Bee Code CLI

An agentic coding assistant for your terminal, from HEOSSI.

npm install -g @heossihq/beecode
beecode login
beecode "add a guard to handleAuth that rejects an empty token"

Bee Code speaks Bee's agent plane (bee.code.v1) against https://api.bee.heossi.com/bee/code/v1/turns. The transcript, approval gate, and tool loop live on your machine: the server answers one turn at a time and does not retain the conversation transcript.

Each customer task also has a durable, account-scoped run ID for cancellation, bounded manager/specialist reservations, token ceilings, and terminal status. The service stores a SHA-256 task fingerprint rather than the raw prompt; the full transcript remains local and is sent explicitly on each tool-loop turn. Cell uses one manager at a time. Entitled paid models can use bounded logical worker shards and an independent verifier without starting one provider call per logical agent.

Bee's API edge supports X25519MLKEM768 hybrid key exchange, whose ML-KEM-768 half is NIST FIPS 203. CLI agent requests require that hybrid group, TLS 1.3, AES-256-GCM and verified certificates; unsupported runtimes fail without sending the request. Browser login and external tools are separate transport boundaries. Check the edge's hybrid-only handshake yourself:

openssl s_client -connect api.bee.heossi.com:443 -servername api.bee.heossi.com -groups X25519MLKEM768 -verify_return_error -brief </dev/null

Signing in

beecode login opens your browser and signs you in against your Bee subscription. The credential is stored in your system keychain on macOS, or ~/.bee/code/auth.json (mode 0600) elsewhere.

The same session is picked up automatically by the Bee Code extension for VS Code, so signing in once covers both.

beecode login requires the bee.native-session.v1 / hybrid Code credential issued by Workspace /auth/code. Dotted legacy JWT-shaped credentials are rejected. Loopback callbacks use a minimum port and redirect to /complete. A protocol mismatch from the server is HTTP 426 protocol_version_unsupported.

Commands

| | | |---|---| | beecode login | sign in through the browser | | beecode "<prompt>" | run one task in the current directory | | beecode --root PATH | work in a different directory | | beecode --mode MODE | manual, plan, edit or auto | | beecode --no-bee-co-author "<prompt>" | omit Bee model attribution from commits created by this task |

Commit attribution

Commits created through Bee Code keep your configured Git identity as the primary author. By default, Bee adds the selected governed model and product release as a separate trailer, for example:

Co-Authored-By: Bee Cell <[email protected]>

Pass --no-bee-co-author to omit the trailer. The agent cannot bypass this choice through the generic command runner; Git uses dedicated, approval-gated tools.

Environment

| | | |---|---| | BEE_CODE_API_URL | override the agent-plane endpoint | | BEE_CODE_AUTH_FILE | override the credential path |

Part of Bee: Quantum Intelligence - The Progressive Quantum-Native Intelligence Engine. bee.heossi.com