@cabane/companion 0.6.22 → 0.6.24

package/README.md

@@ -142,7 +142,7 @@ A `coding` agent needs a directory to run in — a path that only exists on your
   "agents": {
     "my-coding-agent": {
       "cwd": "/Users/you/code/project", // working directory the agent runs in
-      "prepareHook": "git -C /Users/you/code/project pull --ff-only", // optional: runs before each turn
+      "prepareHook": { "command": "/Users/you/bin/prepare-turn" }, // optional: resolves the cwd before each turn
     },
   },
 }
@@ -150,6 +150,19 @@ A `coding` agent needs a directory to run in — a path that only exists on your
 
 A malformed `agents` block fails `cabane-companion start` immediately with a message pointing at the exact field — it won't silently fall back.
 
+**A hook that is the same for every agent goes at the top level instead.** If your hook works out the directory itself — from the conversation and agent ids the Companion hands it — then listing every agent by name is a roster you have to remember to update, and an agent you forget gets no hook at all and starts its turn wherever the Companion happens to be. So `prepareHook` can sit beside `agents` rather than inside it:
+
+```jsonc
+{
+  "prepareHook": { "command": "/Users/you/bin/prepare-turn" }, // every agent on this device
+  "agents": {
+    "special-case": { "prepareHook": { "command": "/Users/you/bin/other-hook" } }, // wins for this one
+  },
+}
+```
+
+The agent's own entry wins when it names a hook; otherwise the device-level one applies. It survives a re-pair along with the rest of your local settings, and `cabane-companion status` prints it. A hook that fails still fails the turn loudly either way.
+
 ### Auto-memory (off by default)
 
 Claude Code's **auto-memory** — where the agent writes notes to a local `~/.claude` memory directory and recalls them on later turns — is **off by default** on every Companion. The stance is that memory-shaped things belong in your Cabane workspace (a shared, versioned `ABOUT.md`-style file or doc), not a private local directory that no one else can see. If you run your own Companion and want your normal Claude Code memory workflow back, set `claudeCode.autoMemory: true` on the agent — the Companion then stops overriding it and your own `~/.claude/settings.json` governs auto-memory as usual (this bites in `coding` mode, where your project settings are read):

package/dist/cli.js

@@ -278,6 +278,22 @@ var companionConfigSchema = z2.object({
   // agentId / username / `slug/username`. Hand-added by the operator; the companion
   // never writes this (it only persists credentials + the device, elsewhere).
   agents: z2.record(z2.string(), localAgentConfigSchema).optional(),
+  // CT1095: the DEVICE-LEVEL prepare hook — one entry that applies to every agent
+  // assigned to this device, unless that agent's own `agents` row names a hook of
+  // its own.
+  //
+  // Until now `prepareHook` existed only under `agents[<id>]`, which made the
+  // config a second silent roster: a device whose provisioning is genuinely
+  // per-device (ours resolves a directory from the conversation and agent ids the
+  // companion already hands the hook) still had to list every agent by id, and an
+  // agent nobody remembered to add got no hook at all — no error, no log, just a
+  // turn that started in the operator's `$HOME`. That is how @dale woke in
+  // `/home/joshed` on 2026-08-17 with a perfectly correct dispatch.
+  //
+  // Absent → nothing changes for anyone, which is why this can land inert: a
+  // device with no device-level entry behaves exactly as it did before. A hook
+  // that fails still fails the dispatch loudly, as now.
+  prepareHook: prepareHookSchema.optional(),
   // Dashboard settings (all optional). dashboardPort: preferred bind port (next
   // free one if taken); autoOpen: whether `start` opens the browser (the
   // `--no-open` flag / `COMPANION_NO_OPEN=1` override per-run); logLevel: pino
@@ -340,7 +356,9 @@ function migrateConnectedHarnesses(cfg, claudeOnPath2) {
 }
 function localAgentConfig(cfg, agent) {
   const map = cfg.agents ?? {};
-  return map[agent.agentId] ?? map[agent.agentUsername] ?? map[`${agent.workspaceSlug}/${agent.agentUsername}`] ?? {};
+  const row = map[agent.agentId] ?? map[agent.agentUsername] ?? map[`${agent.workspaceSlug}/${agent.agentUsername}`] ?? {};
+  if (!cfg.prepareHook || row.prepareHook) return row;
+  return { ...row, prepareHook: cfg.prepareHook };
 }
 function loadConfig() {
   const path = configPath();
@@ -400,10 +418,11 @@ function loadConfigTolerant() {
   }
   const strict = companionConfigSchema.safeParse(parsed);
   if (strict.success) {
-    const { agents: agents2, dashboardPort, autoOpen, logLevel, claudeCode: claudeCode2 } = strict.data;
+    const { agents: agents2, prepareHook: prepareHook2, dashboardPort, autoOpen, logLevel, claudeCode: claudeCode2 } = strict.data;
     return {
       local: {
         ...agents2 !== void 0 ? { agents: agents2 } : {},
+        ...prepareHook2 !== void 0 ? { prepareHook: prepareHook2 } : {},
         ...dashboardPort !== void 0 ? { dashboardPort } : {},
         ...autoOpen !== void 0 ? { autoOpen } : {},
         ...logLevel !== void 0 ? { logLevel } : {},
@@ -417,6 +436,8 @@ function loadConfigTolerant() {
   const local = {};
   const agents = z2.record(z2.string(), localAgentConfigSchema).safeParse(obj.agents);
   if (agents.success) local.agents = agents.data;
+  const prepareHook = prepareHookSchema.safeParse(obj.prepareHook);
+  if (prepareHook.success) local.prepareHook = prepareHook.data;
   if (typeof obj.dashboardPort === "number") local.dashboardPort = obj.dashboardPort;
   if (typeof obj.autoOpen === "boolean") local.autoOpen = obj.autoOpen;
   if (obj.logLevel === "warn" || obj.logLevel === "info" || obj.logLevel === "debug") {
@@ -8214,7 +8235,8 @@ var SseSubscriber = class {
   }
   async connect() {
     const base = this.opts.baseUrl.endsWith("/") ? this.opts.baseUrl.slice(0, -1) : this.opts.baseUrl;
-    const url = `${base}/api/workspaces/${this.opts.workspaceId}/events`;
+    const query = this.lastEventId ? "" : "?replayPending=1";
+    const url = `${base}/api/workspaces/${this.opts.workspaceId}/events${query}`;
     this.controller = new AbortController();
     const headers = {
       Authorization: `Bearer ${this.opts.token}`,
@@ -9449,6 +9471,10 @@ async function status() {
     names.length > 0 ? `secrets:      ${names.length} declared (${names.join(", ")})
 ` : "secrets:      none declared \u2014 add `${VAR}` values to ~/.cabane/secrets.json for MCP servers that need them\n"
   );
+  if (cfg.prepareHook) {
+    process.stdout.write(`prepare hook: ${cfg.prepareHook.command} (device-level, all agents)
+`);
+  }
   const overrides = Object.keys(cfg.agents ?? {});
   if (overrides.length > 0) {
     process.stdout.write(`local overrides for: ${overrides.join(", ")}

package/dist/pairing-config.js

@@ -144,6 +144,22 @@ var companionConfigSchema = z2.object({
   // agentId / username / `slug/username`. Hand-added by the operator; the companion
   // never writes this (it only persists credentials + the device, elsewhere).
   agents: z2.record(z2.string(), localAgentConfigSchema).optional(),
+  // CT1095: the DEVICE-LEVEL prepare hook — one entry that applies to every agent
+  // assigned to this device, unless that agent's own `agents` row names a hook of
+  // its own.
+  //
+  // Until now `prepareHook` existed only under `agents[<id>]`, which made the
+  // config a second silent roster: a device whose provisioning is genuinely
+  // per-device (ours resolves a directory from the conversation and agent ids the
+  // companion already hands the hook) still had to list every agent by id, and an
+  // agent nobody remembered to add got no hook at all — no error, no log, just a
+  // turn that started in the operator's `$HOME`. That is how @dale woke in
+  // `/home/joshed` on 2026-08-17 with a perfectly correct dispatch.
+  //
+  // Absent → nothing changes for anyone, which is why this can land inert: a
+  // device with no device-level entry behaves exactly as it did before. A hook
+  // that fails still fails the dispatch loudly, as now.
+  prepareHook: prepareHookSchema.optional(),
   // Dashboard settings (all optional). dashboardPort: preferred bind port (next
   // free one if taken); autoOpen: whether `start` opens the browser (the
   // `--no-open` flag / `COMPANION_NO_OPEN=1` override per-run); logLevel: pino
@@ -252,10 +268,11 @@ function loadConfigTolerant() {
   }
   const strict = companionConfigSchema.safeParse(parsed);
   if (strict.success) {
-    const { agents: agents2, dashboardPort, autoOpen, logLevel, claudeCode: claudeCode2 } = strict.data;
+    const { agents: agents2, prepareHook: prepareHook2, dashboardPort, autoOpen, logLevel, claudeCode: claudeCode2 } = strict.data;
     return {
       local: {
         ...agents2 !== void 0 ? { agents: agents2 } : {},
+        ...prepareHook2 !== void 0 ? { prepareHook: prepareHook2 } : {},
         ...dashboardPort !== void 0 ? { dashboardPort } : {},
         ...autoOpen !== void 0 ? { autoOpen } : {},
         ...logLevel !== void 0 ? { logLevel } : {},
@@ -269,6 +286,8 @@ function loadConfigTolerant() {
   const local = {};
   const agents = z2.record(z2.string(), localAgentConfigSchema).safeParse(obj.agents);
   if (agents.success) local.agents = agents.data;
+  const prepareHook = prepareHookSchema.safeParse(obj.prepareHook);
+  if (prepareHook.success) local.prepareHook = prepareHook.data;
   if (typeof obj.dashboardPort === "number") local.dashboardPort = obj.dashboardPort;
   if (typeof obj.autoOpen === "boolean") local.autoOpen = obj.autoOpen;
   if (obj.logLevel === "warn" || obj.logLevel === "info" || obj.logLevel === "debug") {

package/dist/runtime.js

@@ -271,6 +271,22 @@ var companionConfigSchema = z2.object({
   // agentId / username / `slug/username`. Hand-added by the operator; the companion
   // never writes this (it only persists credentials + the device, elsewhere).
   agents: z2.record(z2.string(), localAgentConfigSchema).optional(),
+  // CT1095: the DEVICE-LEVEL prepare hook — one entry that applies to every agent
+  // assigned to this device, unless that agent's own `agents` row names a hook of
+  // its own.
+  //
+  // Until now `prepareHook` existed only under `agents[<id>]`, which made the
+  // config a second silent roster: a device whose provisioning is genuinely
+  // per-device (ours resolves a directory from the conversation and agent ids the
+  // companion already hands the hook) still had to list every agent by id, and an
+  // agent nobody remembered to add got no hook at all — no error, no log, just a
+  // turn that started in the operator's `$HOME`. That is how @dale woke in
+  // `/home/joshed` on 2026-08-17 with a perfectly correct dispatch.
+  //
+  // Absent → nothing changes for anyone, which is why this can land inert: a
+  // device with no device-level entry behaves exactly as it did before. A hook
+  // that fails still fails the dispatch loudly, as now.
+  prepareHook: prepareHookSchema.optional(),
   // Dashboard settings (all optional). dashboardPort: preferred bind port (next
   // free one if taken); autoOpen: whether `start` opens the browser (the
   // `--no-open` flag / `COMPANION_NO_OPEN=1` override per-run); logLevel: pino
@@ -333,7 +349,9 @@ function migrateConnectedHarnesses(cfg, claudeOnPath2) {
 }
 function localAgentConfig(cfg, agent) {
   const map = cfg.agents ?? {};
-  return map[agent.agentId] ?? map[agent.agentUsername] ?? map[`${agent.workspaceSlug}/${agent.agentUsername}`] ?? {};
+  const row = map[agent.agentId] ?? map[agent.agentUsername] ?? map[`${agent.workspaceSlug}/${agent.agentUsername}`] ?? {};
+  if (!cfg.prepareHook || row.prepareHook) return row;
+  return { ...row, prepareHook: cfg.prepareHook };
 }
 function loadConfig() {
   const path = configPath();
@@ -7836,7 +7854,8 @@ var SseSubscriber = class {
   }
   async connect() {
     const base = this.opts.baseUrl.endsWith("/") ? this.opts.baseUrl.slice(0, -1) : this.opts.baseUrl;
-    const url = `${base}/api/workspaces/${this.opts.workspaceId}/events`;
+    const query = this.lastEventId ? "" : "?replayPending=1";
+    const url = `${base}/api/workspaces/${this.opts.workspaceId}/events${query}`;
     this.controller = new AbortController();
     const headers = {
       Authorization: `Bearer ${this.opts.token}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabane/companion",
-  "version": "0.6.22",
+  "version": "0.6.24",
   "type": "module",
   "description": "The Cabane Companion (headless): connect a coding agent on your machine to your Cabane workspace as a responder — drive work against your own codebase, files, and MCP servers without putting any of it in Cabane.",
   "license": "UNLICENSED",