@zeph-to/cli 1.21.0 → 1.23.0

package/README.md

@@ -5,64 +5,66 @@
 [![node](https://img.shields.io/node/v/@zeph-to/cli.svg)](https://nodejs.org)
 [![license](https://img.shields.io/npm/l/@zeph-to/cli.svg)](./LICENSE)
 
-Push notification SDK + CLI for [Zeph](https://zeph.to) — the terminal
-side of the round trip: your agent works, hits a decision, and asks your
-phone; you tap a button (or type a reply), and the answer lands back in
-the live session so the agent keeps going.
-
-- `ZephHook` SDK — native `fetch`, no runtime deps. Send/list/dismiss pushes.
-- `zeph` CLI — one-command setup for 8 AI agents, push sending, and an
-  optional resident listener that **drives Claude Code / Codex / Gemini
-  sessions from your phone** by injecting messages into named tmux
-  sessions.
-
-Part of the Zeph toolchain:
-[`@zeph-to/mcp-server`](https://github.com/zeph-to/mcp-server) (the MCP
-tools your agent calls, e.g. `zeph_ask`) ·
-[`zeph-to/plugin`](https://github.com/zeph-to/plugin) (Claude Code plugin
-bundling hooks + MCP + rules) · the [Zeph app](https://zeph.to) on your
-phone.
-
-## Installation
+**Your agent works, hits a decision, and asks your phone. You tap a button (or type a reply), and the answer lands back in the live session — so the agent keeps going.**
 
-```bash
-npm install -g @zeph-to/cli
-# or for one-off use
-npx @zeph-to/cli notify --title "Hello"
-```
+`@zeph-to/cli` is the terminal side of that round trip: a zero-dependency push SDK, a `zeph` CLI that wires up 8 AI agents in one command, and a resident listener that lets your phone **drive Claude Code / Codex / Gemini sessions** by typing straight into named tmux sessions.
+
+<p align="center">
+  <img src="https://zeph.to/readme/demo.gif" alt="Agent asks 'Deploy to prod?' on your phone; you tap Deploy; the session ships" width="560"><br>
+  <sub><em>Your agent asks on your phone → you tap <b>Deploy</b> → the session ships. No terminal.</em></sub>
+</p>
+
+- **`ZephHook` SDK** — native `fetch`, no runtime deps. Send / list / dismiss pushes.
+- **`zeph` CLI** — one-command setup for 8 agents, push sending, and the resident listener for phone-driven remote control.
+
+Part of the Zeph toolchain: [`@zeph-to/mcp-server`](https://github.com/zeph-to/mcp-server) (the MCP tools your agent calls, e.g. `zeph_ask`) · [`zeph-to/plugin`](https://github.com/zeph-to/plugin) (Claude Code plugin bundling hooks + MCP + rules) · the [Zeph app](https://zeph.to) on your phone.
 
 ## Quick Start
 
-```bash
-# Sign in via browser — auto-fetches your API key + hook into
-# ~/.zeph/config.json (no copy-paste)
-npx @zeph-to/cli login
+Install the CLI globally, then run setup:
 
-# Install for your AI agents (rules + hooks + MCP). Reuses the saved
-# config; detects Claude Code / Cursor / Windsurf / Gemini / Codex / …
-npx @zeph-to/cli install
+```bash
+npm install -g @zeph-to/cli
+zeph install
 ```
 
-`login` opens a browser to the Zeph web app, asks you to confirm "connect
-this computer", then issues a fresh API key (labelled with your hostname)
-and reuses or creates a hook — writing both back to `~/.zeph/config.json`
-over a localhost loopback. No credential ever gets pasted into the
-terminal.
+`zeph install` opens a browser sign-in on a fresh machine — the web app
+issues an API key + hook as a matched pair and the CLI writes them to
+`~/.zeph/config.json` (no copy-paste). Then it installs rules + hooks +
+MCP for every detected agent (Claude Code / Cursor / Windsurf / Gemini /
+Codex / …). Safe to re-run: a saved login is reused untouched (no
+prompts), so a re-run just refreshes the agent integrations. To switch
+account, `zeph install --relogin` forces a fresh sign-in.
+
+**Why global, not `npx`?** `zeph cc` (drive a session from your phone)
+needs `zeph` on your `PATH`, and the agent hooks this installs are
+`$(command -v zeph || npx …)` — a global binary skips an npx cold-start
+on *every* notification. For notifications only, with no phone control,
+`npx @zeph-to/cli install` is a lighter alternative that skips the global
+binary.
 
-Prefer to paste credentials yourself (or on a headless box with no
-browser)? Skip `login` and pass them to `install` directly:
+`~/.zeph/config.json` is the single source of truth — the CLI, the MCP
+server, the plugin hooks, and the listener all read it. You never need
+`ZEPH_API_KEY`-style env vars for a normal setup; they exist as overrides
+(second account, CI).
+
+Variants:
 
 ```bash
-npx @zeph-to/cli install --key ak_... --hook hook_...
-```
+# Headless box (no browser): paste credentials from another machine's
+# ~/.zeph/config.json
+zeph install --key ak_... --hook hook_...
 
-Either way it saves to `~/.zeph/config.json`. All Zeph tools (CLI, MCP
-server, plugin hooks, listener) read this file.
+# Skip the interactive agent picker
+zeph install --only claude,cursor
 
-On a fresh machine `install` alone is enough: with no `--key` and no
-saved config it opens the same browser login automatically (headless
-boxes fall back to manual key entry). Pass `--only claude,cursor,…` to
-skip the interactive agent picker.
+# Switch account — force a fresh browser sign-in over a saved login
+zeph install --relogin
+
+# Refresh credentials only (no agent re-install) — assumes you already
+# ran `zeph install` once; on its own it does NOT wire MCP into agents
+zeph login
+```
 
 To **send** notifications:
 
@@ -78,6 +80,10 @@ To **drive a Claude Code / Codex / Gemini session from your phone**, see
 > Send messages from your phone *into* a live Claude Code / Codex /
 > Gemini session — even after a `zeph_ask` polling window has expired.
 
+<p align="center">
+  <img src="https://zeph.to/readme/ask-phone.png" alt="A Zeph hook on the phone: a question with tappable answer buttons and a text field" width="300">
+</p>
+
 The MCP tools `zeph_ask` / `zeph_prompt` / `zeph_input` wait on a fixed
 timeout (120–600 s). Once that window closes the
 session becomes unaddressable from the phone, even though it's still
@@ -309,6 +315,10 @@ zeph list --limit 10 --type note
 zeph dismiss push_01JXY...
 zeph dismiss --all
 
+# Rename the current agent session (shows in the app's Agents list)
+zeph rename "Prod deploy"
+zeph rename --clear                # reset to the default name
+
 # Test connection
 zeph test
 
@@ -337,6 +347,7 @@ zeph notify --title "Hello" --json
 | `notify` | Send a push notification |
 | `list` | List recent push notifications |
 | `dismiss <id>` | Dismiss a push (or `--all`) |
+| `rename <name>` | Set the current agent session's display name in the app — run inside a `zeph cc` session (`--clear` resets). Auto-detects the tmux session + this machine's listener device id, so the alias lands on the right device |
 | `test` | Verify connection and API key |
 | `cc` · `codex` · `gemini` | Run the agent in a `zeph-<project>` tmux session (auto-suffixed `-2`, `-3`, … on attached collisions). Auto-spawns the background listener on first invocation so the phone picker just works. Trailing args pass through to the agent (`zeph cc --resume "..."`) |
 | `listener` | (Usually unnecessary — `zeph cc` autospawns it.) Resident daemon: subscribes via WebSocket, reports tmux session inventory every 5 s, injects `agent.command` pushes into the matching session. Run in the foreground for SDK development; otherwise let `zeph cc` manage it |

package/dist/cli.js

@@ -70,6 +70,8 @@ Commands:
   notify          Send a push notification
   list            List recent push notifications
   dismiss <id>    Dismiss a push notification (or --all)
+  rename <name>   Set this agent session's display name in the app
+                  (run inside a zeph cc session; --clear resets it)
   test            Send a test notification to verify setup
 ${usageAgentLines()}
                   (auto-suffixed -2/-3/… when another zeph cc is already
@@ -107,10 +109,13 @@ Login options:
 
 Install options:
   (no --key, no saved config → opens browser login automatically;
-   headless falls back to manual key entry)
+   a saved login is reused untouched on re-run; headless falls back
+   to manual key entry)
   --key <api-key>    API key (non-interactive; skips browser login)
   --hook <hook-id>   Hook ID (non-interactive)
   --base-url <url>   Base URL (non-interactive)
+  --relogin          Force a fresh browser sign-in even if a login is
+                     already saved (switch account)
   --web-url <url>    Login web app URL [default: https://app.zeph.to]
   --only <agents>    Comma-separated agent ids to install for
                      (claude,cursor,windsurf,gemini,codex,copilot,cline,aider).
@@ -160,6 +165,53 @@ const createHook = (args) => {
         ...(baseUrl && { baseUrl }),
     });
 };
+/** Current tmux session name (the rename key), or null when not inside tmux. */
+const detectCurrentTmuxSession = () => {
+    if (!process.env.TMUX)
+        return null;
+    try {
+        const name = (0, child_process_1.execFileSync)('tmux', ['display-message', '-p', '#S'], { encoding: 'utf-8' }).trim();
+        return name || null;
+    }
+    catch {
+        return null;
+    }
+};
+/**
+ * `zeph rename "<name>"` — set THIS agent session's display name in the app.
+ * Auto-detects the current tmux session + this machine's listener device id
+ * (`computeListenerDeviceId`, the same id the listener registers, so the
+ * rename lands on the right device). `--clear` resets to the computed label.
+ */
+const handleRename = async (args) => {
+    const isJson = args.json === true;
+    const clearing = args.clear === true;
+    const alias = args._arg1 || '';
+    if (!alias && !clearing) {
+        printError('Usage: zeph rename "New name"  (or --clear to reset to default)', isJson);
+        return 2;
+    }
+    const sessionName = args.session || detectCurrentTmuxSession();
+    if (!sessionName) {
+        printError('No tmux session detected. Run inside a `zeph cc` session, or pass --session <name>.', isJson);
+        return 2;
+    }
+    const deviceId = args.device || (0, listener_js_1.computeListenerDeviceId)();
+    const hook = createHook(args);
+    if (!hook)
+        return 3;
+    try {
+        await hook.renameAgentSession(deviceId, sessionName, clearing ? '' : alias);
+        if (isJson)
+            printJson({ session: sessionName, alias: clearing ? null : alias, status: 'ok' });
+        else
+            console.log(clearing ? `Reset name for ${sessionName}` : `Renamed ${sessionName} → ${alias}`);
+        return 0;
+    }
+    catch (err) {
+        return handleError(err, isJson);
+    }
+};
 /** Parse a gate count flag; garbage input falls back to the default (never accidentally silences). */
 const gateCount = (raw, fallback) => {
     const n = typeof raw === 'string' ? Number(raw) : NaN;
@@ -405,6 +457,8 @@ const main = async () => {
             return handleList(args);
         case 'dismiss':
             return handleDismiss(args);
+        case 'rename':
+            return handleRename(args);
         case 'test':
             return handleTest(args);
         case 'listener':

package/dist/installer.d.ts

@@ -3,7 +3,12 @@ import type { Agent } from './agents.js';
  * True when install should auto-open browser login (ADR 0002): interactive
  * context with no existing credential (--key/env/config all absent).
  */
-export declare const shouldTriggerLogin: (nonInteractive: boolean, currentKey: string | undefined) => boolean;
+/**
+ * Interactive install, past the `--key` path: open a browser login only when
+ * there's nothing saved yet, or the user explicitly asked to re-authenticate
+ * with `--relogin`. A plain re-run keeps the saved login untouched.
+ */
+export declare const shouldReauth: (currentKey: string | undefined, relogin: boolean) => boolean;
 /** Exported for tests (installGemini shells out to the real `gemini` binary,
  *  so the merge semantics can't be covered through it deterministically). */
 export declare const mergeJsonFile: (filePath: string, patch: Record<string, unknown>) => void;

package/dist/installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AA4BzC;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,gBAAgB,OAAO,EAAE,YAAY,MAAM,GAAG,SAAS,KAAG,OAC7D,CAAC;AAoBjC;6EAC6E;AAC7E,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,IAqBhF,CAAC;AAgQF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,KAAK,EAAE,EAAE,MAAM,MAAM,KAAG,KAAK,EAKxE,CAAC;AA4FF,eAAO,MAAM,aAAa,GAAU,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAG,OAAO,CAAC,MAAM,CAkG1F,CAAC"}
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AA4BzC;;;GAGG;AACH;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,YAAY,MAAM,GAAG,SAAS,EAAE,SAAS,OAAO,KAAG,OACxD,CAAC;AAoBzB;6EAC6E;AAC7E,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,IAqBhF,CAAC;AAgQF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,KAAK,EAAE,EAAE,MAAM,MAAM,KAAG,KAAK,EAKxE,CAAC;AA8EF,eAAO,MAAM,aAAa,GAAU,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAG,OAAO,CAAC,MAAM,CAkG1F,CAAC"}

package/dist/installer.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleInstall = exports.filterAgentsByIds = exports.mergeJsonFile = exports.shouldTriggerLogin = void 0;
+exports.handleInstall = exports.filterAgentsByIds = exports.mergeJsonFile = exports.shouldReauth = void 0;
 const child_process_1 = require("child_process");
 const fs_1 = require("fs");
 const os_1 = require("os");
@@ -19,8 +19,13 @@ const fail = (msg) => console.log(`    - ${msg}`);
  * True when install should auto-open browser login (ADR 0002): interactive
  * context with no existing credential (--key/env/config all absent).
  */
-const shouldTriggerLogin = (nonInteractive, currentKey) => !nonInteractive && !currentKey;
-exports.shouldTriggerLogin = shouldTriggerLogin;
+/**
+ * Interactive install, past the `--key` path: open a browser login only when
+ * there's nothing saved yet, or the user explicitly asked to re-authenticate
+ * with `--relogin`. A plain re-run keeps the saved login untouched.
+ */
+const shouldReauth = (currentKey, relogin) => !currentKey || relogin;
+exports.shouldReauth = shouldReauth;
 const promptInput = (question) => {
     const rl = (0, readline_1.createInterface)({ input: process.stdin, output: process.stdout });
     return new Promise((resolve) => {
@@ -348,26 +353,12 @@ const testConnection = async (apiKey, baseUrl) => {
         return false;
     }
 };
-/** Interactive path when a credential already exists: prompt to keep/replace. */
-const promptExistingCredentials = async (currentKey, existing) => {
-    if (currentKey)
-        console.log(`  Current API Key: ${currentKey.slice(0, 12)}...`);
-    const keyInput = await promptInput(currentKey ? '  New API Key (Enter to keep): ' : '  API Key (from app > Settings > API Keys): ');
-    const currentHook = (0, config_js_1.resolvedEnv)('ZEPH_HOOK_ID') || existing.hookId;
-    if (currentHook)
-        console.log(`  Current Hook ID: ${currentHook}`);
-    const hookInput = await promptInput(currentHook ? '  New Hook ID (Enter to keep, "none" to remove): ' : '  Hook ID (optional, for prompt/input): ');
-    return {
-        apiKey: keyInput || currentKey,
-        hookId: hookInput === 'none' ? undefined : (hookInput || currentHook),
-        baseUrl: existing.baseUrl,
-    };
-};
 /**
- * Resolve API key + hook for install. Priority: --key/env/config (non-interactive
- * or "keep existing") → brand-new interactive opens browser login (ADR 0002),
- * falling back to manual paste when headless. wsUrl/deviceId from a login are
- * persisted by runLoginFlow and re-read at config-save time.
+ * Resolve API key + hook for install. Priority: --key/env/config (non-interactive)
+ * → a saved login is reused untouched on re-run → otherwise a brand-new
+ * interactive install opens browser login (ADR 0002), falling back to manual
+ * paste when headless. wsUrl/deviceId from a login are persisted by
+ * runLoginFlow and re-read at config-save time.
  */
 const collectCredentials = async (args, installArgs, nonInteractive, existing) => {
     if (nonInteractive) {
@@ -379,8 +370,15 @@ const collectCredentials = async (args, installArgs, nonInteractive, existing) =
     }
     console.log('');
     const currentKey = (0, config_js_1.resolvedEnv)('ZEPH_API_KEY') || existing.apiKey;
-    if (!(0, exports.shouldTriggerLogin)(nonInteractive, currentKey)) {
-        return promptExistingCredentials(currentKey, existing);
+    // Re-run with a saved login: reuse it silently and move on to agent wiring.
+    // Switching accounts is `zeph login` or `zeph install --relogin`.
+    if (!(0, exports.shouldReauth)(currentKey, args.relogin === true)) {
+        console.log(`  Using saved login (${currentKey.slice(0, 12)}…). Run \`zeph install --relogin\` to switch account.`);
+        return {
+            apiKey: currentKey,
+            hookId: (0, config_js_1.resolvedEnv)('ZEPH_HOOK_ID') || existing.hookId,
+            baseUrl: existing.baseUrl,
+        };
     }
     const result = await (0, login_js_1.runLoginFlow)({
         webUrl: (0, login_js_1.resolveWebUrl)(args['web-url']),

package/dist/listener-device-id.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Listener device id, resolved READ-ONLY — MUST equal what `listener.ts`
+ * `computeListenerDeviceId()` registers, so pushes tagged with this id land
+ * under the listener's device (otherwise a hook/notify reaches the feed but
+ * never threads into the agent chat). Hash the platform machine id first, then
+ * the sticky file the listener persisted, then a hostname hash — the same order
+ * as the writer, but never writing the file here.
+ */
+export declare const listenerDeviceId: () => string;
+//# sourceMappingURL=listener-device-id.d.ts.map

package/dist/listener-device-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener-device-id.d.ts","sourceRoot":"","sources":["../src/listener-device-id.ts"],"names":[],"mappings":"AAuCA;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,QAAO,MAQnC,CAAC"}

package/dist/listener-device-id.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listenerDeviceId = void 0;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_crypto_1 = require("node:crypto");
+// The listener daemon writes this file (see listener.ts computeListenerDeviceId);
+// non-listener processes in the CLI (zeph-hook's agent-session context) only
+// READ it, so both resolve the same id without racing the write.
+const LISTENER_ID_FILE = (0, node_path_1.join)((0, node_os_1.homedir)(), '.zeph', 'listener-device-id');
+const hashListenerId = (seed) => `dev_listener_${(0, node_crypto_1.createHash)('sha256').update(seed).digest('hex').slice(0, 8)}`;
+/** Platform machine id (macOS IOPlatformUUID / Linux machine-id), or null. */
+const readMachineId = () => {
+    try {
+        if (process.platform === 'darwin') {
+            // stdio: swallow ioreg's stderr so a one-off `zeph rename` / hook
+            // never leaks ioreg warnings to the terminal (matches listener.ts).
+            const out = (0, node_child_process_1.execFileSync)('ioreg', ['-rd1', '-c', 'IOPlatformExpertDevice'], {
+                encoding: 'utf-8',
+                stdio: ['ignore', 'pipe', 'ignore'],
+            });
+            const m = out.match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/);
+            if (m)
+                return m[1];
+        }
+        if (process.platform === 'linux') {
+            for (const p of ['/etc/machine-id', '/var/lib/dbus/machine-id']) {
+                try {
+                    const v = (0, node_fs_1.readFileSync)(p, 'utf-8').trim();
+                    if (v)
+                        return v;
+                }
+                catch { /* try next path */ }
+            }
+        }
+    }
+    catch { /* no machine id readable — fall through */ }
+    return null;
+};
+/**
+ * Listener device id, resolved READ-ONLY — MUST equal what `listener.ts`
+ * `computeListenerDeviceId()` registers, so pushes tagged with this id land
+ * under the listener's device (otherwise a hook/notify reaches the feed but
+ * never threads into the agent chat). Hash the platform machine id first, then
+ * the sticky file the listener persisted, then a hostname hash — the same order
+ * as the writer, but never writing the file here.
+ */
+const listenerDeviceId = () => {
+    const machineId = readMachineId();
+    if (machineId)
+        return hashListenerId(machineId);
+    try {
+        const saved = (0, node_fs_1.readFileSync)(LISTENER_ID_FILE, 'utf-8').trim();
+        if (/^dev_listener_[0-9a-f]{8}$/.test(saved))
+            return saved;
+    }
+    catch { /* no sticky file — fall back to hostname */ }
+    return hashListenerId((0, node_os_1.hostname)());
+};
+exports.listenerDeviceId = listenerDeviceId;

package/dist/zeph-hook.d.ts

@@ -17,6 +17,14 @@ export declare class ZephHook {
     list(params?: ListParams): Promise<ListResult>;
     dismiss(pushId: string): Promise<DismissOneResult>;
     dismissAll(): Promise<DismissAllResult>;
+    /**
+     * Set (or clear, with an empty alias) the display name for an agent session,
+     * keyed by its tmux `name` on `deviceId`. The alias overrides the app's
+     * computed session label; it survives listener re-reports (server-side).
+     */
+    renameAgentSession(deviceId: string, name: string, alias: string): Promise<{
+        deviceId: string;
+    }>;
     private request;
     private parseError;
 }

package/dist/zeph-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zeph-hook.d.ts","sourceRoot":"","sources":["../src/zeph-hook.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAY,gBAAgB,EAAE,gBAAgB,EAAoB,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAkCxL,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,OAAO,CAAC,iBAAiB,CAAS;gBAEtB,OAAO,EAAE,WAAW;YASlB,YAAY;IAYpB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;YAmC7C,cAAc;IAsDtB,aAAa,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAK7G,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrF,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB9C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKlD,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;YAK/B,OAAO;IAiCrB,OAAO,CAAC,UAAU;CASnB"}
+{"version":3,"file":"zeph-hook.d.ts","sourceRoot":"","sources":["../src/zeph-hook.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAY,gBAAgB,EAAE,gBAAgB,EAAoB,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAoCxL,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,OAAO,CAAC,iBAAiB,CAAS;gBAEtB,OAAO,EAAE,WAAW;YASlB,YAAY;IAYpB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;YAmC7C,cAAc;IAsDtB,aAAa,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAK7G,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrF,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB9C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKlD,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAK7C;;;;OAIG;IACG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;YASxF,OAAO;IAiCrB,OAAO,CAAC,UAAU;CASnB"}

package/dist/zeph-hook.js

@@ -1,9 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ZephHook = void 0;
-const node_crypto_1 = require("node:crypto");
-const node_os_1 = require("node:os");
 const node_child_process_1 = require("node:child_process");
+const listener_device_id_js_1 = require("./listener-device-id.js");
 const errors_js_1 = require("./errors.js");
 const crypto_js_1 = require("./crypto.js");
 const DEFAULT_BASE_URL = 'https://api.zeph.to/v1';
@@ -14,7 +13,10 @@ const PREVIEW_LENGTH = 200;
  * Stable agent-session grouping when running inside a tmux agent session, so a
  * hook/notify (e.g. the Stop-hook recap) files under the same session key as
  * the listener's pushes — surviving Claude session-UUID rotation. The device id
- * MUST match cli `computeListenerDeviceId` (`dev_listener_<sha8(hostname)>`).
+ * MUST equal the listener's `computeListenerDeviceId`, so it's resolved the same
+ * way (machine-id hash → sticky file → hostname) via the shared read-only
+ * helper — NOT a bare hostname hash, which drifts from the listener's id when a
+ * machine id is readable and files the push under a non-matching session key.
  */
 const agentSessionContext = () => {
     if (!process.env.TMUX)
@@ -28,8 +30,7 @@ const agentSessionContext = () => {
     }
     if (!name)
         return null;
-    const h = (0, node_crypto_1.createHash)('sha256').update((0, node_os_1.hostname)()).digest('hex').slice(0, 8);
-    return { agentDeviceId: `dev_listener_${h}`, agentSessionName: name };
+    return { agentDeviceId: (0, listener_device_id_js_1.listenerDeviceId)(), agentSessionName: name };
 };
 const inferMimeType = (fileName) => {
     const ext = fileName.split('.').pop()?.toLowerCase();
@@ -184,6 +185,15 @@ class ZephHook {
         const json = await this.request('POST', '/pushes/dismiss-all');
         return { dismissed: json.data?.dismissed ?? 0 };
     }
+    /**
+     * Set (or clear, with an empty alias) the display name for an agent session,
+     * keyed by its tmux `name` on `deviceId`. The alias overrides the app's
+     * computed session label; it survives listener re-reports (server-side).
+     */
+    async renameAgentSession(deviceId, name, alias) {
+        const res = await this.request('PATCH', `/devices/${encodeURIComponent(deviceId)}/agent-sessions/${encodeURIComponent(name)}`, { alias });
+        return { deviceId: res.data.deviceId };
+    }
     async request(method, path, body) {
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), this.timeoutMs);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zeph-to/cli",
-  "version": "1.21.0",
+  "version": "1.23.0",
   "description": "Zeph CLI + push notification SDK for AI agents",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",