@prohost/cli 0.5.0 → 0.7.0

package/dist/agent/workspace.d.ts

@@ -0,0 +1,40 @@
+/**
+ * `prohost agent workspace init --developer` — make a paired agent's workspace
+ * one that opens pull requests the way the ProhostAI fleet does.
+ *
+ * Opt-in: the default workspace is left exactly as it is. With `--developer`
+ * and a path to a ProhostAI checkout (`--repo`), this writes two things into
+ * the workspace's `.claude/`:
+ *
+ * - a skill, `prohost-pr-protocol`, that points the agent at the repo's own
+ *   `prohost_agents/support/prompts/pr_protocol.md` — by absolute path, not a
+ *   copy, so the protocol has one source and cannot drift;
+ * - the fleet's `gh pr create` gate (`prohost_agents/platform/pr_create_gate.sh`)
+ *   as a `PreToolUse` hook in `.claude/settings.json`, registered the way
+ *   `prohost_agents/support/handler.py` registers it (matcher `.*`, the shim
+ *   filters cheaply itself).
+ *
+ * Claude Code loads a workspace's `.claude/` when it starts there, which is
+ * what `agent run` does. Re-running is idempotent; other settings are kept.
+ */
+export declare const PROTOCOL_RELATIVE_PATH: string;
+export declare const GATE_RELATIVE_PATH: string;
+export declare const SKILL_NAME = "prohost-pr-protocol";
+export declare class WorkspaceInitError extends Error {
+}
+export interface WorkspaceInitResult {
+    skillPath: string;
+    settingsPath: string;
+    /** Whether the hook was newly added (false when it was already there). */
+    hookAdded: boolean;
+}
+/**
+ * Write the developer skill and PR gate hook into ``workdir``.
+ *
+ * @throws WorkspaceInitError when ``repo`` is not a ProhostAI checkout, or the
+ *   existing settings file is not JSON (it is never overwritten blind).
+ */
+export declare function initDeveloperWorkspace(options: {
+    workdir: string;
+    repo: string;
+}): WorkspaceInitResult;

package/dist/agent/workspace.js

@@ -0,0 +1,97 @@
+/**
+ * `prohost agent workspace init --developer` — make a paired agent's workspace
+ * one that opens pull requests the way the ProhostAI fleet does.
+ *
+ * Opt-in: the default workspace is left exactly as it is. With `--developer`
+ * and a path to a ProhostAI checkout (`--repo`), this writes two things into
+ * the workspace's `.claude/`:
+ *
+ * - a skill, `prohost-pr-protocol`, that points the agent at the repo's own
+ *   `prohost_agents/support/prompts/pr_protocol.md` — by absolute path, not a
+ *   copy, so the protocol has one source and cannot drift;
+ * - the fleet's `gh pr create` gate (`prohost_agents/platform/pr_create_gate.sh`)
+ *   as a `PreToolUse` hook in `.claude/settings.json`, registered the way
+ *   `prohost_agents/support/handler.py` registers it (matcher `.*`, the shim
+ *   filters cheaply itself).
+ *
+ * Claude Code loads a workspace's `.claude/` when it starts there, which is
+ * what `agent run` does. Re-running is idempotent; other settings are kept.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import path from 'node:path';
+import { shellQuote } from './accounts.js';
+export const PROTOCOL_RELATIVE_PATH = path.join('prohost_agents', 'support', 'prompts', 'pr_protocol.md');
+export const GATE_RELATIVE_PATH = path.join('prohost_agents', 'platform', 'pr_create_gate.sh');
+export const SKILL_NAME = 'prohost-pr-protocol';
+export class WorkspaceInitError extends Error {
+}
+function skillBody(protocolPath, gatePath) {
+    return [
+        '---',
+        `name: ${SKILL_NAME}`,
+        'description: >-',
+        '  ProhostAI pull-request protocol. Use before creating a branch, committing, pushing,',
+        '  opening or updating a pull request, answering review comments, or reporting CI status',
+        '  in the ProhostAI repositories.',
+        '---',
+        '',
+        '# ProhostAI pull-request protocol',
+        '',
+        `Read \`${protocolPath}\` in full before you open or update a pull request, and follow it exactly.`,
+        'That file is the single source of truth; this skill only points at it, so never work from a',
+        'remembered or summarised copy — re-read it each time.',
+        '',
+        `A \`gh pr create\` gate (\`${gatePath}\`) runs before every shell command. If it refuses, fix`,
+        'what it names (usually the PR body headings, or a missing test) and try again. Never work',
+        'around it.',
+        '',
+    ].join('\n');
+}
+/**
+ * Write the developer skill and PR gate hook into ``workdir``.
+ *
+ * @throws WorkspaceInitError when ``repo`` is not a ProhostAI checkout, or the
+ *   existing settings file is not JSON (it is never overwritten blind).
+ */
+export function initDeveloperWorkspace(options) {
+    const repo = path.resolve(options.repo);
+    const protocolPath = path.join(repo, PROTOCOL_RELATIVE_PATH);
+    const gatePath = path.join(repo, GATE_RELATIVE_PATH);
+    for (const required of [protocolPath, gatePath]) {
+        if (!existsSync(required)) {
+            throw new WorkspaceInitError(`${required} does not exist — pass --repo <path to a ProhostAI backend-service checkout>.`);
+        }
+    }
+    const claudeDir = path.join(path.resolve(options.workdir), '.claude');
+    const skillDir = path.join(claudeDir, 'skills', SKILL_NAME);
+    mkdirSync(skillDir, { recursive: true, mode: 0o700 });
+    const skillPath = path.join(skillDir, 'SKILL.md');
+    writeFileSync(skillPath, skillBody(protocolPath, gatePath));
+    const settingsPath = path.join(claudeDir, 'settings.json');
+    let settings = {};
+    if (existsSync(settingsPath)) {
+        try {
+            const parsed = JSON.parse(readFileSync(settingsPath, 'utf8'));
+            if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+                throw new Error('not an object');
+            settings = parsed;
+        }
+        catch {
+            throw new WorkspaceInitError(`${settingsPath} is not a JSON object; fix or remove it and run this again.`);
+        }
+    }
+    const hooks = settings.hooks && typeof settings.hooks === 'object' && !Array.isArray(settings.hooks)
+        ? settings.hooks
+        : {};
+    const preToolUse = Array.isArray(hooks.PreToolUse) ? hooks.PreToolUse : [];
+    // Claude runs a hook command through a shell, so a checkout path with a
+    // space or metacharacter must be quoted — unquoted, the gate would fail to
+    // run (or run as something else) and `gh pr create` would go ungated.
+    const gateCommand = shellQuote(gatePath);
+    const present = preToolUse.some((group) => (group.hooks ?? []).some((hook) => hook.command === gateCommand || hook.command === gatePath));
+    if (!present)
+        preToolUse.push({ matcher: '.*', hooks: [{ type: 'command', command: gateCommand }] });
+    settings.hooks = { ...hooks, PreToolUse: preToolUse };
+    writeFileSync(settingsPath, `${JSON.stringify(settings, null, 2)}\n`);
+    return { skillPath, settingsPath, hookAdded: !present };
+}

package/dist/index.d.ts

@@ -16,6 +16,8 @@ interface ParsedArgs {
     command: string | undefined;
     /** Second positional, e.g. the ``pair`` in ``prohost agent pair``. */
     subcommand: string | undefined;
+    /** Any further positionals, e.g. ``add work`` in ``prohost agent account add work``. */
+    args: string[];
     flags: Record<string, string | boolean>;
 }
 export declare function parseArgs(argv: readonly string[]): ParsedArgs;

package/dist/index.js

@@ -24,10 +24,14 @@ function printHelp() {
         '',
         'Usage:',
         '  prohost listen --forward-to <local-url> [--api-key <key>] [--url <ws-url>] [--machine <name>] [--subscription-id <id>]',
-        '  prohost agent pair --code <pairing-code> [--webhook-url <https-url>] [--base-url <url>]',
+        '  prohost agent pair --code <pairing-code> [--account <label>] [--webhook-url <https-url>] [--base-url <url>]',
         "  prohost agent run --exec '<command>' [--idle-timeout <seconds>] [--timeout <seconds>] [--dry-run] [--workdir <dir>]",
-        "  prohost agent install-daemon --exec '<command>' [--workdir <dir>]   Keep the agent running",
+        "  prohost agent install-daemon --exec '<command>' [--workdir <dir>] [--account <label>]   Keep the agent running",
         '  prohost agent uninstall-daemon',
+        '  prohost agent account add <label> --runtime claude|codex [--billing subscription|api_key]',
+        '  prohost agent account list | remove <label>',
+        '  prohost agent list                   Every paired agent on this machine, and its accounts',
+        '  prohost agent workspace init --developer --repo <checkout> [--workdir <dir>]',
         '',
         'listen flags:',
         '  --forward-to     Local URL to POST each webhook payload to (required)',
@@ -72,6 +76,20 @@ function printHelp() {
         '  will go. The name "prohost" is reserved; a malformed file is a warning and a run',
         '  without extras. Which servers loaded is printed to agent.log at start-up.',
         '',
+        'Accounts:',
+        '  An account is one Claude Code or Codex login on this machine, in its own config directory',
+        '  (~/.prohost-accounts, or $PROHOST_ACCOUNTS_ROOT). `account add` prints the sign-in command',
+        '  (CLAUDE_CONFIG_DIR=… claude auth login / CODEX_HOME=… codex login) and waits for it; the CLI',
+        '  never reads the login itself. An agent uses one account — `default` is ~/.claude or ~/.codex —',
+        '  set with --account or picked in ProhostAI, and applied from its next run. Accounts never switch',
+        '  on their own: an agent whose account is used up rests until the limit resets.',
+        '  --no-wait        `account add`: print the sign-in command and return.',
+        '  --wait-timeout   `account add`: seconds to wait for the sign-in (default 600).',
+        '',
+        'agent workspace init --developer:',
+        '  Adds the ProhostAI PR-protocol skill and the `gh pr create` gate hook from --repo (a',
+        '  backend-service checkout) to the agent workspace\'s .claude/. Opt-in; nothing else changes.',
+        '',
         'agent install-daemon flags:  (macOS: launchd; Linux: prints a systemd-user unit)',
         '  --exec           The same command you would pass to `agent run` (required).',
         '  --workdir, --idle-timeout, --timeout, --machine, --url, --allow-unverified, --safe-tools',
@@ -86,6 +104,7 @@ function printHelp() {
         '  PROHOST_WS_URL        Used when --url is not provided.',
         '  PROHOST_PAIRING_CODE  Used by `agent pair` when --code is not provided.',
         '  PROHOST_HOME          Credential, ledger, workspace and log directory. Defaults to ~/.prohost.',
+        '  PROHOST_ACCOUNTS_ROOT Machine-wide account registry shared by every agent. Defaults to ~/.prohost-accounts.',
     ];
     process.stdout.write(`${lines.join('\n')}\n`);
 }
@@ -93,6 +112,7 @@ export function parseArgs(argv) {
     const flags = {};
     let command;
     let subcommand;
+    const args = [];
     let i = 0;
     while (i < argv.length) {
         const token = argv[i];
@@ -101,6 +121,8 @@ export function parseArgs(argv) {
                 command = token;
             else if (!subcommand)
                 subcommand = token;
+            else
+                args.push(token);
             i += 1;
             continue;
         }
@@ -125,10 +147,10 @@ export function parseArgs(argv) {
             i += 2;
         }
     }
-    return { command, subcommand, flags };
+    return { command, subcommand, args, flags };
 }
 async function main(argv) {
-    const { command, subcommand, flags } = parseArgs(argv);
+    const { command, subcommand, args, flags } = parseArgs(argv);
     // Checked before the help/no-command branch: `prohost --version` carries no
     // command, which would otherwise print help and exit 1.
     if (flags.version) {
@@ -148,7 +170,7 @@ async function main(argv) {
         return 1;
     }
     if (command === 'agent') {
-        return runAgent(subcommand, flags, printHelp);
+        return runAgent(subcommand, flags, printHelp, args);
     }
     if (command !== 'listen') {
         process.stderr.write(`Unknown command: ${command}\n\n`);

package/dist/version.d.ts

@@ -7,6 +7,6 @@
  * `package.json`, so a release bump that forgets this file fails the suite
  * instead of shipping a `User-Agent` that lies about which build is calling.
  */
-export declare const CLI_VERSION = "0.5.0";
+export declare const CLI_VERSION = "0.7.0";
 /** Sent on every HTTP request the CLI makes back into ProhostAI. */
-export declare const USER_AGENT = "prohost-cli/0.5.0";
+export declare const USER_AGENT = "prohost-cli/0.7.0";

package/dist/version.js

@@ -7,6 +7,6 @@
  * `package.json`, so a release bump that forgets this file fails the suite
  * instead of shipping a `User-Agent` that lies about which build is calling.
  */
-export const CLI_VERSION = '0.5.0';
+export const CLI_VERSION = '0.7.0';
 /** Sent on every HTTP request the CLI makes back into ProhostAI. */
 export const USER_AGENT = `prohost-cli/${CLI_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prohost/cli",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Run your own AI agent as a ProhostAI teammate, and stream your account's webhooks to your laptop.",
   "type": "module",
   "license": "MIT",