patchcord 0.5.28 → 0.5.30

package/bin/patchcord.mjs

@@ -67,6 +67,7 @@ Usage:
   npx patchcord@latest --token <token>                    Self-hosted / CI setup
   npx patchcord@latest --token <token> --server <url>     Self-hosted with custom server
   npx patchcord@latest --full                             Same + full statusline
+  npx patchcord@latest --rename <new-name>                Rename this agent (paste from dashboard)
   npx patchcord@latest skill apply                        Fetch custom skill from web console`);
   process.exit(0);
 }
@@ -76,6 +77,123 @@ if (cmd === "plugin-path") {
   process.exit(0);
 }
 
+// ── --rename <new> [--expect-token <prefix>] ────────────────────
+// Renames the agent in cwd's .mcp.json. Dashboard generates the full
+// pasted command including --expect-token to prevent wrong-machine paste.
+{
+  const renameIdx = process.argv.indexOf("--rename");
+  if (renameIdx !== -1) {
+    const newName = (process.argv[renameIdx + 1] || "").trim().toLowerCase();
+    const expectIdx = process.argv.indexOf("--expect-token");
+    const expectPrefix = expectIdx !== -1 ? (process.argv[expectIdx + 1] || "").trim() : "";
+
+    if (!newName || !/^[a-z][a-z0-9-]{1,49}$/.test(newName)) {
+      console.error("Usage: npx patchcord@latest --rename <new-name> [--expect-token <prefix>]");
+      console.error("       <new-name> must be lowercase letters, digits, dashes; 2-50 chars");
+      process.exit(1);
+    }
+
+    const cwd = process.cwd();
+    let mcpJson = null;
+    let dir = cwd;
+    while (dir && dir !== "/") {
+      const p = join(dir, ".mcp.json");
+      if (existsSync(p)) { mcpJson = p; break; }
+      dir = dirname(dir);
+    }
+    if (!mcpJson) {
+      console.error(`No .mcp.json found above ${cwd}. Run from your patchcord project folder.`);
+      process.exit(1);
+    }
+
+    const { readFileSync } = await import("fs");
+    let config;
+    try {
+      config = JSON.parse(readFileSync(mcpJson, "utf-8"));
+    } catch (e) {
+      console.error(`Cannot parse ${mcpJson}: ${e.message}`);
+      process.exit(1);
+    }
+    const mcpUrl = config?.mcpServers?.patchcord?.url || "";
+    const auth = config?.mcpServers?.patchcord?.headers?.Authorization || "";
+    const baseUrl = mcpUrl.replace(/\/mcp(\/bearer)?$/, "");
+    const token = auth.replace(/^Bearer\s+/, "");
+
+    if (!baseUrl || !token || !isSafeToken(token) || !isSafeUrl(baseUrl)) {
+      console.error(`Cannot read patchcord URL/token from ${mcpJson}.`);
+      process.exit(1);
+    }
+
+    if (expectPrefix && !token.startsWith(expectPrefix)) {
+      console.error("✗ Token mismatch.");
+      console.error(`  The dashboard issued this rename for a different agent than what's`);
+      console.error(`  installed in ${dirname(mcpJson)}.`);
+      console.error(`  Maybe you clicked Rename while looking at a different machine?`);
+      process.exit(2);
+    }
+
+    // Call the server. Use curl + -w for status code so we can distinguish
+    // 409 (taken) from generic 500.
+    const tmpResp = `/tmp/patchcord-rename-${process.pid}.json`;
+    const status = run(
+      `curl -s -o "${tmpResp}" -w "%{http_code}" -X POST ` +
+      `-H "Authorization: Bearer ${token}" ` +
+      `-H "Content-Type: application/json" ` +
+      `-d '{"new":"${newName}"}' ` +
+      `"${baseUrl}/api/agent/rename"`
+    );
+    let respBody = "";
+    try { respBody = readFileSync(tmpResp, "utf-8"); } catch {}
+    try { (await import("fs")).unlinkSync(tmpResp); } catch {}
+
+    if (status !== "200") {
+      let msg = "rename failed";
+      try { msg = (JSON.parse(respBody).error || msg); } catch {}
+      console.error(`✗ HTTP ${status}: ${msg}`);
+      process.exit(1);
+    }
+
+    let payload = {};
+    try { payload = JSON.parse(respBody); } catch {}
+    const oldName = payload.old_agent_id || "";
+    const ns = payload.namespace_id || "";
+    const aliasUntil = payload.alias_expires_at || "";
+
+    // Cache wipe + subscribe kill (best-effort; failures non-fatal).
+    const { unlinkSync, readdirSync: rd } = await import("fs");
+    const tmpClaude = "/tmp/claude";
+    if (existsSync(tmpClaude)) {
+      try {
+        for (const f of rd(tmpClaude)) {
+          if (f.startsWith("patchcord-statusline-") || f === "patchcord-sl-resp.json") {
+            try { unlinkSync(join(tmpClaude, f)); } catch {}
+          }
+        }
+      } catch {}
+    }
+    if (ns && oldName) {
+      const pidfile = `/tmp/patchcord_subscribe_${ns}_${oldName}.pid`;
+      if (existsSync(pidfile)) {
+        try {
+          const pid = Number(readFileSync(pidfile, "utf-8").trim());
+          if (pid > 0) {
+            try { process.kill(pid, "SIGTERM"); } catch {}
+          }
+        } catch {}
+        try { unlinkSync(pidfile); } catch {}
+      }
+    }
+
+    const ttlNote = aliasUntil
+      ? ` Senders using "${oldName}" will be redirected until ${aliasUntil.slice(0, 10)}.`
+      : "";
+    console.log(`✓ Renamed: ${oldName} → ${newName}${ttlNote}`);
+    console.log(`  Restart open Claude Code / Codex sessions for this agent to pick up the new name.`);
+    console.log(`  If you were running /patchcord:subscribe, run it again to reconnect.`);
+    process.exit(0);
+  }
+}
+
 // ── main flow: global setup + project setup (or just install/agent for back-compat) ──
 // Any --flag enters this branch so equals-form (--token=foo, --tool=foo, --server=foo)
 // works the same as the space-form (--token foo). The internal flag parsing below

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchcord",
-  "version": "0.5.28",
+  "version": "0.5.30",
   "description": "Cross-machine agent messaging for Claude Code and Codex",
   "author": "ppravdin",
   "license": "MIT",

package/per-project-skills/codex/SKILL.md

@@ -74,7 +74,7 @@ If send_message fails with a send gate error: call inbox(), reply to or resolve
 
 ## Receiving workflow
 
-**Check the age first.** Every pending message shows a relative timestamp like `(3h ago)` or `(45d ago)`. For action requests older than 7 days, **do not execute** — ask the human first. Old tasks are usually already done, superseded, or no longer wanted. Ack-style messages and pure FYIs can still be silently resolved at any age.
+Action requests older than 7d (per the `(Xd ago)` stamp): ask human before executing. Acks/FYIs silent-resolve at any age.
 
 1. Read the message from `inbox()` or `wait_for_message()`. Check `message.thread` / `message.thread_id` if present.
 2. Do the work - use real code, real files, real results from your project
@@ -87,7 +87,7 @@ If send_message fails with a send gate error: call inbox(), reply to or resolve
 
 When you have multiple pending messages, prioritize by urgency. Use `defer=true` for tasks you'll do later — if you reply without doing the work and don't defer, the message vanishes from your inbox and you will never remember to do it.
 
-**Prune stale deferred messages.** Deferred messages persist across sessions and consume context on every inbox(). If you see a deferred message that looks outdated (old timestamp, work probably already done, requirements likely changed, sender moved on), ask the human: *"This deferred message from [sender] is [Xd] old — should I resolve it?"* On confirmation, `reply(id, resolve=true)` clears it. Don't unilaterally resolve a deferred task — but don't let dead weight accumulate either.
+Outdated deferred (work likely done, sender moved on): ask human "resolve [Xd]-old from [sender]?" before `reply(id, resolve=true)`. Don't unilaterally drop.
 
 ## Cross-user messaging (Gate)
 

package/per-project-skills/web/SKILL.md

@@ -84,7 +84,7 @@ After sending to an offline agent, tell the human: "Message sent. [agent] is not
 
 ## Receiving workflow
 
-**Check the age first.** Every pending message shows a relative timestamp like `(3h ago)` or `(45d ago)`. For action requests older than 7 days, **do not execute** — ask the human first. Old tasks are usually already done, superseded, or no longer wanted. Ack-style messages and pure FYIs can still be silently resolved at any age.
+Action requests older than 7d (per the `(Xd ago)` stamp): ask human before executing. Acks/FYIs silent-resolve at any age.
 
 1. Read messages from inbox(). Check `message.thread` / `message.thread_id` if present.
 2. Check the context tag - is this for your chat?
@@ -97,7 +97,7 @@ After sending to an offline agent, tell the human: "Message sent. [agent] is not
 
 When you have multiple pending messages, prioritize by urgency. Use `defer=true` for tasks you'll do later — if you reply without doing the work and don't defer, the message vanishes from your inbox and you will never remember to do it.
 
-**Prune stale deferred messages.** Deferred messages persist across sessions and consume context on every inbox(). If you see a deferred message that looks outdated (old timestamp, work probably already done, requirements likely changed, sender moved on), ask the human: *"This deferred message from [sender] is [Xd] old — should I resolve it?"* On confirmation, `reply(id, resolve=true)` clears it. Don't unilaterally resolve a deferred task — but don't let dead weight accumulate either.
+Outdated deferred (work likely done, sender moved on): ask human "resolve [Xd]-old from [sender]?" before `reply(id, resolve=true)`. Don't unilaterally drop.
 
 ## File sharing
 

package/skills/inbox/SKILL.md

@@ -61,7 +61,7 @@ If send_message fails with a send gate error: call inbox(), reply to or resolve
 
 ## Receiving (inbox has messages)
 
-**Check the age first.** Every pending message shows a relative timestamp like `(3h ago)` or `(45d ago)`. For action requests older than 7 days, **do not execute the task** — ask the human first. Old tasks are usually already done, superseded, or no longer wanted. Confirmation cost (one short question) is far less than cost of running a stale plan. Ack-style messages and pure FYIs can still be silently resolved at any age.
+Action requests older than 7d (per the `(Xd ago)` stamp): ask human before executing. Acks/FYIs silent-resolve at any age.
 
 1. Read the message. If it belongs to a thread, `message.thread` and `message.thread_id` will be present.
 2. Do the work described in the message - using your project's actual code, real files, real lines
@@ -75,7 +75,7 @@ If send_message fails with a send gate error: call inbox(), reply to or resolve
 
 When you have multiple pending messages, prioritize by urgency. Use `defer=true` for tasks you'll do later — if you reply without doing the work and don't defer, the message vanishes from your inbox and you will never remember to do it.
 
-**Prune stale deferred messages.** Deferred messages persist across sessions and consume context on every inbox(). If you see a deferred message that looks outdated (old timestamp, work probably already done elsewhere, requirements likely changed, sender moved on), ask the human: *"This deferred message from [sender] is [Xd] old — should I resolve it?"* On confirmation, `reply(id, resolve=true)` clears it. Don't unilaterally resolve a deferred task — but don't let dead weight accumulate either.
+Outdated deferred (work likely done, sender moved on): ask human "resolve [Xd]-old from [sender]?" before `reply(id, resolve=true)`. Don't unilaterally drop.
 
 ## Cross-user messaging (Gate)