usebeeline 0.1.24 → 0.1.26

package/dist/usebeeline.mjs

@@ -563,7 +563,7 @@ var init_squire_broker_squatter = __esm({
 
 // apps/body/dist/squire-host.js
 import { spawn as spawn4 } from "node:child_process";
-import { accessSync, constants as fsConstants, existsSync as existsSync3, mkdirSync, realpathSync as realpathSync2, statSync, writeFileSync } from "node:fs";
+import { accessSync, constants as fsConstants, existsSync as existsSync3, lstatSync, mkdirSync, mkdtempSync, readFileSync as readFileSync2, realpathSync as realpathSync2, renameSync, rmSync, statSync, symlinkSync, writeFileSync } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
 import { createConnection as createConnection2 } from "node:net";
 import { homedir } from "node:os";
@@ -666,18 +666,90 @@ function squireBrokerInstallDir(home) {
 function squireBrokerInstallEntry(home) {
   return join2(squireBrokerInstallDir(home), "node_modules", "@trusty-squire", "mcp", "dist", "bin.js");
 }
-async function ensureSquireBrokerInstall(home, options = {}) {
+function versionParts(version) {
+  if (!/^\d+\.\d+\.\d+$/.test(version))
+    return void 0;
+  return version.split(".").map(Number);
+}
+function compareSquireVersions(left, right) {
+  const a2 = versionParts(left);
+  const b = versionParts(right);
+  if (!a2 || !b)
+    throw new Error(`Invalid Trusty Squire version: ${!a2 ? left : right}`);
+  for (let i3 = 0; i3 < 3; i3++) {
+    if (a2[i3] !== b[i3])
+      return a2[i3] - b[i3];
+  }
+  return 0;
+}
+function squireBrokerInstalledVersion(home) {
+  if (!existsSync3(squireBrokerInstallEntry(home)))
+    return void 0;
+  try {
+    const version = JSON.parse(readFileSync2(squirePackagePath(squireBrokerInstallDir(home)), "utf8")).version;
+    return typeof version === "string" && versionParts(version) ? version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function squireBrokerMeetsComputerUseMinimum(home) {
+  const version = squireBrokerInstalledVersion(home);
+  return version !== void 0 && compareSquireVersions(version, SQUIRE_COMPUTER_USE_MIN_VERSION) >= 0;
+}
+async function updateSquireBrokerInstall(home, options = {}) {
   const entry = squireBrokerInstallEntry(home);
-  if (existsSync3(entry))
-    return entry;
+  const installed = squireBrokerInstalledVersion(home);
+  if (options.mode === "minimum" && installed && compareSquireVersions(installed, SQUIRE_COMPUTER_USE_MIN_VERSION) >= 0)
+    return { entry, changed: false };
   const dir = squireBrokerInstallDir(home);
-  mkdirSync(dir, { recursive: true, mode: 448 });
+  mkdirSync(dirname2(dir), { recursive: true, mode: 448 });
   const run2 = options.run ?? defaultSquireInstallRunner;
-  const spec = options.spec ?? `${SQUIRE_MCP_PACKAGE_NAME}@latest`;
-  const result = await run2("npm", ["install", "--prefix", dir, spec, "--no-save", "--no-audit", "--no-fund", "--no-package-lock"], { cwd: dir });
-  if (result.code !== 0 || !existsSync3(entry))
-    throw new Error(`Trusty Squire broker install failed: ${result.stderr.trim() || `${entry} is missing`}`);
-  return entry;
+  const view = await run2("npm", ["view", `${SQUIRE_MCP_PACKAGE_NAME}@latest`, "version"], { cwd: dirname2(dir) });
+  const latest = view.stdout?.trim() ?? "";
+  if (view.code !== 0 || !versionParts(latest))
+    throw new Error(`Trusty Squire version lookup failed: ${view.stderr.trim() || latest || "no version returned"}`);
+  if (compareSquireVersions(latest, SQUIRE_COMPUTER_USE_MIN_VERSION) < 0)
+    throw new Error(`Trusty Squire ${latest} is older than required ${SQUIRE_COMPUTER_USE_MIN_VERSION}`);
+  if (installed && compareSquireVersions(installed, latest) >= 0)
+    return { entry, changed: false };
+  const candidate = mkdtempSync(join2(dirname2(dir), `${SQUIRE_BROKER_INSTALL_DIRNAME}-next-`));
+  const link2 = join2(dirname2(dir), `${SQUIRE_BROKER_INSTALL_DIRNAME}-link-${basename2(candidate)}`);
+  let activated = false;
+  try {
+    const install = await run2("npm", ["install", "--prefix", candidate, `${SQUIRE_MCP_PACKAGE_NAME}@${latest}`, "--no-save", "--no-audit", "--no-fund", "--no-package-lock"], { cwd: candidate });
+    let candidateVersion;
+    try {
+      candidateVersion = JSON.parse(readFileSync2(squirePackagePath(candidate), "utf8")).version;
+    } catch {
+    }
+    if (install.code !== 0 || !existsSync3(squireEntryPath(candidate)) || candidateVersion !== latest)
+      throw new Error(`Trusty Squire broker install failed: ${install.stderr.trim() || "candidate entry or version is missing"}`);
+    symlinkSync(basename2(candidate), link2);
+    if (existsSync3(dir)) {
+      const previous = realpathSync2(dir);
+      const backup = join2(dirname2(dir), `${SQUIRE_BROKER_INSTALL_DIRNAME}.bak-${installed ?? "unknown"}-${basename2(candidate)}`);
+      if (!lstatSync(dir).isSymbolicLink()) {
+        renameSync(dir, backup);
+        try {
+          renameSync(link2, dir);
+        } catch (error) {
+          renameSync(backup, dir);
+          throw error;
+        }
+      } else {
+        symlinkSync(previous, backup);
+        renameSync(link2, dir);
+      }
+    } else {
+      renameSync(link2, dir);
+    }
+    activated = true;
+    return { entry, changed: true };
+  } finally {
+    if (!activated)
+      rmSync(candidate, { recursive: true, force: true });
+    rmSync(link2, { force: true });
+  }
 }
 function trustySquireBrokerUnit(nodeExecPath = process.execPath) {
   return `[Unit]
@@ -728,7 +800,9 @@ async function runSquireBroker(env = process.env) {
   }
   let entry;
   try {
-    entry = await ensureSquireBrokerInstall(home);
+    entry = squireBrokerInstallEntry(home);
+    if (!existsSync3(entry))
+      throw new Error("durable broker entry is missing");
   } catch (error) {
     process.stderr.write(`[beeline] Trusty Squire broker not started: ${error instanceof Error ? error.message : String(error)}
 `);
@@ -759,7 +833,7 @@ async function runSquireFacade(env = process.env) {
   });
   process.exit(ok ? 0 : 1);
 }
-var SQUIRE_BROKER_UNAVAILABLE, TRUSTY_SQUIRE_BROKER_UNIT_NAME, SQUIRE_FACADE_FLAG, SQUIRE_BROKER_FLAG, SQUIRE_MCP_PACKAGE_NAME, SQUIRE_BROKER_START_LIMIT_INTERVAL_SEC, SQUIRE_BROKER_START_LIMIT_BURST, SQUIRE_BROKER_UNIT_MARKER_FILE, SQUIRE_BROKER_INSTALL_DIRNAME, defaultSquireInstallRunner;
+var SQUIRE_BROKER_UNAVAILABLE, TRUSTY_SQUIRE_BROKER_UNIT_NAME, SQUIRE_FACADE_FLAG, SQUIRE_BROKER_FLAG, SQUIRE_MCP_PACKAGE_NAME, SQUIRE_COMPUTER_USE_MIN_VERSION, SQUIRE_BROKER_START_LIMIT_INTERVAL_SEC, SQUIRE_BROKER_START_LIMIT_BURST, SQUIRE_BROKER_UNIT_MARKER_FILE, SQUIRE_BROKER_INSTALL_DIRNAME, defaultSquireInstallRunner, squirePackagePath, squireEntryPath;
 var init_squire_host = __esm({
   "apps/body/dist/squire-host.js"() {
     "use strict";
@@ -770,19 +844,26 @@ var init_squire_host = __esm({
     SQUIRE_FACADE_FLAG = "--squire-facade";
     SQUIRE_BROKER_FLAG = "--squire-broker";
     SQUIRE_MCP_PACKAGE_NAME = "@trusty-squire/mcp";
+    SQUIRE_COMPUTER_USE_MIN_VERSION = "1.1.32";
     SQUIRE_BROKER_START_LIMIT_INTERVAL_SEC = 60;
     SQUIRE_BROKER_START_LIMIT_BURST = 6;
     SQUIRE_BROKER_UNIT_MARKER_FILE = ".trusty-squire-broker-unit.json";
     SQUIRE_BROKER_INSTALL_DIRNAME = "mcp-broker-install";
     defaultSquireInstallRunner = (command, args, options) => new Promise((resolveRun) => {
-      const child = spawn4(command, [...args], { cwd: options.cwd, stdio: ["ignore", "ignore", "pipe"] });
+      const child = spawn4(command, [...args], { cwd: options.cwd, stdio: ["ignore", "pipe", "pipe"] });
       let stderr = "";
+      let stdout6 = "";
+      child.stdout?.on("data", (chunk) => {
+        stdout6 += chunk.toString("utf8");
+      });
       child.stderr?.on("data", (chunk) => {
         stderr += chunk.toString("utf8");
       });
       child.once("error", (error) => resolveRun({ code: 1, stderr: error.message }));
-      child.once("close", (code) => resolveRun({ code, stderr }));
+      child.once("close", (code) => resolveRun({ code, stderr, stdout: stdout6 }));
     });
+    squirePackagePath = (dir) => join2(dir, "node_modules", "@trusty-squire", "mcp", "package.json");
+    squireEntryPath = (dir) => join2(dir, "node_modules", "@trusty-squire", "mcp", "dist", "bin.js");
   }
 });
 
@@ -4684,7 +4765,7 @@ async function installTrustySquireBrokerService(options = {}) {
   assertCanonicalInstalledLauncher(env, options.invocationPath);
   const home = env.HOME?.trim() || homedir6();
   writeSquireBrokerUnitMarker(home);
-  await ensureSquireBrokerInstall(home, options.squireInstallRun ? { run: options.squireInstallRun } : {});
+  const install = await updateSquireBrokerInstall(home, { ...options.squireInstallRun ? { run: options.squireInstallRun } : {}, mode: options.squireUpdateMode ?? "latest" });
   const path = systemdBrokerUnitPath(env);
   const content = trustySquireBrokerUnit();
   const existing = await readFile6(path, "utf8").catch(() => "");
@@ -4696,7 +4777,7 @@ async function installTrustySquireBrokerService(options = {}) {
   const run2 = options.run ?? runSystemctl;
   await run2(["daemon-reload"]);
   await run2(["enable", TRUSTY_SQUIRE_BROKER_UNIT_NAME]);
-  if (changed || options.restart) {
+  if (changed || install.changed || options.restart) {
     await run2(["restart", "--no-block", TRUSTY_SQUIRE_BROKER_UNIT_NAME]);
   } else {
     await run2(["start", TRUSTY_SQUIRE_BROKER_UNIT_NAME]);
@@ -4708,7 +4789,6 @@ async function convergeTrustySquireBrokerService(options) {
     await installTrustySquireBrokerService({
       env: { ...env, BEELINE_LIB_DIR: options.libDir },
       invocationPath: resolve3(options.libDir, "lib", "beeline", "beeline-cli.mjs"),
-      restart: true,
       ...options.run ? { run: options.run } : {}
     });
     return true;
@@ -5318,13 +5398,17 @@ async function installLaunchdTrustySquireBrokerService(options = {}) {
   assertCanonicalInstalledLauncher2(env, options.invocationPath);
   const home = launchdHome(env);
   writeSquireBrokerUnitMarker(home);
+  const install = await updateSquireBrokerInstall(home, {
+    ...options.squireInstallRun ? { run: options.squireInstallRun } : {},
+    mode: options.squireUpdateMode ?? "latest"
+  });
   await mkdir5(resolve4(home, "Library", "Logs", "Beeline"), { recursive: true, mode: 448 });
   const plistPath = launchdBrokerPlistPath(env);
   const changed = await writeManagedFile(plistPath, launchdBrokerPlist(env), 384);
   const run2 = options.run ?? runLaunchctl;
   const domain = launchdUserDomain();
   const target = `${domain}/${LAUNCHD_BROKER_LABEL}`;
-  if (changed || options.restart)
+  if (changed || install.changed || options.restart)
     await bootoutIfLoaded(run2, target);
   await run2(["enable", target]);
   if ((await launchdStatus(run2, target)).state === "unloaded") {
@@ -5339,7 +5423,6 @@ async function convergeLaunchdTrustySquireBrokerService(options) {
     await installLaunchdTrustySquireBrokerService({
       env: { ...env, BEELINE_LIB_DIR: options.libDir },
       invocationPath: resolve4(options.libDir, "lib", "beeline", "beeline-cli.mjs"),
-      restart: true,
       ...options.run ? { run: options.run } : {}
     });
     return true;
@@ -16843,6 +16926,7 @@ var SquireTaskRelay = class {
   authorize;
   makeClient;
   onApprovalDecided;
+  onSessionEnded;
   server;
   url;
   token = randomUUID3();
@@ -16863,6 +16947,7 @@ var SquireTaskRelay = class {
     log: callbacks.onDiagnostic,
     onNotification: callbacks.onNotification
   }), onApprovalDecided = () => {
+  }, onSessionEnded = () => {
   }) {
     this.agentId = agentId;
     this.roomId = roomId;
@@ -16870,6 +16955,11 @@ var SquireTaskRelay = class {
     this.authorize = authorize;
     this.makeClient = makeClient;
     this.onApprovalDecided = onApprovalDecided;
+    this.onSessionEnded = onSessionEnded;
+  }
+  ended(ids) {
+    for (const id of ids)
+      this.onSessionEnded(id);
   }
   async listen() {
     if (this.closed)
@@ -17011,6 +17101,7 @@ var SquireTaskRelay = class {
           sessionId: redactedSessionId(task.sessions.values().next().value)
         });
         forgetSquireSessions(task.sessions);
+        this.ended(task.sessions);
         task.sessions.clear();
         task.pendingApprovals.clear();
       }
@@ -17062,6 +17153,7 @@ var SquireTaskRelay = class {
     });
     this.task.client.close();
     forgetSquireSessions(this.task.sessions);
+    this.ended(this.task.sessions);
     this.task.sessions.clear();
     this.task.pendingApprovals.clear();
     this.task = void 0;
@@ -17145,6 +17237,7 @@ var SquireTaskRelay = class {
         for (const id of requestedIds)
           task.sessions.delete(id);
         forgetSquireSessions(requestedIds);
+        this.ended(requestedIds);
         this.releasePendingApprovals(task, requestedIds);
         this.log("call-error", task, {
           method: input.method,
@@ -17160,6 +17253,7 @@ var SquireTaskRelay = class {
         for (const id of requestedIds)
           task.sessions.delete(id);
         forgetSquireSessions(requestedIds);
+        this.ended(requestedIds);
         this.releasePendingApprovals(task, requestedIds);
       } else if (usingOwnConnection) {
         const created = sessionIds(result);
@@ -17209,6 +17303,7 @@ var SquireTaskRelay = class {
     } catch (error) {
       if (error instanceof Error && /timed out/.test(error.message)) {
         task.dead = true;
+        this.ended(task.sessions);
         task.sessions.clear();
         task.pendingApprovals.clear();
         task.client.close();
@@ -17347,7 +17442,7 @@ var ACCESS_REFUSAL_WINDOW_MS = 60 * 60 * 1e3;
 import { createHash as createHash2, randomBytes } from "node:crypto";
 import { lookup } from "node:dns/promises";
 import { createRequire as createRequire4 } from "node:module";
-import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { createConnection as createConnection3, createServer as createServer2, isIPv4, isIPv6 } from "node:net";
 import { homedir as homedir5 } from "node:os";
 import { dirname as dirname3, join as join3 } from "node:path";
@@ -17494,7 +17589,7 @@ function registryMcpStatePath(connectorId, home = homedir5()) {
 }
 function readState(path) {
   try {
-    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
     return parsed?.status === "pending" || parsed?.status === "connected" ? parsed : void 0;
   } catch {
     return void 0;
@@ -17583,7 +17678,7 @@ async function installRegistryMcp(input) {
     });
     if (claimed.status !== "ready" || typeof claimed.code !== "string") {
       if (claimed.status === "expired") {
-        rmSync(path, { force: true });
+        rmSync2(path, { force: true });
         return {
           status: "error",
           steps: steps("connect", CEREMONY_EXPIRED),
@@ -17966,7 +18061,7 @@ var RegistryMcpHostBroker = class {
       return;
     mkdirSync2(registryMcpStateRoot(this.home), { recursive: true, mode: 448 });
     mkdirSync2(dirname3(this.socketPath), { recursive: true, mode: 448 });
-    rmSync(this.socketPath, { force: true });
+    rmSync2(this.socketPath, { force: true });
     this.server = createServer2({ allowHalfOpen: true }, (socket) => {
       let buffer = "";
       socket.setEncoding("utf8");
@@ -18007,7 +18102,7 @@ var RegistryMcpHostBroker = class {
     this.server = void 0;
     if (server)
       await new Promise((resolve49) => server.close(() => resolve49()));
-    rmSync(this.socketPath, { force: true });
+    rmSync2(this.socketPath, { force: true });
   }
 };
 async function brokerRequest(socketPath, request) {
@@ -18054,7 +18149,7 @@ function runRegistryMcpBroker(env = process.env) {
       }
       let turn;
       try {
-        turn = readTurnContext(JSON.parse(readFileSync2(turnContextPath, "utf8")));
+        turn = readTurnContext(JSON.parse(readFileSync3(turnContextPath, "utf8")));
       } catch {
         turn = void 0;
       }
@@ -19674,7 +19769,7 @@ async function reportAgentSignInResult(api, agentId, attemptId, cards, result, l
 // apps/body/dist/runtime.js
 import { randomBytes as randomBytes8 } from "node:crypto";
 import { execFile as execFile5 } from "node:child_process";
-import { closeSync, openSync, readFileSync as readFileSync3 } from "node:fs";
+import { closeSync, openSync, readFileSync as readFileSync4 } from "node:fs";
 import { chmod as chmod4, mkdir as mkdir8, readFile as readFile11, readdir as readdir3, rename as rename5, stat as stat4, unlink as unlink4, writeFile as writeFile6 } from "node:fs/promises";
 import { homedir as homedir10 } from "node:os";
 import { dirname as dirname9, resolve as resolve8 } from "node:path";
@@ -28786,7 +28881,7 @@ function daemonBirthPath(configPath) {
 }
 function processBirthIdentity(pid) {
   try {
-    const statText = readFileSync3(`/proc/${pid}/stat`, "utf8");
+    const statText = readFileSync4(`/proc/${pid}/stat`, "utf8");
     const close = statText.lastIndexOf(")");
     return close < 0 ? void 0 : statText.slice(close + 2).split(" ")[19];
   } catch {
@@ -29754,7 +29849,7 @@ import { EventEmitter } from "node:events";
 // apps/body/dist/acp-resource-scope.js
 import { execFile as execFile6 } from "node:child_process";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { totalmem } from "node:os";
 import { promisify as promisify5 } from "node:util";
 var execFileAsync5 = promisify5(execFile6);
@@ -29824,7 +29919,7 @@ function managedServiceUnit() {
   if (process.env.BEELINE_MANAGED_BY_SYSTEMD !== "1")
     return void 0;
   try {
-    const cgroup = readFileSync4("/proc/self/cgroup", "utf8");
+    const cgroup = readFileSync5("/proc/self/cgroup", "utf8");
     const path = cgroup.split("\n").find((line) => line.startsWith("0::"))?.slice(3);
     return path?.split("/").find((part) => /^beeline-(?:helper|agent@.+)\.service$/.test(part));
   } catch {
@@ -31138,7 +31233,7 @@ ${String(error)}`);
 
 // apps/body/dist/agent-home.js
 var import_yaml2 = __toESM(require_dist(), 1);
-import { existsSync as existsSync7, readFileSync as readFileSync6, watch } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync7, watch } from "node:fs";
 
 // node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
@@ -32061,7 +32156,7 @@ function androidAgentEnv(input) {
 }
 
 // apps/body/dist/beeline-skill.js
-import { readFileSync as readFileSync5 } from "node:fs";
+import { readFileSync as readFileSync6 } from "node:fs";
 import { resolve as resolve13 } from "node:path";
 
 // packages/api-contract/dist/phone-types.js
@@ -32568,7 +32663,7 @@ var BEELINE_ROOM_MECHANICS = [
   "If you need reach outside the sandbox, call beeline-agent request_grant. If you already know discrete options, call beeline-agent ask_choice (one human, optional) or open_poll (every human in this Room, required deadline). A poll is refused below two electors and above fifty, and in a DM. A plurality is a fact, never permission to deploy, delete, merge, or spend. Open-ended asks stay tagged prose. Never put Always / Once / No on a preference.",
   "To state something that happened so the Room and other agents can act on it, call beeline-agent emit_event with your own agent:<slug> kind, one sentence, and optionally the agent members to wake. Chains of events are bounded and a refused emit posts nothing."
 ].join(" ");
-function runningBeelineReleaseId(env = process.env, read2 = (path) => readFileSync5(path, "utf8")) {
+function runningBeelineReleaseId(env = process.env, read2 = (path) => readFileSync6(path, "utf8")) {
   try {
     const lib = env.BEELINE_LIB_DIR;
     if (!lib)
@@ -32599,7 +32694,7 @@ Follow your own owner first, then this Workspace's owner and admins, then member
 
 A **tool** is something you can use once a human adds it; a **key** is the credential that tool holds for that human. You spend a key through the mounted connector and never see the credential itself.
 
-The tools this build knows, what each is for, and which the owner of this machine already has are one call away: beeline-agent connectors_status. That read is the Connectors page for the machine and owner you actually run on, not the person who asked. Connected apps are listed once per app with a stable ID. Their sign-in and credentials stay with the server. Trusty Squire signs up and signs in to any website hands-off for the person; its vault holds keys when needed. operate_drive drives a whole flow, and flat steps (operate_click, operate_type, operate_select, operate_press, operate_scroll, operate_wait, operate_navigate, operate_read_inbox, operate_extract, and the rest of its flat operate_* actions) handle one action at a time. Tailscale installs its CLI on the selected helper and opens Tailscale's own browser sign-in; once connected, use the CLI for tailnet resources and tailscale file cp or tailscale file get for Taildrop. The wallet is created only from the Connectors page. When you cannot reach a tool, say: I can't reach X on this machine because Y; to fix it, Z. Give one explanation, then take or offer Z.
+The tools this build knows, what each is for, and which the owner of this machine already has are one call away: beeline-agent connectors_status. That read is the Connectors page for the machine and owner you actually run on, not the person who asked. Connected apps are listed once per app with a stable ID. Their sign-in and credentials stay with the server. Trusty Squire signs up and signs in to any website hands-off for the person; its vault holds keys when needed. operate_drive drives a whole flow, and flat steps (operate_click, operate_type, operate_select, operate_press, operate_scroll, operate_wait, operate_navigate, operate_read_inbox, operate_extract, and the rest of its flat operate_* actions) handle one action at a time. When you are stuck in an existing browser, call share_browser. The call waits for a person to hand the browser back; do not touch the browser again until that call returns. Tailscale installs its CLI on the selected helper and opens Tailscale's own browser sign-in; once connected, use the CLI for tailnet resources and tailscale file cp or tailscale file get for Taildrop. The wallet is created only from the Connectors page. When you cannot reach a tool, say: I can't reach X on this machine because Y; to fix it, Z. Give one explanation, then take or offer Z.
 
 **Inspect your own host before answering.** When a question is about a system on the machine you run on, inspect its live state with the tools you have: processes, logs, local endpoints or service status. Say what you checked. Memory and Room history are not evidence of current state.
 
@@ -34038,7 +34133,7 @@ async function provisionAgentSkillsAndMcp(root, operatorHome, skillReleaseId, fa
     try {
       const source = resolve16(operatorHome, config.toml);
       const target = resolve16(root, config.dir, "config.toml");
-      const mcpSection = existsSync7(source) ? localHarnessMcpToml(readFileSync6(source, "utf8")) : void 0;
+      const mcpSection = existsSync7(source) ? localHarnessMcpToml(readFileSync7(source, "utf8")) : void 0;
       const section = config.dir === "codex" ? [CODEX_ROOM_AGENT_LOCKDOWN_TOML, CODEX_ROOM_WEB_SEARCH_TOML, mcpSection].filter(Boolean).join("\n") : mcpSection;
       if (!section) {
         await unlink5(target).catch(() => void 0);
@@ -34058,7 +34153,7 @@ async function provisionAgentSkillsAndMcp(root, operatorHome, skillReleaseId, fa
       const source = resolve16(operatorHome, ".config", "goose", name);
       const target = resolve16(gooseConfigDir, name);
       if (existsSync7(source)) {
-        const body = readFileSync6(source, "utf8");
+        const body = readFileSync7(source, "utf8");
         await writeIsolatedHarnessFile(target, name === "config.yaml" ? localGooseConfig(body) : body);
       } else {
         await unlink5(target).catch(() => void 0);
@@ -34136,7 +34231,7 @@ async function applyGrantedHostRoutes(root, operatorHome, granted, agentKind, fa
       if (Object.keys(routes).length === 0)
         continue;
       const target = resolve16(root, config.dir, "config.toml");
-      const existing = existsSync7(target) ? readFileSync6(target, "utf8") : void 0;
+      const existing = existsSync7(target) ? readFileSync7(target, "utf8") : void 0;
       const merged = mergeTomlHostRoutes(existing, routes);
       if (merged)
         await writeIsolatedHarnessFile(target, merged);
@@ -34147,7 +34242,7 @@ async function applyGrantedHostRoutes(root, operatorHome, granted, agentKind, fa
         const gooseConfigDir = resolve16(root, "goose", "config");
         await mkdir11(gooseConfigDir, { recursive: true, mode: 448 });
         const target = resolve16(gooseConfigDir, "config.yaml");
-        const existing = existsSync7(target) ? readFileSync6(target, "utf8") : void 0;
+        const existing = existsSync7(target) ? readFileSync7(target, "utf8") : void 0;
         const merged = mergeGooseHostRoutes(existing, routes);
         if (merged)
           await writeIsolatedHarnessFile(target, merged);
@@ -34222,7 +34317,7 @@ async function provisionPiCustomModelConfig(root, operatorHome, failClosed, open
     if (resolvedSource !== source) {
       throw new AgentHomeSecurityError(`Pi custom model config resolves through a link: ${source}`);
     }
-    const sourceValue = JSON.parse(readFileSync6(resolvedSource, "utf8"));
+    const sourceValue = JSON.parse(readFileSync7(resolvedSource, "utf8"));
     await writeIsolatedHarnessFile(target, `${JSON.stringify(withOpenRouterModelRouting(sourceValue, pin), null, 2)}
 `);
   } catch (error) {
@@ -34234,7 +34329,7 @@ async function provisionPiCustomModelConfig(root, operatorHome, failClosed, open
 }
 function readClaudeUserScopeMcpServers(path) {
   try {
-    const parsed = JSON.parse(readFileSync6(path, "utf8"));
+    const parsed = JSON.parse(readFileSync7(path, "utf8"));
     const servers = recordValue2(parsed.mcpServers);
     if (servers)
       return localMcpServers(servers);
@@ -34435,7 +34530,7 @@ function readExistingText(path) {
   if (!existsSync7(path))
     return void 0;
   try {
-    return readFileSync6(path, "utf8");
+    return readFileSync7(path, "utf8");
   } catch {
     return void 0;
   }
@@ -34767,7 +34862,7 @@ function harnessStateDirsFromEnv(env) {
 
 // apps/body/dist/bwrap-sandbox.js
 import { execFile as execFile7, spawnSync } from "node:child_process";
-import { lstatSync, readdirSync as readdirSync3, readFileSync as readFileSync7, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { lstatSync as lstatSync2, readdirSync as readdirSync3, readFileSync as readFileSync8, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { basename as basename4, dirname as dirname13, isAbsolute as isAbsolute2, relative as relative2, resolve as resolve17 } from "node:path";
 var DEFAULT_SANDBOX_POLICY = "bwrap";
@@ -34828,7 +34923,7 @@ var KNOWN_CREDENTIAL_MASK_PATHS = [
 ];
 function credentialMaskPaths(extraPaths, home = homedir12(), stat11 = (path) => {
   try {
-    const info = lstatSync(path);
+    const info = lstatSync2(path);
     return { isDirectory: info.isDirectory() };
   } catch {
     return void 0;
@@ -35080,7 +35175,7 @@ function readInstallFailure(stateDir) {
   if (!stateDir)
     return void 0;
   try {
-    const at = Number.parseInt(readFileSync7(installFailureMarker(stateDir), "utf8").trim(), 10);
+    const at = Number.parseInt(readFileSync8(installFailureMarker(stateDir), "utf8").trim(), 10);
     return Number.isFinite(at) ? at : void 0;
   } catch {
     return void 0;
@@ -35099,7 +35194,7 @@ function clearInstallFailure(stateDir) {
   if (!stateDir)
     return;
   try {
-    rmSync2(installFailureMarker(stateDir), { force: true });
+    rmSync3(installFailureMarker(stateDir), { force: true });
   } catch {
   }
 }
@@ -35398,7 +35493,7 @@ function isAllowedAgentModelConfigCategory(category, id) {
 }
 
 // apps/body/dist/model-config.js
-import { lstatSync as lstatSync2, readFileSync as readFileSync8 } from "node:fs";
+import { lstatSync as lstatSync3, readFileSync as readFileSync9 } from "node:fs";
 import { basename as basename5, resolve as resolve19 } from "node:path";
 
 // apps/body/dist/transient-provider-error.js
@@ -35620,11 +35715,11 @@ function credentialedPiCustomProviders(env) {
     return held;
   const path = resolve19(agentDir, "models.json");
   try {
-    const stats = lstatSync2(path);
+    const stats = lstatSync3(path);
     if (!stats.isFile() || stats.isSymbolicLink() || stats.nlink !== 1 || stats.size > 1048576) {
       return held;
     }
-    const parsed = JSON.parse(readFileSync8(path, "utf8"));
+    const parsed = JSON.parse(readFileSync9(path, "utf8"));
     const providers = parsed.providers;
     const remember = (name, config) => {
       if (typeof name !== "string" || !name.trim() || !config || typeof config !== "object")
@@ -35848,8 +35943,6 @@ function describeCurrentReleaseOutcome(outcome) {
       return `the current release got a different refusal (${outcome.reason})`;
     case "sandbox-unavailable":
       return `the current release has the same unavailable sandbox (${outcome.reason})`;
-    case "model-unavailable":
-      return `the current release cannot serve that model either (${outcome.reason})`;
     case "unavailable":
       return `the current release could not be compared (${outcome.reason})`;
   }
@@ -35877,29 +35970,6 @@ async function runUpdateFunctionalProbe(input) {
     command
   });
   const harness = input.config.agentKind ?? command;
-  if (input.config.modelUnavailable) {
-    const detail = input.config.modelUnavailable.detail;
-    if (!input.compareWithCurrentRelease) {
-      throw new UpdateFunctionalProbeError("model-unavailable", detail);
-    }
-    const current = await input.compareWithCurrentRelease({
-      kind: "model-unavailable",
-      reason: detail
-    });
-    if (current.kind !== "model-unavailable" && current.kind !== "unavailable") {
-      throw new UpdateFunctionalProbeError("model-unavailable", `${detail}; ${describeCurrentReleaseOutcome(current)}`);
-    }
-    console.warn("[body] update probe: the configured model is unavailable to this release and the current release alike; that is the account catalog, not the bundle, so the probe passes without a model answer");
-    return {
-      harness,
-      sandboxed: false,
-      sessionStarted: false,
-      turnCompleted: false,
-      nativeTools: [],
-      modelAnswer: "unavailable",
-      modelAnswerReason: `${detail} (the current release cannot serve that model either)`
-    };
-  }
   if (input.sandboxRequired && !input.config.bwrapPath) {
     const detail = input.sandboxUnavailableDetail ?? "the configured bubblewrap boundary did not pass its startup self-test";
     if (!input.compareWithCurrentRelease) {
@@ -36102,6 +36172,8 @@ async function runUpdateFunctionalProbe(input) {
         throw error;
       throw new UpdateFunctionalProbeError("session-start-failed", error instanceof Error ? error.message : String(error), { cause: error });
     }
+    if (modelAnswer.modelAnswer === "served")
+      input.config.modelUnavailable = void 0;
     return {
       harness,
       sandboxed: Boolean(input.config.bwrapPath),
@@ -37214,7 +37286,7 @@ async function validateAgentModelSelection(agent, agentEnv, selection) {
 }
 
 // apps/body/dist/config.js
-import { accessSync as accessSync3, constants as constants2, existsSync as existsSync8, readFileSync as readFileSync9 } from "node:fs";
+import { accessSync as accessSync3, constants as constants2, existsSync as existsSync8, readFileSync as readFileSync10 } from "node:fs";
 import { basename as basename7, dirname as dirname17, resolve as resolve24 } from "node:path";
 function firstExisting2(paths) {
   for (const p of paths) {
@@ -37311,7 +37383,7 @@ function parseEnvFile(path) {
   const out = {};
   if (!existsSync8(path))
     return out;
-  const text2 = readFileSync9(path, "utf8");
+  const text2 = readFileSync10(path, "utf8");
   for (const raw of text2.split("\n")) {
     const line = raw.trim();
     if (!line || line.startsWith("#"))
@@ -38579,6 +38651,7 @@ async function runUpdateProbeCommand(args, options = {}) {
 
 // apps/body/dist/machine-helper.js
 import { mkdir as mkdir29, rename as rename13, stat as stat10, writeFile as writeFile22 } from "node:fs/promises";
+import { homedir as homedir20 } from "node:os";
 import { dirname as dirname31, resolve as resolve47 } from "node:path";
 
 // apps/body/dist/agent-runtime.js
@@ -42055,7 +42128,7 @@ function cornerReviewerInstruction(input) {
   const headSha = input.headSha ?? "<head sha>";
   return `Checks are green on PR #${number} at ${headSha}${input.briefRevision ? ` with assigned brief revision ${input.briefRevision}` : ""}. Review it now with the beeline-review skill against that exact head and current assigned brief. FAIL: ${author ? `reply \`@${author}\`` : "tag the agent that wrote this head"} with the confirmed findings and the reviewed head ${headSha} to fix. PASS: call the approve_merge tool for ${headSha}, then reply \`approved ${headSha}\` without tagging ${author ?? "the author"}: your PASS wakes the author to merge, so a tag adds nothing. A human's question or proposal in the corner discussion with no answer is a FAIL finding; name it. Never merge yourself or tell the author to merge. Never say you are holding or waiting for checks.`;
 }
-var CORNER_REVIEWER_AUTHOR_MERGE = "You are this Room's reviewer, so no agent can review your own code; a person is your reviewer. Once the pull request exists, reply with its full URL, tag the person who assigned you this work, and ask them to approve the merge; only a Workspace owner or admin's yes counts. Record their yes with order_corner_merge. Never merge it any other way. You are woken to fix failing checks or a merge GitHub refused.";
+var CORNER_REVIEWER_AUTHOR_MERGE = "If you wrote this corner's code, no agent can review your own code; a person is your reviewer. Once the pull request exists, reply with its full URL, tag the person who assigned you this work, and ask them to approve the merge; only a Workspace owner or admin's yes counts. Record their yes with order_corner_merge. Never merge it any other way. You are woken to fix failing checks or a merge GitHub refused.";
 function shellLine(shell) {
   if (!shell)
     return "";
@@ -42359,7 +42432,7 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     layer: "surface",
     surfaces: ["code-corner"],
     when: ({ reviewer }) => reviewer === true,
-    render: () => `Reviewer rules: ${CORNER_REVIEWER_SESSION_INSTRUCTION} Report findings to the author; never edit or push another agent's branch.`
+    render: () => `Reviewer rules: ${CORNER_REVIEWER_SESSION_INSTRUCTION} Findings go to the author, not a commit; never push another agent's branch. This wins over the finished-fix rule.`
   },
   {
     id: "corner.repo-less",
@@ -43190,6 +43263,9 @@ var MonolithRoomTurnLoop = class {
     })).allowed, options.config.operatorHome ?? homedir17(), void 0, (decision2) => {
       options.api.execute("postSquireApprovalDecision", { roomId: options.roomId, ...decision2 }).catch(() => {
       });
+    }, (sessionId) => {
+      options.api.execute("endComputerSession", { roomId: options.roomId, sessionId }).catch(() => {
+      });
     });
     this.options = { ...options, api: this.commandContext.bind(options.api) };
     options.grantRunner?.register(options.roomId, {
@@ -44752,6 +44828,23 @@ if (!refusal) {
   await chmod9(path, 448);
 }
 
+// apps/body/dist/agent-git-identity.js
+function agentGitIdentity(agent) {
+  return {
+    name: agent.name,
+    email: `${agent.publicKey.slice(0, 16)}@users.noreply.github.com`
+  };
+}
+function agentGitIdentityEnv(agent) {
+  const { name, email } = agentGitIdentity(agent);
+  return {
+    GIT_AUTHOR_NAME: name,
+    GIT_AUTHOR_EMAIL: email,
+    GIT_COMMITTER_NAME: name,
+    GIT_COMMITTER_EMAIL: email
+  };
+}
+
 // apps/body/dist/warm-node-modules.js
 import { createHash as createHash12, randomUUID as randomUUID12 } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
@@ -45359,6 +45452,9 @@ var MonolithCornerTurnLoop = class {
     })).allowed, options.config.operatorHome ?? homedir18(), void 0, (decision2) => {
       options.api.execute("postSquireApprovalDecision", { roomId: options.cornerId, ...decision2 }).catch(() => {
       });
+    }, (sessionId) => {
+      options.api.execute("endComputerSession", { roomId: options.cornerId, sessionId }).catch(() => {
+      });
     });
     this.options = { ...options, api: this.commandContext.bind(options.api) };
     options.grantRunner?.register(options.cornerId, {
@@ -45692,6 +45788,9 @@ var MonolithCornerTurnLoop = class {
       ...this.options.config.agentEnv,
       ...homeOverlay,
       ...githubEnv,
+      // Git reads these before any config, so this session commits as itself
+      // no matter which session last prepared the shared corner worktree.
+      ...agentGitIdentityEnv(this.agent),
       npm_config_cache: npmCacheDir,
       // pnpm reads its settings from PNPM_CONFIG_* environment variables and
       // hardlinks packages out of this content-addressable store.
@@ -46441,7 +46540,7 @@ ${continuation}` : assembled;
           const checksTurn = isCornerChecksTurn(trigger, restates);
           const mayPublish = repositoryWork && !repositoryHeld;
           const deliveryState = !checksTurn && mayPublish && this.options.repository ? await cornerUndeliveredRepositoryState(this.options.worktreePath, this.options.repository.featureBranch, this.options.repository.targetBranch) : void 0;
-          const needsDeliveryNudge = deliveryState !== void 0 && deliveryState !== this.lastDeliveryNudgeState;
+          const needsDeliveryNudge = !this.reviewerInstructionInput && deliveryState !== void 0 && deliveryState !== this.lastDeliveryNudgeState;
           let refreshedReviewerInstruction;
           let reviewerSecondPass = false;
           let reviewerTargetChanged = false;
@@ -47391,13 +47490,14 @@ async function materializeCornerWorktree(input) {
     "credential.https://github.com.helper",
     "!f() { echo username=x-access-token; echo password=$GH_TOKEN; }; f"
   ]);
+  const identity = agentGitIdentity(input.committer);
   await execFileAsync11("git", [
     "-C",
     path,
     "config",
     "--worktree",
     "user.name",
-    input.committer.name
+    identity.name
   ]);
   await execFileAsync11("git", [
     "-C",
@@ -47405,7 +47505,7 @@ async function materializeCornerWorktree(input) {
     "config",
     "--worktree",
     "user.email",
-    `${input.committer.publicKey.slice(0, 16)}@users.noreply.github.com`
+    identity.email
   ]);
   const top = (await execFileAsync11("git", ["-C", path, "rev-parse", "--show-toplevel"])).stdout.trim();
   if (await realpath3(top) !== await realpath3(path)) {
@@ -49027,7 +49127,7 @@ var ThinDaemonCore = class {
 };
 
 // apps/body/dist/force-update-journal.js
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync10, renameSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync11, renameSync as renameSync2, writeFileSync as writeFileSync5 } from "node:fs";
 import { resolve as resolve41 } from "node:path";
 var NAME = "force-update-interruptions.json";
 function pathFor(runtimeDir) {
@@ -49035,7 +49135,7 @@ function pathFor(runtimeDir) {
 }
 function read(runtimeDir) {
   try {
-    const rows = JSON.parse(readFileSync10(pathFor(runtimeDir), "utf8"));
+    const rows = JSON.parse(readFileSync11(pathFor(runtimeDir), "utf8"));
     if (!Array.isArray(rows))
       throw new Error("invalid force-update interruption journal");
     return rows.map((row) => {
@@ -49058,7 +49158,7 @@ function write(runtimeDir, rows) {
   const temporary = `${target}.${process.pid}.tmp`;
   writeFileSync5(temporary, `${JSON.stringify(rows)}
 `, { mode: 384 });
-  renameSync(temporary, target);
+  renameSync2(temporary, target);
 }
 function journalInterruptedTurns(runtimeDir, turns) {
   if (!turns.length)
@@ -49645,6 +49745,7 @@ var ForceUpdateCoordinator = class {
 init_launchd();
 init_self_update();
 init_systemd();
+init_squire_host();
 
 // apps/body/dist/host-disk-retention.js
 import { execFile as execFile18 } from "node:child_process";
@@ -49800,11 +49901,12 @@ async function runMachineHelper(options = {}) {
     }
     loadedRelease = await activeReleaseId(layout);
     loadedReleaseIdentity = await readInstalledBundleIdentity(layout);
-    if (settle.kind === "pending") {
+    if (settle.kind === "pending" || !squireBrokerMeetsComputerUseMinimum(env.HOME?.trim() || homedir20())) {
+      const squireUpdateMode = settle.kind === "pending" ? "latest" : "minimum";
       if (managedBy === "systemd")
-        await installTrustySquireBrokerService({ env }).catch((error) => console.error(`[beeline] host Squire broker unit not converged: ${error instanceof Error ? error.message : String(error)}`));
+        await installTrustySquireBrokerService({ env, squireUpdateMode }).catch((error) => console.error(`[beeline] host Squire broker unit not converged: ${error instanceof Error ? error.message : String(error)}`));
       else if (managedBy === "launchd")
-        await installLaunchdTrustySquireBrokerService({ env }).catch((error) => console.error(`[beeline] host Squire broker launchd job not converged: ${error instanceof Error ? error.message : String(error)}`));
+        await installLaunchdTrustySquireBrokerService({ env, squireUpdateMode }).catch((error) => console.error(`[beeline] host Squire broker launchd job not converged: ${error instanceof Error ? error.message : String(error)}`));
     }
   }
   if (managedBy === "systemd")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "homepage": "https://usebeeline.app",
   "bugs": {