@kamal0808/anytoany 0.2.0 → 0.3.1

package/README.md

@@ -1,92 +1,70 @@
-# `any` — Milestone 1
+# `any` — message people from inside Claude
 
-A deliberately tiny message relay + CLI so two machines (each running a Claude
-Code session) can **send / inbox / reply** — and, once that feels magical,
-**delegate tasks**.
+Send a message to a friend and it lands **inside their Claude Desktop** — a
+banner pops, they click it, a Claude Code session opens that reads the message
+and helps them reply. AI-mediated messaging, human-in-the-loop.
 
-No auth. No websockets. No database. One ~180-line HTTP server over a JSON file,
-and one CLI. Zero dependencies (Node ≥ 18 for global `fetch`; you have 25).
-
-```
-MacBook Air (@kamal)                 Mac Mini (@yash)
-   any CLI  ─────────┐          ┌───────  any CLI
-                     ▼          ▼
-              relay.js on the Mac Mini (Tailscale 100.92.24.17:4747)
-                     └─ data/messages.json
 ```
-
-## Setup (once per machine)
-
-Requires **Node ≥ 18** (for global `fetch`). Note the `any` shim runs whatever
-`node` is first on your `PATH` — if a shell defaults to an old Node (e.g. nvm
-pinned to 14), bare `any` will crash. Fix per machine with `nvm use` (an
-`.nvmrc` pinning 22 is included) or, to make it stick for every shell:
-`nvm alias default 22`.
-
-From the repo root on **each** Mac:
-
-```bash
-cd any
-npm link          # puts `any` on your PATH   (or just use: node any/cli.js …)
+you: any send @friend "hey"
+        → hosted relay (Cloudflare Worker + D1)
+        → friend's machine: watcher polls (cheap, 0 tokens idle)
+        → 🔔 clickable macOS banner
+        → click → claude://code/new opens a Claude Code session IN Claude Desktop
+        → runs `any inbox` → reads → drafts → friend approves → any reply → back to you
 ```
 
-Identity is auto-detected from hostname (`mac-mini` → `@yash`,
-`macbook-air` → `@kamal`). To be explicit:
+## Install (anyone, one command)
 
 ```bash
-any register @kamal          # on the MacBook Air
-any register @yash           # on the Mac Mini
+npx @kamal0808/anytoany@latest setup
 ```
+Pick a unique `@handle` (+ optional display name). No token, no secrets. It
+registers you, installs a background banner watcher, and you're on the network.
+macOS + Node 18+ + Claude Desktop.
 
-## Run the relay (on the Mac Mini — it's always on)
+## Use
 
 ```bash
-cd any
-node relay.js                # listens on 0.0.0.0:4747
+any send @handle "text"    # message anyone by their handle
+any inbox                  # your new messages
+any read <id>              # open one
+any reply <id> "text"      # reply
+any whoami                 # your handle + status
 ```
 
-The default relay URL baked into the CLI is the Mac Mini's Tailscale IP
-(`http://100.92.24.17:4747`), so both Macs already point at it. Override with:
-
-```bash
-any relay http://100.92.24.17:4747
-# or:  export ANY_RELAY_URL=...
-```
-
-Check it from either machine:
-
-```bash
-any whoami                   # shows identity + "relay: online"
-```
-
-## The five commands
-
-```bash
-any send @yash transcript.md          # a file becomes subject + body
-any send @yash "quick question…"       # or send plain text
-any inbox                              # unread messages for you
-any read 3                             # show #3 in full (marks it read)
-any reply 3 "Looks good. Ship it."     # reply goes back to the sender
-any watch                              # live-poll the inbox (agent mode)
-```
-
-## The 60-second demo
-
-1. **Mac Mini:** `node any/relay.js` (leave it running).
-2. **MacBook Air:** `any send @yash transcript.md`
-3. **Mac Mini:** `any inbox` → `any read 1` → `any reply 1 "Looks good. Ship it."`
-4. **MacBook Air:** `any inbox` → the reply is there.
-
-That's the illusion. If it feels magical, it's worth showing to someone.
-
-## Milestone 3 — delegation (the actual point)
-
-The Mac Mini already has a Claude Code session. Paste `OPERATOR-YASH.md` into it
-once. From then on it runs `any watch`, and when a task arrives it executes it in
-Claude Code and replies with the result — autonomously. See that file.
-
-## Config & env
-
-- Config file: `~/.any/config.json` (`{ user, relay }`)
-- Env overrides: `ANY_USER`, `ANY_RELAY_URL`, `ANY_HOME`
-- Relay env: `ANY_PORT`, `ANY_HOST`, `ANY_DATA_DIR`
+## How it works
+
+- **Accounts:** each person claims a unique `@handle` and gets their own key.
+  `from` is server-verified (no spoofing); you can only read your own inbox.
+  Registration is open (anyone can claim a handle and DM anyone by handle).
+- **Relay:** a Cloudflare Worker + D1 (`worker/`) — always-on, edge, durable.
+  URL: `https://anytoany-relay.kamalkhatwani69.workers.dev`.
+- **CLI:** `cli.js` — published to npm as `@kamal0808/anytoany` (bin `any`).
+- **Watcher → banner → Desktop:** `any poke` (run by a launchd agent every ~15s)
+  fires a `terminal-notifier` banner whose click opens
+  `claude://code/new?q=…` — a *tool-capable* Claude Code session inside Claude
+  Desktop (it can run `any`). Set up automatically by `any setup`. macOS-only.
+
+## Layout
+
+| Path | What |
+|---|---|
+| `cli.js` | the `any` CLI (published to npm) |
+| `worker/` | the relay: Cloudflare Worker (`worker.js`) + D1 schema (`schema.sql`) |
+| `relay.js` | legacy standalone Node relay (superseded by the Worker) |
+| `SETUP-YASH.md` | copy-paste onboarding to send a friend |
+| `CLAUDE.md` | operator notes for maintaining/deploying this |
+
+## Maintaining it
+
+- **Deploy the relay:** `cd worker && npx wrangler deploy` (needs `wrangler login`).
+- **Publish the CLI:** bump `version` in `package.json`, then
+  `npm publish --access public` (needs npm login + 2FA).
+- See `CLAUDE.md` for the full operator playbook and known rough edges.
+
+## Not built yet
+
+- One persistent Claude thread for all messaging (deep links only open new
+  sessions; would need the MCP-connector + fixed-chat approach).
+- A dedicated `~/anytoany` folder per install (groups sessions, path-independent).
+- Spam/abuse controls (blocking, invite-only, rate limits) — registration is open.

package/cli.js

@@ -55,13 +55,17 @@ function resolve() {
   const cfg = loadConfig();
   const user = process.env.ANY_USER || cfg.user || hostnameUser();
   const relay = process.env.ANY_RELAY_URL || cfg.relay || DEFAULT_RELAY;
-  const token = process.env.ANY_TOKEN || cfg.token || null;
-  return { user: norm(user), relay: relay.replace(/\/$/, ''), token };
+  const key = process.env.ANY_KEY || cfg.key || null;
+  return { user: norm(user), relay: relay.replace(/\/$/, ''), key };
 }
 
 function norm(user) {
   if (!user) return null;
-  return user.startsWith('@') ? user : '@' + user;
+  return user.startsWith('@') ? user.toLowerCase() : '@' + user.toLowerCase();
+}
+
+function validSlug(h) {
+  return /^@[a-z0-9_-]{2,30}$/.test(h);
 }
 
 function die(msg) {
@@ -69,11 +73,28 @@ function die(msg) {
   process.exit(1);
 }
 
+// register (claim a handle, get your own key) — no auth needed
+async function registerWithRelay(relay, handle, displayName) {
+  let res;
+  try {
+    res = await fetch(relay + '/register', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ handle, displayName }),
+    });
+  } catch (e) {
+    die(`can't reach relay at ${relay} (${e.message})`);
+  }
+  const j = await res.json().catch(() => ({}));
+  if (!res.ok) die(j.error || `register failed (${res.status})`);
+  return j; // { handle, key, displayName }
+}
+
 async function api(relay, method, route, body) {
-  const { token } = resolve();
+  const { key } = resolve();
   const headers = {};
   if (body) headers['content-type'] = 'application/json';
-  if (token) headers['authorization'] = `Bearer ${token}`;
+  if (key) headers['authorization'] = `Bearer ${key}`;
   let res;
   try {
     res = await fetch(relay + route, {
@@ -122,12 +143,19 @@ function printMessage(m, { full = false } = {}) {
 // ---- commands ------------------------------------------------------------
 
 async function cmdRegister(args) {
-  const user = norm(args[0]);
-  if (!user) die('usage: any register @you');
+  let handle = norm(args[0]);
+  if (!handle) die('usage: any register @you [Display Name]');
+  if (!validSlug(handle)) die('handle must be 2-30 chars: a-z 0-9 _ - (e.g. @kamal)');
   const cfg = loadConfig();
-  cfg.user = user;
+  const relay = (process.env.ANY_RELAY_URL || cfg.relay || DEFAULT_RELAY).replace(/\/$/, '');
+  const name = args.slice(1).join(' ') || null;
+  const acct = await registerWithRelay(relay, handle, name);
+  cfg.user = acct.handle;
+  cfg.key = acct.key;
+  cfg.relay = relay;
+  if (acct.displayName) cfg.displayName = acct.displayName;
   saveConfig(cfg);
-  console.log(`registered as ${user}`);
+  console.log(`✓ registered as ${acct.handle}${acct.displayName ? ' (' + acct.displayName + ')' : ''}`);
 }
 
 async function cmdRelay(args) {
@@ -139,27 +167,20 @@ async function cmdRelay(args) {
   console.log(`relay set to ${cfg.relay}`);
 }
 
-async function cmdToken(args) {
-  const t = args[0];
-  if (!t) die('usage: any token <shared-secret>');
-  const cfg = loadConfig();
-  cfg.token = t;
-  saveConfig(cfg);
-  console.log('token saved');
-}
-
 async function cmdWhoami() {
-  const { user, relay, token } = resolve();
-  console.log(`user:  ${user || '(unset — run: any register @you)'}`);
-  console.log(`relay: ${relay}`);
-  console.log(`token: ${token ? 'set' : '(none)'}`);
-  const health = await api(relay, 'GET', '/health').catch(() => null);
-  if (health) console.log(`relay: online (${health.messages} messages stored)`);
+  const { user, relay, key } = resolve();
+  console.log(`handle: ${user || '(unregistered — run: any setup)'}`);
+  console.log(`relay:  ${relay}`);
+  console.log(`key:    ${key ? 'set' : '(none — run: any setup)'}`);
+  if (key) {
+    const me = await api(relay, 'GET', '/whoami').catch(() => null);
+    if (me) console.log(`status: online as ${me.handle}${me.displayName ? ' (' + me.displayName + ')' : ''}`);
+  }
 }
 
 async function cmdSend(args) {
-  const { user, relay } = resolve();
-  if (!user) die('you are not registered. Run: any register @you');
+  const { key, relay } = resolve();
+  if (!key) die('not registered. Run: any setup');
   const to = norm(args[0]);
   if (!to) die('usage: any send @who <text | file>');
   const rest = args.slice(1);
@@ -175,24 +196,20 @@ async function cmdSend(args) {
     body = rest.join(' ');
   }
 
-  const { id } = await api(relay, 'POST', '/send', { from: user, to, subject, body });
+  const { id } = await api(relay, 'POST', '/send', { to, subject, body });
   console.log(`sent → ${to}  (#${id})`);
 }
 
 async function cmdInbox(args) {
-  const { user, relay } = resolve();
-  if (!user) die('you are not registered. Run: any register @you');
+  const { key, relay } = resolve();
+  if (!key) die('not registered. Run: any setup');
   const all = args.includes('--all');
-  const { messages, count } = await api(
-    relay,
-    'GET',
-    `/inbox?user=${encodeURIComponent(user)}${all ? '&all=1' : ''}`,
-  );
+  const { messages, count } = await api(relay, 'GET', `/inbox${all ? '?all=1' : ''}`);
   if (count === 0) {
     console.log(all ? 'inbox empty' : 'no new messages');
     return;
   }
-  console.log(`${count} ${all ? 'message(s)' : 'new message(s)'} for ${user}:\n`);
+  console.log(`${count} ${all ? 'message(s)' : 'new message(s)'}:\n`);
   for (const m of messages) {
     printMessage(m);
     console.log('');
@@ -211,34 +228,30 @@ async function cmdRead(args) {
 }
 
 async function cmdReply(args) {
-  const { user, relay } = resolve();
-  if (!user) die('you are not registered. Run: any register @you');
+  const { key, relay } = resolve();
+  if (!key) die('not registered. Run: any setup');
   const id = Number(args[0]);
   if (!id) die('usage: any reply <id> <text>');
   const body = args.slice(1).join(' ');
   if (!body) die('nothing to reply with');
-  const { id: newId } = await api(relay, 'POST', '/reply', { id, from: user, body });
+  const { id: newId } = await api(relay, 'POST', '/reply', { id, body });
   console.log(`replied to #${id}  (#${newId})`);
 }
 
 async function cmdWatch(args) {
-  const { user, relay } = resolve();
-  if (!user) die('you are not registered. Run: any register @you');
+  const { key, relay } = resolve();
+  if (!key) die('not registered. Run: any setup');
   const i = args.indexOf('--interval');
   const interval = (i >= 0 ? Number(args[i + 1]) : 5) * 1000;
   const seen = new Set();
-  console.log(`watching inbox for ${user} (every ${interval / 1000}s). Ctrl-C to stop.\n`);
+  console.log(`watching inbox (every ${interval / 1000}s). Ctrl-C to stop.\n`);
   // Prime with existing unread so we only announce genuinely new arrivals.
-  const first = await api(relay, 'GET', `/inbox?user=${encodeURIComponent(user)}&all=1`);
+  const first = await api(relay, 'GET', `/inbox?all=1`);
   for (const m of first.messages) seen.add(m.id);
   if (first.messages.length) console.log(`(${first.messages.length} existing message(s), waiting for new ones)\n`);
 
   async function poll() {
-    const { messages } = await api(
-      relay,
-      'GET',
-      `/inbox?user=${encodeURIComponent(user)}&all=1`,
-    ).catch(() => ({ messages: [] }));
+    const { messages } = await api(relay, 'GET', `/inbox?all=1`).catch(() => ({ messages: [] }));
     for (const m of messages.sort((a, b) => a.ts - b.ts)) {
       if (seen.has(m.id)) continue;
       seen.add(m.id);
@@ -280,19 +293,33 @@ function fireBanner(m, link) {
 
 // one watch tick: alert on any new unread message. Run by launchd every ~15s.
 async function cmdPoke() {
-  const { user, relay } = resolve();
-  if (!user) die('not registered (run: any setup)');
-  const key = user.replace('@', '');
-  const seenPath = path.join(HOME, `poke-seen-${key}.txt`);
-  const lockPath = path.join(HOME, `poke-${key}.lock`);
+  const { user, relay, key: authKey } = resolve();
+  if (!authKey) die('not registered (run: any setup)');
+  const slug = user.replace('@', '');
+  const seenPath = path.join(HOME, `poke-seen-${slug}.txt`);
+  const lockPath = path.join(HOME, `poke-${slug}.lock`);
   fs.mkdirSync(HOME, { recursive: true });
   try {
     fs.mkdirSync(lockPath); // single-flight
   } catch {
-    return;
+    // lock exists — break it if stale (a killed tick / network die() can leak it)
+    try {
+      if (Date.now() - fs.statSync(lockPath).mtimeMs > 60000) {
+        fs.rmdirSync(lockPath);
+        fs.mkdirSync(lockPath);
+      } else return;
+    } catch {
+      return;
+    }
   }
+  // release the lock even if a later die()/process.exit() skips the finally block
+  process.on('exit', () => {
+    try {
+      fs.rmdirSync(lockPath);
+    } catch {}
+  });
   try {
-    const { messages } = await api(relay, 'GET', `/inbox?user=${encodeURIComponent(user)}`);
+    const { messages } = await api(relay, 'GET', `/inbox`);
     if (!messages || !messages.length) return;
     let seen = new Set();
     try {
@@ -331,29 +358,94 @@ function have(cmd) {
   }
 }
 
-// one-command onboarding: identity + token + background watcher
+// the anytoany skill — teaches any Claude Code session how to use `any`
+function skillMd(handle) {
+  return `---
+name: anytoany
+description: Message people from the terminal via the \`any\` CLI (anytoany messaging). Use whenever the user wants to send or DM a message (or the current conversation) to a person or @handle, check their anytoany inbox, or reply to a message they received. Needs a shell (Claude Code / Cowork session).
+---
+
+# anytoany — messaging via the \`any\` CLI
+
+\`any\` sends messages between people through a hosted relay; a message lands in the
+recipient's Claude Desktop as a banner they click to read & reply.
+
+**On this machine you are \`${handle}\`.** Run the \`any\` CLI in the shell to act.
+
+## Commands
+| Intent | Command |
+|---|---|
+| Send a message | \`any send @handle "message text"\` |
+| Check new messages | \`any inbox\`  (or \`any inbox --all\`) |
+| Read one (marks read) | \`any read <id>\` |
+| Reply to one | \`any reply <id> "text"\` |
+| Who am I / status | \`any whoami\` |
+
+## Common asks
+- "send X to @bob" → \`any send @bob "X"\`
+- "send this thread to @bob" → summarize the conversation, show me, then on my ok: \`any send @bob "<summary>"\`
+- "anything new?" → \`any inbox\`, then offer to read/reply
+- "reply to #<id>" → draft it, then \`any reply <id> "<reply>"\`
+
+## Contacts
+Use the \`@handle\` the person gave you. Add friends here as you learn them
+(e.g. \`@pulkit\` — Pulkit). If you don't know someone's handle, ask.
+
+## Rules
+- Handles are lowercase slugs \`a-z 0-9 _ -\`, no spaces.
+- **Always confirm the exact message text with me before sending.**
+- Needs a terminal — works in a Claude Code / Cowork session, not a plain chat.
+`;
+}
+
+function installSkill(handle) {
+  try {
+    const dir = path.join(os.homedir(), '.claude', 'skills', 'anytoany');
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(path.join(dir, 'SKILL.md'), skillMd(handle));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// one-command onboarding: claim a handle (get your key) + install the watcher
 async function cmdSetup() {
   const cfg = loadConfig();
   const tty = process.stdin.isTTY;
-
-  let user = norm(process.env.ANY_USER || cfg.user);
-  if (!user) {
-    if (!tty) die('no identity — run interactively, or: any register @you first');
-    user = norm(await promptLine('Your handle (e.g. @yash): '));
-  }
-  let token = process.env.ANY_TOKEN || cfg.token;
-  if (!token) {
-    if (!tty) die('no token — run interactively, or: any token <secret> first');
-    token = await promptLine('Shared token: ');
+  const relay = (process.env.ANY_RELAY_URL || cfg.relay || DEFAULT_RELAY).replace(/\/$/, '');
+
+  if (!cfg.key) {
+    // claim a new account
+    let handle = norm(process.env.ANY_USER || cfg.user);
+    if (!handle) {
+      if (!tty) die('no handle — run interactively, or: any register @you first');
+      handle = norm(await promptLine('Pick a handle (e.g. @yash): '));
+    }
+    if (!validSlug(handle)) die('handle must be 2-30 chars: a-z 0-9 _ - (e.g. @kamal)');
+    let name = cfg.displayName || process.env.ANY_NAME || null;
+    if (tty && !name) name = (await promptLine('Display name (optional): ')) || null;
+    const acct = await registerWithRelay(relay, handle, name);
+    cfg.user = acct.handle;
+    cfg.key = acct.key;
+    cfg.relay = relay;
+    if (acct.displayName) cfg.displayName = acct.displayName;
+    saveConfig(cfg);
+    console.log(`✓ registered as ${acct.handle}${acct.displayName ? ' (' + acct.displayName + ')' : ''} → ${relay}`);
+  } else {
+    if (!cfg.relay) {
+      cfg.relay = relay;
+      saveConfig(cfg);
+    }
+    console.log(`✓ already registered as ${cfg.user} → ${cfg.relay}`);
   }
-  cfg.user = user;
-  cfg.token = token;
-  if (!cfg.relay) cfg.relay = DEFAULT_RELAY;
-  saveConfig(cfg);
-  console.log(`✓ configured as ${user} → ${cfg.relay}`);
+  const user = cfg.user;
+
+  const me = await api(cfg.relay, 'GET', '/whoami').catch(() => null);
+  console.log(me ? `✓ connected as ${me.handle}` : '! could not verify with relay (continuing)');
 
-  const health = await api(cfg.relay, 'GET', '/health').catch(() => null);
-  console.log(health ? '✓ relay reachable' : '! could not reach relay — check the token/URL (continuing)');
+  // install the skill so any Claude Code session knows how to use `any`
+  console.log(installSkill(user) ? '✓ anytoany skill installed (Claude now knows how to message)' : '! could not install skill');
 
   if (process.platform !== 'darwin') {
     console.log('\nThe background banner watcher is macOS-only for now.');
@@ -415,7 +507,7 @@ async function cmdSetup() {
 
   // prime seen-file so existing messages don't all alert at once
   try {
-    const { messages } = await api(cfg.relay, 'GET', `/inbox?user=${encodeURIComponent(user)}&all=1`);
+    const { messages } = await api(cfg.relay, 'GET', `/inbox?all=1`);
     fs.writeFileSync(path.join(HOME, `poke-seen-${key}.txt`), (messages || []).map((m) => m.id).join('\n') + '\n');
   } catch {}
 
@@ -437,11 +529,10 @@ async function cmdSetup() {
 function cmdHelp() {
   console.log(`any — tiny message relay CLI
 
-  any setup                    one-command onboarding (identity + token + banner watcher)
-  any register @you            set your identity
+  any setup                    one-command onboarding (claim @handle + banner watcher)
+  any register @you [Name]     claim a handle (get your key)
   any relay <url>              point at the relay server
-  any token <secret>           set the shared secret (for a hosted relay)
-  any whoami                   show identity + relay status
+  any whoami                   show your handle + relay status
 
   any send @who <text|file>    send a message (a file becomes subject+body)
   any inbox [--all]            list messages for you (default: unread only)
@@ -463,7 +554,6 @@ const table = {
   poke: cmdPoke,
   register: cmdRegister,
   relay: cmdRelay,
-  token: cmdToken,
   whoami: cmdWhoami,
   send: cmdSend,
   inbox: cmdInbox,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kamal0808/anytoany",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "type": "module",
   "description": "Tiny CLI to send/inbox/reply messages between Claude Code sessions via the anytoany relay",
   "bin": {