usebeeline 0.1.10 → 0.1.11

package/README.md

@@ -96,6 +96,8 @@ A Room and a corner are the same conversation surface with different permissions
 
 **A corner** is a fresh worktree, its own branch, one owning agent, and one fixed objective of at most 24 words. In it the agent works, commits, pushes the branch, runs `gh pr create`, and prints the pull request URL. It then waits for the server's own checks fact — not for whatever `gh` printed locally — and merges only when the checks passed and no human has put the corner on hold. The merge webhook archives the corner and reaps the worktree.
 
+When Beeline reads that a Room's repository allows GitHub auto-merge, it warns a Workspace manager while they choose a reviewer and shows an inline notice when one is already set. The warning does not prevent setting a reviewer. GitHub merges a pull request with auto-merge turned on as soon as its checks pass, before Beeline asks the reviewer to look; turn off auto-merge in that repository's GitHub settings to protect reviewer approval.
+
 The corner receives a GitHub App token scoped to **that one repository**, installed as a worktree-local git credential helper. Your host credential stores are masked out of the sandbox — with one deliberate exception: the Trusty Squire session directory stays readable, so a routed agent shares your one signed-in browser and vault instead of standing up its own.
 
 **Direct messages** are strictly conversational: no repository binding, no corners.

package/dist/usebeeline.mjs

@@ -13834,10 +13834,10 @@ function squireLoginWallIn(value, depth = 0) {
   if (!item)
     return void 0;
   const needsUser = record(item.needs_user);
-  if (needsUser?.wall === "google_session") {
+  if (needsUser?.wall === "google_session" || needsUser?.wall === "oauth_sign_in") {
     const message = shortString(needsUser.message);
     if (message)
-      return { wall: "google_session", message };
+      return { wall: needsUser.wall, message };
   }
   const oauth = record(item.oauth);
   if (oauth?.state === "awaiting_human") {
@@ -16756,8 +16756,10 @@ var StdioSquireMcpClient = class {
         continue;
       }
       const id = typeof message.id === "number" ? message.id : void 0;
-      if (id === void 0)
+      if (id === void 0) {
+        this.options.onNotification?.(message);
         continue;
+      }
       const entry = this.pending.get(id);
       if (!entry)
         continue;
@@ -16845,6 +16847,7 @@ var SquireTaskRelay = class {
   contextFile;
   authorize;
   makeClient;
+  onApprovalDecided;
   server;
   url;
   token = randomUUID3();
@@ -16860,13 +16863,16 @@ var SquireTaskRelay = class {
     processGroup: true,
     onSpawn: callbacks.onSpawn,
     onExit: callbacks.onExit,
-    log: callbacks.onDiagnostic
-  })) {
+    log: callbacks.onDiagnostic,
+    onNotification: callbacks.onNotification
+  }), onApprovalDecided = () => {
+  }) {
     this.agentId = agentId;
     this.roomId = roomId;
     this.contextFile = contextFile;
     this.authorize = authorize;
     this.makeClient = makeClient;
+    this.onApprovalDecided = onApprovalDecided;
   }
   async listen() {
     if (this.closed)
@@ -16992,6 +16998,7 @@ var SquireTaskRelay = class {
     };
     task.client = this.makeClient({
       onSpawn: (pid) => this.log("relay-spawn", task, { pid }),
+      onNotification: (message) => this.handleApprovalNotification(task, message),
       onDiagnostic: (message) => {
         if (message.startsWith("squire mcp exited"))
           return;
@@ -17128,7 +17135,10 @@ var SquireTaskRelay = class {
         if (pending && ids.length) {
           task.pendingApprovals.set(approvalKey, {
             requestId: active.requestId,
-            sessionIds: new Set(ids)
+            sessionIds: new Set(ids),
+            tool: approval.tool,
+            title: approval.title,
+            detail: approval.detail
           });
           this.log("approval-pending", task, {
             tool: safeToolName ?? null,
@@ -17169,6 +17179,37 @@ var SquireTaskRelay = class {
         task.pendingApprovals.delete(id);
     }
   }
+  /**
+   * Squire's own unsolicited decision on an approval this task is still
+   * holding a connection open for. Matched back to the pending entry by the
+   * same hash `handleSerial` keyed it under (the approval id Squire itself
+   * returned), so a notification for an approval this relay never tracked —
+   * or one already released — is silently ignored, never trusted blind.
+   */
+  handleApprovalNotification(task, message) {
+    if (message.method !== "notifications/approval_decided")
+      return;
+    const params = message.params;
+    const approvalId = params?.approval_id;
+    const status = params?.status;
+    if (typeof approvalId !== "string" || !approvalId || status !== "approved" && status !== "denied")
+      return;
+    const approvalKey = createHash("sha256").update(approvalId).digest("hex");
+    const pending = task.pendingApprovals.get(approvalKey);
+    if (!pending)
+      return;
+    task.pendingApprovals.delete(approvalKey);
+    this.onApprovalDecided({
+      requestId: pending.requestId,
+      approvalId,
+      status,
+      tool: pending.tool,
+      title: pending.title,
+      detail: pending.detail
+    });
+    if (!this.active && !this.approvalRequestId && !task.pendingApprovals.size)
+      this.scheduleIdle();
+  }
 };
 function runSquireTaskProxy(env = process.env) {
   const url = env.BEELINE_SQUIRE_RELAY_URL;
@@ -18013,6 +18054,7 @@ var SERVER_EVENT_KINDS = [
   "check-failed",
   "merged",
   "grant-decided",
+  "squire-approval-decided",
   "connector-offer-decided",
   "turn-cancelled",
   "choice-answered",
@@ -18020,6 +18062,25 @@ var SERVER_EVENT_KINDS = [
   "poll-closed",
   "workflow-handoff"
 ];
+var SERVER_EVENT_KIND_DETAIL = {
+  "joined": "fires when a person or agent joins this Room, or when a Workspace arrival projects into it",
+  "schedule-ran": "fires when a schedule you created runs",
+  "corner-opened": "fires when a corner opens under this Room",
+  "check-passed": "fires when a corner's pull request checks turn green",
+  "check-failed": "fires when a corner's pull request checks turn red",
+  "merged": "fires when a corner's pull request merges",
+  "grant-decided": "carries the grant id and status and resumes the turn that asked for the grant",
+  "squire-approval-decided": "carries what was approved or denied and the Squire approval id, and resumes the turn that asked",
+  "connector-offer-decided": "fires when a human accepts or declines an offered connector, or a reconnect ceremony finishes, and resumes the turn that offered it",
+  "turn-cancelled": "fires when a running turn is stopped",
+  "choice-answered": "fires when a human answers a posted choice, starting a new turn for the asking agent",
+  "choice-skipped": "fires when a posted choice's window closes unanswered, starting a new turn for the asking agent",
+  "poll-closed": "fires when a posted poll closes, starting a new turn for the asking agent",
+  "workflow-handoff": "fires when a workflow run starts or hands off to its next role"
+};
+function eventKindCatalogLines(kinds = SERVER_EVENT_KINDS) {
+  return kinds.map((kind) => `${kind} ${SERVER_EVENT_KIND_DETAIL[kind]}`);
+}
 
 // packages/api-contract/dist/turn-silence.js
 var TURN_SILENCE_KINDS = [
@@ -29264,9 +29325,16 @@ function parseAvailableCommands(value) {
   }
   return result;
 }
+function isHarnessNotifyChunk(update) {
+  const meta = update._meta;
+  const piAcp = meta?.piAcp;
+  return Boolean(piAcp?.notify);
+}
 function agentMessageChunkText(update) {
   if (update.sessionUpdate !== "agent_message_chunk")
     return "";
+  if (isHarnessNotifyChunk(update))
+    return "";
   const content = update.content;
   if (content?.type === "text")
     return content.text ?? "";
@@ -31750,13 +31818,14 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     id: "room.corners",
     topic: "repository-work",
     why: "Repository work must start through the host-governed corner, with a brief as its authority.",
-    budgetBytes: 900,
+    budgetBytes: 1100,
     layer: "surface",
     surfaces: ["room"],
     render: () => [
       "Repository changes happen only in a corner. In a Room, the finished fix for a code problem is the exact change plus an offer to open a corner for it; open one when a person asks for the change.",
       "Before opening one, consult beeline-triage and beeline-spec, then call open_corner with a name of at most three words, an objective of at most 24 words, and the brief (a spec plus the approving message). The objective only titles the work; the brief is its authority. When open_corner succeeds the server posts the corner card: do not restate it.",
-      "For corners you belong to, use inspect_corner for status, steer_corner to pass Room input down, and ask_corner for one answer. Never post into a corner without a Room command."
+      "For corners you belong to, use inspect_corner for status, steer_corner to pass Room input down, and ask_corner for one answer. Never post into a corner without a Room command.",
+      "A corner ends when its pull request merges; since a person may merge minutes after it opens, anything still needed must already live in a different corner before that pull request opens, not after. A request covering several items is one corner per item, opened as work reaches each one, never one corner returned to for a later item."
     ].join(" ")
   },
   {
@@ -32086,10 +32155,10 @@ var BEELINE_REVIEW_SKILL_NAME = "beeline-review";
 var BEELINE_SPEC_SKILL_NAME = "beeline-spec";
 var BEELINE_ROOM_MECHANICS = [
   "Files and photos on the message you are answering are downloaded for you: read them at the local path named in the prompt (photos may also arrive inline). A file on an earlier message shows only as a \u{1F4CE} marker with an id; call beeline-agent download_attachment with that message id and attachment id, then read the returned path. Never fetch a media URL; if the download fails, tell the requester you could not open the file.",
-  "To create a file you can send, call beeline-agent write_scratch_file with a relative path and content - text by default, or base64 for bytes you computed; it returns a path in your writable session home. To send a file, call beeline-agent post_artifact with a path inside your checkout or anywhere in your writable session home (wherever a file you or your harness generated actually landed, including one you just wrote), or with html/bytes content directly; it is uploaded and attached to your reply, and title and mime default from the file when you post by path. write_scratch_file produces the file, not a picture. To put a real photograph in an artifact, call beeline-agent fetch_image with the photo URL; it writes the bytes to your session scratch and returns the path, mime, and size \u2014 read them, base64-encode, and embed as a data: URL. The validator still refuses every http(s) image reference, and drawing an SVG stand-in is not a photograph.",
+  "To create a file you can send, call beeline-agent write_scratch_file with a relative path and content - text by default, or base64 for bytes you computed; it returns a path in your writable session home. To send a file, call beeline-agent post_artifact with a path inside your checkout or anywhere in your writable session home (wherever a file you or your harness generated actually landed, including one you just wrote), or with html/bytes content directly; it is uploaded and attached to your reply, and title and mime default from the file when you post by path. write_scratch_file produces the file, not a picture.",
   "To run something later or repeatedly, call beeline-agent create_schedule (interval in minutes or a 5-field cron, optional maxRuns); list_schedules / update_schedule / delete_schedule manage them, including schedules other agents created for themselves.",
   `To react to a message in this Room, call beeline-agent react_to_message with its message id and one supported emoji (${MESSAGE_REACTION_EMOJIS.join(" ")}).`,
-  `To react to things that HAPPEN in this Room rather than only to what is said to you, call beeline-agent subscribe_events with the kinds you want (${SERVER_EVENT_KINDS.join(", ")}); each one then wakes you for a turn. Subscriptions are per Room and cover every way the event lands: joining a Room you subscribed to wakes you, and so does a person arriving in the Workspace when that arrival projects into this Room - subscribe to joined in an onboarding Room and every newcomer wakes you, exactly like a greeter. It replaces your list, so send every kind you want - list_event_subscriptions shows the current one. You do this yourself: nobody has to configure it for you. grant-decided carries the grant id and status and resumes the turn that asked for the grant. choice-answered, choice-skipped, and poll-closed start a new input turn for the asking agent; they do not resume a paused grant. A corner merging wakes nobody in its parent Room by default. If you still have work to do after a corner merges (a hand-off, a release step, a reply that has to describe landed code), subscribe to merged in the parent Room, from a turn there, before the merge. Each merge in that Room then wakes you and names the corner and pull request: act only on the corner you are waiting for, post nothing for any other merge, and take merged back out of your list once nothing is left to wait for. Never post just to acknowledge a merge: the merge card already announces it.`,
+  `To react to things that HAPPEN in this Room rather than only to what is said to you, call beeline-agent subscribe_events with the kinds you want; each one then wakes you for a turn. Available kinds: ${eventKindCatalogLines().join("; ")}. Subscriptions are per Room and cover every way the event lands: joining a Room you subscribed to wakes you, and so does a person arriving in the Workspace when that arrival projects into this Room - subscribe to joined in an onboarding Room and every newcomer wakes you, exactly like a greeter. It replaces your list, so send every kind you want - list_event_subscriptions shows the current one. You do this yourself: nobody has to configure it for you. A corner merging wakes nobody in its parent Room by default. If you still have work to do after a corner merges (a hand-off, a release step, a reply that has to describe landed code), subscribe to merged in the parent Room, from a turn there, before the merge. Each merge in that Room then wakes you and names the corner and pull request: act only on the corner you are waiting for, post nothing for any other merge, and take merged back out of your list once nothing is left to wait for. Never post just to acknowledge a merge: the merge card already announces it. If you are waiting on a human decision - a grant, a connector offer, a posted choice or poll, or a Squire approval (payment, credential, sign-in, or vouch) - subscribe to its kind instead of asking them to type a confirmation in the Room; the decision wakes you with the answer.`,
   "If you need reach outside the sandbox, call beeline-agent request_grant. If you already know discrete options, call beeline-agent ask_choice (one human, optional) or open_poll (every human in this Room, required deadline). A poll is refused below two electors and above fifty, and in a DM. A plurality is a fact, never permission to deploy, delete, merge, or spend. Open-ended asks stay tagged prose. Never put Always / Once / No on a preference.",
   "To state something that happened so the Room and other agents can act on it, call beeline-agent emit_event with your own agent:<slug> kind, one sentence, and optionally the agent members to wake. Chains of events are bounded and a refused emit posts nothing."
 ].join(" ");
@@ -32126,6 +32195,10 @@ A **tool** is something you can use once a human adds it; a **key** is the crede
 
 The tools this build knows, what each is for, and which the owner of this machine already has are one call away: beeline-agent workbench_status. That read is the Workbench of the machine and owner you actually run on, not the person who asked. Connected apps are listed once per app with a stable ID. Their sign-in and credentials stay with the server. Trusty Squire is vaulted credentials plus a browser for the separate key and browser routes. Tailscale installs its CLI on the selected helper and opens Tailscale's own browser sign-in; once connected, use the CLI for tailnet resources and tailscale file cp or tailscale file get for Taildrop. The wallet is created only from the Workbench page. When you cannot reach a tool, say: I can't reach X on this machine because Y; to fix it, Z. Give one explanation, then take or offer Z.
 
+**Inspect your own host before answering.** When a question is about a system on the machine you run on, inspect its live state with the tools you have: processes, logs, local endpoints or service status. Say what you checked. Memory and Room history are not evidence of current state.
+
+**Use available tools before asking the person.** Before asking a person for a code, a status or a file, call workbench_status and check whether a tool or connected app you already have can get it, then use it. This includes an emailed verification code in an already-connected inbox. Ask only when none can, and say why. The key-ownership and grant rules still apply.
+
 **Offer the tool at the moment you need it.** When the work in front of you needs a tool the person does not have, do not send them to a settings page and do not stop at naming it. Call workbench_status first - a tool they already have is used, not offered. In a Room or DM, call offer_connector with the connectorType and one short reason: a card appears there, spoken by you, addressed to the person you are answering, with one action. Connector offers are unavailable in corners; use a Room or DM for those. Your turn pauses on the card - say in prose what you are waiting for and end the turn; you are woken when it is added, and then you carry on.
 
 **Research before you offer, and say so.** Never offer a tool you cannot describe. If someone asks you to install or add something you do not already know - by name, by purpose, or by what it will hold - say plainly that you are looking it up first, find out what it is and what it does with credentials, and state what you learned in your reply BEFORE the card appears. A person reading "Add X?" must already have read, in your own words, what X is. Refusing to act blind is part of being trusted with keys.
@@ -32136,9 +32209,9 @@ Keys belong to the human who provisioned them. Your owner's keys serve whoever a
 
 ## Connect an app
 
-When a request needs an app or service, call beeline-agent \`workbench_status\` first. For a connected app, use its ID with \`list_app_tools\`, then call \`execute_app_tool\` with the selected tool slug and arguments. The server executes against that person\u2019s account and decides permission on every call. An empty tool list or \`needs_connection\` means the account must be reconnected; \`needs_permission\` means wait for the connected person's decision. Do not switch paths after denial or provider unavailability. No app token, provider key, or sign-in URL belongs in chat or a model prompt.
+When a request needs an app or service, call beeline-agent \`workbench_status\` first. For a connected app, use its ID with \`list_app_tools\`, then call \`execute_app_tool\` with the selected tool slug and arguments. The server executes against that person\u2019s account and decides permission on every call. If tool discovery reports an error, follow its cause; \`needs_connection\` means the account must be reconnected, and \`needs_permission\` means wait for the connected person's decision. Do not switch paths after denial or provider unavailability. No app token, provider key, or sign-in URL belongs in chat or a model prompt.
 
-For an app that is not connected, call \`connect_app\` with its name, one short reason, and a request-specific \`continuation\`: one sentence stating what you will do right after sign-in. Do not include a link, credential, account identifier, or private data in that sentence. The server chooses the route and returns \`next\`. In a corner, call it from that corner so the sign-in card and connection wake return there. A managed OAuth app presents a sign-in card to its owner; end the turn and wait for the connection wake. If the provider reports managed OAuth unsupported, follow the server's Squire route and its instructions. A provider outage is unavailable, not permission to change routes. After the person connects, read Workbench again and use the app ID. Trusty Squire handles the separate API key and browser routes; never ask for a raw key in chat. Every use is authorized as \`app:<key>\` and recorded once.
+For an app that is not connected, call \`connect_app\` with its name, one short reason, and a request-specific \`continuation\`: one sentence stating what you will do right after sign-in. Do not include a link, credential, account identifier, or private data in that sentence. The server chooses the route and returns \`next\`. In a corner, call it from that corner so the sign-in card and connection wake return there. A managed OAuth app presents a sign-in card to its owner; end the turn and wait for the connection wake. If the provider reports managed OAuth unsupported, follow the server's Squire route and its instructions. A provider outage is unavailable, not permission to change routes. After the person connects, read Workbench again and use the app ID. Every use is authorized as \`app:<key>\` and recorded once.
 
 ## Showing a mock
 
@@ -37991,7 +38064,7 @@ import { mkdir as mkdir28, rename as rename12, stat as stat9, writeFile as write
 import { dirname as dirname29 } from "node:path";
 
 // apps/body/dist/agent-runtime.js
-import { homedir as homedir18 } from "node:os";
+import { homedir as homedir19 } from "node:os";
 import { dirname as dirname28, join as join19, resolve as resolve41 } from "node:path";
 
 // apps/body/dist/model-availability.js
@@ -39549,7 +39622,7 @@ async function runServerCommandIntake(options) {
 import { execFile as execFile12 } from "node:child_process";
 import { createHash as createHash12 } from "node:crypto";
 import { mkdir as mkdir25, readFile as readFile27, writeFile as writeFile20 } from "node:fs/promises";
-import { homedir as homedir17, hostname as hostname3 } from "node:os";
+import { homedir as homedir18, hostname as hostname3 } from "node:os";
 import { dirname as dirname25, join as join18, resolve as resolve35 } from "node:path";
 import { promisify as promisify7 } from "node:util";
 
@@ -39889,6 +39962,7 @@ var AgentTurnStream = class {
    * one bounds the lane at ONE write in flight plus ONE waiting.
    */
   pending;
+  latestChunk = "";
   /**
    * The stream as it stood when a corner handed everything up to that point to
    * its durable work ledger — this turn's persisted stream offset. Held as the
@@ -39920,6 +39994,7 @@ var AgentTurnStream = class {
    * it has.
    */
   onChunk = (_delta, full, currentRun) => {
+    this.latestChunk = sanitizeAgentReply(currentRun ?? "");
     this.latest = full;
     this.latestRun = currentRun ?? "";
     const text2 = sanitizeAgentReply(this.tailOf(full));
@@ -40001,9 +40076,10 @@ var AgentTurnStream = class {
     if (this.inFlight || this.pending === void 0)
       return;
     const text2 = this.pending;
+    const latestChunk = this.latestChunk;
     this.pending = void 0;
     const { api, agentId, roomId, requestId, label } = this.options;
-    this.inFlight = api.execute("postAgentDraft", { agentId, roomId, turnId: requestId, text: text2 }).then(() => void 0).catch((error) => console.error(`[thin-core] ${label} draft publish failed:`, error)).then(() => {
+    this.inFlight = api.execute("postAgentDraft", { agentId, roomId, turnId: requestId, text: text2, latestChunk }).then(() => void 0).catch((error) => console.error(`[thin-core] ${label} draft publish failed:`, error)).then(() => {
       this.inFlight = void 0;
       this.publishPending();
     });
@@ -40031,6 +40107,7 @@ var AgentTurnStream = class {
   beginRun() {
     this.latest = "";
     this.latestRun = "";
+    this.latestChunk = "";
     this.persisted = "";
     this.pending = void 0;
   }
@@ -40188,8 +40265,10 @@ import { promisify as promisify5 } from "node:util";
 var PI_MCP_BRIDGE_FILENAME = "beeline-mcp-bridge.js";
 var execFileAsync5 = promisify5(execFile9);
 var nativeMcpProbes = /* @__PURE__ */ new Map();
-async function piHasNativeMcp(command) {
-  let probe = nativeMcpProbes.get(command);
+async function piHasNativeMcp(command, env) {
+  const path = env?.PATH ?? process.env.PATH ?? "";
+  const cacheKey = `${command}\0${path}`;
+  let probe = nativeMcpProbes.get(cacheKey);
   if (!probe) {
     probe = (async () => {
       const home = await mkdtemp2(resolve28(tmpdir5(), "beeline-pi-mcp-probe-"));
@@ -40197,7 +40276,7 @@ async function piHasNativeMcp(command) {
         const { stdout: stdout6 } = await execFileAsync5(command, ["mcp", "list", "--json"], {
           cwd: home,
           timeout: 1200,
-          env: { PATH: process.env.PATH, HOME: home, PI_CODING_AGENT_DIR: home, PI_OFFLINE: "1" }
+          env: { PATH: path, HOME: home, PI_CODING_AGENT_DIR: home, PI_OFFLINE: "1" }
         });
         const result = JSON.parse(stdout6);
         return Array.isArray(result.servers) && Array.isArray(result.errors);
@@ -40207,7 +40286,7 @@ async function piHasNativeMcp(command) {
         await rm11(home, { recursive: true, force: true });
       }
     })();
-    nativeMcpProbes.set(command, probe);
+    nativeMcpProbes.set(cacheKey, probe);
   }
   return probe;
 }
@@ -40271,7 +40350,7 @@ async function installPiMcpBridge(input) {
   const path = resolve28(directory, PI_MCP_BRIDGE_FILENAME);
   try {
     const config = await isolatedPiConfig(input.piHome);
-    const nativeMcp = input.nativeMcp ?? await piHasNativeMcp(input.piCommand ?? "pi");
+    const nativeMcp = input.nativeMcp ?? await piHasNativeMcp(input.piCommand ?? "pi", input.agentEnv);
     if (nativeMcp) {
       const mcpServers2 = { ...config.mcpServers };
       for (const server of input.servers)
@@ -40602,6 +40681,7 @@ async function contains(git, head, ancestor) {
 
 // apps/body/dist/room-session.js
 import { resolve as resolve30 } from "node:path";
+import { homedir as homedir16 } from "node:os";
 
 // apps/body/dist/read-only-policy.js
 var READ_ONLY_MCP_SERVER_NAME = "beeline-readonly-mcp";
@@ -40810,6 +40890,7 @@ function beelineAgentMcpServer(config, api, context) {
       { name: "BEELINE_DAEMON_TOKEN", value: connection.daemonToken },
       { name: "BEELINE_HELPER_VERSION", value: connection.helperVersion },
       { name: "BEELINE_DAEMON_AGENT_ID", value: connection.agentId },
+      { name: "BEELINE_OPERATOR_HOME", value: config.operatorHome ?? homedir16() },
       { name: "BEELINE_DAEMON_ROOM_ID", value: context.roomId },
       { name: "BEELINE_DAEMON_WORKSPACE_ID", value: context.workspaceId },
       ...context.cornerId ? [{ name: "BEELINE_DAEMON_CORNER_ID", value: context.cornerId }] : [],
@@ -40979,7 +41060,7 @@ async function prepareCodegraphIndex(config, cwd) {
 
 // apps/body/dist/monolith-room-turn.js
 import { mkdir as mkdir22, writeFile as writeFile18 } from "node:fs/promises";
-import { homedir as homedir16, hostname as hostname2 } from "node:os";
+import { homedir as homedir17, hostname as hostname2 } from "node:os";
 import { dirname as dirname23, join as join16 } from "node:path";
 
 // packages/api-contract/dist/scheduled-prompts.js
@@ -41427,6 +41508,14 @@ function deviceGrantResumePrompt(device, earlierReply) {
   ].join(" ");
 }
 function resumePrompt(item) {
+  if (item.systemEvent?.kind === "squire-approval-decided") {
+    return [
+      `This is Trusty Squire's answer to the approval you were waiting on: ${item.body}.`,
+      "Your paused work resumes now.",
+      "If it was approved, continue exactly where you left off with Trusty Squire; do not ask the person to approve again, and do not restart the task.",
+      "If it was denied, stop that Trusty Squire action and say plainly what you cannot do."
+    ].join(" ");
+  }
   if (item.systemEvent?.kind === "connector-offer-decided") {
     return [
       `This is the answer to your connector offer: ${item.body}.`,
@@ -41525,7 +41614,10 @@ var MonolithRoomTurnLoop = class {
       generationId: call.generationId,
       target: "squire",
       ...resourceCallFacts({ method: "tools/call", params: { name: call.tool, arguments: call.args } }, "squire")
-    })).allowed, options.config.operatorHome ?? homedir16());
+    })).allowed, options.config.operatorHome ?? homedir17(), void 0, (decision2) => {
+      options.api.execute("postSquireApprovalDecision", { roomId: options.roomId, ...decision2 }).catch(() => {
+      });
+    });
     this.options = { ...options, api: this.commandContext.bind(options.api) };
     options.grantRunner?.register(options.roomId, {
       workspaceId: options.workspaceId,
@@ -41560,7 +41652,7 @@ var MonolithRoomTurnLoop = class {
       ...this.sessionScratchDir ? { scratch: this.sessionScratchDir } : {},
       ...this.sessionStateDirs.length ? { harnessStateDirs: this.sessionStateDirs } : {},
       maskPaths: [
-        ...credentialMaskPaths(this.options.config.sandboxMaskPaths, this.options.config.operatorHome ?? homedir16()),
+        ...credentialMaskPaths(this.options.config.sandboxMaskPaths, this.options.config.operatorHome ?? homedir17()),
         ...siblingAgentMaskPaths(runtimeDirectory(this.options.runtime.supervisorRoot, this.options.runtime.agent.publicKey))
       ]
     };
@@ -41808,7 +41900,7 @@ var MonolithRoomTurnLoop = class {
       effort: selectionEffort,
       fastMode: configuration.fastMode
     };
-    const operatorHome = this.options.config.operatorHome ?? homedir16();
+    const operatorHome = this.options.config.operatorHome ?? homedir17();
     const registryHostDeclarations = registryMcpHostDeclarations(configuration.registryMcpRoutes, this.commandContext.path, this.options.config.registryMcpBrokerSocket);
     const mountedHostRoutes = [...grantedHostRoutes, ...Object.keys(registryHostDeclarations)];
     const squireScope = {
@@ -41942,6 +42034,7 @@ var MonolithRoomTurnLoop = class {
       agentCommand: harnessLabel,
       piHome: agentEnv.PI_CODING_AGENT_DIR,
       piCommand: agentEnv.PI_ACP_PI_COMMAND ?? process.env.PI_ACP_PI_COMMAND,
+      agentEnv,
       servers: [...servers, ...grantedRouteServers]
     });
     const mountedServers = [
@@ -42693,7 +42786,7 @@ function cornerGitHubCommandRefusal(launcher, argv, featureBranch, targetBranch,
 }
 async function writeLauncher(path, config) {
   const source = `#!/usr/bin/env node
-import { spawnSync } from 'node:child_process';
+import { spawn, spawnSync } from 'node:child_process';
 const config = ${JSON.stringify(config)};
 const cornerGitHubCommandRefusal = ${cornerGitHubCommandRefusal.toString()};
 const authFailure = /(?:authentication failed|bad credentials|could not read username|http(?:\\/\\d(?:\\.\\d)?)? 40[13]|status (?:code )?40[13])/i;
@@ -42708,7 +42801,28 @@ function resolvePushBranch(source) {
   return current.status === 0 ? { branch: current.stdout.trim() } : {};
 }
 const refusal = cornerGitHubCommandRefusal(config.launcher, process.argv.slice(2), config.featureBranch, config.targetBranch, resolvePushBranch);
-if (refusal) { process.stderr.write(refusal + '\\n'); process.exit(1); }
+if (refusal) { process.stderr.write(refusal + '\\n'); process.exitCode = 1; }
+function needsToken(argv) {
+  if (config.launcher === 'gh') return true;
+  const optionsWithValue = new Set(['-C', '-c', '--git-dir', '--work-tree', '--namespace', '--super-prefix', '--config-env']);
+  let index = 0;
+  while (index < argv.length && argv[index].startsWith('-')) {
+    if (argv[index] === '--version' || argv[index] === '--help') return false;
+    index += optionsWithValue.has(argv[index]) ? 2 : 1;
+  }
+  // Unknown commands (including aliases) may contact a remote.
+  const local = new Set([
+    'add', 'am', 'apply', 'bisect', 'blame', 'branch', 'cat-file', 'check-attr',
+    'check-ignore', 'check-ref-format', 'checkout', 'cherry-pick', 'clean', 'commit',
+    'config', 'describe', 'diff', 'diff-files', 'diff-index', 'diff-tree', 'for-each-ref',
+    'format-patch', 'fsck', 'gc', 'grep', 'hash-object', 'help', 'init', 'log', 'ls-files',
+    'ls-tree', 'merge', 'merge-base', 'mv', 'notes', 'rebase', 'reflog', 'reset',
+    'restore', 'rev-list', 'rev-parse', 'revert', 'rm', 'show', 'show-ref', 'stash',
+    'status', 'switch', 'symbolic-ref', 'tag', 'update-index', 'update-ref',
+    'verify-commit', 'verify-tag', 'worktree',
+  ]);
+  return !local.has(argv[index]);
+}
 function token() {
   let result;
   for (let attempt = 0; attempt < 3; attempt += 1) {
@@ -42717,19 +42831,40 @@ function token() {
     if (attempt < 2) Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 250 * (attempt + 1));
   }
   process.stderr.write(result.stderr || 'Beeline could not refresh the repository credential.\\n');
-  process.exit(result.status || 1);
+  process.exitCode = result.status || 1;
+  return undefined;
 }
-function run(value) {
+async function run(value) {
   const env = { ...process.env, GH_TOKEN: value, GITHUB_TOKEN: value, GIT_TERMINAL_PROMPT: '0' };
-  return spawnSync(config.command, process.argv.slice(2), { env, encoding: 'buffer', stdio: ['inherit', 'pipe', 'pipe'] });
-}
-let result = run(token());
-const diagnostic = Buffer.concat([result.stdout || Buffer.alloc(0), result.stderr || Buffer.alloc(0)]).toString('utf8');
-if (result.status !== 0 && authFailure.test(diagnostic)) result = run(token());
-if (result.stdout) process.stdout.write(result.stdout);
-if (result.stderr) process.stderr.write(result.stderr);
-if (result.error) throw result.error;
-process.exit(result.status ?? 1);
+  const child = spawn(config.command, process.argv.slice(2), { env, stdio: ['inherit', 'pipe', 'pipe'] });
+  let authenticationFailed = false;
+  // Keep only enough diagnostic overlap to recognize an auth failure across chunks.
+  for (const [source, destination] of [[child.stdout, process.stdout], [child.stderr, process.stderr]]) {
+    let tail = '';
+    source.on('data', (chunk) => {
+      const diagnostic = tail + chunk.toString('utf8');
+      authenticationFailed ||= authFailure.test(diagnostic);
+      tail = diagnostic.slice(-1024);
+    });
+    source.pipe(destination, { end: false });
+  }
+  return new Promise((resolve, reject) => {
+    child.once('error', reject);
+    child.once('close', (status) => resolve({ status, authenticationFailed }));
+  });
+}
+if (!refusal) {
+  const authenticated = needsToken(process.argv.slice(2));
+  const value = authenticated ? token() : '';
+  if (value !== undefined) {
+    let result = await run(value);
+    if (authenticated && result.status !== 0 && result.authenticationFailed) {
+      const refreshed = token();
+      if (refreshed !== undefined) result = await run(refreshed);
+    }
+    process.exitCode ??= result.status ?? 1;
+  }
+}
 `;
   await writeFile19(path, source, { mode: 448 });
   await chmod9(path, 448);
@@ -43327,7 +43462,10 @@ var MonolithCornerTurnLoop = class {
       generationId: call.generationId,
       target: "squire",
       ...resourceCallFacts({ method: "tools/call", params: { name: call.tool, arguments: call.args } }, "squire")
-    })).allowed, options.config.operatorHome ?? homedir17());
+    })).allowed, options.config.operatorHome ?? homedir18(), void 0, (decision2) => {
+      options.api.execute("postSquireApprovalDecision", { roomId: options.cornerId, ...decision2 }).catch(() => {
+      });
+    });
     this.options = { ...options, api: this.commandContext.bind(options.api) };
     options.grantRunner?.register(options.cornerId, {
       workspaceId: options.workspaceId,
@@ -43542,7 +43680,7 @@ var MonolithCornerTurnLoop = class {
       effort: configuration.effort ?? this.options.config.modelSelection?.effort,
       fastMode: configuration.fastMode
     };
-    const operatorHome = this.options.config.operatorHome ?? homedir17();
+    const operatorHome = this.options.config.operatorHome ?? homedir18();
     const registryHostDeclarations = registryMcpHostDeclarations(configuration.registryMcpRoutes, this.commandContext.path, this.options.config.registryMcpBrokerSocket);
     const mountedHostRoutes = [...grantedHostRoutes, ...Object.keys(registryHostDeclarations)];
     const squireScope = {
@@ -43755,6 +43893,7 @@ var MonolithCornerTurnLoop = class {
       agentCommand: harnessLabel,
       piHome: agentEnv.PI_CODING_AGENT_DIR,
       piCommand: agentEnv.PI_ACP_PI_COMMAND ?? process.env.PI_ACP_PI_COMMAND,
+      agentEnv,
       servers: [...servers, ...grantedRouteServers]
     });
     const persona = configuration.soul ?? self?.soul;
@@ -47173,7 +47312,7 @@ async function runAgentRuntime(configPath, host, signal) {
   return exitReason ?? lifecycle.stopReason ?? "stopped";
 }
 function registryBrokerSocketPath(home, agentId) {
-  return join19(home ?? homedir18(), ".beeline", "registry-mcp-broker", `${process.pid}-${agentId.slice(0, 8)}.sock`);
+  return join19(home ?? homedir19(), ".beeline", "registry-mcp-broker", `${process.pid}-${agentId.slice(0, 8)}.sock`);
 }
 function interruptHostedAgent(agent) {
   agent.lifecycle.quiesce("force-update");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "homepage": "https://usebeeline.app",
   "bugs": {