usebeeline 0.0.92 → 0.0.95

package/dist/usebeeline.mjs

@@ -2413,7 +2413,7 @@ var require_websocket = __commonJS({
     var EventEmitter2 = __require("events");
     var https = __require("https");
     var http = __require("http");
-    var net = __require("net");
+    var net2 = __require("net");
     var tls = __require("tls");
     var { randomBytes: randomBytes7, createHash: createHash9 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
@@ -3157,12 +3157,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net.connect(options);
+      return net2.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net.isIP(options.host) ? "" : options.host;
+        options.servername = net2.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -4654,6 +4654,19 @@ var init_self_update = __esm({
   }
 });
 
+// apps/body/dist/network-family-bootstrap.js
+import * as net from "node:net";
+var NETWORK_FAMILY_ATTEMPT_TIMEOUT_MS = 5e3;
+function configureNetworkFamilyDefaults(network = net) {
+  if (typeof network.setDefaultAutoSelectFamilyAttemptTimeout === "function") {
+    network.setDefaultAutoSelectFamilyAttemptTimeout(NETWORK_FAMILY_ATTEMPT_TIMEOUT_MS);
+    return "timeout";
+  }
+  network.setDefaultAutoSelectFamily?.(false);
+  return "autoselection-disabled";
+}
+configureNetworkFamilyDefaults();
+
 // apps/body/dist/cli.js
 import { dirname as dirname17, resolve as resolve30 } from "node:path";
 import { readFile as readFile15, unlink as unlink5, writeFile as writeFile16 } from "node:fs/promises";
@@ -7893,6 +7906,16 @@ var ModelSelectionUnavailableError = class extends Error {
     this.guidance = input.guidance;
   }
 };
+function withEffectiveCurrentValues(options, selection) {
+  if (!selection || !selection.model && !selection.effort)
+    return options;
+  return options.map((option) => {
+    const target = modelSelectionTargets(selection).find((entry) => entry.categories.includes(option.category));
+    if (!target?.value || option.currentValue === target.value)
+      return option;
+    return { ...option, currentValue: target.value };
+  });
+}
 function modelSelectionTargets(selection) {
   return [
     { categories: ["model"], label: "model", value: selection.model },
@@ -8010,7 +8033,24 @@ async function withAgentModelCatalog(agent, agentEnv, selection, inspect, limits
   }
 }
 async function fetchAgentModelCatalog(agent, agentEnv, selection, limits = {}) {
-  return withAgentModelCatalog(agent, agentEnv, selection, async ({ raw, catalog }) => ({ raw, catalog }), limits);
+  return withAgentModelCatalog(agent, agentEnv, selection, async ({ client, sessionId, raw, catalog }) => ({
+    raw,
+    catalog: await filterModelChoicesByLiveValidation(client, sessionId, catalog)
+  }), limits);
+}
+async function filterModelChoicesByLiveValidation(client, sessionId, catalog) {
+  const modelAxis = catalog.find((axis) => axis.category === "model");
+  if (!modelAxis)
+    return catalog;
+  const available = [];
+  for (const choice of modelAxis.options) {
+    try {
+      await applyAgentModelSelection(client, sessionId, catalog, { model: choice.id });
+      available.push(choice);
+    } catch {
+    }
+  }
+  return catalog.map((axis) => axis === modelAxis ? { ...axis, options: available } : axis);
 }
 async function validateAgentModelSelection(agent, agentEnv, selection) {
   return withAgentModelCatalog(agent, agentEnv, selection, async ({ client, sessionId, raw, catalog }) => {
@@ -8066,8 +8106,12 @@ import { readFile, writeFile } from "node:fs/promises";
 import { resolve as resolve5 } from "node:path";
 var MODEL_CATALOG_PROBE_TIMEOUT_MS = 3e4;
 var MODEL_CATALOG_HASH_FILE = "model-catalog.sha256";
-function modelCatalogHash(options, selection) {
-  return createHash("sha256").update(JSON.stringify({ options, selection: selection ?? null })).digest("hex");
+function modelCatalogHash(options, selection, startupUnavailable) {
+  return createHash("sha256").update(JSON.stringify({
+    options,
+    selection: selection ?? null,
+    startupUnavailable: startupUnavailable ?? null
+  })).digest("hex");
 }
 async function withTimeout(work, timeoutMs, what) {
   let timer;
@@ -8093,8 +8137,9 @@ async function syncAgentModelCatalog(input) {
       ...configuration.model ? { model: configuration.model } : {},
       ...configuration.effort ? { effort: configuration.effort } : {}
     } : input.runtimeSelection;
-    const { catalog } = await withTimeout(fetchCatalog(input.agent, input.agentEnv, selection), input.timeoutMs ?? MODEL_CATALOG_PROBE_TIMEOUT_MS, "model catalog probe");
-    const hash = modelCatalogHash(catalog, selection);
+    const { catalog } = await withTimeout(fetchCatalog(input.agent, input.agentEnv, input.startupUnavailable ? void 0 : selection), input.timeoutMs ?? MODEL_CATALOG_PROBE_TIMEOUT_MS, "model catalog probe");
+    const effectiveCatalog = input.startupUnavailable ? catalog : withEffectiveCurrentValues(catalog, selection);
+    const hash = modelCatalogHash(effectiveCatalog, selection, input.startupUnavailable);
     const previous = await readFile(hashPath, "utf8").catch(() => "");
     if (previous.trim() === hash)
       return "unchanged";
@@ -8102,8 +8147,9 @@ async function syncAgentModelCatalog(input) {
       agentId: input.agentId,
       workspaceId: input.workspaceId,
       // `fetchAgentModelCatalog` already applied the category allow-list.
-      options: catalog,
-      ...selection ? { selection } : {}
+      options: effectiveCatalog,
+      ...selection ? { selection } : {},
+      ...input.startupUnavailable ? { unavailable: input.startupUnavailable } : {}
     });
     await writeFile(hashPath, `${hash}
 `, { mode: 384 });
@@ -8134,7 +8180,7 @@ function isAgentCommand(value) {
   if (!["input", "resume", "stop"].includes(String(c2.action)) || !Number.isInteger(c2.agentDepth) || Number(c2.agentDepth) < 0 || Number(c2.agentDepth) > 3)
     return false;
   const source = c2.source;
-  return Boolean(source && typeof source.id === "string" && typeof source.authorId === "string" && typeof source.body === "string" && typeof source.createdAt === "number" && Array.isArray(source.attachments) && Array.isArray(source.mentionIds));
+  return Boolean(source && typeof source.id === "string" && typeof source.authorId === "string" && typeof source.body === "string" && typeof source.createdAt === "number" && Array.isArray(source.attachments));
 }
 
 // packages/api-contract/dist/system-events.js
@@ -18201,6 +18247,7 @@ function isAgentPairingCode(value) {
 
 // apps/body/dist/beeline-skill.js
 var USING_BEELINE_SKILL_NAME = "using-beeline";
+var BEELINE_REVIEW_SKILL_NAME = "beeline-review";
 var BEELINE_ROOM_CAPABILITIES = [
   "The repository filesystem is read-only in this Room session.",
   "You may address any Room member, including another agent, by writing @name in your reply; the server routes that mention to them. Each turn prompt lists the Room members and the exact spelling that tags each one - use those spellings, and never guess or reuse one from an older message.",
@@ -18213,6 +18260,8 @@ var BEELINE_ROOM_CAPABILITIES = [
   `To react to things that HAPPEN in this Room rather than only to what is said to you, call beeline-agent subscribe_events with the kinds you want (${SERVER_EVENT_KINDS.join(", ")}); each one then wakes you for a turn. It replaces your list, so send every kind you want - list_event_subscriptions shows the current one. You do this yourself: nobody has to configure it for you. grant-decided carries the grant id and status and resumes the turn that asked for the grant.`,
   "To state something that happened so the Room and other agents can act on it, call beeline-agent emit_event with your own agent:<slug> kind, one sentence, and optionally the agent members to wake. Chains of events are bounded and a refused emit posts nothing.",
   "When repository work is needed, you MUST call beeline-agent open_corner with a name of at most three words - it titles the corner everywhere - and a complete objective of no more than 24 words. The host-governed call is the only way to start write work.",
+  "Never open a corner from your own reading of a person's ask. For every ask, first reply on one line `Proposed corner: <name> \u2014 <objective>`, using the exact title and objective you would pass to open_corner, then stop and wait. If one message contains several asks, list one numbered `Proposed corner:` line per ask; `go on 1 and 3` opens exactly those objectives and leaves the others proposed. A person's `go`, `yes`, or equivalent opens exactly the proposed corner; if they edit it, their edited text is the objective. Skip this ceremony only when the message itself explicitly commands a corner and states its scope, such as `open a corner and do X` or `go build X in a corner`; open that scope immediately.",
+  "Agreement is not action: never merely acknowledge an ask. Reply with a proposed corner, a question, or a line beginning `parked:` with the reason.",
   "When open_corner succeeds, the server posts the corner card: do not announce or restate the opening. End the turn with nothing more unless the person asked something else.",
   "Never claim an action or reply happened unless the prompt or a tool result proves it."
 ].join(" ");
@@ -18265,6 +18314,86 @@ description: How to answer inside a Beeline Room.
 You are answering inside a Room whose filesystem is read-only. ${BEELINE_ROOM_CAPABILITIES}
 `;
 }
+function beelineReviewSkillMarkdown(releaseId) {
+  return `---
+name: beeline-review
+description: Review a corner pull request against its objective and the Beeline merge gate.
+---
+
+<!-- beeline-release: ${releaseId} -->
+
+# Beeline pull-request review
+
+Follow these steps in order. Do not skip or reorder them.
+
+## 1. Isolate the revision
+
+- Run \`gh pr view N --json headRefOid,files\` and record \`headRefOid\`.
+- Run \`gh pr diff N\`.
+- Check out that exact head in a new scratch git worktree. Never use the author's worktree.
+- Review and test only the recorded revision. If the head moves, start over.
+
+## 2. P0 - OBJECTIVE FULFILLED, DEMONSTRATED
+
+- Quote the corner objective verbatim.
+- Derive its end-user story in one sentence: \`a user who does X sees Y\`.
+- Make Y happen against the built PR head: run the app or affected service and perform X.
+- If no interactive surface is reachable, run the narrowest test or script that exercises the exact user path and prints the observable Y.
+- Record the command and the observed Y.
+- A unit test of an inner function, a log line, \`the code looks right\`, or any other proxy does not count.
+- If the user-visible Y cannot be produced, FAIL now. Nothing below can rescue the review.
+- State whether the diff fulfills that objective and only that objective.
+
+## 3. Empirical pass second
+
+- Run the repository typecheck and tests touched by the diff.
+- If the objective names a user path, exercise that path.
+- Record every command and exit code.
+- A review with no executed command is invalid and must FAIL.
+
+## 4. Adversarial pass
+
+- For every changed function, name one concrete input or sequence that breaks it.
+- If none is found, write \`none found\` for that function.
+
+## 5. Verify before reporting
+
+- Confirm every finding by reading the exact line or by running a command.
+- Put unconfirmed concerns under plausible findings. They never block.
+
+## 6. Bloat guard
+
+- Compare net lines with the objective.
+- FAIL backwards-compatibility shims, dual paths, feature flags, or abstractions with one caller.
+- FAIL machinery the objective did not ask for.
+
+## 7. Security and data
+
+- Check credentials, authorization boundaries, and destructive migrations.
+
+## 8. Gate and verdict
+
+- The merge gate is open only when \`pr_checks_status\` reports checks=passed, held=false, approvalPending=false.
+- Green \`gh pr checks\` alone never opens the gate.
+- Always use this exact verdict shape:
+
+\`objective quoted:\`
+\`user story:\`
+\`how Y was demonstrated (or FAIL):\`
+\`commands run + results:\`
+\`critical findings (block):\`
+\`plausible findings (do not block):\`
+\`net lines:\`
+\`decision: PASS|FAIL\`
+
+Then take exactly one action:
+
+- FAIL: reply \`@author\` with the confirmed findings; do not merge.
+- PASS with pending checks: reply \`approved pending checks <reviewed sha>\` and stop.
+- PASS with the gate open and your yolo on: run \`gh pr merge --squash --match-head-commit <reviewed sha> N\`.
+- PASS with the gate open and your yolo off: reply \`approved <reviewed sha>\` and stop.
+`;
+}
 
 // apps/body/dist/external-mcp-capabilities.js
 var SQUIRE_MCP_VERSION = "1.1.12";
@@ -18862,7 +18991,10 @@ var SHARED_CREDENTIALS = [
   { dir: "pi", source: ".pi/agent/auth.json", target: "auth.json" }
 ];
 var GOOSE_SHARED_CONFIG_FILES = ["config.yaml", "secrets.yaml"];
-var BEELINE_DEFAULT_SKILL_NAMES = [USING_BEELINE_SKILL_NAME];
+var BEELINE_DEFAULT_SKILL_NAMES = [
+  BEELINE_REVIEW_SKILL_NAME,
+  USING_BEELINE_SKILL_NAME
+];
 var OPERATOR_SKILL_SOURCE_DIRS = [
   ".agents/skills",
   ".claude/skills",
@@ -18941,7 +19073,8 @@ async function prepareRoomAgentHome(input) {
 }
 async function provisionAgentSkillsAndMcp(root, operatorHome, skillReleaseId, failClosed, sharedSkills, skillDir, openRouterRouting) {
   const managedSkills = [
-    { name: USING_BEELINE_SKILL_NAME, content: usingBeelineSkillMarkdown(skillReleaseId) }
+    { name: USING_BEELINE_SKILL_NAME, content: usingBeelineSkillMarkdown(skillReleaseId) },
+    { name: BEELINE_REVIEW_SKILL_NAME, content: beelineReviewSkillMarkdown(skillReleaseId) }
   ];
   const shared = await resolveSharedSkillSources(operatorHome, sharedSkills);
   await provisionManagedSkillsDir(resolve13(root, skillDir, "skills"), managedSkills, shared, sharedSkills.length === 0);
@@ -19617,6 +19750,12 @@ var AgentTurnStream = class {
   inFlight;
   /** Closed lanes publish nothing more, so the answer never queues behind a draft. */
   closed = false;
+  /**
+   * The retract this lane already sent. A settled turn that throws afterwards
+   * reaches the same retract a second time, and one empty lane is the whole
+   * point: asking twice would only be a second write saying what is already so.
+   */
+  retraction;
   constructor(options) {
     this.options = options;
   }
@@ -19676,31 +19815,56 @@ var AgentTurnStream = class {
     this.closed = true;
     this.pending = void 0;
   }
+  /**
+   * Dissolve the draft, publishing nothing.
+   *
+   * Every ending uses this: the settle below calls it once the durable reply is
+   * on the wire, and a turn that THROWS calls it directly. A throw never
+   * reaches a settle, and `close()` alone only stops future writes — the last
+   * snapshot stays live on the page, so a turn the Room has already reported
+   * stopped or failed keeps a half-written answer visibly in progress under it.
+   */
+  async retract() {
+    this.close();
+    this.retraction ??= (async () => {
+      await this.inFlight;
+      const { api, agentId, roomId, requestId, label } = this.options;
+      await api.execute("retractAgentLiveOutput", {
+        agentId,
+        roomId,
+        turnId: requestId,
+        kind: "draft"
+      }).catch((error) => console.error(`[thin-core] ${label} draft retract failed:`, error));
+    })();
+    await this.retraction;
+  }
   /**
    * Post the durable reply under the turn's request id and dissolve the draft.
    * An empty reply settles through the turn receipt instead, and the lane is
    * retracted either way.
+   *
+   * The durable reply is this turn's answer and its last word. The draft lane
+   * is presentation, so a refused retract is logged like a refused draft and
+   * the turn still settles complete: raising here failed a turn that had
+   * already answered, which posts a `failed` receipt and inscribes "<agent>
+   * could not answer" UNDER the answer the reader is looking at. The reader
+   * loses nothing by it either — the phone ends a retracted draft on the
+   * turn's own complete receipt (`visibleLiveOverlays`).
    */
   async settle(reply, fields = {}, onReplyPosted) {
     this.close();
-    const { api, agentId, roomId, requestId } = this.options;
+    const { api, roomId, requestId } = this.options;
     if (reply) {
-      const posted = await api.execute("postRoomMessage", {
+      await api.execute("postRoomMessage", {
         roomId,
         requestId,
         text: reply,
         presentation: "message",
         ...fields
       });
-      onReplyPosted?.(posted);
+      onReplyPosted?.();
     }
-    await this.inFlight;
-    await api.execute("retractAgentLiveOutput", {
-      agentId,
-      roomId,
-      turnId: requestId,
-      kind: "draft"
-    });
+    await this.retract();
   }
 };
 
@@ -19710,13 +19874,18 @@ function redactToolDetail(value) {
   return value.replace(/\b(["']?)(api[_-]?key|token|secret|password|passwd|authorization|credential|cookie|private[_-]?key)\1\s*[:=]\s*(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,}\]]+)/gi, '"$2": "[REDACTED]"').replace(/\b(?:export\s+)?[A-Za-z_][A-Za-z0-9_]*=(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\S+)/g, (assignment) => `${assignment.slice(0, assignment.indexOf("="))}=[REDACTED]`).replace(/\b(?:gh[pousr]_[A-Za-z0-9_]{12,}|github_pat_[A-Za-z0-9_]{12,})\b/gi, "[REDACTED]").replace(/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, "[REDACTED]").replace(/\b(Bearer\s+)[^\s,]+/gi, "$1[REDACTED]").replace(/\bsk-[A-Za-z0-9_-]{12,}\b/g, "[REDACTED]").replace(/(--?(?:api[_-]?key|token|secret|password|authorization|credential|cookie)\s+)(?:"[^"]*"|'[^']*'|\S+)/gi, "$1[REDACTED]");
 }
 function distillTurnFailureReason(error) {
+  if (error instanceof ModelSelectionUnavailableError) {
+    return { text: "model selection unavailable", kind: "model-selection-unavailable" };
+  }
   const raw = error instanceof Error ? error.message : typeof error === "string" ? error : error && typeof error === "object" && "message" in error ? String(error.message) : error == null ? "" : String(error);
   const firstLine = raw.split(/\r?\n/).map((line) => line.trim()).find((line) => line && !/^at\s/.test(line)) ?? "";
   const stripped = firstLine.replace(/^(?:[A-Za-z]*Error|Error):\s*/, "").replace(/\s+/g, " ");
   const clean4 = redactToolDetail(stripped).trim();
   if (!clean4)
-    return "turn failed";
-  return clean4.length > TURN_FAILURE_REASON_MAX ? `${clean4.slice(0, TURN_FAILURE_REASON_MAX - 1)}\u2026` : clean4;
+    return { text: "turn failed" };
+  return {
+    text: clean4.length > TURN_FAILURE_REASON_MAX ? `${clean4.slice(0, TURN_FAILURE_REASON_MAX - 1)}\u2026` : clean4
+  };
 }
 
 // apps/body/dist/tool-call-failure.js
@@ -19750,6 +19919,9 @@ function toolCallText(content) {
 function isFailedToolCall(call) {
   return /^(?:failed|error|denied|rejected)$/i.test(call.status ?? "");
 }
+function isCompletedToolCall(call) {
+  return /^completed$/i.test(call.status ?? "");
+}
 function toolCallFailureLine(call) {
   if (!isFailedToolCall(call))
     return void 0;
@@ -19760,14 +19932,17 @@ function toolCallFailureLine(call) {
 
 // apps/body/dist/session-config-fingerprint.js
 function sessionConfigFingerprint(input) {
-  return JSON.stringify([
+  const fingerprint = [
     input.model ?? "",
     input.effort ?? "",
     input.soul?.name ?? "",
     input.soul?.instructions ?? "",
     input.agentName ?? "",
     input.yoloMode ?? false
-  ]);
+  ];
+  if (input.reviewerHandle !== void 0)
+    fingerprint.push(input.reviewerHandle);
+  return JSON.stringify(fingerprint);
 }
 
 // apps/body/dist/pi-mcp-bridge.js
@@ -21078,23 +21253,23 @@ function isRoomMcpPermissionRequest(request, mountedServers = ROOM_MOUNTED_MCP_S
     return false;
   return isMountedMcpToolPermissionRequest(request, mountedServers);
 }
-function isScheduledPrompt(item, agentId) {
-  if (item.type !== "system" || !item.mentionIds.includes(agentId))
+function isScheduledPrompt(item) {
+  if (item.type !== "system")
     return false;
   if (item.systemEvent?.kind)
     return item.systemEvent.kind === "schedule-ran";
   return item.systemEvent?.verb === SCHEDULE_RAN_VERB;
 }
-function inboxItemAuthorName(item, agentId, names) {
-  if (isScheduledPrompt(item, agentId))
+function inboxItemAuthorName(item, names) {
+  if (isScheduledPrompt(item))
     return SCHEDULE_SCHEDULER_NAME;
   const subject = item.systemEvent?.subject;
   if (item.type === "system" && subject?.name)
     return subject.name;
   return names.get(item.authorId) ?? item.authorId.slice(0, 12);
 }
-function inboxItemPromptBody(item, agentId) {
-  return isScheduledPrompt(item, agentId) ? item.systemEvent?.consequence ?? item.body : item.body;
+function inboxItemPromptBody(item) {
+  return isScheduledPrompt(item) ? item.systemEvent?.consequence ?? item.body : item.body;
 }
 function pendingGrantToolCall(call) {
   if (!/(?:^|[._:/-])request_grant$/i.test(call.title ?? ""))
@@ -21558,6 +21733,7 @@ var MonolithRoomTurnLoop = class {
     const api = this.options.api;
     this.busy = true;
     const trace = this.beginTurnTrace(item.id);
+    let liveStream;
     try {
       if (!this.memberNames.has(item.authorId))
         await this.roster().catch(() => void 0);
@@ -21614,8 +21790,8 @@ var MonolithRoomTurnLoop = class {
               "If the current task is only a nudge to respond, answer the most recent unanswered human message in the conversation instead of echoing the nudge.",
               MAINTAIN_ASSIGNED_IDENTITY_DIRECTIVE
             ].join(" "),
-            `Current task selected by the server from ${inboxItemAuthorName(item, this.agent.publicKey, names)}:`,
-            roomMessagePrompt("", inboxItemPromptBody(item, this.agent.publicKey), item.attachments, delivered, this.acceptsImages())
+            `Current task selected by the server from ${inboxItemAuthorName(item, names)}:`,
+            roomMessagePrompt("", inboxItemPromptBody(item), item.attachments, delivered, this.acceptsImages())
           ].filter(Boolean).join("\n\n");
           const stream = new AgentTurnStream({
             api,
@@ -21624,6 +21800,7 @@ var MonolithRoomTurnLoop = class {
             requestId: item.id,
             label: `monolith Room ${this.options.roomId}`
           });
+          liveStream = stream;
           const runPrompt = async () => {
             let nextPrompt = promptWithImages(buildPrompt(), attachmentImageBlocks(delivered, this.acceptsImages()));
             let result2;
@@ -21661,7 +21838,9 @@ var MonolithRoomTurnLoop = class {
           };
           let result = await runPrompt();
           trace.promptSettled();
-          let explained = await this.explainEmpty(result);
+          let openCornerCall = openCornerToolCall(result.toolCalls);
+          let cornerOpened = openedACorner(openCornerCall);
+          let explained = cornerOpened ? void 0 : await this.explainEmpty(result);
           if (explained && shouldRetryEmptyTurn(explained)) {
             const silent = this.servingProviders();
             const next = await this.repinNextProvider(trace, explained.reason);
@@ -21669,7 +21848,9 @@ var MonolithRoomTurnLoop = class {
               console.warn(`[thin-core] monolith Room ${this.options.roomId} turn ${item.id}: ${turnFailureReasonWithProvider(explained.reason, silent)}; retrying on ${next}`);
               result = await runPrompt();
               trace.promptSettled();
-              explained = await this.explainEmpty(result);
+              openCornerCall = openCornerToolCall(result.toolCalls);
+              cornerOpened = openedACorner(openCornerCall);
+              explained = cornerOpened ? void 0 : await this.explainEmpty(result);
             }
           }
           if (active.cancelled) {
@@ -21683,10 +21864,9 @@ var MonolithRoomTurnLoop = class {
           } else if (resumedRequestId) {
             console.log(`[thin-core] monolith Room ${this.options.roomId} turn ${resumedRequestId} resumed by grant decision ${item.id}`);
           }
-          const openCornerCall = result.toolCalls.find((call) => /(?:^|[._:/-])open_corner$/i.test(call.title ?? ""));
           if (openCornerCall) {
             console.log(`[thin-core] monolith Room ${this.options.roomId} tool call: ${openCornerCall.title} (${openCornerCall.status ?? "no status"})`);
-            if (!isFailedToolCall(openCornerCall))
+            if (cornerOpened)
               this.options.onCornerOpened?.();
           }
           for (const call of result?.toolCalls ?? []) {
@@ -21704,7 +21884,7 @@ var MonolithRoomTurnLoop = class {
             }
             console.warn(`[thin-core] monolith Room ${this.options.roomId} turn ${item.id}: ${explained.reason}`);
           }
-          if (openCornerCall && !isFailedToolCall(openCornerCall)) {
+          if (cornerOpened) {
             reply = "";
           }
           await trace.measure("publish", () => stream.settle(reply, reply ? {
@@ -21726,6 +21906,9 @@ var MonolithRoomTurnLoop = class {
         await trace.finish("cancelled");
         return;
       }
+      await liveStream?.retract().catch((retractError) => {
+        console.error(`[thin-core] monolith Room ${this.options.roomId} draft retract failed:`, retractError);
+      });
       const reason = distillTurnFailureReason(error);
       await api.execute("postAgentTurnReceipt", {
         agentId: this.agent.publicKey,
@@ -21733,9 +21916,10 @@ var MonolithRoomTurnLoop = class {
         requestId: item.id,
         status: "failed",
         generationId: this.commandContext.generationId,
-        reason
+        reason: reason.text,
+        ...reason.kind ? { reasonKind: reason.kind } : {}
       });
-      await trace.finish("failed", reason);
+      await trace.finish("failed", reason.text);
       throw error;
     } finally {
       this.busy = false;
@@ -21778,6 +21962,12 @@ var MonolithRoomTurnLoop = class {
     }
   }
 };
+function openCornerToolCall(calls) {
+  return calls.find((call) => /(?:^|[._:/-])open_corner$/i.test(call.title ?? ""));
+}
+function openedACorner(call) {
+  return !!call && isCompletedToolCall(call);
+}
 function roomMessagePrompt(author, body, attachments, delivered, harnessAcceptsImages = true) {
   const message = body.trim() || "(shared attachments)";
   const rendered = author ? `${author}: ${message}` : message;
@@ -21789,10 +21979,31 @@ var execFileAsync3 = promisify3(execFile4);
 var TOOL_ARGUMENT_MAX_BYTES = 1200;
 var TOOL_OUTPUT_MAX_BYTES = 3200;
 var TOOL_PATH_LIMIT = 12;
-function cornerMergeInstruction(yoloMode) {
+function cornerMergeInstruction(yoloMode, reviewerHandle) {
+  if (reviewerHandle)
+    return `Commit, push, open the pull request, reply with the PR URL and then @${reviewerHandle} please review; never merge this PR yourself. If you asked any other agent to review in this corner, do not merge until they answer.`;
   return yoloMode ? "Yolo is on: when the gate passes, merge this pull request with gh." : "Yolo is off: never merge; wait for explicit human approval in the app.";
 }
-var CORNER_DELIVERY_NUDGE = "Before ending this turn, inspect the repository state and finish delivering the work: commit and push the intended changes and open the pull request if one does not exist. Decide yourself whether any remaining dirty work belongs to the objective; do not discard it merely to make the worktree clean.";
+function cornerReviewerInstruction(input) {
+  if (!input.reviewerHandle || !input.agentHandle || input.openedByAgent || input.agentHandle.replace(/^@/, "") !== input.reviewerHandle.replace(/^@/, ""))
+    return void 0;
+  const author = input.authorHandle?.replace(/^@/, "") || "author";
+  const number = input.pullRequestNumber ?? "N";
+  return `Review PR #${number} with the beeline-review skill. If it fails, reply @${author} with the findings. If it passes and the gate (pr_checks_status: checks=passed, held=false, approvalPending=false) is open and YOUR yolo is on, merge with gh pr merge --squash --match-head-commit <sha you reviewed>; if your yolo is off, reply approved <sha> and stop; if checks are pending, reply approved pending checks <sha> and stop.`;
+}
+var CORNER_AUTHOR_CONTRACT = `The objective text is the user's ask. Keep it verbatim in your head and do not reinterpret it.
+Before any code, write its end-user story in one sentence: "a person who does X sees Y".
+If the objective reports a defect, reproduce it first at the layer where it lives: the command, request, or tap sequence, and what was observed.
+Do not write a fix before you have seen the defect. Turn the reproduction into the regression test.
+Before opening the pull request, produce Y against the built change: run the app or affected service from your branch and perform X.
+If no interactive surface is reachable, run the narrowest test or script that exercises the exact user path and prints the observable Y.
+A unit test of an inner function, a log line, or reading the code is not a demonstration.
+The pull request body MUST contain two sections with exactly these headings: ## Reproduced and ## Demonstrated.
+Under ## Reproduced, give the steps or command and what was observed; write "not a defect report" for feature work.
+Under ## Demonstrated, give the command or steps that produced Y and what was observed.
+A pull request without both sections is not deliverable and the Room's reviewer will fail it.
+Change only what the objective asks. No unrequested features, flags, compatibility shims, or refactors.`;
+var CORNER_DELIVERY_NUDGE = "Before ending this turn, inspect the repository state and finish delivering the work: commit and push the intended changes and open the pull request if one does not exist. Decide yourself whether any remaining dirty work belongs to the objective; do not discard it merely to make the worktree clean. The pull request body must carry ## Reproduced and ## Demonstrated; if they are missing, add them before ending the turn.";
 var CORNER_YOLO_MERGE_NUDGE = 'Yolo is on. Check the server merge gate with pr_checks_status now and, if checks="passed", held=false, and approvalPending=false, merge this pull request with gh. Otherwise stop without merging.';
 function isCornerChecksTurn(trigger, restates) {
   return Boolean(restates) || /\b(?:passed|failed) a check\b/i.test(trigger);
@@ -21977,6 +22188,10 @@ var MonolithCornerTurnLoop = class {
   pinnedProviderOverride;
   /** The merge authority baked into the current session. */
   yoloMode = false;
+  /** The live parent-Room reviewer baked into the current session. */
+  reviewerHandle;
+  /** The role-specific second-chance instruction for this session. */
+  cornerTurnEndNudge = CORNER_DELIVERY_NUDGE;
   /** Repository state already given a delivery reminder, until that state changes. */
   lastDeliveryNudgeState;
   turnIdentityInstructions = "";
@@ -22094,7 +22309,8 @@ var MonolithCornerTurnLoop = class {
       effort: configuration.effort ?? this.options.config.modelSelection?.effort,
       soul: configuration.soul ?? self?.soul,
       agentName: self?.name ?? this.agent.name,
-      yoloMode: configuration.yoloMode
+      yoloMode: configuration.yoloMode,
+      reviewerHandle: configuration.reviewerHandle
     });
   }
   async activate(trace) {
@@ -22114,9 +22330,30 @@ var MonolithCornerTurnLoop = class {
       effort: configuration.effort ?? this.options.config.modelSelection?.effort,
       soul: configuration.soul ?? self?.soul,
       agentName: self?.name ?? this.agent.name,
-      yoloMode: configuration.yoloMode
+      yoloMode: configuration.yoloMode,
+      reviewerHandle: configuration.reviewerHandle
     });
     this.yoloMode = configuration.yoloMode;
+    this.reviewerHandle = configuration.reviewerHandle;
+    const opener = this.options.openedBy ? roster.members.find((member) => member.identityId === this.options.openedBy) : void 0;
+    const reviewerInput = {
+      reviewerHandle: configuration.reviewerHandle,
+      agentHandle: self?.handle,
+      authorHandle: opener?.handle,
+      openedByAgent: !this.options.openedBy || this.options.openedBy === this.agent.publicKey,
+      yoloMode: configuration.yoloMode
+    };
+    let reviewerInstruction = cornerReviewerInstruction(reviewerInput);
+    if (reviewerInstruction) {
+      const restore = await this.options.api.execute("getCornerRestoreState", {
+        cornerId: this.options.cornerId
+      });
+      reviewerInstruction = cornerReviewerInstruction({
+        ...reviewerInput,
+        pullRequestNumber: restore.lifecycle?.pr?.number
+      });
+    }
+    this.cornerTurnEndNudge = reviewerInstruction ?? cornerMergeInstruction(configuration.yoloMode, configuration.reviewerHandle);
     await mkdir12(this.options.worktreePath, { recursive: true });
     const selection = configuration.model || configuration.effort ? { model: configuration.model, effort: configuration.effort } : this.options.config.modelSelection;
     const homeOverlay = this.options.config.agentHomeRoot ? await prepareRoomAgentHome({
@@ -22260,8 +22497,11 @@ var MonolithCornerTurnLoop = class {
         ...repository ? [
           `You are in an isolated git worktree on ${repository.featureBranch}, targeting ${repository.targetBranch}.`,
           `Commit and push only ${repository.featureBranch}; never force-push or write to ${repository.targetBranch}. Before pushing, rebase on origin/${repository.featureBranch}; resolve conflicts autonomously, realigning to that remote branch and redoing the objective if needed, then rerun affected tests. Open the pull request with gh.`,
-          'Once the pull request exists, reply only with its full URL and end the turn; do not check or wait for CI. On a later checks turn, call pr_checks_status. Merge only when checks="passed", held=false, and approvalPending=false; only a later explicit human resume clears a hold.',
-          cornerMergeInstruction(configuration.yoloMode),
+          ...reviewerInstruction ? [reviewerInstruction] : [
+            configuration.reviewerHandle ? `Once the pull request exists, reply with its full URL, then @${configuration.reviewerHandle} please review, and end the turn; do not check or wait for CI.` : 'Once the pull request exists, reply only with its full URL and end the turn; do not check or wait for CI. On a later checks turn, call pr_checks_status. Merge only when checks="passed", held=false, and approvalPending=false; only a later explicit human resume clears a hold.',
+            CORNER_AUTHOR_CONTRACT,
+            cornerMergeInstruction(configuration.yoloMode, configuration.reviewerHandle)
+          ],
           "Do not tag the user when a corner turn finishes: the server posts the merge summary card and its push already cover completion. Tag a human only mid-turn, and only when you need a decision or input.",
           "Never restate server check or merge notes. On a checks turn, say nothing unless you merge or push a fix, then use one short line. When approval is pending, wait for the server close request. Never merge another pull request."
         ] : [
@@ -22532,12 +22772,12 @@ ${trigger}`,
           const deliveryState = !checksTurn && this.options.repository ? await cornerUndeliveredRepositoryState(this.options.worktreePath, this.options.repository.featureBranch, this.options.repository.targetBranch) : void 0;
           const needsDeliveryNudge = deliveryState !== void 0 && deliveryState !== this.lastDeliveryNudgeState;
           let replyBeforeNudge = "";
-          if (!explained && (needsDeliveryNudge || checksTurn && this.yoloMode)) {
+          if (!explained && (needsDeliveryNudge || checksTurn && (this.yoloMode || Boolean(this.reviewerHandle)))) {
             if (needsDeliveryNudge)
               this.lastDeliveryNudgeState = deliveryState;
             replyBeforeNudge = durableReplyText(result.agentText);
             await flushToolCalls(result.toolCalls, "");
-            result = await runPrompt(checksTurn ? CORNER_YOLO_MERGE_NUDGE : CORNER_DELIVERY_NUDGE);
+            result = await runPrompt(this.reviewerHandle ? this.cornerTurnEndNudge : checksTurn ? CORNER_YOLO_MERGE_NUDGE : CORNER_DELIVERY_NUDGE);
             trace.promptSettled();
             explained = await this.explainEmpty(result);
           }
@@ -22589,9 +22829,10 @@ ${trigger}`,
         requestId,
         status: "failed",
         generationId: this.commandContext.generationId,
-        reason
+        reason: reason.text,
+        ...reason.kind ? { reasonKind: reason.kind } : {}
       });
-      await trace.finish("failed", reason);
+      await trace.finish("failed", reason.text);
       throw error;
     } finally {
       this.busy = false;
@@ -23693,16 +23934,18 @@ var RoomRuntimeCoordinator = class {
         roomId: cornerId,
         limit: 50
       });
-      const asked = [...conversation.items].reverse().find((item) => item.type === "message" && item.mentionIds.includes(this.agent.publicKey));
+      const asked = [...conversation.items].reverse().find((item) => item.type === "message" && item.authorId !== this.agent.publicKey);
       if (!asked)
         return;
+      const reason = distillTurnFailureReason(error);
       await this.options.daemonApi.execute("postAgentTurnReceipt", {
         agentId: this.agent.publicKey,
         roomId: cornerId,
         requestId: asked.id,
         status: "failed",
         generationId: `${this.agent.publicKey}:${cornerId}`,
-        reason: distillTurnFailureReason(error)
+        reason: reason.text,
+        ...reason.kind ? { reasonKind: reason.kind } : {}
       });
     } catch (reportError) {
       console.error(`[thin-core] corner ${cornerId} start-failure report failed:`, reportError);
@@ -26613,7 +26856,8 @@ async function runStoredDaemon(pathOrPointer) {
           agentId: runtime.agent.publicKey,
           workspaceId: runtime.communityId,
           runtimeDir,
-          ...runtime.modelSelection ? { runtimeSelection: runtime.modelSelection } : {}
+          ...runtime.modelSelection ? { runtimeSelection: runtime.modelSelection } : {},
+          ...config.modelUnavailable ? { startupUnavailable: config.modelUnavailable.unavailable.label } : {}
         });
       },
       onProgress: async (status) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.0.92",
+  "version": "0.0.95",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "homepage": "https://usebeeline.app",
   "bugs": {