chernistry/bernstein

v1.8.15 — make Bernstein feel like infrastructure

Four new commands that change how you live with a Bernstein run.

bernstein chat serve --platform=telegram

A long-lived bot that takes /run "goal", streams progress back as edits to a single message, and surfaces inline Approve / Reject buttons for mid-run tool calls. Also /status, /switch <adapter>, /stop. Discord and Slack ship as conformant stubs. User allow-list via bernstein.yaml :: chat.allowed_users.

bernstein approve-tool

Mid-run permission for a destructive tool call without pre-writing an always_allow rule. Surfaces in the TUI dashboard, the web dashboard, and on the CLI. "Always allow" promotes the matching pattern into your rules so the same call doesn't prompt again. 10-minute TTL.

bernstein tunnel start <port>

One wrapper around cloudflared / ngrok / bore / tailscale. Auto-picks the first binary on PATH. Active-tunnel state survives CLI restarts; clean SIGTERM on bernstein stop.

bernstein daemon install

Renders a systemd user unit on Linux (or a system unit with --system) or a launchd plist on macOS, then starts it. Env inheritance is whitelisted — only PATH, HOME, and explicit --env KEY=VAL make it into the unit, so the persistent service can't silently capture your shell's secrets.

Full write-up: bernstein.run/blog/operator-commands.

Full changelog: https://github.com/chernistry/bernstein/compare/v1.8.14...v1.8.15