@opennous/cli 0.18.2 → 0.19.1

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @opennous/cli changelog
 
+## 0.19.1
+
+### Changed: the first history read goes as far back as your workspace chose
+
+The runner's own first read of your history used six months. It now uses the range picked in
+onboarding: 3 months by default, or 6 or 12 (GET-1328).
+
+## 0.19.0
+
+### Added: read on your own API key
+
+`runner install --api-key` reads on your own Anthropic or OpenAI API key instead of your plan. It
+takes the key from `ANTHROPIC_API_KEY` / `OPENAI_API_KEY`, or asks for it without echoing it, and
+keeps it in `~/.nous/config.json`, which only you can read now. Each call gets only that key, for
+that agent. The app shows the runner as reading with an API key (GET-1310).
+
 ## 0.18.2
 
 ### Fixed: the runner service finds your Mac's name

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opennous/cli",
-  "version": "0.18.2",
+  "version": "0.19.1",
   "description": "Ownable CLI — set up Ownable, connect it to your coding agent, and read the Context API from your terminal",
   "type": "module",
   "bin": {

package/src/backfill.js

@@ -120,6 +120,11 @@ export function resetAt(message, now = Date.now()) {
   return null;
 }
 
+/** The agent CLIs installed here, signed in or not: an API key needs only the program (GET-1310). */
+export function installedAgents(run = spawnSync) {
+  return ["claude", "codex"].filter((a) => run(a, ["--version"], { encoding: "utf8" }).status === 0);
+}
+
 export function detectAgents(run = spawnSync) {
   const found = [];
   if (run("claude", ["auth", "status"], { encoding: "utf8" }).status === 0) found.push("claude");
@@ -127,16 +132,24 @@ export function detectAgents(run = spawnSync) {
   return found;
 }
 
-/** Without the API key variables, so the call runs on the plan, not a key billed by the token. */
-function planEnv(env = process.env) {
+const KEY_VARS = ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "OPENAI_API_KEY", "CODEX_API_KEY"];
+
+/**
+ * The environment a call runs in. Without a key: none of the API key variables, so the call runs
+ * on the plan, not a key billed by the token. With one (GET-1310): only that key, for that agent,
+ * so the call is billed to the person's own API account, whatever else is set. Pure.
+ */
+export function callEnv({ agent = null, apiKey = null } = {}, env = process.env) {
   const clean = { ...env, DISABLE_AUTOUPDATER: "1" };
-  for (const k of ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "OPENAI_API_KEY", "CODEX_API_KEY"]) delete clean[k];
+  for (const k of KEY_VARS) delete clean[k];
+  if (apiKey && agent === "claude") clean.ANTHROPIC_API_KEY = apiKey;
+  if (apiKey && agent === "codex") { clean.CODEX_API_KEY = apiKey; clean.OPENAI_API_KEY = apiKey; }
   return clean;
 }
 
-function runCommand({ cmd, args, input }, cwd) {
+function runCommand({ cmd, args, input }, cwd, env = callEnv()) {
   return new Promise((resolve, reject) => {
-    const p = spawn(cmd, args, { cwd, env: planEnv(), stdio: ["pipe", "pipe", "pipe"] });
+    const p = spawn(cmd, args, { cwd, env, stdio: ["pipe", "pipe", "pipe"] });
     let out = "", err = "";
     p.stdout.on("data", (d) => { out += d; });
     p.stderr.on("data", (d) => { err += d; });
@@ -255,9 +268,10 @@ export async function runBackfill({ api, agent, jobId, run, sleep, log, now = Da
 }
 
 /** The real pieces for runBackfill. */
-export function liveRun() {
+export function liveRun({ agent = null, apiKey = null } = {}) {
   const cwd = mkdtempSync(join(tmpdir(), "nous-backfill-"));
-  return (command) => runCommand(command, cwd);
+  const env = callEnv({ agent, apiKey });
+  return (command) => runCommand(command, cwd, env);
 }
 
 /**

package/src/index.js

@@ -7,7 +7,7 @@
 // the 7 MCP primitives — the CLI never duplicates them.
 
 import { program, Command } from "commander";
-import { readFileSync, writeFileSync, existsSync, mkdirSync, appendFileSync, readdirSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, appendFileSync, readdirSync, chmodSync } from "fs";
 import { homedir, hostname } from "os";
 import { join, resolve, dirname, relative, sep } from "path";
 import { createInterface } from "readline";
@@ -104,7 +104,9 @@ function writeConfig(cfg) {
   if (!existsSync(dir)) {
     mkdirSync(dir, { recursive: true });
   }
-  writeFileSync(CONFIG_PATH, JSON.stringify(cfg, null, 2));
+  // Only you can read it: it holds your Ownable key, and a runner's model API key (GET-1310).
+  writeFileSync(CONFIG_PATH, JSON.stringify(cfg, null, 2), { mode: 0o600 });
+  try { chmodSync(CONFIG_PATH, 0o600); } catch { /* best effort on filesystems without modes */ }
 }
 
 /** A key is there to use: from the environment, or saved by a sign-in. */
@@ -655,22 +657,28 @@ program
 // starts it at login; the app's "Your plan" page shows it as connected once it has polled.
 const runnerCmd = program
   .command("runner")
-  .description("Keep reading your new calls and email on your own Claude or ChatGPT plan")
+  .description("Keep reading your new calls and email on your own Claude or ChatGPT plan, or your own API key")
   .option("--agent <agent>", "claude or codex (default: whichever you're signed in to)")
+  .option("--api-key", "read on your own Anthropic or OpenAI API key instead of your plan")
   .option("--workspace <id>", "the workspace to read; the app's command fills this in")
   .option("--url <url>", "API base URL (default: https://api.opennous.cloud)")
   .action(async (opts) => {
-    const { detectAgents, liveRun, NO_AGENT } = await import("./backfill.js");
+    const { detectAgents, installedAgents, liveRun, NO_AGENT } = await import("./backfill.js");
     const { runRunner } = await import("./runner.js");
-    const agent = await pickAgent(opts.agent, detectAgents, NO_AGENT);
+    const agent = await pickAgent(opts.agent, opts.apiKey ? installedAgents : detectAgents, NO_AGENT);
+    const apiKey = opts.apiKey ? savedModelKey(agent) : null;
+    if (opts.apiKey && !apiKey) {
+      console.error(`No ${agent === "codex" ? "OpenAI" : "Anthropic"} API key saved. Run \`npx @opennous/cli@latest runner install --api-key\` first.`);
+      process.exit(1);
+    }
     const host = await runnerHost();
     const key = await runnerKey(opts);
     const api = apiClient(key);
     const service = process.env.NOUS_RUNNER_SERVICE === "1";
     const stamp = (line) => (service ? `${new Date().toISOString()} ${line}` : line);
-    console.log(stamp(`Reading on your ${agent} plan. ${service ? "" : "Stop with Ctrl-C; `nous runner install` keeps it going on its own."}`.trim()));
+    console.log(stamp(`Reading on your ${apiKey ? `${agent === "codex" ? "OpenAI" : "Anthropic"} API key` : `${agent} plan`}. ${service ? "" : "Stop with Ctrl-C; `nous runner install` keeps it going on its own."}`.trim()));
     await runRunner({
-      agent, host, version, run: liveRun(), log: (l) => console.log(stamp(l)),
+      agent, host, version, auth: apiKey ? "api_key" : "plan", run: liveRun({ agent, apiKey }), log: (l) => console.log(stamp(l)),
       sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
       api: {
         poll: (body) => api.softPost("/v2/runner/poll", body),
@@ -684,12 +692,15 @@ runnerCmd
   .command("install")
   .description("Start the runner now and every time you log in")
   .option("--agent <agent>", "claude or codex (default: whichever you're signed in to)")
+  .option("--api-key", "read on your own Anthropic or OpenAI API key instead of your plan (asked for once, kept only on this machine)")
   .option("--workspace <id>", "the workspace to read; the app's command fills this in")
   .option("--url <url>", "API base URL (default: https://api.opennous.cloud)")
   .action(async (opts) => {
-    const { detectAgents, NO_AGENT } = await import("./backfill.js");
+    const { detectAgents, installedAgents, NO_AGENT } = await import("./backfill.js");
     const { installService } = await import("./runner.js");
-    const agent = await pickAgent(opts.agent, detectAgents, NO_AGENT);
+    const agent = await pickAgent(opts.agent, opts.apiKey ? installedAgents : detectAgents, NO_AGENT);
+    // Your own API key (GET-1310): from the environment, or asked for now, and kept in ~/.nous (yours only).
+    if (opts.apiKey) await saveModelKey(agent);
     const key = await runnerKey(opts);
     // One poll before installing, so a bad key or plan fails here and not silently in the background.
     try {
@@ -699,8 +710,9 @@ runnerCmd
       process.exit(1);
     }
     try {
-      const where = installService({ agent, workspace: opts.workspace ?? null });
-      console.log(`Connected. Your calls and email are read on your ${agent} plan: your history first, then everything new. It starts every time you log in.`);
+      const where = installService({ agent, workspace: opts.workspace ?? null, apiKey: !!opts.apiKey });
+      const on = opts.apiKey ? `your ${agent === "codex" ? "OpenAI" : "Anthropic"} API key` : `your ${agent} plan`;
+      console.log(`Connected. Your calls and email are read on ${on}: your history first, then everything new. It starts every time you log in.`);
       if (where.log) console.log(`Log: ${where.log}`);
       console.log("Check on it with `npx @opennous/cli@latest runner status`. Stop it with `npx @opennous/cli@latest runner uninstall`.");
     } catch (e) {
@@ -731,6 +743,37 @@ runnerCmd
     if (s.log) console.log(`Log: ${s.log}`);
   });
 
+const KEY_ENV = { claude: "ANTHROPIC_API_KEY", codex: "OPENAI_API_KEY" };
+
+/** The model API key this machine's runner reads with, or null (GET-1310). */
+function savedModelKey(agent) {
+  return readConfig().runnerKeys?.[agent] ?? null;
+}
+
+/** Take the key from the environment, or ask for it without echoing it, and keep it in ~/.nous. */
+async function saveModelKey(agent) {
+  let value = process.env[KEY_ENV[agent]] || "";
+  if (!value) {
+    const label = agent === "codex" ? "OpenAI" : "Anthropic";
+    process.stdout.write(`${label} API key (kept only on this machine): `);
+    value = await new Promise((resolve) => {
+      const stdin = process.stdin;
+      let typed = "";
+      stdin.setRawMode?.(true); stdin.resume(); stdin.setEncoding("utf8");
+      const onData = (ch) => {
+        if (ch === "\r" || ch === "\n" || ch === "\u0004") { stdin.setRawMode?.(false); stdin.pause(); stdin.off("data", onData); process.stdout.write("\n"); resolve(typed.trim()); }
+        else if (ch === "\u0003") { process.stdout.write("\n"); process.exit(130); }
+        else if (ch === "\u007f") typed = typed.slice(0, -1);
+        else typed += ch;
+      };
+      stdin.on("data", onData);
+    });
+  }
+  if (!value) { console.error("No key given."); process.exit(1); }
+  const cfg = readConfig();
+  writeConfig({ ...cfg, runnerKeys: { ...cfg.runnerKeys, [agent]: value } });
+}
+
 /** This machine's name for its runner, the same every run (GET-1308). */
 async function runnerHost() {
   const { machineName } = await import("./runner.js");

package/src/runner.js

@@ -75,7 +75,7 @@ export function pauseLine(agent, reason, until, now = Date.now()) {
  * The loop. Injected: `api` ({ poll, answer }), `run` (one command → stdout), `sleep`, `log`.
  * `stop()` → true ends it (tests; the real one runs until the process is stopped).
  */
-export async function runRunner({ api, agent, host = hostname(), version = null, run, sleep, log, now = Date.now,
+export async function runRunner({ api, agent, host = hostname(), version = null, auth = "plan", run, sleep, log, now = Date.now,
   workers = WORKERS, limitWaitMs = LIMIT_WAIT_MS, stop = () => false }) {
   let limitedUntil = 0, limitReason = null, answered = 0, lastLine = null, lastError = null, backfillAt = -Infinity;
   const answerOne = async (call, models) => {
@@ -106,7 +106,7 @@ export async function runRunner({ api, agent, host = hostname(), version = null,
     let page;
     const asked = now();
     try {
-      page = await api.poll({ agent, host, version, answered, limit: workers, wait_ms: WAIT_MS,
+      page = await api.poll({ agent, host, version, auth, answered, limit: workers, wait_ms: WAIT_MS,
         limited_until: limitedUntil > now() ? new Date(limitedUntil).toISOString() : null,
         limit_reason: limitedUntil > now() ? limitReason : null });
       if (lastError) { log("Back online."); lastError = null; }
@@ -120,9 +120,11 @@ export async function runRunner({ api, agent, host = hostname(), version = null,
     // read itself, on this plan, and answers its calls like any other.
     if (page.needs_backfill && api.startBackfill && now() - backfillAt >= BACKFILL_RETRY_MS) {
       backfillAt = now();
+      // How far back comes from the workspace (GET-1328: 3 months unless they chose 6 or 12).
+      const days = Number(page.backfill_days) > 0 ? Number(page.backfill_days) : BACKFILL_DAYS;
       try {
-        await api.startBackfill({ days: BACKFILL_DAYS, confirm: "yes" });
-        log(`Reading your last ${BACKFILL_DAYS / 30} months of calls and email on your plan. This can take a while; everything new is read after.`);
+        await api.startBackfill({ days, confirm: "yes" });
+        log(`Reading your last ${Math.round(days / 30)} months of calls and email on your plan. This can take a while; everything new is read after.`);
       } catch (err) {
         log(`Your history read can't start yet (${err.message}). Trying again in ${BACKFILL_RETRY_MS / 60000} minutes.`);
       }
@@ -161,8 +163,8 @@ export function servicePath(binaries) {
 const xml = (s) => String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 
 /** The launchd agent for macOS. Pure. */
-export function launchdPlist({ npx, agent, workspace = null, path, log }) {
-  const args = [npx, "-y", "@opennous/cli@latest", "runner", "--agent", agent, ...(workspace ? ["--workspace", workspace] : [])];
+export function launchdPlist({ npx, agent, workspace = null, apiKey = false, path, log }) {
+  const args = [npx, "-y", "@opennous/cli@latest", "runner", "--agent", agent, ...(workspace ? ["--workspace", workspace] : []), ...(apiKey ? ["--api-key"] : [])];
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -188,8 +190,8 @@ ${args.map((a) => `    <string>${xml(a)}</string>`).join("\n")}
 }
 
 /** The systemd user unit for Linux. Pure. */
-export function systemdUnit({ npx, agent, workspace = null, path }) {
-  const args = [npx, "-y", "@opennous/cli@latest", "runner", "--agent", agent, ...(workspace ? ["--workspace", workspace] : [])];
+export function systemdUnit({ npx, agent, workspace = null, apiKey = false, path }) {
+  const args = [npx, "-y", "@opennous/cli@latest", "runner", "--agent", agent, ...(workspace ? ["--workspace", workspace] : []), ...(apiKey ? ["--api-key"] : [])];
   return `[Unit]
 Description=Ownable runner: reads on your own ${agent === "codex" ? "ChatGPT" : "Claude"} plan
 After=network-online.target
@@ -214,7 +216,7 @@ export function servicePaths(os = platform(), home = homedir()) {
 }
 
 /** Install and start the runner as a service. Returns { kind, file, log } or throws with what to do. */
-export function installService({ agent, workspace = null, run = spawnSync, os = platform(), home = homedir() } = {}) {
+export function installService({ agent, workspace = null, apiKey = false, run = spawnSync, os = platform(), home = homedir() } = {}) {
   const where = servicePaths(os, home);
   if (!where) throw new Error(`Starting at login isn't supported on ${os} yet. Run \`${RUN_COMMAND}\` in a terminal you keep open instead.`);
   const npx = which("npx", run);
@@ -223,12 +225,12 @@ export function installService({ agent, workspace = null, run = spawnSync, os =
   mkdirSync(dirname(where.file), { recursive: true });
   if (where.kind === "launchd") {
     mkdirSync(dirname(where.log), { recursive: true });
-    writeFileSync(where.file, launchdPlist({ npx, agent, workspace, path, log: where.log }));
+    writeFileSync(where.file, launchdPlist({ npx, agent, workspace, apiKey, path, log: where.log }));
     run("launchctl", ["unload", where.file], { stdio: "ignore" });
     const r = run("launchctl", ["load", "-w", where.file], { encoding: "utf8" });
     if (r.status !== 0) throw new Error(`launchctl couldn't start it: ${(r.stderr || "").trim()}`);
   } else {
-    writeFileSync(where.file, systemdUnit({ npx, agent, workspace, path }));
+    writeFileSync(where.file, systemdUnit({ npx, agent, workspace, apiKey, path }));
     run("systemctl", ["--user", "daemon-reload"], { stdio: "ignore" });
     const r = run("systemctl", ["--user", "enable", "--now", "opennous-runner.service"], { encoding: "utf8" });
     if (r.status !== 0) throw new Error(`systemd couldn't start it: ${(r.stderr || "").trim()}`);