@prohost/cli 0.1.0 → 0.2.0

package/dist/agent/sessionstore.js

@@ -0,0 +1,138 @@
+/**
+ * Which agent session belongs to which conversation.
+ *
+ * Every run spawns a fresh one-shot process, so without this the agent meets
+ * each message as its first: someone answers a clarifying question and gets a
+ * reply that has forgotten the question. Server-supplied thread history
+ * (`recent_messages`) narrows that gap but does not close it — history is what
+ * was *said*, not what the agent worked out, looked up, or decided on the last
+ * turn.
+ *
+ * Keyed by surface rather than by run: a run is one turn, and continuity is a
+ * property of the thread the turns are in.
+ *
+ * Deliberately a separate ledger from `runs.json`. That one is a safety
+ * mechanism whose entries must never be lost; this one is an optimisation whose
+ * worst failure is an agent starting fresh. Mixing them would give the
+ * important file the churn rate of the unimportant one.
+ */
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import path from 'node:path';
+import { prohostHome } from './credentials.js';
+/** Cap on retained sessions. Oldest are dropped first (insertion order). */
+export const SESSION_LEDGER_LIMIT = 200;
+export function sessionLedgerPath(env = process.env) {
+    return path.join(prohostHome(env), 'sessions.json');
+}
+/**
+ * The thread a run belongs to, or ``undefined`` when it belongs to none.
+ *
+ * A trigger fan-out (`reservation.created` and friends) has no surface and no
+ * predecessor, so it deliberately gets no key: resuming an unrelated session
+ * into it would carry over context that has nothing to do with the event, which
+ * is worse than starting clean.
+ *
+ * Keyed by agent as well as surface. The ledger outlives a pairing — re-pair
+ * this machine to a different AI employee and the file is still there — so a
+ * surface-only key would have the new agent resume the old one's session and
+ * answer in its predecessor's voice, carrying its reasoning and tool state.
+ */
+export function sessionKeyFor(run) {
+    const surface = run.conversation_id
+        ? `conversation:${run.conversation_id}`
+        : run.task_id
+            ? `task:${run.task_id}`
+            : run.cleaning_id
+                ? `cleaning:${run.cleaning_id}`
+                : undefined;
+    if (!surface)
+        return undefined;
+    return `${run.agent_id ?? 'agent'}/${surface}`;
+}
+/**
+ * Surface → session id, backed by a JSON file.
+ *
+ * Like {@link RunStore}, every persistence failure degrades to memory-only
+ * rather than throwing: a read-only home directory should cost continuity, not
+ * the ability to answer.
+ */
+export class SessionStore {
+    file;
+    onWarn;
+    records = new Map();
+    constructor(file, onWarn) {
+        this.file = file;
+        this.onWarn = onWarn;
+    }
+    /** Read the ledger from disk. A missing or corrupt file starts empty. */
+    static load(env = process.env, onWarn = () => { }) {
+        const store = new SessionStore(sessionLedgerPath(env), onWarn);
+        try {
+            const parsed = JSON.parse(readFileSync(store.file, 'utf8'));
+            if (Array.isArray(parsed)) {
+                for (const entry of parsed) {
+                    const record = entry;
+                    if (typeof record?.key === 'string' && record.key && typeof record.session_id === 'string' && record.session_id) {
+                        store.records.set(record.key, {
+                            key: record.key,
+                            session_id: record.session_id,
+                            updated_at: typeof record.updated_at === 'string' ? record.updated_at : '',
+                        });
+                    }
+                }
+            }
+        }
+        catch {
+            // No ledger yet, or an unreadable one — either way, start clean.
+        }
+        return store;
+    }
+    /** The session to resume for a surface, if one is remembered. */
+    get(key) {
+        if (!key)
+            return undefined;
+        return this.records.get(key)?.session_id;
+    }
+    /**
+     * Remember the session a surface's last turn ran in.
+     *
+     * Re-inserted rather than mutated in place so the map's insertion order stays
+     * a real least-recently-used order — {@link trim} drops from the front, and
+     * mutating in place would make the busiest thread the first one evicted.
+     */
+    remember(key, sessionId) {
+        if (!key || !sessionId)
+            return;
+        this.records.delete(key);
+        this.records.set(key, { key, session_id: sessionId, updated_at: new Date().toISOString() });
+        this.trim();
+        this.persist();
+    }
+    /** Drop a surface's session — used when the agent rejected it as unresumable. */
+    forget(key) {
+        if (!key)
+            return;
+        if (this.records.delete(key))
+            this.persist();
+    }
+    trim() {
+        while (this.records.size > SESSION_LEDGER_LIMIT) {
+            const oldest = this.records.keys().next().value;
+            if (oldest === undefined)
+                return;
+            this.records.delete(oldest);
+        }
+    }
+    persist() {
+        try {
+            mkdirSync(path.dirname(this.file), { recursive: true, mode: 0o700 });
+            writeFileSync(this.file, `${JSON.stringify([...this.records.values()], null, 2)}\n`, {
+                mode: 0o600,
+            });
+        }
+        catch (err) {
+            this.onWarn(`    ! could not write the session ledger (${err instanceof Error ? err.message : String(err)}); ` +
+                'the agent will start a fresh session each run until this is fixed');
+        }
+    }
+}

package/dist/index.d.ts

@@ -2,11 +2,12 @@
 /**
  * `@prohost/cli` — entrypoint.
  *
- * Two commands:
+ * Commands:
  *
  *     npx @prohost/cli listen --forward-to http://localhost:3000/webhook
  *     npx @prohost/cli agent pair --code <pairing-code>
  *     npx @prohost/cli agent run --exec 'claude -p'
+ *     npx @prohost/cli agent install-daemon --exec 'claude -p'
  *
  * Parses arguments with a zero-dep, zero-magic flag parser so the published
  * binary stays small and starts fast.

package/dist/index.js

@@ -2,11 +2,12 @@
 /**
  * `@prohost/cli` — entrypoint.
  *
- * Two commands:
+ * Commands:
  *
  *     npx @prohost/cli listen --forward-to http://localhost:3000/webhook
  *     npx @prohost/cli agent pair --code <pairing-code>
  *     npx @prohost/cli agent run --exec 'claude -p'
+ *     npx @prohost/cli agent install-daemon --exec 'claude -p'
  *
  * Parses arguments with a zero-dep, zero-magic flag parser so the published
  * binary stays small and starts fast.
@@ -24,12 +25,14 @@ function printHelp() {
         'Usage:',
         '  prohost listen --forward-to <local-url> [--api-key <key>] [--url <ws-url>] [--machine <name>] [--subscription-id <id>]',
         '  prohost agent pair --code <pairing-code> [--webhook-url <https-url>] [--base-url <url>]',
-        "  prohost agent run --exec '<command>' [--timeout <seconds>] [--dry-run] [--cwd <dir>]",
+        "  prohost agent run --exec '<command>' [--timeout <seconds>] [--dry-run] [--workdir <dir>]",
+        "  prohost agent install-daemon --exec '<command>' [--workdir <dir>]   Keep the agent running",
+        '  prohost agent uninstall-daemon',
         '',
         'listen flags:',
         '  --forward-to     Local URL to POST each webhook payload to (required)',
         '  --api-key        ProhostAI API key. Defaults to $PROHOST_API_KEY.',
-        '  --url            Websocket endpoint. Defaults to wss://api.prohost.ai/ws/webhooks.',
+        '  --url            Websocket endpoint. Defaults to wss://connect.prohost.ai/ws/webhooks.',
         '  --machine        Machine name displayed in the UI. Defaults to the OS hostname.',
         '  --subscription-id  Stamp connected_from on a specific subscription row.',
         '',
@@ -42,10 +45,21 @@ function printHelp() {
         '  --exec           Command to run for each mention; the prompt arrives on stdin (required)',
         '  --timeout        Seconds one run may take before it is killed. Defaults to 300.',
         '  --dry-run        Print the reply that would be posted; write nothing.',
-        '  --cwd            Working directory for the agent command.',
+        '  --workdir        Working directory for the agent command. Defaults to $PROHOST_HOME/workspace.',
+        '                   Avoid pointing it at a code checkout: agents read CLAUDE.md, .claude/settings.json',
+        '                   and .mcp.json from their working directory and will inherit them.',
+        '  --cwd            Deprecated alias for --workdir.',
         '  --machine        Machine name displayed in the UI. Defaults to the OS hostname.',
         '  --url            Websocket endpoint. Defaults to the paired value.',
         '  --allow-unverified  Run events whose signature could not be verified (not recommended).',
+        '  --safe-tools     Gate the agent\'s tools behind permission prompts instead of bypassing them.',
+        '                   Claude Code runs default to --dangerously-skip-permissions so the agent can',
+        '                   act; with --safe-tools expect it to answer rather than do. Alias:',
+        '                   --no-skip-permissions.',
+        '',
+        'agent install-daemon flags:  (macOS: launchd; Linux: prints a systemd-user unit)',
+        '  --exec           The same command you would pass to `agent run` (required).',
+        '  --workdir, --timeout, --machine, --url, --allow-unverified, --safe-tools — passed to `agent run`.',
         '',
         'Global flags:',
         '  --help, -h       Show this help and exit.',
@@ -55,7 +69,7 @@ function printHelp() {
         '  PROHOST_API_KEY       Used by `listen` when --api-key is not provided.',
         '  PROHOST_WS_URL        Used when --url is not provided.',
         '  PROHOST_PAIRING_CODE  Used by `agent pair` when --code is not provided.',
-        '  PROHOST_HOME          Credential directory. Defaults to ~/.prohost.',
+        '  PROHOST_HOME          Credential, ledger, workspace and log directory. Defaults to ~/.prohost.',
     ];
     process.stdout.write(`${lines.join('\n')}\n`);
 }

package/dist/listen.d.ts

@@ -38,7 +38,19 @@ export interface ListenMetrics {
     eventsForwarded: number;
     forwardErrors: number;
 }
-export declare const DEFAULT_WS_URL = "wss://api.prohost.ai/ws/webhooks";
+/**
+ * `/ws/webhooks` is served by **api_public**, which is `connect.prohost.ai` —
+ * the same host as {@link DEFAULT_API_BASE_URL}. It is NOT on `api.prohost.ai`
+ * (the main ECS API), which answers the handshake with a bare 403.
+ *
+ * 0.1.0 shipped `api.prohost.ai` here while the REST base correctly pointed at
+ * `connect.prohost.ai`, so every paired agent redeemed its code fine and then
+ * failed to connect, reconnecting forever against a host that does not serve
+ * this route. Mentions dispatched, no runtime was listening, and the thread sat
+ * on "…is thinking" until the delivery expired. Keep this host in step with
+ * `DEFAULT_API_BASE_URL`.
+ */
+export declare const DEFAULT_WS_URL = "wss://connect.prohost.ai/ws/webhooks";
 /**
  * Run the listener until the abort signal fires or the socket closes.
  *

package/dist/listen.js

@@ -5,7 +5,19 @@
 import os from 'node:os';
 import WebSocket from 'ws';
 import { forwardEvent, isWebhookEvent } from './forward.js';
-export const DEFAULT_WS_URL = 'wss://api.prohost.ai/ws/webhooks';
+/**
+ * `/ws/webhooks` is served by **api_public**, which is `connect.prohost.ai` —
+ * the same host as {@link DEFAULT_API_BASE_URL}. It is NOT on `api.prohost.ai`
+ * (the main ECS API), which answers the handshake with a bare 403.
+ *
+ * 0.1.0 shipped `api.prohost.ai` here while the REST base correctly pointed at
+ * `connect.prohost.ai`, so every paired agent redeemed its code fine and then
+ * failed to connect, reconnecting forever against a host that does not serve
+ * this route. Mentions dispatched, no runtime was listening, and the thread sat
+ * on "…is thinking" until the delivery expired. Keep this host in step with
+ * `DEFAULT_API_BASE_URL`.
+ */
+export const DEFAULT_WS_URL = 'wss://connect.prohost.ai/ws/webhooks';
 /**
  * Run the listener until the abort signal fires or the socket closes.
  *

package/dist/version.d.ts

@@ -7,6 +7,6 @@
  * `package.json`, so a release bump that forgets this file fails the suite
  * instead of shipping a `User-Agent` that lies about which build is calling.
  */
-export declare const CLI_VERSION = "0.1.0";
+export declare const CLI_VERSION = "0.2.0";
 /** Sent on every HTTP request the CLI makes back into ProhostAI. */
-export declare const USER_AGENT = "prohost-cli/0.1.0";
+export declare const USER_AGENT = "prohost-cli/0.2.0";

package/dist/version.js

@@ -7,6 +7,6 @@
  * `package.json`, so a release bump that forgets this file fails the suite
  * instead of shipping a `User-Agent` that lies about which build is calling.
  */
-export const CLI_VERSION = '0.1.0';
+export const CLI_VERSION = '0.2.0';
 /** Sent on every HTTP request the CLI makes back into ProhostAI. */
 export const USER_AGENT = `prohost-cli/${CLI_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prohost/cli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Run your own AI agent as a ProhostAI teammate, and stream your account's webhooks to your laptop.",
   "type": "module",
   "license": "MIT",
@@ -15,6 +15,7 @@
   "files": [
     "dist",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "scripts": {