usebeeline 0.1.25 → 0.1.26

package/dist/usebeeline.mjs

@@ -563,7 +563,7 @@ var init_squire_broker_squatter = __esm({
 
 // apps/body/dist/squire-host.js
 import { spawn as spawn4 } from "node:child_process";
-import { accessSync, constants as fsConstants, existsSync as existsSync3, mkdirSync, realpathSync as realpathSync2, statSync, writeFileSync } from "node:fs";
+import { accessSync, constants as fsConstants, existsSync as existsSync3, lstatSync, mkdirSync, mkdtempSync, readFileSync as readFileSync2, realpathSync as realpathSync2, renameSync, rmSync, statSync, symlinkSync, writeFileSync } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
 import { createConnection as createConnection2 } from "node:net";
 import { homedir } from "node:os";
@@ -666,18 +666,90 @@ function squireBrokerInstallDir(home) {
 function squireBrokerInstallEntry(home) {
   return join2(squireBrokerInstallDir(home), "node_modules", "@trusty-squire", "mcp", "dist", "bin.js");
 }
-async function ensureSquireBrokerInstall(home, options = {}) {
+function versionParts(version) {
+  if (!/^\d+\.\d+\.\d+$/.test(version))
+    return void 0;
+  return version.split(".").map(Number);
+}
+function compareSquireVersions(left, right) {
+  const a2 = versionParts(left);
+  const b = versionParts(right);
+  if (!a2 || !b)
+    throw new Error(`Invalid Trusty Squire version: ${!a2 ? left : right}`);
+  for (let i3 = 0; i3 < 3; i3++) {
+    if (a2[i3] !== b[i3])
+      return a2[i3] - b[i3];
+  }
+  return 0;
+}
+function squireBrokerInstalledVersion(home) {
+  if (!existsSync3(squireBrokerInstallEntry(home)))
+    return void 0;
+  try {
+    const version = JSON.parse(readFileSync2(squirePackagePath(squireBrokerInstallDir(home)), "utf8")).version;
+    return typeof version === "string" && versionParts(version) ? version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function squireBrokerMeetsComputerUseMinimum(home) {
+  const version = squireBrokerInstalledVersion(home);
+  return version !== void 0 && compareSquireVersions(version, SQUIRE_COMPUTER_USE_MIN_VERSION) >= 0;
+}
+async function updateSquireBrokerInstall(home, options = {}) {
   const entry = squireBrokerInstallEntry(home);
-  if (existsSync3(entry))
-    return entry;
+  const installed = squireBrokerInstalledVersion(home);
+  if (options.mode === "minimum" && installed && compareSquireVersions(installed, SQUIRE_COMPUTER_USE_MIN_VERSION) >= 0)
+    return { entry, changed: false };
   const dir = squireBrokerInstallDir(home);
-  mkdirSync(dir, { recursive: true, mode: 448 });
+  mkdirSync(dirname2(dir), { recursive: true, mode: 448 });
   const run2 = options.run ?? defaultSquireInstallRunner;
-  const spec = options.spec ?? `${SQUIRE_MCP_PACKAGE_NAME}@latest`;
-  const result = await run2("npm", ["install", "--prefix", dir, spec, "--no-save", "--no-audit", "--no-fund", "--no-package-lock"], { cwd: dir });
-  if (result.code !== 0 || !existsSync3(entry))
-    throw new Error(`Trusty Squire broker install failed: ${result.stderr.trim() || `${entry} is missing`}`);
-  return entry;
+  const view = await run2("npm", ["view", `${SQUIRE_MCP_PACKAGE_NAME}@latest`, "version"], { cwd: dirname2(dir) });
+  const latest = view.stdout?.trim() ?? "";
+  if (view.code !== 0 || !versionParts(latest))
+    throw new Error(`Trusty Squire version lookup failed: ${view.stderr.trim() || latest || "no version returned"}`);
+  if (compareSquireVersions(latest, SQUIRE_COMPUTER_USE_MIN_VERSION) < 0)
+    throw new Error(`Trusty Squire ${latest} is older than required ${SQUIRE_COMPUTER_USE_MIN_VERSION}`);
+  if (installed && compareSquireVersions(installed, latest) >= 0)
+    return { entry, changed: false };
+  const candidate = mkdtempSync(join2(dirname2(dir), `${SQUIRE_BROKER_INSTALL_DIRNAME}-next-`));
+  const link2 = join2(dirname2(dir), `${SQUIRE_BROKER_INSTALL_DIRNAME}-link-${basename2(candidate)}`);
+  let activated = false;
+  try {
+    const install = await run2("npm", ["install", "--prefix", candidate, `${SQUIRE_MCP_PACKAGE_NAME}@${latest}`, "--no-save", "--no-audit", "--no-fund", "--no-package-lock"], { cwd: candidate });
+    let candidateVersion;
+    try {
+      candidateVersion = JSON.parse(readFileSync2(squirePackagePath(candidate), "utf8")).version;
+    } catch {
+    }
+    if (install.code !== 0 || !existsSync3(squireEntryPath(candidate)) || candidateVersion !== latest)
+      throw new Error(`Trusty Squire broker install failed: ${install.stderr.trim() || "candidate entry or version is missing"}`);
+    symlinkSync(basename2(candidate), link2);
+    if (existsSync3(dir)) {
+      const previous = realpathSync2(dir);
+      const backup = join2(dirname2(dir), `${SQUIRE_BROKER_INSTALL_DIRNAME}.bak-${installed ?? "unknown"}-${basename2(candidate)}`);
+      if (!lstatSync(dir).isSymbolicLink()) {
+        renameSync(dir, backup);
+        try {
+          renameSync(link2, dir);
+        } catch (error) {
+          renameSync(backup, dir);
+          throw error;
+        }
+      } else {
+        symlinkSync(previous, backup);
+        renameSync(link2, dir);
+      }
+    } else {
+      renameSync(link2, dir);
+    }
+    activated = true;
+    return { entry, changed: true };
+  } finally {
+    if (!activated)
+      rmSync(candidate, { recursive: true, force: true });
+    rmSync(link2, { force: true });
+  }
 }
 function trustySquireBrokerUnit(nodeExecPath = process.execPath) {
   return `[Unit]
@@ -728,7 +800,9 @@ async function runSquireBroker(env = process.env) {
   }
   let entry;
   try {
-    entry = await ensureSquireBrokerInstall(home);
+    entry = squireBrokerInstallEntry(home);
+    if (!existsSync3(entry))
+      throw new Error("durable broker entry is missing");
   } catch (error) {
     process.stderr.write(`[beeline] Trusty Squire broker not started: ${error instanceof Error ? error.message : String(error)}
 `);
@@ -759,7 +833,7 @@ async function runSquireFacade(env = process.env) {
   });
   process.exit(ok ? 0 : 1);
 }
-var SQUIRE_BROKER_UNAVAILABLE, TRUSTY_SQUIRE_BROKER_UNIT_NAME, SQUIRE_FACADE_FLAG, SQUIRE_BROKER_FLAG, SQUIRE_MCP_PACKAGE_NAME, SQUIRE_BROKER_START_LIMIT_INTERVAL_SEC, SQUIRE_BROKER_START_LIMIT_BURST, SQUIRE_BROKER_UNIT_MARKER_FILE, SQUIRE_BROKER_INSTALL_DIRNAME, defaultSquireInstallRunner;
+var SQUIRE_BROKER_UNAVAILABLE, TRUSTY_SQUIRE_BROKER_UNIT_NAME, SQUIRE_FACADE_FLAG, SQUIRE_BROKER_FLAG, SQUIRE_MCP_PACKAGE_NAME, SQUIRE_COMPUTER_USE_MIN_VERSION, SQUIRE_BROKER_START_LIMIT_INTERVAL_SEC, SQUIRE_BROKER_START_LIMIT_BURST, SQUIRE_BROKER_UNIT_MARKER_FILE, SQUIRE_BROKER_INSTALL_DIRNAME, defaultSquireInstallRunner, squirePackagePath, squireEntryPath;
 var init_squire_host = __esm({
   "apps/body/dist/squire-host.js"() {
     "use strict";
@@ -770,19 +844,26 @@ var init_squire_host = __esm({
     SQUIRE_FACADE_FLAG = "--squire-facade";
     SQUIRE_BROKER_FLAG = "--squire-broker";
     SQUIRE_MCP_PACKAGE_NAME = "@trusty-squire/mcp";
+    SQUIRE_COMPUTER_USE_MIN_VERSION = "1.1.32";
     SQUIRE_BROKER_START_LIMIT_INTERVAL_SEC = 60;
     SQUIRE_BROKER_START_LIMIT_BURST = 6;
     SQUIRE_BROKER_UNIT_MARKER_FILE = ".trusty-squire-broker-unit.json";
     SQUIRE_BROKER_INSTALL_DIRNAME = "mcp-broker-install";
     defaultSquireInstallRunner = (command, args, options) => new Promise((resolveRun) => {
-      const child = spawn4(command, [...args], { cwd: options.cwd, stdio: ["ignore", "ignore", "pipe"] });
+      const child = spawn4(command, [...args], { cwd: options.cwd, stdio: ["ignore", "pipe", "pipe"] });
       let stderr = "";
+      let stdout6 = "";
+      child.stdout?.on("data", (chunk) => {
+        stdout6 += chunk.toString("utf8");
+      });
       child.stderr?.on("data", (chunk) => {
         stderr += chunk.toString("utf8");
       });
       child.once("error", (error) => resolveRun({ code: 1, stderr: error.message }));
-      child.once("close", (code) => resolveRun({ code, stderr }));
+      child.once("close", (code) => resolveRun({ code, stderr, stdout: stdout6 }));
     });
+    squirePackagePath = (dir) => join2(dir, "node_modules", "@trusty-squire", "mcp", "package.json");
+    squireEntryPath = (dir) => join2(dir, "node_modules", "@trusty-squire", "mcp", "dist", "bin.js");
   }
 });
 
@@ -4684,7 +4765,7 @@ async function installTrustySquireBrokerService(options = {}) {
   assertCanonicalInstalledLauncher(env, options.invocationPath);
   const home = env.HOME?.trim() || homedir6();
   writeSquireBrokerUnitMarker(home);
-  await ensureSquireBrokerInstall(home, options.squireInstallRun ? { run: options.squireInstallRun } : {});
+  const install = await updateSquireBrokerInstall(home, { ...options.squireInstallRun ? { run: options.squireInstallRun } : {}, mode: options.squireUpdateMode ?? "latest" });
   const path = systemdBrokerUnitPath(env);
   const content = trustySquireBrokerUnit();
   const existing = await readFile6(path, "utf8").catch(() => "");
@@ -4696,7 +4777,7 @@ async function installTrustySquireBrokerService(options = {}) {
   const run2 = options.run ?? runSystemctl;
   await run2(["daemon-reload"]);
   await run2(["enable", TRUSTY_SQUIRE_BROKER_UNIT_NAME]);
-  if (changed || options.restart) {
+  if (changed || install.changed || options.restart) {
     await run2(["restart", "--no-block", TRUSTY_SQUIRE_BROKER_UNIT_NAME]);
   } else {
     await run2(["start", TRUSTY_SQUIRE_BROKER_UNIT_NAME]);
@@ -4708,7 +4789,6 @@ async function convergeTrustySquireBrokerService(options) {
     await installTrustySquireBrokerService({
       env: { ...env, BEELINE_LIB_DIR: options.libDir },
       invocationPath: resolve3(options.libDir, "lib", "beeline", "beeline-cli.mjs"),
-      restart: true,
       ...options.run ? { run: options.run } : {}
     });
     return true;
@@ -5318,13 +5398,17 @@ async function installLaunchdTrustySquireBrokerService(options = {}) {
   assertCanonicalInstalledLauncher2(env, options.invocationPath);
   const home = launchdHome(env);
   writeSquireBrokerUnitMarker(home);
+  const install = await updateSquireBrokerInstall(home, {
+    ...options.squireInstallRun ? { run: options.squireInstallRun } : {},
+    mode: options.squireUpdateMode ?? "latest"
+  });
   await mkdir5(resolve4(home, "Library", "Logs", "Beeline"), { recursive: true, mode: 448 });
   const plistPath = launchdBrokerPlistPath(env);
   const changed = await writeManagedFile(plistPath, launchdBrokerPlist(env), 384);
   const run2 = options.run ?? runLaunchctl;
   const domain = launchdUserDomain();
   const target = `${domain}/${LAUNCHD_BROKER_LABEL}`;
-  if (changed || options.restart)
+  if (changed || install.changed || options.restart)
     await bootoutIfLoaded(run2, target);
   await run2(["enable", target]);
   if ((await launchdStatus(run2, target)).state === "unloaded") {
@@ -5339,7 +5423,6 @@ async function convergeLaunchdTrustySquireBrokerService(options) {
     await installLaunchdTrustySquireBrokerService({
       env: { ...env, BEELINE_LIB_DIR: options.libDir },
       invocationPath: resolve4(options.libDir, "lib", "beeline", "beeline-cli.mjs"),
-      restart: true,
       ...options.run ? { run: options.run } : {}
     });
     return true;
@@ -17359,7 +17442,7 @@ var ACCESS_REFUSAL_WINDOW_MS = 60 * 60 * 1e3;
 import { createHash as createHash2, randomBytes } from "node:crypto";
 import { lookup } from "node:dns/promises";
 import { createRequire as createRequire4 } from "node:module";
-import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { createConnection as createConnection3, createServer as createServer2, isIPv4, isIPv6 } from "node:net";
 import { homedir as homedir5 } from "node:os";
 import { dirname as dirname3, join as join3 } from "node:path";
@@ -17506,7 +17589,7 @@ function registryMcpStatePath(connectorId, home = homedir5()) {
 }
 function readState(path) {
   try {
-    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
     return parsed?.status === "pending" || parsed?.status === "connected" ? parsed : void 0;
   } catch {
     return void 0;
@@ -17595,7 +17678,7 @@ async function installRegistryMcp(input) {
     });
     if (claimed.status !== "ready" || typeof claimed.code !== "string") {
       if (claimed.status === "expired") {
-        rmSync(path, { force: true });
+        rmSync2(path, { force: true });
         return {
           status: "error",
           steps: steps("connect", CEREMONY_EXPIRED),
@@ -17978,7 +18061,7 @@ var RegistryMcpHostBroker = class {
       return;
     mkdirSync2(registryMcpStateRoot(this.home), { recursive: true, mode: 448 });
     mkdirSync2(dirname3(this.socketPath), { recursive: true, mode: 448 });
-    rmSync(this.socketPath, { force: true });
+    rmSync2(this.socketPath, { force: true });
     this.server = createServer2({ allowHalfOpen: true }, (socket) => {
       let buffer = "";
       socket.setEncoding("utf8");
@@ -18019,7 +18102,7 @@ var RegistryMcpHostBroker = class {
     this.server = void 0;
     if (server)
       await new Promise((resolve49) => server.close(() => resolve49()));
-    rmSync(this.socketPath, { force: true });
+    rmSync2(this.socketPath, { force: true });
   }
 };
 async function brokerRequest(socketPath, request) {
@@ -18066,7 +18149,7 @@ function runRegistryMcpBroker(env = process.env) {
       }
       let turn;
       try {
-        turn = readTurnContext(JSON.parse(readFileSync2(turnContextPath, "utf8")));
+        turn = readTurnContext(JSON.parse(readFileSync3(turnContextPath, "utf8")));
       } catch {
         turn = void 0;
       }
@@ -19686,7 +19769,7 @@ async function reportAgentSignInResult(api, agentId, attemptId, cards, result, l
 // apps/body/dist/runtime.js
 import { randomBytes as randomBytes8 } from "node:crypto";
 import { execFile as execFile5 } from "node:child_process";
-import { closeSync, openSync, readFileSync as readFileSync3 } from "node:fs";
+import { closeSync, openSync, readFileSync as readFileSync4 } from "node:fs";
 import { chmod as chmod4, mkdir as mkdir8, readFile as readFile11, readdir as readdir3, rename as rename5, stat as stat4, unlink as unlink4, writeFile as writeFile6 } from "node:fs/promises";
 import { homedir as homedir10 } from "node:os";
 import { dirname as dirname9, resolve as resolve8 } from "node:path";
@@ -28798,7 +28881,7 @@ function daemonBirthPath(configPath) {
 }
 function processBirthIdentity(pid) {
   try {
-    const statText = readFileSync3(`/proc/${pid}/stat`, "utf8");
+    const statText = readFileSync4(`/proc/${pid}/stat`, "utf8");
     const close = statText.lastIndexOf(")");
     return close < 0 ? void 0 : statText.slice(close + 2).split(" ")[19];
   } catch {
@@ -29766,7 +29849,7 @@ import { EventEmitter } from "node:events";
 // apps/body/dist/acp-resource-scope.js
 import { execFile as execFile6 } from "node:child_process";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { totalmem } from "node:os";
 import { promisify as promisify5 } from "node:util";
 var execFileAsync5 = promisify5(execFile6);
@@ -29836,7 +29919,7 @@ function managedServiceUnit() {
   if (process.env.BEELINE_MANAGED_BY_SYSTEMD !== "1")
     return void 0;
   try {
-    const cgroup = readFileSync4("/proc/self/cgroup", "utf8");
+    const cgroup = readFileSync5("/proc/self/cgroup", "utf8");
     const path = cgroup.split("\n").find((line) => line.startsWith("0::"))?.slice(3);
     return path?.split("/").find((part) => /^beeline-(?:helper|agent@.+)\.service$/.test(part));
   } catch {
@@ -31150,7 +31233,7 @@ ${String(error)}`);
 
 // apps/body/dist/agent-home.js
 var import_yaml2 = __toESM(require_dist(), 1);
-import { existsSync as existsSync7, readFileSync as readFileSync6, watch } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync7, watch } from "node:fs";
 
 // node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
@@ -32073,7 +32156,7 @@ function androidAgentEnv(input) {
 }
 
 // apps/body/dist/beeline-skill.js
-import { readFileSync as readFileSync5 } from "node:fs";
+import { readFileSync as readFileSync6 } from "node:fs";
 import { resolve as resolve13 } from "node:path";
 
 // packages/api-contract/dist/phone-types.js
@@ -32580,7 +32663,7 @@ var BEELINE_ROOM_MECHANICS = [
   "If you need reach outside the sandbox, call beeline-agent request_grant. If you already know discrete options, call beeline-agent ask_choice (one human, optional) or open_poll (every human in this Room, required deadline). A poll is refused below two electors and above fifty, and in a DM. A plurality is a fact, never permission to deploy, delete, merge, or spend. Open-ended asks stay tagged prose. Never put Always / Once / No on a preference.",
   "To state something that happened so the Room and other agents can act on it, call beeline-agent emit_event with your own agent:<slug> kind, one sentence, and optionally the agent members to wake. Chains of events are bounded and a refused emit posts nothing."
 ].join(" ");
-function runningBeelineReleaseId(env = process.env, read2 = (path) => readFileSync5(path, "utf8")) {
+function runningBeelineReleaseId(env = process.env, read2 = (path) => readFileSync6(path, "utf8")) {
   try {
     const lib = env.BEELINE_LIB_DIR;
     if (!lib)
@@ -34050,7 +34133,7 @@ async function provisionAgentSkillsAndMcp(root, operatorHome, skillReleaseId, fa
     try {
       const source = resolve16(operatorHome, config.toml);
       const target = resolve16(root, config.dir, "config.toml");
-      const mcpSection = existsSync7(source) ? localHarnessMcpToml(readFileSync6(source, "utf8")) : void 0;
+      const mcpSection = existsSync7(source) ? localHarnessMcpToml(readFileSync7(source, "utf8")) : void 0;
       const section = config.dir === "codex" ? [CODEX_ROOM_AGENT_LOCKDOWN_TOML, CODEX_ROOM_WEB_SEARCH_TOML, mcpSection].filter(Boolean).join("\n") : mcpSection;
       if (!section) {
         await unlink5(target).catch(() => void 0);
@@ -34070,7 +34153,7 @@ async function provisionAgentSkillsAndMcp(root, operatorHome, skillReleaseId, fa
       const source = resolve16(operatorHome, ".config", "goose", name);
       const target = resolve16(gooseConfigDir, name);
       if (existsSync7(source)) {
-        const body = readFileSync6(source, "utf8");
+        const body = readFileSync7(source, "utf8");
         await writeIsolatedHarnessFile(target, name === "config.yaml" ? localGooseConfig(body) : body);
       } else {
         await unlink5(target).catch(() => void 0);
@@ -34148,7 +34231,7 @@ async function applyGrantedHostRoutes(root, operatorHome, granted, agentKind, fa
       if (Object.keys(routes).length === 0)
         continue;
       const target = resolve16(root, config.dir, "config.toml");
-      const existing = existsSync7(target) ? readFileSync6(target, "utf8") : void 0;
+      const existing = existsSync7(target) ? readFileSync7(target, "utf8") : void 0;
       const merged = mergeTomlHostRoutes(existing, routes);
       if (merged)
         await writeIsolatedHarnessFile(target, merged);
@@ -34159,7 +34242,7 @@ async function applyGrantedHostRoutes(root, operatorHome, granted, agentKind, fa
         const gooseConfigDir = resolve16(root, "goose", "config");
         await mkdir11(gooseConfigDir, { recursive: true, mode: 448 });
         const target = resolve16(gooseConfigDir, "config.yaml");
-        const existing = existsSync7(target) ? readFileSync6(target, "utf8") : void 0;
+        const existing = existsSync7(target) ? readFileSync7(target, "utf8") : void 0;
         const merged = mergeGooseHostRoutes(existing, routes);
         if (merged)
           await writeIsolatedHarnessFile(target, merged);
@@ -34234,7 +34317,7 @@ async function provisionPiCustomModelConfig(root, operatorHome, failClosed, open
     if (resolvedSource !== source) {
       throw new AgentHomeSecurityError(`Pi custom model config resolves through a link: ${source}`);
     }
-    const sourceValue = JSON.parse(readFileSync6(resolvedSource, "utf8"));
+    const sourceValue = JSON.parse(readFileSync7(resolvedSource, "utf8"));
     await writeIsolatedHarnessFile(target, `${JSON.stringify(withOpenRouterModelRouting(sourceValue, pin), null, 2)}
 `);
   } catch (error) {
@@ -34246,7 +34329,7 @@ async function provisionPiCustomModelConfig(root, operatorHome, failClosed, open
 }
 function readClaudeUserScopeMcpServers(path) {
   try {
-    const parsed = JSON.parse(readFileSync6(path, "utf8"));
+    const parsed = JSON.parse(readFileSync7(path, "utf8"));
     const servers = recordValue2(parsed.mcpServers);
     if (servers)
       return localMcpServers(servers);
@@ -34447,7 +34530,7 @@ function readExistingText(path) {
   if (!existsSync7(path))
     return void 0;
   try {
-    return readFileSync6(path, "utf8");
+    return readFileSync7(path, "utf8");
   } catch {
     return void 0;
   }
@@ -34779,7 +34862,7 @@ function harnessStateDirsFromEnv(env) {
 
 // apps/body/dist/bwrap-sandbox.js
 import { execFile as execFile7, spawnSync } from "node:child_process";
-import { lstatSync, readdirSync as readdirSync3, readFileSync as readFileSync7, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { lstatSync as lstatSync2, readdirSync as readdirSync3, readFileSync as readFileSync8, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { basename as basename4, dirname as dirname13, isAbsolute as isAbsolute2, relative as relative2, resolve as resolve17 } from "node:path";
 var DEFAULT_SANDBOX_POLICY = "bwrap";
@@ -34840,7 +34923,7 @@ var KNOWN_CREDENTIAL_MASK_PATHS = [
 ];
 function credentialMaskPaths(extraPaths, home = homedir12(), stat11 = (path) => {
   try {
-    const info = lstatSync(path);
+    const info = lstatSync2(path);
     return { isDirectory: info.isDirectory() };
   } catch {
     return void 0;
@@ -35092,7 +35175,7 @@ function readInstallFailure(stateDir) {
   if (!stateDir)
     return void 0;
   try {
-    const at = Number.parseInt(readFileSync7(installFailureMarker(stateDir), "utf8").trim(), 10);
+    const at = Number.parseInt(readFileSync8(installFailureMarker(stateDir), "utf8").trim(), 10);
     return Number.isFinite(at) ? at : void 0;
   } catch {
     return void 0;
@@ -35111,7 +35194,7 @@ function clearInstallFailure(stateDir) {
   if (!stateDir)
     return;
   try {
-    rmSync2(installFailureMarker(stateDir), { force: true });
+    rmSync3(installFailureMarker(stateDir), { force: true });
   } catch {
   }
 }
@@ -35410,7 +35493,7 @@ function isAllowedAgentModelConfigCategory(category, id) {
 }
 
 // apps/body/dist/model-config.js
-import { lstatSync as lstatSync2, readFileSync as readFileSync8 } from "node:fs";
+import { lstatSync as lstatSync3, readFileSync as readFileSync9 } from "node:fs";
 import { basename as basename5, resolve as resolve19 } from "node:path";
 
 // apps/body/dist/transient-provider-error.js
@@ -35632,11 +35715,11 @@ function credentialedPiCustomProviders(env) {
     return held;
   const path = resolve19(agentDir, "models.json");
   try {
-    const stats = lstatSync2(path);
+    const stats = lstatSync3(path);
     if (!stats.isFile() || stats.isSymbolicLink() || stats.nlink !== 1 || stats.size > 1048576) {
       return held;
     }
-    const parsed = JSON.parse(readFileSync8(path, "utf8"));
+    const parsed = JSON.parse(readFileSync9(path, "utf8"));
     const providers = parsed.providers;
     const remember = (name, config) => {
       if (typeof name !== "string" || !name.trim() || !config || typeof config !== "object")
@@ -35860,8 +35943,6 @@ function describeCurrentReleaseOutcome(outcome) {
       return `the current release got a different refusal (${outcome.reason})`;
     case "sandbox-unavailable":
       return `the current release has the same unavailable sandbox (${outcome.reason})`;
-    case "model-unavailable":
-      return `the current release cannot serve that model either (${outcome.reason})`;
     case "unavailable":
       return `the current release could not be compared (${outcome.reason})`;
   }
@@ -35889,29 +35970,6 @@ async function runUpdateFunctionalProbe(input) {
     command
   });
   const harness = input.config.agentKind ?? command;
-  if (input.config.modelUnavailable) {
-    const detail = input.config.modelUnavailable.detail;
-    if (!input.compareWithCurrentRelease) {
-      throw new UpdateFunctionalProbeError("model-unavailable", detail);
-    }
-    const current = await input.compareWithCurrentRelease({
-      kind: "model-unavailable",
-      reason: detail
-    });
-    if (current.kind !== "model-unavailable" && current.kind !== "unavailable") {
-      throw new UpdateFunctionalProbeError("model-unavailable", `${detail}; ${describeCurrentReleaseOutcome(current)}`);
-    }
-    console.warn("[body] update probe: the configured model is unavailable to this release and the current release alike; that is the account catalog, not the bundle, so the probe passes without a model answer");
-    return {
-      harness,
-      sandboxed: false,
-      sessionStarted: false,
-      turnCompleted: false,
-      nativeTools: [],
-      modelAnswer: "unavailable",
-      modelAnswerReason: `${detail} (the current release cannot serve that model either)`
-    };
-  }
   if (input.sandboxRequired && !input.config.bwrapPath) {
     const detail = input.sandboxUnavailableDetail ?? "the configured bubblewrap boundary did not pass its startup self-test";
     if (!input.compareWithCurrentRelease) {
@@ -36114,6 +36172,8 @@ async function runUpdateFunctionalProbe(input) {
         throw error;
       throw new UpdateFunctionalProbeError("session-start-failed", error instanceof Error ? error.message : String(error), { cause: error });
     }
+    if (modelAnswer.modelAnswer === "served")
+      input.config.modelUnavailable = void 0;
     return {
       harness,
       sandboxed: Boolean(input.config.bwrapPath),
@@ -37226,7 +37286,7 @@ async function validateAgentModelSelection(agent, agentEnv, selection) {
 }
 
 // apps/body/dist/config.js
-import { accessSync as accessSync3, constants as constants2, existsSync as existsSync8, readFileSync as readFileSync9 } from "node:fs";
+import { accessSync as accessSync3, constants as constants2, existsSync as existsSync8, readFileSync as readFileSync10 } from "node:fs";
 import { basename as basename7, dirname as dirname17, resolve as resolve24 } from "node:path";
 function firstExisting2(paths) {
   for (const p of paths) {
@@ -37323,7 +37383,7 @@ function parseEnvFile(path) {
   const out = {};
   if (!existsSync8(path))
     return out;
-  const text2 = readFileSync9(path, "utf8");
+  const text2 = readFileSync10(path, "utf8");
   for (const raw of text2.split("\n")) {
     const line = raw.trim();
     if (!line || line.startsWith("#"))
@@ -38591,6 +38651,7 @@ async function runUpdateProbeCommand(args, options = {}) {
 
 // apps/body/dist/machine-helper.js
 import { mkdir as mkdir29, rename as rename13, stat as stat10, writeFile as writeFile22 } from "node:fs/promises";
+import { homedir as homedir20 } from "node:os";
 import { dirname as dirname31, resolve as resolve47 } from "node:path";
 
 // apps/body/dist/agent-runtime.js
@@ -42067,7 +42128,7 @@ function cornerReviewerInstruction(input) {
   const headSha = input.headSha ?? "<head sha>";
   return `Checks are green on PR #${number} at ${headSha}${input.briefRevision ? ` with assigned brief revision ${input.briefRevision}` : ""}. Review it now with the beeline-review skill against that exact head and current assigned brief. FAIL: ${author ? `reply \`@${author}\`` : "tag the agent that wrote this head"} with the confirmed findings and the reviewed head ${headSha} to fix. PASS: call the approve_merge tool for ${headSha}, then reply \`approved ${headSha}\` without tagging ${author ?? "the author"}: your PASS wakes the author to merge, so a tag adds nothing. A human's question or proposal in the corner discussion with no answer is a FAIL finding; name it. Never merge yourself or tell the author to merge. Never say you are holding or waiting for checks.`;
 }
-var CORNER_REVIEWER_AUTHOR_MERGE = "You are this Room's reviewer, so no agent can review your own code; a person is your reviewer. Once the pull request exists, reply with its full URL, tag the person who assigned you this work, and ask them to approve the merge; only a Workspace owner or admin's yes counts. Record their yes with order_corner_merge. Never merge it any other way. You are woken to fix failing checks or a merge GitHub refused.";
+var CORNER_REVIEWER_AUTHOR_MERGE = "If you wrote this corner's code, no agent can review your own code; a person is your reviewer. Once the pull request exists, reply with its full URL, tag the person who assigned you this work, and ask them to approve the merge; only a Workspace owner or admin's yes counts. Record their yes with order_corner_merge. Never merge it any other way. You are woken to fix failing checks or a merge GitHub refused.";
 function shellLine(shell) {
   if (!shell)
     return "";
@@ -42371,7 +42432,7 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     layer: "surface",
     surfaces: ["code-corner"],
     when: ({ reviewer }) => reviewer === true,
-    render: () => `Reviewer rules: ${CORNER_REVIEWER_SESSION_INSTRUCTION} Report findings to the author; never edit or push another agent's branch.`
+    render: () => `Reviewer rules: ${CORNER_REVIEWER_SESSION_INSTRUCTION} Findings go to the author, not a commit; never push another agent's branch. This wins over the finished-fix rule.`
   },
   {
     id: "corner.repo-less",
@@ -44767,6 +44828,23 @@ if (!refusal) {
   await chmod9(path, 448);
 }
 
+// apps/body/dist/agent-git-identity.js
+function agentGitIdentity(agent) {
+  return {
+    name: agent.name,
+    email: `${agent.publicKey.slice(0, 16)}@users.noreply.github.com`
+  };
+}
+function agentGitIdentityEnv(agent) {
+  const { name, email } = agentGitIdentity(agent);
+  return {
+    GIT_AUTHOR_NAME: name,
+    GIT_AUTHOR_EMAIL: email,
+    GIT_COMMITTER_NAME: name,
+    GIT_COMMITTER_EMAIL: email
+  };
+}
+
 // apps/body/dist/warm-node-modules.js
 import { createHash as createHash12, randomUUID as randomUUID12 } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
@@ -45710,6 +45788,9 @@ var MonolithCornerTurnLoop = class {
       ...this.options.config.agentEnv,
       ...homeOverlay,
       ...githubEnv,
+      // Git reads these before any config, so this session commits as itself
+      // no matter which session last prepared the shared corner worktree.
+      ...agentGitIdentityEnv(this.agent),
       npm_config_cache: npmCacheDir,
       // pnpm reads its settings from PNPM_CONFIG_* environment variables and
       // hardlinks packages out of this content-addressable store.
@@ -46459,7 +46540,7 @@ ${continuation}` : assembled;
           const checksTurn = isCornerChecksTurn(trigger, restates);
           const mayPublish = repositoryWork && !repositoryHeld;
           const deliveryState = !checksTurn && mayPublish && this.options.repository ? await cornerUndeliveredRepositoryState(this.options.worktreePath, this.options.repository.featureBranch, this.options.repository.targetBranch) : void 0;
-          const needsDeliveryNudge = deliveryState !== void 0 && deliveryState !== this.lastDeliveryNudgeState;
+          const needsDeliveryNudge = !this.reviewerInstructionInput && deliveryState !== void 0 && deliveryState !== this.lastDeliveryNudgeState;
           let refreshedReviewerInstruction;
           let reviewerSecondPass = false;
           let reviewerTargetChanged = false;
@@ -47409,13 +47490,14 @@ async function materializeCornerWorktree(input) {
     "credential.https://github.com.helper",
     "!f() { echo username=x-access-token; echo password=$GH_TOKEN; }; f"
   ]);
+  const identity = agentGitIdentity(input.committer);
   await execFileAsync11("git", [
     "-C",
     path,
     "config",
     "--worktree",
     "user.name",
-    input.committer.name
+    identity.name
   ]);
   await execFileAsync11("git", [
     "-C",
@@ -47423,7 +47505,7 @@ async function materializeCornerWorktree(input) {
     "config",
     "--worktree",
     "user.email",
-    `${input.committer.publicKey.slice(0, 16)}@users.noreply.github.com`
+    identity.email
   ]);
   const top = (await execFileAsync11("git", ["-C", path, "rev-parse", "--show-toplevel"])).stdout.trim();
   if (await realpath3(top) !== await realpath3(path)) {
@@ -49045,7 +49127,7 @@ var ThinDaemonCore = class {
 };
 
 // apps/body/dist/force-update-journal.js
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync10, renameSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync11, renameSync as renameSync2, writeFileSync as writeFileSync5 } from "node:fs";
 import { resolve as resolve41 } from "node:path";
 var NAME = "force-update-interruptions.json";
 function pathFor(runtimeDir) {
@@ -49053,7 +49135,7 @@ function pathFor(runtimeDir) {
 }
 function read(runtimeDir) {
   try {
-    const rows = JSON.parse(readFileSync10(pathFor(runtimeDir), "utf8"));
+    const rows = JSON.parse(readFileSync11(pathFor(runtimeDir), "utf8"));
     if (!Array.isArray(rows))
       throw new Error("invalid force-update interruption journal");
     return rows.map((row) => {
@@ -49076,7 +49158,7 @@ function write(runtimeDir, rows) {
   const temporary = `${target}.${process.pid}.tmp`;
   writeFileSync5(temporary, `${JSON.stringify(rows)}
 `, { mode: 384 });
-  renameSync(temporary, target);
+  renameSync2(temporary, target);
 }
 function journalInterruptedTurns(runtimeDir, turns) {
   if (!turns.length)
@@ -49663,6 +49745,7 @@ var ForceUpdateCoordinator = class {
 init_launchd();
 init_self_update();
 init_systemd();
+init_squire_host();
 
 // apps/body/dist/host-disk-retention.js
 import { execFile as execFile18 } from "node:child_process";
@@ -49818,11 +49901,12 @@ async function runMachineHelper(options = {}) {
     }
     loadedRelease = await activeReleaseId(layout);
     loadedReleaseIdentity = await readInstalledBundleIdentity(layout);
-    if (settle.kind === "pending") {
+    if (settle.kind === "pending" || !squireBrokerMeetsComputerUseMinimum(env.HOME?.trim() || homedir20())) {
+      const squireUpdateMode = settle.kind === "pending" ? "latest" : "minimum";
       if (managedBy === "systemd")
-        await installTrustySquireBrokerService({ env }).catch((error) => console.error(`[beeline] host Squire broker unit not converged: ${error instanceof Error ? error.message : String(error)}`));
+        await installTrustySquireBrokerService({ env, squireUpdateMode }).catch((error) => console.error(`[beeline] host Squire broker unit not converged: ${error instanceof Error ? error.message : String(error)}`));
       else if (managedBy === "launchd")
-        await installLaunchdTrustySquireBrokerService({ env }).catch((error) => console.error(`[beeline] host Squire broker launchd job not converged: ${error instanceof Error ? error.message : String(error)}`));
+        await installLaunchdTrustySquireBrokerService({ env, squireUpdateMode }).catch((error) => console.error(`[beeline] host Squire broker launchd job not converged: ${error instanceof Error ? error.message : String(error)}`));
     }
   }
   if (managedBy === "systemd")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "usebeeline",
-  "version": "0.1.25",
+  "version": "0.1.26",
   "description": "Connect an AI coding agent to Beeline with one command.",
   "homepage": "https://usebeeline.app",
   "bugs": {