted checks verdict and human hold state    |
+| `attach_file`                                          | Everywhere      | Attach one file from the checkout or scratch dir to the reply |
+| `create_schedule`, `list_schedules`, `delete_schedule` | Everywhere      | Run a prompt again later — interval minutes or a 5-field cron |
+| `request_grant`                                        | Everywhere      | Ask the owner for reach outside the sandbox                   |
+| `run_granted_command`                                  | Everywhere      | Run a command an approved grant covers, outside the sandbox   |
 
 ## The app
 

package/dist/usebeeline.mjs

@@ -8126,6 +8126,7 @@ async function syncAgentModelCatalog(input) {
 
 // apps/body/dist/daemon-api-client.js
 import { resolve as resolve7 } from "node:path";
+import { randomUUID } from "node:crypto";
 
 // node_modules/ws/wrapper.mjs
 var import_stream = __toESM(require_stream(), 1);
@@ -16940,6 +16941,7 @@ var DaemonApiClient = class {
   agentId;
   fetchImpl;
   webSocketFactory;
+  presenceLifecycleId = randomUUID();
   liveSocket;
   liveReconnect;
   liveReconnectDelayMs = 1e3;
@@ -17012,7 +17014,9 @@ var DaemonApiClient = class {
   ensureLiveSocket() {
     if (this.liveSocket || !this.liveRooms.size)
       return;
-    const socket = this.webSocketFactory(this.baseUrl.replace(/^http/, "ws") + "/v1/phone/live", [`bearer.${this.daemonToken}`]);
+    const socket = this.webSocketFactory(this.baseUrl.replace(/^http/, "ws") + "/v1/phone/live", [
+      `bearer.${this.daemonToken}`
+    ]);
     this.liveSocket = socket;
     socket.onopen = () => {
       this.liveReconnectDelayMs = 1e3;
@@ -17081,6 +17085,7 @@ var DaemonApiClient = class {
     this.liveSocket.send(JSON.stringify({
       type: "subscribe",
       roomId,
+      lifecycleId: this.presenceLifecycleId,
       ...room.cursor ? { cursor: room.cursor } : {},
       ...room.presence
     }));
@@ -17981,7 +17986,7 @@ import { promisify as promisify3 } from "node:util";
 
 // apps/body/dist/agent-home.js
 import { existsSync as existsSync3, readFileSync as readFileSync4 } from "node:fs";
-import { createHash as createHash3, randomUUID } from "node:crypto";
+import { createHash as createHash3, randomUUID as randomUUID2 } from "node:crypto";
 import { chmod as chmod2, copyFile, lstat, mkdir as mkdir4, readFile as readFile6, readdir as readdir2, realpath, rename as rename2, rm as rm2, symlink, unlink, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import { basename as basename3, dirname as dirname5, join as join3, relative as relative2, resolve as resolve13, sep } from "node:path";
@@ -18903,7 +18908,7 @@ async function provisionManagedSkillsDir(target, managedSkills, sharedSkills, op
   const plan = await planManagedSkills(managedSkills, sharedSkills, optionalShares);
   if (await materializedSkillManifest(target) === plan.manifest)
     return;
-  const staged = resolve13(parent, `.skills.${process.pid}.${randomUUID()}.tmp`);
+  const staged = resolve13(parent, `.skills.${process.pid}.${randomUUID2()}.tmp`);
   await mkdir4(staged, { mode: 448 });
   try {
     for (const entry of plan.entries) {
@@ -19155,7 +19160,7 @@ async function writeIsolatedHarnessFile(path, content) {
   if (!parentStats.isDirectory() || parentStats.isSymbolicLink()) {
     throw new Error(`isolated harness parent is not a real directory: ${parent}`);
   }
-  const temporary = resolve13(parent, `.${basename3(path)}.${process.pid}.${randomUUID()}.tmp`);
+  const temporary = resolve13(parent, `.${basename3(path)}.${process.pid}.${randomUUID2()}.tmp`);
   try {
     await writeFile5(temporary, content, { mode: 384, flag: "wx" });
     await chmod2(temporary, 384);
@@ -22231,42 +22236,12 @@ var MonolithRoomTurnLoop = class {
   }
   async run() {
     const { api, roomId, signal } = this.options;
-    const status = this.options.config.modelUnavailable ? "offline" : "online";
-    let legacyPresence = false;
-    let legacyPresenceHeartbeat;
-    let legacyPresenceFallback;
-    const postLegacyPresence = async (presence) => {
-      await api.execute("postAgentPresence", {
-        agentId: this.agent.publicKey,
-        roomId,
-        status: presence,
-        ...this.options.config.daemonReleaseVersion ? { releaseVersion: this.options.config.daemonReleaseVersion } : {},
-        ...this.options.config.daemonSourceSha ? { sourceSha: this.options.config.daemonSourceSha } : {}
-      });
-    };
-    const useLegacyPresence = () => {
-      if (legacyPresence)
-        return;
-      legacyPresence = true;
-      void postLegacyPresence(status).catch((error) => console.error(`[thin-core] monolith Room ${roomId} presence fallback failed:`, error));
-      legacyPresenceHeartbeat = setInterval(() => void postLegacyPresence(status).catch((error) => console.error(`[thin-core] monolith Room ${roomId} presence fallback failed:`, error)), 3e4);
-      legacyPresenceHeartbeat.unref?.();
-    };
-    const stopLegacyPresence = () => {
-      legacyPresence = false;
-      clearTimeout(legacyPresenceFallback);
-      legacyPresenceFallback = void 0;
-      clearInterval(legacyPresenceHeartbeat);
-      legacyPresenceHeartbeat = void 0;
-    };
     let cursor3;
     const processedInboxIds = /* @__PURE__ */ new Set();
     const pushedInbox = [];
     let pendingPushedCursor;
     let liveConnected = false;
     let stopLive;
-    legacyPresenceFallback = setTimeout(useLegacyPresence, 1e3);
-    legacyPresenceFallback.unref?.();
     try {
       const activation = await api.execute("getRoomInbox", { roomId, startAtLatest: true });
       cursor3 = activation.cursor;
@@ -22280,10 +22255,6 @@ var MonolithRoomTurnLoop = class {
         this.wakeIntake = void 0;
       }, (connected, capabilities) => {
         liveConnected = connected && capabilities?.pushIntake === true;
-        if (connected && capabilities?.connectionPresence !== true)
-          useLegacyPresence();
-        else if (connected)
-          stopLegacyPresence();
         this.options.health.presence(connected && !this.options.config.modelUnavailable ? "online" : "offline");
         this.wakeIntake?.();
         this.wakeIntake = void 0;
@@ -22362,11 +22333,6 @@ var MonolithRoomTurnLoop = class {
         this.client.sessionCancel(this.sessionId);
       }
       await this.activeTurn?.promise;
-      clearTimeout(legacyPresenceFallback);
-      clearInterval(legacyPresenceHeartbeat);
-      if (legacyPresence) {
-        await postLegacyPresence("offline").catch((error) => console.error(`[thin-core] monolith Room ${roomId} offline presence failed:`, error));
-      }
       await this.options.scheduler.suspend(roomId);
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.0.61",
+  "version": "0.0.63",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "homepage": "https://usebeeline.app",
   "bugs": {