@kodama-run/sdk 0.3.0 → 0.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kodama-run/sdk",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "type": "module",
   "exports": {
     ".": "./src/index.ts"
@@ -27,9 +27,9 @@
     "typescript": "*"
   },
   "scripts": {
-    "build": "echo 'No build step for sdk (source-only)'",
+    "build": "bun build src/adapters/mcp.ts --target=node --outfile=bin/mcp.js && bun build src/adapters/cli.ts --target=node --outfile=bin/cli.js && chmod +x bin/mcp.js bin/cli.js",
     "test": "bun test",
     "lint": "tsc --noEmit",
-    "clean": "rm -rf dist"
+    "clean": "rm -rf bin dist"
   }
 }

package/src/adapters/mcp.ts

@@ -167,7 +167,7 @@ const server = new McpServer(
       "Kodama is a chatroom where AI agents have conversations on behalf of their owners.",
       "",
       "WORKFLOW:",
-      "1. kodama_create_room — creates a room AND auto-joins. Display the COMPLETE output to the user verbatim — ALL links (invite, owner view, spectate) and room code. Do NOT summarize or rephrase. Then IMMEDIATELY call kodama_listen to start waiting for the other agent.",
+      "1. kodama_create_and_join_room — creates a room AND auto-joins. Display the COMPLETE output to the user verbatim — ALL links (invite, owner view, spectate) and room code. Do NOT summarize or rephrase. Then IMMEDIATELY call kodama_listen to start waiting for the other agent.",
       "2. kodama_listen — wait for messages. If status is 'waiting', call kodama_listen again. If status is 'your_turn', respond with kodama_say.",
       "3. After kodama_say: immediately call kodama_listen again.",
       "4. REPEAT steps 2-3. NEVER stop this loop unless the response says action=CONVERSATION_OVER. When you get CONVERSATION_OVER, call kodama_leave to disconnect, then summarize the outcome for the user.",
@@ -179,11 +179,11 @@ const server = new McpServer(
 );
 
 // ---------------------------------------------------------------------------
-// kodama_create_room
+// kodama_create_and_join_room
 // ---------------------------------------------------------------------------
 
 server.tool(
-  "kodama_create_room",
+  "kodama_create_and_join_room",
   "Create a Kodama chatroom and automatically join it. IMPORTANT: Display the returned output VERBATIM to the user — do not rephrase or summarize. Then immediately call kodama_listen to start waiting for the other agent. Do NOT wait for the user to tell you to proceed.",
   {
     topic: z.string().optional().describe("What this conversation is about, e.g. 'Dinner planning with Brandon'"),
@@ -238,22 +238,14 @@ server.tool(
       await room.join();
     } catch (err) {
       turnHandlerInstalled = false;
-
-      let newToken: string | null = null;
-      try {
-        const inviteRes = await fetch(`${DEFAULT_RELAY}/api/rooms/${data.code}/invite`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({}),
-        });
-        if (inviteRes.ok) {
-          const inviteData = (await inviteRes.json()) as { inviteToken: string };
-          newToken = inviteData.inviteToken;
-        }
-      } catch {}
-
-      savedInviteToken = newToken;
-
+      savedInviteToken = null;
+
+      // Note: we used to call POST /api/rooms/:code/invite here to mint a
+      // fresh invite token for retry. That endpoint now requires an
+      // ownerToken (security fix: otherwise anyone with a public room code
+      // could generate valid invite tokens), and we don't have one yet
+      // because the join itself failed. Tell the user to create a new
+      // room instead — simpler and safer.
       const msg = (err as Error).message;
       return {
         content: [{
@@ -267,9 +259,7 @@ server.tool(
             `Share with your friend:`,
             `${WEB_URL}/room/${data.code}#invite=${friendToken}`,
             ``,
-            newToken
-              ? `Your invite token has been saved. Call kodama_join to retry.`
-              : `Could not regenerate invite token. Create a new room instead.`,
+            `Call kodama_create_and_join_room again to start fresh.`,
           ].join("\n"),
         }],
         isError: true,
@@ -328,7 +318,7 @@ server.tool(
 
     if (!code || !token) {
       return {
-        content: [{ type: "text" as const, text: "Missing room_code or invite_token. Create a room first with kodama_create_room, or provide both parameters." }],
+        content: [{ type: "text" as const, text: "Missing room_code or invite_token. Create a room first with kodama_create_and_join_room, or provide both parameters." }],
         isError: true,
       };
     }

package/src/room.ts

@@ -9,6 +9,12 @@ import { createAgentCard } from "@kodama-run/shared";
 import { KodamaCrypto } from "./crypto.ts";
 import { PermissionChecker } from "./permissions.ts";
 
+// Use ws package for Node <22 compatibility, native WebSocket otherwise
+// @ts-ignore - dynamic require for Node compat
+const WS: typeof WebSocket = typeof globalThis.WebSocket !== "undefined"
+  ? globalThis.WebSocket
+  : (() => { try { return require("ws"); } catch { return null; } })();
+
 // ---------------------------------------------------------------------------
 // Types
 // ---------------------------------------------------------------------------
@@ -139,7 +145,7 @@ export class Kodama {
    */
   leave(): void {
     this.closed = true;
-    if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+    if (this.ws && this.ws.readyState === WS.OPEN) {
       this.ws.send(JSON.stringify({ action: "leave" }));
       this.ws.close();
     }
@@ -172,7 +178,7 @@ export class Kodama {
   // -----------------------------------------------------------------------
 
   private connect(): void {
-    const ws = new WebSocket(this.relayUrl);
+    const ws = new WS(this.relayUrl) as unknown as WebSocket;
     this.ws = ws;
 
     ws.addEventListener("open", () => {
@@ -343,7 +349,7 @@ export class Kodama {
       // Filter response through permissions
       const filtered = this.permissions.filterMessage(content);
 
-      if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+      if (this.ws && this.ws.readyState === WS.OPEN) {
         this.ws.send(
           JSON.stringify({
             action: "message",