usebeeline 0.1.1 → 0.1.2

package/dist/usebeeline.mjs

@@ -14385,7 +14385,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes8, createHash: createHash13 } = __require("crypto");
+    var { randomBytes: randomBytes8, createHash: createHash14 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -15053,7 +15053,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash13("sha1").update(key + GUID).digest("base64");
+        const digest = createHash14("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -15422,7 +15422,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter2 = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash13 } = __require("crypto");
+    var { createHash: createHash14 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -15729,7 +15729,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash13("sha1").update(key + GUID).digest("base64");
+        const digest = createHash14("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -27226,19 +27226,6 @@ var WORKFLOW_TIMEOUT_SECONDS_MAX = 30 * 24 * 60 * 60;
 var WEIGHT_TIER_RULE_PATTERN_MAX_LENGTH = 32;
 var RULE_PATTERN_SHAPE = new RegExp(`^[a-z0-9*.-]{1,${WEIGHT_TIER_RULE_PATTERN_MAX_LENGTH}}$`);
 
-// packages/api-contract/dist/feedback.js
-var FEEDBACK_AGENT_CATEGORIES = [
-  "simpler_path",
-  "contradiction",
-  "tooling_gap",
-  "context_gap",
-  "bug"
-];
-var FEEDBACK_CATEGORIES = [
-  ...FEEDBACK_AGENT_CATEGORIES,
-  "human_report"
-];
-
 // apps/body/dist/transient-provider-error.js
 var TRANSIENT_PATTERNS = [
   /\b429\b/,
@@ -31385,7 +31372,7 @@ async function activateDaemonTransport(path, fetchImpl = fetch) {
 
 // apps/body/dist/room-runtime.js
 import { execFile as execFile12 } from "node:child_process";
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 import { existsSync as existsSync8, mkdirSync as mkdirSync3 } from "node:fs";
 import { mkdir as mkdir20, readdir as readdir8, realpath as realpath2, rm as rm9 } from "node:fs/promises";
 import { dirname as dirname19, relative as relative3, resolve as resolve29, sep as sep2 } from "node:path";
@@ -32901,7 +32888,7 @@ async function runServerCommandIntake(options) {
 
 // apps/body/dist/monolith-corner-turn.js
 import { execFile as execFile11 } from "node:child_process";
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 import { mkdir as mkdir18, readFile as readFile20, writeFile as writeFile14 } from "node:fs/promises";
 import { homedir as homedir14, hostname } from "node:os";
 import { dirname as dirname17, join as join14, resolve as resolve28 } from "node:path";
@@ -33909,7 +33896,7 @@ When the mock needs a real product photo, do not draw an SVG stand-in. Call beel
 function beelineReviewSkillMarkdown(releaseId) {
   return `---
 name: beeline-review
-description: Review a corner pull request against verbatim human intent, every current criterion, and the Beeline merge gate.
+description: Review a corner pull request against the brief's spec, its checklist, the approval quote, and the Beeline merge gate.
 ---
 
 <!-- beeline-release: ${releaseId} -->
@@ -33927,26 +33914,26 @@ Follow these steps in order. Do not skip or reorder them.
 - When a checkout is needed, create a temporary detached worktree, install an EXIT trap that removes it with \`git worktree remove --force\` and deletes its temporary directory, and run every command there. Cleanup is mandatory on PASS, FAIL, and command error.
 - Review and test only the recorded revision. If the head moves, clean up the scratch worktree and start over.
 
-## 2. P0 - HUMAN INTENT AND CRITERIA FULFILLED, DEMONSTRATED
+## 2. P0 - SPEC AND CHECKLIST FULFILLED, DEMONSTRATED
 
-Read the server-assigned brief and its current revision, including every required file. Quote every verbatim human-intent entry with its source message ID before considering the short objective. The verbatim intent plus current numbered criteria are product truth; the short objective is navigation-only text and the PR description cannot add, remove, or narrow scope. If a required file is unavailable, or the revision changes during review, refuse approval and describe what is missing. A requirement may become out of scope only through a new human-authorized brief revision; reviewer discretion, implementation difficulty, and silence never remove it. A passing narrow test does not prove a broader requirement. Review a deliberate human choice as written, even if it is unusual.
+Read the server-assigned brief and its current revision, including every required file. Quote the approval with its message ID and approver before considering the short objective. The spec's checklist is the scope, and the approval quote is the human's own words: it wins any conflict with the spec. The short objective is navigation-only text and the PR description cannot add, remove, or narrow scope. A revision with no recorded approval is reviewed against its spec alone. If a required file is unavailable, or the revision changes during review, refuse approval and describe what is missing. A requirement may become out of scope only through a new human-authorized brief revision; reviewer discretion, implementation difficulty, and silence never remove it. A passing narrow test does not prove a broader requirement. Review a deliberate human choice as written, even if it is unusual.
 
-Before general correctness, produce a criterion ledger in brief order. List every current criterion ID exactly once as met, unmet, unverified, or out of scope, followed by concrete evidence. Any missing, unmet, or unverified criterion blocks PASS. Out of scope is valid only when the current revision itself records the human-authorized removal.
+Before general correctness, produce a checklist ledger in spec order. List every checklist line exactly once as met, unmet, unverified, or out of scope, followed by concrete evidence. Any missing, unmet, or unverified line blocks PASS. Out of scope is valid only when the current revision itself records the human-authorized removal.
 
 Before judging the implementation, independently repeat the two judgment legs from request triage:
 
 - **Work warranted:** For a bug, reproduce the reported behavior on the target branch. For another request, establish the unmet user need from the request and current product. Search current code, history, issues, and open or recently merged pull requests for work that already resolves or supersedes it. Treat title similarity only as a candidate, not proof of duplication. FAIL confirmed duplicate or obsolete work.
 - **Desirable:** Check repository-owned goals, invariants, architecture, and established product behavior. Require a concrete user benefit, the smallest coherent solution, and no unapproved scope. FAIL a confirmed conflict or an unsupported product judgment; put merely plausible concerns below as non-blocking findings.
 
-- Quote the verbatim human intent, with message IDs, exactly as stored. Do not quote the short objective as product truth.
-- Derive the end-user story from that intent and the current criteria in one sentence: \`a user who does X sees Y\`.
+- Quote the approval text, with its message ID, exactly as stored. Do not quote the short objective as product truth.
+- Derive the end-user story from the spec and the approval quote in one sentence: \`a user who does X sees Y\`.
 - Make Y happen against the built PR head: run the app or affected service and perform X.
 - If no interactive surface is reachable, run the narrowest test or script that exercises the exact user path and prints the observable Y.
 - Record the command and the observed Y.
 - A unit test of an inner function, a log line, \`the code looks right\`, or any other proxy does not count.
 - If the user-visible Y cannot be produced, FAIL now. Nothing below can rescue the review.
 - For a bug, if a \`Reproduction <id>\` was recorded, quote it, re-run that exact user path on the PR head, and record that the wrong result is gone. FAIL if that proof does not name the identifier, even when other tests pass. If none was obtained, require the proof to say so plainly and show the regression instead; do not fail the review for a missing identifier.
-- State whether the diff fulfills the authoritative intent and every current criterion without unapproved scope.
+- State whether the diff meets every checklist line and the approval quote without unapproved scope.
 
 ## 3. Empirical pass second
 
@@ -33955,7 +33942,7 @@ Use record_validation_stage for each assessed stage, naming the current brief re
 Only the author may report final_authorization as passed, after pr_checks_status reports checks passed and mergeAllowed true for the current head; the server then merges that head. A reviewer's approval or a passed stage row alone is not the composite gate.
 
 - Run the repository typecheck and tests touched by the diff.
-- If the intent or a criterion names a user path, exercise that path.
+- If the spec or the approval quote names a user path, exercise that path.
 - Record every command and exit code.
 - A review with no executed command is invalid and must FAIL.
 
@@ -33971,9 +33958,9 @@ Only the author may report final_authorization as passed, after pr_checks_status
 
 ## 6. Bloat guard
 
-- Compare net lines with the authoritative intent, current criteria, and typed non-goals.
+- Compare net lines with the spec, its checklist and non-goals, and the approval quote.
 - FAIL backwards-compatibility shims, dual paths, feature flags, or abstractions with one caller.
-- FAIL machinery the authoritative intent and current criteria did not ask for.
+- FAIL machinery the spec and the approval quote did not ask for.
 
 ## 7. Security and data
 
@@ -33982,10 +33969,10 @@ Only the author may report final_authorization as passed, after pr_checks_status
 ## 8. Gate and verdict
 
 - Review the exact green head named in your reviewer instruction. If the head moved, do not approve it.
-- Re-read the assigned brief revision before the verdict. A repair changes the head and invalidates affected evidence; a requirement correction invalidates the relevant verdict even if code did not change. Keep product-completeness findings (missing or contradicted intent/criteria) separate from engineering findings (correctness, security, maintainability, tests). Give every confirmed finding a stable ID that survives rereview, affected criterion IDs or \`engineering\`, location, severity, evidence, and repair disposition. Reuse the same ID until that finding is resolved. Mechanical repairs return to the author; ask a human only for a genuinely unresolved product choice. Do not run a nested validation pipeline or push the author's branch.
+- Re-read the assigned brief revision before the verdict. A repair changes the head and invalidates affected evidence; a requirement correction invalidates the relevant verdict even if code did not change. Keep product-completeness findings (a missing or contradicted checklist line or approval quote) separate from engineering findings (correctness, security, maintainability, tests). Give every confirmed finding a stable ID that survives rereview, the affected checklist line or \`engineering\`, location, severity, evidence, and repair disposition. Reuse the same ID until that finding is resolved. Mechanical repairs return to the author; ask a human only for a genuinely unresolved product choice. Do not run a nested validation pipeline or push the author's branch.
 - Always use this exact verdict shape:
 
-\`verbatim human intent quoted with source message IDs:\`
+\`approval quoted with its message ID:\`
 \`user story:\`
 \`work warranted evidence:\`
 \`desirability evidence:\`
@@ -33993,8 +33980,8 @@ Only the author may report final_authorization as passed, after pr_checks_status
 \`proof of that reproduction (or none obtained + regression):\`
 \`how Y was demonstrated (or FAIL):\`
 \`commands run + results:\`
-\`brief revision and hash:\`
-\`criterion ledger (every current ID + status + evidence):\`
+\`brief revision:\`
+\`checklist ledger (every checklist line + status + evidence):\`
 \`validation stages and evidence:\`
 \`product-completeness findings (block):\`
 \`engineering findings (block):\`
@@ -34019,20 +34006,22 @@ description: Prepare or revise a durable corner assignment from Room decisions b
 
 # Durable corner brief
 
-Create an assignment a fresh session can execute without the parent transcript. The typed outer contract is mandatory for repository and research work:
+Create an assignment a fresh session can execute without the parent transcript. A brief has three parts:
 
-- \`intentVerbatim[]\`: exact human words plus each Room message ID. Copy snapshots exactly; never substitute a summary.
-- \`buildSpec\`: agent-authored Markdown implementation guidance.
-- \`criteria[]\`: observable acceptance criteria with stable numbered IDs such as AC-1. Retain IDs across revisions; do not renumber unaffected criteria.
-- \`nonGoals[]\`: explicit exclusions.
-- \`references[]\`: each reference or mock with a label, description, optional object ID, and authority label. An optional or agent-generated mock is not styling authority unless a human made it so.
-- \`approvalBasis\`: either the initiating human command when it already settled the exact material scope, or the exact later human answer that settled a specific unresolved choice or requested brief slice.
+- \`spec\`: one Markdown doc you write, with these headings:
+  - \`## Intent\`: the human's own words, quoted exactly, each with its Room message ID. Never substitute a summary.
+  - \`## Checklist\`: observable done items, one per line. Keep unaffected lines as they are across revisions.
+  - \`## Non-goals\`: explicit exclusions.
+  - \`## References\`: each reference or mock with what it is and whose call it is. An optional or agent-generated mock is not styling authority unless a human made it so.
+  Add implementation guidance under further headings when it helps.
+- files (\`attachments\`): the Room files the worker needs, each with its purpose and whether it is required.
+- \`approval\`: one human Room message ID. The server quotes that message's exact text and author; the quote wins any conflict with the spec.
 
-Do not infer approval from silence, assent to different prose, or the mere existence of a plan. Keep agent recommendations labelled as recommendations. Do not promote a plausible UX detail, algorithm, failure message, or extra test into a requirement merely because it sounds helpful.
+Do not infer approval from silence, assent to different prose, or the mere existence of a plan. Keep agent recommendations labelled as recommendations. Do not promote a plausible UX detail, algorithm, failure message, or extra test into a checklist item merely because it sounds helpful.
 
 ## Compact path for a settled small fix
 
-Use this when the requested behavior, touched surface, exclusions, and proof are already obvious. Inspect the narrow current behavior, write the exact intent snapshot, a short build spec, stable observable criteria, non-goals, references, and the initiating-command approval basis. Dispatch without a proposal/go ceremony. \u201CChange the message action label from Remove to Delete; leave confirmation and accessibility wording unchanged\u201D needs the visible-label criterion and both exclusions, not another confirmation question.
+Use this when the requested behavior, touched surface, exclusions, and proof are already obvious. Inspect the narrow current behavior, write a short spec (quoted intent, observable checklist, non-goals, references), and use the initiating command as the approval. Dispatch without a proposal/go ceremony. \u201CChange the message action label from Remove to Delete; leave confirmation and accessibility wording unchanged\u201D needs the visible-label checklist line and both exclusions, not another confirmation question.
 
 ## Complex-work planning loop
 
@@ -34040,15 +34029,15 @@ Use this default-on loop when work crosses components, changes architecture or a
 
 ### 1. Scope and current state
 
-- Collect every relevant human message, including corrections; later corrections supersede only what they explicitly change. Preserve their exact text and IDs in \`intentVerbatim\`.
+- Collect every relevant human message, including corrections; later corrections supersede only what they explicitly change. Quote their exact text and IDs under \`## Intent\`.
 - Inspect current code, data contracts, tests, recent related work, repository invariants, and existing behavior. State what exists, what is missing, and what is deliberately out of scope.
 - Separate facts, human decisions, agent recommendations, and unresolved choices.
 
 ### 2. User stories and product boundary
 
 - Write the actor/action/observable-result stories.
-- Map each story to one or more stable criterion IDs and explicit non-goals.
-- If one unresolved choice would materially change behavior, scope, irreversible effects, or the intended result, present only that choice or the affected brief slice to the human. Record the exact answer message in \`approvalBasis\`. Never treat no answer as approval.
+- Map each story to one or more checklist lines and explicit non-goals.
+- If one unresolved choice would materially change behavior, scope, irreversible effects, or the intended result, present only that choice or the affected brief slice to the human. Use the answering message as the \`approval\`. Never treat no answer as approval.
 
 ### 3. Architecture and data flow
 
@@ -34059,29 +34048,29 @@ Use this default-on loop when work crosses components, changes architecture or a
 ### 4. Failure modes and test map
 
 - Enumerate missing/stale data, retries, concurrency, partial failure, authorization failure, rollback, and boundary-specific hazards that apply.
-- Build an acceptance map from every criterion ID to its proof boundary: unit, integration, device/browser, server authorization, migration, or live harness. No criterion may be left without planned evidence.
+- Map every checklist line to its proof boundary: unit, integration, device/browser, server authorization, migration, or live harness. No line may be left without planned evidence.
 
 ### 5. Mocks and references
 
 - When a visual or interaction decision needs eyes, create and post one self-contained mock using the using-beeline mock procedure.
-- A mock/file posted with \`post_artifact\` in this planning turn is added automatically to the brief attachment manifest; do not manually copy its object ID. Still add a typed reference explaining its authority. Existing human-posted files must be named explicitly in attachments.
+- A mock/file posted with \`post_artifact\` in this planning turn is added automatically to the brief attachment manifest; do not manually copy its object ID. Still list it under \`## References\` with whose call it is. Existing human-posted files must be named explicitly in attachments.
 
 ### 6. Implementation tasks
 
-- Synthesize ordered, independently verifiable tasks. For each task name the affected boundary, criterion IDs, expected files/components, failure handling, and proof.
-- Keep the build spec actionable, not a transcript summary.
+- Synthesize ordered, independently verifiable tasks. For each task name the affected boundary, checklist lines, expected files/components, failure handling, and proof.
+- Keep the spec actionable, not a transcript summary.
 
 ### 7. Bounded adversarial second read (default on)
 
-- Spend one pass, bounded to the drafted scope, trying to disprove completeness: find a missing story, authority mismatch, unhandled failure, criterion without proof, mock ambiguity, accidental scope expansion, or task-order hazard.
+- Spend one pass, bounded to the drafted scope, trying to disprove completeness: find a missing story, authority mismatch, unhandled failure, checklist line without proof, mock ambiguity, accidental scope expansion, or task-order hazard.
 - Return findings to the planning agent and repair the draft. Escalate only a genuinely material product choice to the human; engineering choices and mechanical gaps are resolved in the plan.
 - End after one adversarial pass unless its repair exposes one new material product choice. Do not recursively review the review.
 
 ## Dispatch and revision
 
-Existing authorization permits dispatch when the initiating command already settles the exact material scope. Drafting a brief does not create approval. Honor an explicit request to review first. When a later answer is needed, bind that exact message snapshot as \`explicit-human-answer\`; the server records it against the exact revision hash.
+Existing authorization permits dispatch when the initiating command already settles the exact material scope; that command is the approval. Drafting a brief does not create approval. When the scope was not already explicit, post the spec and ask the corner's opener to approve it, then use their reply as the \`approval\`. Honor an explicit request to review first.
 
-Pass the typed contract as \`open_corner.brief\`. Read the current revision before revising and use \`revise_corner_brief\` with the complete replacement plus a concise change description. Preserve unaffected intent, criteria IDs, and authority labels. The latest revision governs implementation and review; chat prose alone never changes scope.
+Pass the brief as \`open_corner.brief\`. Read the current revision before revising and use \`revise_corner_brief\` with the complete replacement spec, the approving message, and a concise change description. Preserve unaffected intent quotes, checklist lines, and references. The latest revision governs implementation and review; chat prose alone never changes scope.
 `;
 }
 function beelineTriageSkillMarkdown(releaseId) {
@@ -34098,7 +34087,7 @@ Run these checks before opening a corner.
 
 ## 1. Is it clear?
 
-- Rewrite the request as a concrete outcome and acceptance criteria.
+- Rewrite the request as a concrete outcome and a checklist of what done means.
 - State material exclusions needed to prevent unrequested work.
 - Keep the corner objective complete and within 24 words.
 - If an ambiguity could materially change the outcome, ask one focused question before opening the corner.
@@ -35059,6 +35048,21 @@ var HOME_SUBDIRS = [
   "cache",
   "tmp"
 ];
+function claudeLoginExpiresAt(text2) {
+  try {
+    const expiresAt = JSON.parse(text2)?.claudeAiOauth?.expiresAt;
+    return typeof expiresAt === "number" && Number.isFinite(expiresAt) ? expiresAt : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function hasNewerDetachedClaudeLogin(detached, source) {
+  const detachedExpiresAt = claudeLoginExpiresAt(await readFile17(detached, "utf8"));
+  if (detachedExpiresAt === void 0)
+    return false;
+  const sourceExpiresAt = claudeLoginExpiresAt(await readFile17(source, "utf8"));
+  return sourceExpiresAt !== void 0 && detachedExpiresAt > sourceExpiresAt;
+}
 async function repairRoomAgentCredentialLinks(input) {
   const root = resolve21(input.root);
   const operatorHome = input.operatorHome ?? homedir13();
@@ -35079,6 +35083,9 @@ async function repairRoomAgentCredentialLinks(input) {
         continue;
     }
     if (stats) {
+      if (input.keepNewerDetachedClaudeLogin && credential.dir === "claude" && stats.isFile() && await hasNewerDetachedClaudeLogin(target, source)) {
+        continue;
+      }
       const quarantine = `${target}.beeline-quarantine-${Date.now()}-${randomUUID8()}`;
       await rename5(target, quarantine);
     }
@@ -35106,7 +35113,11 @@ async function prepareRoomAgentHome(input) {
     return {};
   }
   try {
-    await repairRoomAgentCredentialLinks({ root, operatorHome });
+    await repairRoomAgentCredentialLinks({
+      root,
+      operatorHome,
+      keepNewerDetachedClaudeLogin: input.agentKind === "claude"
+    });
   } catch (error) {
     if (input.failClosed || input.resourceAuthFile)
       throw error;
@@ -36274,8 +36285,6 @@ function sessionConfigFingerprint(input) {
   ];
   if (input.reviewerHandle !== void 0)
     fingerprint.push(input.reviewerHandle);
-  if (input.feedbackTriage)
-    fingerprint.push("feedback-triage");
   return JSON.stringify(fingerprint);
 }
 function mountedMcpSet(servers) {
@@ -36753,7 +36762,6 @@ function beelineAgentMcpServer(config, api, context) {
       ...context.cornerId ? [{ name: "BEELINE_DAEMON_CORNER_ID", value: context.cornerId }] : [],
       ...context.agentMayCloseCorner ? [{ name: "BEELINE_CORNER_AGENT_CLOSE", value: "1" }] : [],
       ...context.agentMayUpgradeCorner ? [{ name: "BEELINE_CORNER_CAN_UPGRADE", value: "1" }] : [],
-      ...context.feedbackTriage ? [{ name: "BEELINE_CORNER_FEEDBACK_TRIAGE", value: "1" }] : [],
       ...context.reviewer ? [{ name: "BEELINE_CORNER_REVIEWER", value: "1" }] : [],
       ...context.cornerId && context.lane ? [{ name: "BEELINE_CORNER_LANE", value: context.lane }] : [],
       ...context.attachRoot ? [{ name: "BEELINE_ATTACH_ROOT", value: context.attachRoot }] : [],
@@ -36934,6 +36942,11 @@ function isAccountOrProviderRefusal(record6) {
 // apps/body/dist/monolith-corner-turn.js
 init_runtime();
 
+// packages/api-contract/dist/system-identity.js
+import { createHash as createHash8 } from "node:crypto";
+var SYSTEM_IDENTITY_ID = createHash8("sha256").update("beeline:system-identity").digest("hex");
+var DELETED_ACCOUNT_IDENTITY_ID = createHash8("sha256").update("beeline:deleted-account").digest("hex");
+
 // apps/body/dist/transcript-budget.js
 function budgetTranscript(lines, modelContextTokens, otherPromptBytes) {
   const context = modelContextTokens && modelContextTokens > 0 ? modelContextTokens : 32768;
@@ -36991,23 +37004,21 @@ var PROMPT_SURFACES = [
   "dm",
   "code-corner",
   "review-corner",
-  "research-corner",
   "no-code-corner"
 ];
 var CORNERS = [
   "code-corner",
   "review-corner",
-  "research-corner",
   "no-code-corner"
 ];
 var EVERYWHERE = PROMPT_SURFACES;
-var CORNER_AUTHOR_CONTRACT = `The current assigned brief's verbatim human intent and numbered acceptance criteria are the product authority. The short objective is navigation-only text and cannot add, remove, or narrow a requirement.
-Implement every current acceptance criterion and use the brief's file manifest. Record relevant validation stages with record_validation_stage against the current revision and head, citing actual commands or observed behavior. Do not call a missing stage passed.
+var CORNER_AUTHOR_CONTRACT = `The current brief's spec is the scope and its checklist says what done means. Its approval quote is the human's own words and wins any conflict with the spec. The short objective is navigation-only text and cannot add, remove, or narrow a requirement.
+Complete every checklist item in the current spec and use the brief's file manifest. Record relevant validation stages with record_validation_stage against the current revision and head, citing actual commands or observed behavior. Do not call a missing stage passed.
 When a human correction changes the assignment, read the latest revision and use revise_corner_brief with the complete updated brief and a change description before doing dependent work. A chat reply does not revise the assignment.
 Before any code, write its end-user story in one sentence: "a person who does X sees Y".
-Follow the beeline-triage skill's bugfix execution contract when the verbatim human intent reports a defect.
+Follow the beeline-triage skill's bugfix execution contract when the spec or its approval quote reports a defect.
 Attempt to reproduce it as triage isolated it, using every tool the host offers: emulator, Playwright, browser, test runner. Record what was tried and what was observed. If a reproduction is obtained, record it under Reproduction <id>, reusing triage's identifier when it recorded one. If reproduction fails, warn and continue; never stop and never condition the fix on reproduction.
-Narrow the fix to the authorized intent and current criteria. When a reproduction exists, change only what removes it while satisfying those criteria.
+Narrow the fix to the current spec and its approval quote. When a reproduction exists, change only what removes it while meeting the checklist.
 Before opening the pull request, produce Y against the built change: run the app or affected service from your branch and perform X.
 If no interactive surface is reachable, run the narrowest test or script that exercises the exact user path and prints the observable Y.
 A unit test of an inner function, a log line, or reading the code is not a demonstration.
@@ -37015,13 +37026,16 @@ The pull request body MUST contain two sections with exactly these headings: ##
 Under ## Reproduced, name Reproduction <id> and give the steps or command and what was observed; write "not obtained" when reproduction failed, or "not a defect report" for feature work.
 Under ## Demonstrated, cite the same identifier and show that reproduction now passing when one exists; when none was obtained, state that plainly and show the regression instead.
 A pull request without both sections is not deliverable and the Room's reviewer will fail it.
-Change only what the verbatim intent and current criteria authorize. No unrequested features, flags, compatibility shims, or refactors.`;
+Change only what the current spec and its approval quote authorize. No unrequested features, flags, compatibility shims, or refactors.`;
 var CORNER_REVIEWER_SESSION_INSTRUCTION = "You are this Room's configured reviewer. The active turn prompt names the latest stable green PR head. Review and approve only that exact head; if no stable green head is named, end the turn without a verdict. Never merge yourself.";
 var CORNER_REVIEWER_UNSTABLE_HEAD_INSTRUCTION = "There is no stable green PR head for this active reviewer turn. Do not review or call approve_merge. End this turn without a verdict; the next green transition will wake you.";
 var CORNER_DELIVERY_NUDGE = "Before ending this turn, inspect the repository state and finish delivering the work unless a human hold stands: commit and push the intended changes and open the pull request if one does not exist. Decide yourself whether any remaining dirty work belongs to the objective; do not discard it merely to make the worktree clean. The pull request body must carry ## Reproduced and ## Demonstrated; if they are missing, add them before ending the turn.";
 var CORNER_YOLO_MERGE_NUDGE = 'Yolo is on. Call pr_checks_status now. If checks="failed", fix the failure and push. If checks="unknown", reply in this corner with the tool reason and stop instead of retrying. Otherwise stop: the server merges this pull request itself once mergeAllowed=true. Never merge it yourself.';
-var RESEARCH_CORNER_HOLD = "This is a research corner with writable repository access. Investigate and edit files as needed. Do not commit, push, or open a pull request until a human explicitly directs that step. Never merge. Leave the corner open; only a human closes it.";
-var UPGRADE_INTENT_RULE = "Call this on your own judgment when the work in this corner needs repository changes; nobody has to ask for the upgrade. Call it while answering a human message in this corner, because that message becomes the code corner's brief.";
+var UPGRADE_INTENT_RULE = "Call this on your own judgment when the work in this corner needs the repository; nobody has to ask. Call it while answering a human message in this corner, then write the brief in the restarted code session.";
+var CORNER_PLACEHOLDER_BRIEF_RULE = "This brief is the placeholder the upgrade wrote from the request. Read the code, write the real spec with revise_corner_brief, then post it in this corner and ask the corner's opener to approve it before editing. This is best effort: if the opener is away or the request was already explicit, use your judgment and proceed. When the opener replies, record their reply as the approval in the next revision.";
+function isPlaceholderCornerBrief(brief) {
+  return brief.revision === 1 && brief.authorId === SYSTEM_IDENTITY_ID;
+}
 var handle = (value) => value.replace(/^@/, "");
 function cornerMergeInstruction(yoloMode, reviewerHandle) {
   if (!reviewerHandle)
@@ -37177,7 +37191,7 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     surfaces: ["room"],
     render: () => [
       "Repository changes happen only in a corner. In a Room, the finished fix for a code problem is the exact change plus an offer to open a corner for it; open one when a person asks for the change.",
-      "Before opening one, consult beeline-triage and beeline-spec, then call open_corner with a name of at most three words, an objective of at most 24 words, and the typed brief. The objective only titles the work; the brief is its authority. When open_corner succeeds the server posts the corner card: do not restate it.",
+      "Before opening one, consult beeline-triage and beeline-spec, then call open_corner with a name of at most three words, an objective of at most 24 words, and the brief (a spec plus the approving message). The objective only titles the work; the brief is its authority. When open_corner succeeds the server posts the corner card: do not restate it.",
       "For corners you belong to, use inspect_corner for status, steer_corner to pass Room input down, and ask_corner for one answer. Never post into a corner without a Room command."
     ].join(" ")
   },
@@ -37219,21 +37233,12 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     why: "The agent must know its branch and target; only a code-corner author is told to push and open the pull request.",
     budgetBytes: 520,
     layer: "surface",
-    surfaces: ["code-corner", "review-corner", "research-corner"],
+    surfaces: ["code-corner", "review-corner"],
     render: ({ worktree, surface }) => [
       `You are in an isolated git worktree on ${worktree?.featureBranch ?? "the feature branch"}, targeting ${worktree?.targetBranch ?? "the target branch"}.`,
       surface !== "code-corner" ? "" : `Commit and push only ${worktree?.featureBranch}; never force-push or write to ${worktree?.targetBranch}. Before pushing, rebase on origin/${worktree?.featureBranch}; resolve conflicts autonomously, realigning to that remote branch and redoing the work if needed, then rerun affected tests. Open the pull request with gh.`
     ].filter(Boolean).join("\n")
   },
-  {
-    id: "corner.research",
-    topic: "merge",
-    why: "Research corners explore; nothing leaves the worktree until a human says so.",
-    budgetBytes: 320,
-    layer: "surface",
-    surfaces: ["research-corner"],
-    render: () => RESEARCH_CORNER_HOLD
-  },
   {
     id: "corner.contract",
     topic: "author-contract",
@@ -37315,35 +37320,11 @@ function assembleSessionPrompt(context) {
   };
 }
 function renderAssignedCornerBrief(brief) {
-  if (brief.legacy || !Array.isArray(brief.intentVerbatim) || !Array.isArray(brief.criteria)) {
-    return `Legacy assigned corner brief ${brief.id} revision ${brief.revision}:
-${brief.content}`;
-  }
-  const intent = brief.intentVerbatim.map((item) => `- [message ${item.sourceMessageId}] ${item.snapshot}`).join("\n");
-  const criteria = brief.criteria.map((item) => `- ${item.id}: ${item.text}`).join("\n");
-  const nonGoals = brief.nonGoals?.map((item) => `- ${item}`).join("\n") || "(none)";
-  const references2 = brief.references?.map((item) => `- ${item.label} [${item.authority}]${item.objectId ? ` object ${item.objectId}` : ""}: ${item.description}`).join("\n") || "(none)";
-  const basis = brief.approvalBasis;
-  const approval = basis.kind === "legacy-pre-migration" ? basis.reason : `${basis.kind} by ${basis.approvedBy}, message ${basis.sourceMessageId}: ${basis.snapshot}`;
-  return `Assigned corner brief ${brief.id} revision ${brief.revision} (hash ${brief.revisionHash}; current server revision):
-
-Verbatim human intent \u2014 authoritative:
-${intent}
-
-Current acceptance criteria \u2014 authoritative:
-${criteria}
-
-Non-goals:
-${nonGoals}
-
-References and authority:
-${references2}
+  const approval = brief.approval ? `Approved by ${brief.approval.approverName}, message ${brief.approval.sourceMessageId}: ${brief.approval.text}` : "This revision predates recorded approvals.";
+  return `Brief revision ${brief.revision}:
+${brief.spec}
 
-Approval basis bound to this revision:
-${approval}
-
-Build spec \u2014 implementation guidance:
-${brief.buildSpec}`;
+${approval}`;
 }
 function roomMentionDirectory(roster, selfId) {
   const rows = [];
@@ -37381,6 +37362,15 @@ var TURN_SECTIONS = [
     surfaces: CORNERS,
     render: ({ objective }) => objective ? `Corner objective (navigation only, not product authority): ${objective}` : ""
   },
+  {
+    id: "turn.rename",
+    topic: "corner-rename",
+    why: "A generated corner name says nothing about the work; only the server knows the name is still generated, so the ask rides only on those turns.",
+    budgetBytes: 600,
+    layer: "turn",
+    surfaces: CORNERS,
+    render: ({ generatedTitle }) => generatedTitle ? `This corner still has its generated name, "${generatedTitle}". If the newest message states the work, call rename_corner once before you reply, with a name of at most three words taken from that message. A bare mention does not state the work; leave the name until a message does.` : ""
+  },
   {
     id: "turn.brief",
     topic: "brief",
@@ -37388,10 +37378,12 @@ var TURN_SECTIONS = [
     budgetBytes: 24e3,
     layer: "turn",
     surfaces: CORNERS,
-    render: ({ brief }) => brief ? `${renderAssignedCornerBrief(brief.brief)}
+    render: ({ brief, surface }) => brief ? `${renderAssignedCornerBrief(brief.brief)}
 
 Assigned files:
-${brief.fileLines.join("\n") || "(none)"}${brief.missingRequiredFile ? "\nRequired assignment files are unavailable. Pause work that depends on them and report the missing file precisely." : ""}` : "No assigned brief: the human messages in this corner are the authority; skip steps that need a brief revision."
+${brief.fileLines.join("\n") || "(none)"}${brief.missingRequiredFile ? "\nRequired assignment files are unavailable. Pause work that depends on them and report the missing file precisely." : ""}${surface === "code-corner" && isPlaceholderCornerBrief(brief.brief) ? `
+
+${CORNER_PLACEHOLDER_BRIEF_RULE}` : ""}` : "No assigned brief: the human messages in this corner are the authority; skip steps that need a brief revision."
   },
   {
     id: "turn.checkout",
@@ -38040,7 +38032,7 @@ process.exit(result.status ?? 1);
 }
 
 // apps/body/dist/warm-node-modules.js
-import { createHash as createHash8, randomUUID as randomUUID9 } from "node:crypto";
+import { createHash as createHash9, randomUUID as randomUUID9 } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
 import { chmod as chmod8, copyFile as copyFile2, link, lstat as lstat4, mkdir as mkdir17, readdir as readdir7, readFile as readFile19, readlink as readlink2, rename as rename6, rm as rm8, stat as stat6, symlink as symlink3, utimes } from "node:fs/promises";
 import { dirname as dirname16, join as join13, resolve as resolve27 } from "node:path";
@@ -38079,7 +38071,7 @@ async function readWarmPlan(worktreePath) {
   const unsafe = trees.find((tree) => !isContainedTreePath(tree));
   if (unsafe)
     return { failure: "unsafe-lockfile", detail: unsafe };
-  const key = createHash8("sha256").update(`${STORE_FORMAT}\0${process.platform}\0${process.arch}\0${process.versions.modules}\0`).update(lockfile).digest("hex").slice(0, 32);
+  const key = createHash9("sha256").update(`${STORE_FORMAT}\0${process.platform}\0${process.arch}\0${process.versions.modules}\0`).update(lockfile).digest("hex").slice(0, 32);
   return { key, trees };
 }
 function nodeModulesTreePaths(packages) {
@@ -38497,7 +38489,7 @@ function spentAuthorityOnLaneUpgrade(call) {
   return /(?:^|[._:/-])upgrade_corner_to_code$/i.test(call.title ?? "") && isCompletedToolCall(call);
 }
 function toolCallKey(call, index) {
-  return call.id ? `id-${createHash9("sha256").update(call.id).digest("hex")}` : `tool-${index}`;
+  return call.id ? `id-${createHash10("sha256").update(call.id).digest("hex")}` : `tool-${index}`;
 }
 function toolCallSettled(call) {
   if (call.resultReceived)
@@ -38770,8 +38762,7 @@ var MonolithCornerTurnLoop = class {
         }),
         ...registryRoutes.map((route) => route.routeName)
       ], this.sessionCodegraphReady),
-      reviewerHandle: configuration.reviewerHandle,
-      feedbackTriage: configuration.feedbackTriage
+      reviewerHandle: configuration.reviewerHandle
     });
   }
   async grantedHostRoutes() {
@@ -38798,7 +38789,8 @@ var MonolithCornerTurnLoop = class {
       if (this.options.config.agentHomeRoot) {
         await repairRoomAgentCredentialLinks({
           root: this.options.config.agentHomeRoot,
-          operatorHome: this.options.config.operatorHome
+          operatorHome: this.options.config.operatorHome,
+          keepNewerDetachedClaudeLogin: this.options.config.agentKind === "claude"
         });
       }
       return this.sessionId;
@@ -38821,10 +38813,10 @@ var MonolithCornerTurnLoop = class {
       authorHandle: opener?.handle,
       openedByAgent: !this.options.openedBy || this.options.openedBy === this.agent.publicKey
     };
-    const reviewerInstruction = this.options.lane !== "research" && cornerReviewerInstruction(reviewerInput) ? CORNER_REVIEWER_SESSION_INSTRUCTION : void 0;
+    const reviewerInstruction = cornerReviewerInstruction(reviewerInput) ? CORNER_REVIEWER_SESSION_INSTRUCTION : void 0;
     this.reviewerInstructionInput = reviewerInstruction ? reviewerInput : void 0;
-    const selfReviewerInstruction = this.options.lane === "research" ? void 0 : cornerSelfReviewerInstruction(reviewerInput);
-    this.sessionSurface = !this.options.repository ? "no-code-corner" : this.options.lane === "research" ? "research-corner" : reviewerInstruction ? "review-corner" : "code-corner";
+    const selfReviewerInstruction = cornerSelfReviewerInstruction(reviewerInput);
+    this.sessionSurface = !this.options.repository ? "no-code-corner" : reviewerInstruction ? "review-corner" : "code-corner";
     this.sessionPromptContext = {
       surface: this.sessionSurface,
       agentName: self?.name ?? this.agent.name,
@@ -38991,8 +38983,7 @@ var MonolithCornerTurnLoop = class {
         }),
         ...Object.keys(registryHostDeclarations)
       ], codegraphReady),
-      reviewerHandle: configuration.reviewerHandle,
-      feedbackTriage: configuration.feedbackTriage
+      reviewerHandle: configuration.reviewerHandle
     });
     const servers = [
       ...repository ? [
@@ -39020,9 +39011,8 @@ var MonolithCornerTurnLoop = class {
         roomId: this.options.parentRoomId,
         workspaceId: this.options.workspaceId,
         cornerId: this.options.cornerId,
-        agentMayCloseCorner: Boolean(repository) && this.options.lane !== "research",
+        agentMayCloseCorner: Boolean(repository),
         agentMayUpgradeCorner: this.options.agentMayUpgradeCorner,
-        feedbackTriage: configuration.feedbackTriage === true,
         reviewer: Boolean(reviewerInstruction),
         lane: this.options.lane ?? (repository ? "code" : "no_code"),
         attachRoot: this.options.worktreePath,
@@ -39321,7 +39311,7 @@ var MonolithCornerTurnLoop = class {
           const delivered = this.attachmentDir && allAttachments.length ? await deliverAttachments(allAttachments, join14(this.attachmentDir, requestId.replace(/[^\w-]/g, "_")), this.options.fetchImpl) : [];
           const briefFileLines = await Promise.all((restored.brief?.attachments ?? []).map(async (file, index) => {
             const entry = delivered.find((item) => item.attachment === briefAttachments[index]);
-            const verified = entry?.path && createHash9("sha256").update(await readFile20(entry.path)).digest("hex") === file.sha256;
+            const verified = entry?.path && createHash10("sha256").update(await readFile20(entry.path)).digest("hex") === file.sha256;
             return `- ${file.title} (${file.purpose}; ${file.required ? "required" : "optional"}; sha256 ${file.sha256}): ${verified ? entry.path : "UNAVAILABLE OR CONTENT MISMATCH"}`;
           }));
           const missingRequiredBriefFile = (restored.brief?.attachments ?? []).some((file, index) => file.required && briefFileLines[index]?.includes("UNAVAILABLE OR CONTENT MISMATCH"));
@@ -39343,6 +39333,7 @@ var MonolithCornerTurnLoop = class {
               surface: this.sessionSurface,
               sessionPrefix: this.turnSessionPrefix,
               objective: this.options.objective,
+              ...restored.titleGenerated && restored.title ? { generatedTitle: restored.title } : {},
               ...restored.brief ? {
                 brief: {
                   brief: restored.brief,
@@ -39515,6 +39506,12 @@ var MonolithCornerTurnLoop = class {
               loginRetryUsed = true;
               console.warn(`[thin-core] corner ${cornerId} turn ${requestId}: harness login expired; repairing the shared credential and retrying once`);
               trace.retry({ reason: "expired harness login" });
+              if (this.options.config.agentHomeRoot) {
+                await repairRoomAgentCredentialLinks({
+                  root: this.options.config.agentHomeRoot,
+                  operatorHome: this.options.config.operatorHome
+                });
+              }
               await this.discardSession();
               await trace.measure("activation", () => this.activate(trace));
               try {
@@ -39564,7 +39561,7 @@ var MonolithCornerTurnLoop = class {
             explained = await this.explainEmpty(result);
           }
           const checksTurn = isCornerChecksTurn(trigger, restates);
-          const deliveryState = !checksTurn && this.options.repository && this.options.lane !== "research" ? await cornerUndeliveredRepositoryState(this.options.worktreePath, this.options.repository.featureBranch, this.options.repository.targetBranch) : void 0;
+          const deliveryState = !checksTurn && this.options.repository ? await cornerUndeliveredRepositoryState(this.options.worktreePath, this.options.repository.featureBranch, this.options.repository.targetBranch) : void 0;
           const needsDeliveryNudge = deliveryState !== void 0 && deliveryState !== this.lastDeliveryNudgeState;
           let refreshedReviewerInstruction;
           let reviewerSecondPass = false;
@@ -39576,7 +39573,7 @@ var MonolithCornerTurnLoop = class {
             reviewerTargetChanged = refreshedReviewerInstruction !== activeReviewerInstruction;
           }
           let replyBeforeNudge = "";
-          if (!explained && (needsDeliveryNudge || checksTurn && this.options.lane !== "research" && (Boolean(this.reviewerInstructionInput) || this.yoloMode))) {
+          if (!explained && (needsDeliveryNudge || checksTurn && (Boolean(this.reviewerInstructionInput) || this.yoloMode))) {
             if (needsDeliveryNudge)
               this.lastDeliveryNudgeState = deliveryState;
             await flushToolCalls(result.toolCalls, "");
@@ -40229,7 +40226,8 @@ var MonolithRoomTurnLoop = class {
       if (this.options.config.agentHomeRoot) {
         await repairRoomAgentCredentialLinks({
           root: this.options.config.agentHomeRoot,
-          operatorHome: this.options.config.operatorHome
+          operatorHome: this.options.config.operatorHome,
+          keepNewerDetachedClaudeLogin: this.options.config.agentKind === "claude"
         });
       }
       return this.sessionId;
@@ -40755,6 +40753,12 @@ var MonolithRoomTurnLoop = class {
                   loginRetryUsed = true;
                   console.warn(`[thin-core] monolith Room ${this.options.roomId} turn ${item.id}: harness login expired; repairing the shared credential and retrying once`);
                   trace.retry({ reason: "expired harness login" });
+                  if (this.options.config.agentHomeRoot) {
+                    await repairRoomAgentCredentialLinks({
+                      root: this.options.config.agentHomeRoot,
+                      operatorHome: this.options.config.operatorHome
+                    });
+                  }
                   await this.discardSession();
                   await trace.measure("activation", () => this.activate(trace));
                   continue;
@@ -41524,7 +41528,7 @@ function cornerStartConfigKey(repository, objective) {
 }
 function cornerRepositoryCacheDir(supervisorRoot, remote) {
   const normalizedRemote = roomCheckoutRemote(remote);
-  const repositoryHash = createHash10("sha256").update(normalizedRemote).digest("hex").slice(0, 24);
+  const repositoryHash = createHash11("sha256").update(normalizedRemote).digest("hex").slice(0, 24);
   return resolve29(supervisorRoot, "beeline", "repositories", `${repositoryHash}.git`);
 }
 function isStandingCornerStartFault(error) {
@@ -42318,7 +42322,7 @@ var RoomRuntimeCoordinator = class {
       return this.roomRoot(roomId);
     const remote = roomCheckoutRemote(repository.remote);
     const targetBranch = repository.targetBranch || "main";
-    const checkoutId = createHash10("sha256").update(`${roomId}\0${remote}\0${targetBranch}`).digest("hex").slice(0, 24);
+    const checkoutId = createHash11("sha256").update(`${roomId}\0${remote}\0${targetBranch}`).digest("hex").slice(0, 24);
     const path = resolve29(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
     await mkdir20(dirname19(path), { recursive: true, mode: 448 });
     const token = remote.startsWith("https://github.com/") ? await this.parentRepositoryToken(roomId) : void 0;
@@ -43199,7 +43203,7 @@ init_runtime();
 init_launchd();
 init_systemd();
 import { spawn as spawn11 } from "node:child_process";
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash12 } from "node:crypto";
 import { mkdir as mkdir23, rm as rm11, stat as stat7, writeFile as writeFile17 } from "node:fs/promises";
 import { dirname as dirname21, resolve as resolve33 } from "node:path";
 
@@ -43609,7 +43613,7 @@ var DEFAULT_UPDATE_INTERVAL_MS = 3e4;
 var UPDATE_DRAIN_DEADLINE_MS = UPDATE_CONVERGENCE_SLO_MS - 15e4;
 var MAX_HOST_RESTART_STAGGER_MS = 15e3;
 function managedRestartStaggerMs(agentId, desiredRelease, drainDeadlineAt, now2 = Date.now()) {
-  const digest = createHash11("sha256").update(agentId).update("\0").update(desiredRelease).digest();
+  const digest = createHash12("sha256").update(agentId).update("\0").update(desiredRelease).digest();
   const spread = digest.readUInt32BE(0) % (MAX_HOST_RESTART_STAGGER_MS + 1);
   return Math.min(spread, Math.max(0, drainDeadlineAt - now2));
 }
@@ -44604,7 +44608,7 @@ async function runStartCommand(args, interactiveUi, dependencyOverrides = {}) {
 
 // apps/body/dist/connect-command.js
 import { spawn as spawn12 } from "node:child_process";
-import { createHash as createHash12, randomUUID as randomUUID10 } from "node:crypto";
+import { createHash as createHash13, randomUUID as randomUUID10 } from "node:crypto";
 import { chmod as chmod9, mkdir as mkdir25, readFile as readFile23, unlink as unlink7, writeFile as writeFile18 } from "node:fs/promises";
 import { homedir as homedir17, hostname as hostname3 } from "node:os";
 import { dirname as dirname24, resolve as resolve35 } from "node:path";
@@ -45294,7 +45298,7 @@ async function readMachineId(env = process.env) {
       await writeFile18(machineIdPath, `${machineId}
 `, { mode: 384 });
     } catch {
-      machineId = createHash12("sha256").update(machineName).digest("hex").slice(0, 36);
+      machineId = createHash13("sha256").update(machineName).digest("hex").slice(0, 36);
     }
   }
   return { machineId, machineName };
@@ -45303,7 +45307,7 @@ function requestConnectGrant(baseUrl, pairingCode, selection, fetchImpl, machine
   const normalizedPairingCode = normalizeAgentPairingCode(pairingCode);
   if (!normalizedPairingCode)
     throw new Error("invalid pairing code");
-  const avatarSeed = createHash12("sha256").update(normalizedPairingCode.toUpperCase()).digest("hex").slice(0, 32);
+  const avatarSeed = createHash13("sha256").update(normalizedPairingCode.toUpperCase()).digest("hex").slice(0, 32);
   return jsonRequest(`${baseUrl}/auth/agent/connect`, {
     pairing_code: normalizedPairingCode,
     harness: selection.harness,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "homepage": "https://usebeeline.app",
   "bugs": {