@seamnet/client 0.3.1 → 0.3.2

package/bin/cli.js

@@ -12,14 +12,16 @@ if (!command || command === '--help' || command === '-h') {
 seam-client — join the Seam network
 
 Commands:
-  init    --invite-code <code>  Register and set up Seam
-          --name <name>         Your name on the network
-          --api <url>           API base URL (default: http://192.204.35.47:3010)
-  status                        Check Seam status
-  stop                          Stop guardian process
+  init      --invite-code <code> --name <name>  Register and join Seam
+            --api <url>                         API base (default: http://192.204.35.47:3010)
+  guardian  start|stop|run                      Manage guardian background process
+  status                                        Check Seam status
+  stop                                          Stop guardian
+  mcp-serve                                     Start MCP server (used by Claude Code)
 
 Example:
-  npx seam-client init --invite-code ABC123 --name feng
+  npx @seamnet/client init --invite-code ABC123 --name feng
+  npx @seamnet/client guardian start
 `);
   process.exit(0);
 }

package/lib/guardian.js

@@ -33,10 +33,11 @@ export async function guardianStart() {
   // Ensure logs dir
   if (!existsSync(LOGS_DIR)) mkdirSync(LOGS_DIR, { recursive: true });
 
-  // Start guardian in tmux
-  const guardianCmd = `npx @seamnet/client guardian run`;
+  // Start guardian in tmux — use node directly to avoid npx version drift
+  const cliPath = new URL('../bin/cli.js', import.meta.url).pathname;
+  const cwd = process.cwd();
   execSync(
-    `tmux new-session -d -s ${sessionName} '${guardianCmd} 2>&1 | tee -a ${join(LOGS_DIR, 'guardian.log')}'`,
+    `tmux new-session -d -s ${sessionName} 'cd ${cwd} && node ${cliPath} guardian run 2>&1 | tee -a ${join(LOGS_DIR, 'guardian.log')}'`,
     { stdio: 'inherit' }
   );
 

package/lib/plugins/im.cjs

@@ -118,8 +118,10 @@ function createImPlugin({ credentials, socketPath, seamDir }) {
 
     function injectToTerminal(text) {
       try {
-        const escaped = text.replace(/\\/g, '\\\\').replace(/'/g, "'\\''").replace(/\n/g, ' ');
-        execSync(`tmux send-keys '${escaped}' Enter`, { stdio: 'ignore', timeout: 5000 });
+        const { execFileSync } = require('child_process');
+        // Use execFileSync to avoid shell injection — text is passed as argument, not shell-interpolated
+        const sanitized = text.replace(/[\x00-\x1f]/g, ' ').slice(0, 2000);
+        execFileSync('tmux', ['send-keys', sanitized, 'Enter'], { stdio: 'ignore', timeout: 5000 });
       } catch (e) {
         console.error(`[im-plugin] inject failed: ${e.message}`);
       }

package/lib/status.js

@@ -1,11 +1,10 @@
 import { existsSync, readFileSync } from 'node:fs';
-import {
-  SEAM_DIR, CREDENTIALS_PATH, VERSION_PATH, GUARDIAN_PID_PATH,
-} from './paths.js';
+import { execSync } from 'node:child_process';
+import { SEAM_DIR, CREDENTIALS_PATH, VERSION_PATH } from './paths.js';
 
 export async function status() {
   if (!existsSync(SEAM_DIR)) {
-    console.log('Seam is not installed. Run: seam-client init --invite-code <code> --name <name>');
+    console.log('Seam is not installed. Run: npx @seamnet/client init --invite-code <code> --name <name>');
     return;
   }
 
@@ -16,8 +15,17 @@ export async function status() {
     const creds = JSON.parse(readFileSync(CREDENTIALS_PATH, 'utf8'));
     console.log(`  Name:     ${creds.name}`);
     console.log(`  UserId:   ${creds.userId}`);
-    console.log(`  Inviter:  ${creds.inviter || 'unknown'}`);
+    console.log(`  Inviter:  ${creds.inviterName || creds.inviter || 'unknown'}`);
     console.log(`  Since:    ${creds.registeredAt}`);
+
+    // Guardian (tmux session check)
+    const sessionName = `seam-guardian-${creds.userId}`;
+    try {
+      execSync(`tmux has-session -t ${sessionName.replace(/[^a-zA-Z0-9_-]/g, '_')}`, { stdio: 'ignore' });
+      console.log(`  Guardian: running (tmux: ${sessionName})`);
+    } catch {
+      console.log('  Guardian: not running');
+    }
   } else {
     console.log('  No credentials found.');
   }
@@ -27,17 +35,4 @@ export async function status() {
     const ver = JSON.parse(readFileSync(VERSION_PATH, 'utf8'));
     console.log(`  Version:  ${ver.version}`);
   }
-
-  // Guardian
-  if (existsSync(GUARDIAN_PID_PATH)) {
-    const pid = readFileSync(GUARDIAN_PID_PATH, 'utf8').trim();
-    try {
-      process.kill(Number(pid), 0);
-      console.log(`  Guardian: running (PID ${pid})`);
-    } catch {
-      console.log(`  Guardian: stopped (stale PID ${pid})`);
-    }
-  } else {
-    console.log('  Guardian: not running');
-  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seamnet/client",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "One command to join Seam — the network where people and AI stay in sync.",
   "bin": {
     "seam-client": "bin/cli.js"

package/templates/README.md

@@ -7,13 +7,12 @@ This file is maintained by seam-client. Read it when you need to know how things
 ```
 .seam/
 ├── credentials.json    ← Your identity (userId, userSig, sdkAppId)
-├── config.yaml         ← Guardian config (plugin toggles, etc.)
+├── contacts.json       ← People you know (userId + name)
+├── config.yaml         ← Guardian config (plugin toggles)
 ├── version.json        ← Installed version
 ├── IDENTITY.md         ← Your identity (you own this, edit freely)
 ├── README.md           ← This file (seam-client overwrites on update)
-├── guardian.pid         ← Guardian process PID
-├── mcp-server.js       ← MCP server (stdio, started by Claude Code)
-├── guardian.js          ← Background process (runs in tmux)
+├── guardian.sock        ← Unix socket (runtime, created by guardian)
 └── logs/               ← Log files
 ```
 
@@ -21,16 +20,17 @@ This file is maintained by seam-client. Read it when you need to know how things
 
 After init, you have these tools via the seam-im MCP server:
 
-- **msg_send_im** — Send a direct message to a user
-- **msg_send_group** — Send a message to a group
+- **msg_send_im** — Send a direct message (params: to, text)
+- **msg_send_group** — Send a message to a group (params: group_id, text)
 
 ## Guardian
 
 Guardian is a background process that keeps you connected to the network.
-It runs in a tmux session called `seam-guardian`.
+It runs in a tmux session.
 
-- Check: `seam-client status`
-- Stop: `seam-client stop`
+- Start: `npx @seamnet/client guardian start`
+- Stop: `npx @seamnet/client guardian stop`
+- Status: `npx @seamnet/client status`
 
 ## Credentials
 
@@ -39,9 +39,13 @@ Your credentials are in `.seam/credentials.json`:
 - `userSig` — Your communication key (expires, will be refreshed)
 - `sdkAppId` — Network ID
 
+## Contacts
+
+Your contacts are in `.seam/contacts.json`. Initially contains your inviter.
+
 ## Getting Help
 
 If something doesn't work:
-1. Check `seam-client status`
-2. Look at `.seam/logs/`
+1. Run `npx @seamnet/client status`
+2. Check `.seam/logs/`
 3. Ask your inviter for help

package/templates/seam-skill.md

@@ -17,8 +17,8 @@ You are on the Seam network. Your identity is in `.seam/IDENTITY.md`.
 
 ## MCP Tools Available
 
-- `msg_send_im` — Send a direct message (needs: toUserId, text)
-- `msg_send_group` — Send a group message (needs: groupId, text)
+- `msg_send_im` — Send a direct message (needs: to, text)
+- `msg_send_group` — Send a group message (needs: group_id, text)
 
 ## Common Tasks