arcroom 0.0.1-beta → 0.0.2-beta

package/dist/home.js

@@ -41,6 +41,15 @@ export function loadConfig() {
     return { url: DEFAULT_URL, apiKey: '', ...(existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : {}) };
 }
 const LOCAL = new Set(['localhost', '127.0.0.1', '[::1]']);
+/** Whether `url` points at this machine (a developer's local API). */
+export const isLocalUrl = (url) => {
+    try {
+        return LOCAL.has(new URL(url).hostname);
+    }
+    catch {
+        return false;
+    }
+};
 /** The API URL, refused unless it is https:// or this machine: the key and the traces never cross a network in clear text. */
 export function apiUrl(url) {
     const u = new URL(url);
@@ -54,11 +63,17 @@ export function apiUrl(url) {
  * secret to the team.
  */
 export async function api(cfg, path, body, timeoutMs = 10_000) {
-    const res = await fetch(apiUrl(cfg.url) + path, {
+    const base = apiUrl(cfg.url);
+    const res = await fetch(base + path, {
         method: body ? 'POST' : 'GET',
         headers: { Authorization: `Bearer ${cfg.apiKey}`, 'Content-Type': 'application/json' },
         body: body ? JSON.stringify(redact(body)) : undefined,
         signal: AbortSignal.timeout(timeoutMs),
+    }).catch((e) => {
+        // a timeout stays as it is (lookup and the MCP tools check for TimeoutError); a refused or unknown host reads as one line
+        const cause = e.cause;
+        const why = cause?.code ?? cause?.errors?.[0]?.code ?? cause?.message ?? e.message;
+        throw e.name === 'TypeError' ? new Error(`could not reach ${base} (${why})`) : e;
     });
     const json = (await res.json());
     // the key was revoked, its person removed or its account deleted: ArcRoom stops on this machine until a new key

package/dist/index.js

@@ -13,6 +13,12 @@ import { mcp } from './mcp.js';
 import { readStats, statusText } from './signs.js';
 import { sessionUsage, tokensOf } from './usage.js';
 const [cmd, ...args] = process.argv.slice(2);
+// A command someone typed that fails prints one line, not a stack trace (the hook, daemon and MCP server keep their own handling).
+if (!['hook', 'daemon', 'mcp', 'status'].includes(cmd))
+    process.on('uncaughtException', (e) => {
+        console.error(`arcroom${cmd ? ` ${cmd}` : ''}: ${e.message}`);
+        process.exit(1);
+    });
 if (cmd === 'init')
     await init(args);
 else if (cmd === 'hook')

package/dist/init.js

@@ -6,7 +6,7 @@ import { createInterface } from 'node:readline/promises';
 import { AGENTS, CURSOR_HOOKS, opencodePlugin } from './agents.js';
 import { stopDaemon } from './daemon.js';
 import { onPath } from './git.js';
-import { apiUrl, ARCROOM_HOME, DEFAULT_URL } from './home.js';
+import { apiUrl, ARCROOM_HOME, DEFAULT_URL, isLocalUrl, keyRefused } from './home.js';
 const EVENTS = ['SessionStart', 'UserPromptSubmit', 'PreToolUse', 'PostToolUse', 'Stop', 'SessionEnd'];
 const TOOL_EVENTS = new Set(['PreToolUse', 'PostToolUse']);
 const MARK = '.arcroom/runtime'; // identifies our hook entries in a settings file
@@ -43,6 +43,21 @@ const writeJson = (file, value) => {
     mkdirSync(dirname(file), { recursive: true });
     writeFileSync(file, JSON.stringify(value, null, 2) + '\n');
 };
+/**
+ * The key and API URL init uses. Re-running init reuses what was saved, except a key the API refused (otherwise a new
+ * key could never get in) and a local URL left from development (it moves to the live API and says so).
+ */
+export function initChoice(o) {
+    const refused = !!o.saved.apiKey && keyRefused({ apiKey: o.saved.apiKey, url: o.saved.url ?? DEFAULT_URL });
+    const key = o.argKey ?? o.envKey ?? (refused ? undefined : o.saved.apiKey);
+    const dropLocal = !o.argUrl && !!o.saved.url && isLocalUrl(o.saved.url);
+    const url = o.argUrl ?? (dropLocal ? DEFAULT_URL : o.saved.url ?? DEFAULT_URL);
+    const notes = [
+        ...(refused && !o.argKey && !o.envKey ? ['The saved key was refused by the API. Paste a new key (web app, Settings → API keys).'] : []),
+        ...(dropLocal ? [`The saved API was ${o.saved.url}; using ${DEFAULT_URL} now (arcroom init --url ${o.saved.url} keeps a local API).`] : []),
+    ];
+    return { key, url, notes };
+}
 export async function init(args) {
     const arg = (name) => (args.includes(name) ? args[args.indexOf(name) + 1] : undefined);
     const agent = (arg('--agent') ?? 'claude');
@@ -52,10 +67,13 @@ export async function init(args) {
     }
     const configFile = join(ARCROOM_HOME, 'config.json');
     const saved = existsSync(configFile) ? JSON.parse(readFileSync(configFile, 'utf8')) : {}; // re-running init reuses saved values
-    let key = arg('--key') ?? process.env.ARCROOM_API_KEY ?? saved.apiKey;
+    const choice = initChoice({ argKey: arg('--key'), envKey: process.env.ARCROOM_API_KEY, argUrl: arg('--url'), saved });
+    let key = choice.key;
+    const url = choice.url;
     if (arg('--key'))
         console.error('Note: a key typed on the command line stays in your shell history. Next time run arcroom init and paste it when asked, or set ARCROOM_API_KEY.');
-    const url = arg('--url') ?? saved.url ?? DEFAULT_URL;
+    for (const note of choice.notes)
+        console.error(note);
     try {
         apiUrl(url);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcroom",
-  "version": "0.0.1-beta",
+  "version": "0.0.2-beta",
   "description": "Shared team memory and run control for coding agents: Claude Code, Codex, Cursor, OpenCode",
   "license": "Apache-2.0",
   "author": "ArcRoom AI",