pairpod 0.1.0 → 0.3.0

package/dist/index.js

@@ -4,11 +4,24 @@ import { start } from "./start.js";
 const HELP = `pairpod — run terminals & Claude sessions from Telegram
 
 Usage:
-  pairpod onboard              Configure the bot (token, allowlist, port, vault key)
-  pairpod start                Start the tunnel + bot (one command)
-  pairpod start --no-tunnel    Start the bot only (use the existing MINIAPP_URL)
+  pairpod onboard                 Configure the bot (token, allowlist, port, vault key)
+  pairpod start                   Start the tunnel + bot (one command)
+  pairpod start --no-tunnel       Start the bot only (use the existing MINIAPP_URL)
+  pairpod start --host-mode true  Allow host pods this run (a shell on the bot machine)
 
 Config lives in ~/.pairpod/ (override with PAIRPOD_HOME).`;
+function hostModeFlag(args) {
+    const i = args.findIndex((a) => a === "--host-mode" || a.startsWith("--host-mode="));
+    if (i === -1)
+        return undefined;
+    const arg = args[i];
+    const value = arg.includes("=") ? arg.slice(arg.indexOf("=") + 1) : args[i + 1];
+    if (value !== "true" && value !== "false") {
+        console.error("--host-mode expects true or false");
+        process.exit(1);
+    }
+    return value;
+}
 async function main() {
     const [cmd, ...rest] = process.argv.slice(2);
     switch (cmd) {
@@ -16,7 +29,7 @@ async function main() {
             await onboard();
             break;
         case "start":
-            await start(!rest.includes("--no-tunnel"));
+            await start(!rest.includes("--no-tunnel"), hostModeFlag(rest));
             break;
         case undefined:
         case "help":

package/dist/onboard.js

@@ -29,6 +29,12 @@ export async function onboard() {
         validate: (v) => (/^\d+$/.test(v) ? undefined : "Must be a number"),
     });
     cancelled(port);
+    p.note("Host pods open an UNSANDBOXED shell on this machine — full access to its files,\nprocesses, and any keys it holds. Docker and SSH pods are isolated; Host is not.\nLeave this off unless you specifically need a shell on the bot host itself.", "⚠ Host mode");
+    const hostMode = await p.confirm({
+        message: "Enable Host mode (unsandboxed shell on the bot machine)?",
+        initialValue: existing.HOST_MODE === "true",
+    });
+    cancelled(hostMode);
     const hadKey = Boolean(existing.PAIRPOD_VAULT_KEY);
     const vaultKey = existing.PAIRPOD_VAULT_KEY || crypto.randomBytes(32).toString("base64");
     const s = p.spinner();
@@ -38,6 +44,7 @@ export async function onboard() {
         TELEGRAM_ALLOWED_USERNAMES: usernames.trim(),
         PORT: port,
         PAIRPOD_VAULT_KEY: vaultKey,
+        HOST_MODE: hostMode ? "true" : "false",
     });
     s.stop(`Wrote ${ENV_PATH}`);
     p.note(`${hadKey ? "Kept existing" : "Generated a new"} vault key (AES-256-GCM, stored in your .env).`, "Credential vault");

package/dist/start.js

@@ -46,12 +46,14 @@ function startTunnel(port) {
         }, 30000);
     });
 }
-export async function start(useTunnel) {
+export async function start(useTunnel, hostMode) {
     const env = { ...process.env, ...readEnv() };
     if (!env.TELEGRAM_BOT_TOKEN) {
         console.error("Not configured yet. Run:  pairpod onboard");
         process.exit(1);
     }
+    if (hostMode !== undefined)
+        env.HOST_MODE = hostMode;
     const port = env.PORT || "40002";
     const children = [];
     let shuttingDown = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pairpod",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "type": "module",
   "license": "MIT",
   "description": "Run terminals and Claude Code sessions from your phone via a Telegram bot, on Docker, SSH, or host backends.",
@@ -34,7 +34,7 @@
   ],
   "dependencies": {
     "@clack/prompts": "^0.7.0",
-    "pairpod-bot": "0.1.0"
+    "pairpod-bot": "0.3.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0"