rogerrat 0.2.1 → 0.3.0

package/dist/app.js

@@ -1,13 +1,14 @@
+import { randomUUID } from "node:crypto";
 import { Hono } from "hono";
 import { adminHtml } from "./admin.js";
-import { listActiveChannels } from "./channel.js";
+import { getOrCreateChannel, listActiveChannels } from "./channel.js";
 import { buildConnectInfo } from "./connect.js";
 import { llmsText, mcpDescriptor, serviceInfo } from "./discovery.js";
 import { landingHtml } from "./landing.js";
 import { handleMcpRequest } from "./mcp.js";
-import { getStats } from "./stats.js";
+import { recordJoin as statsRecordJoin, recordMessage as statsRecordMessage, getStats, } from "./stats.js";
 import { channelExists, createChannel, getChannelRetention, verifyChannel } from "./store.js";
-import { isRetention, readTranscript } from "./transcripts.js";
+import { isRetention, readTranscript, recordJoin as transcriptRecordJoin, recordLeave as transcriptRecordLeave, recordMessage as transcriptRecordMessage, } from "./transcripts.js";
 export function createApp(opts) {
     const app = new Hono();
     app.get("/", (c) => {
@@ -54,6 +55,133 @@ export function createApp(opts) {
         const events = readTranscript(channelId, limit);
         return c.json({ channel_id: channelId, retention, events });
     });
+    // ─── REST API (MCP-free; for any CLI with shell access — Codex, Aider, scripts) ───
+    function requireChannelBearer(c, channelId) {
+        if (!channelExists(channelId))
+            return c.json({ error: "channel not found" }, 404);
+        const auth = c.req.header("authorization") ?? c.req.header("Authorization") ?? "";
+        const token = auth.startsWith("Bearer ") ? auth.slice(7).trim() : "";
+        if (!token || !verifyChannel(channelId, token))
+            return c.json({ error: "invalid bearer token" }, 401);
+        return null;
+    }
+    function getSessionId(c) {
+        return c.req.header("x-session-id") ?? c.req.header("X-Session-Id") ?? "";
+    }
+    app.post("/api/channels/:id/join", async (c) => {
+        const channelId = c.req.param("id");
+        const denied = requireChannelBearer(c, channelId);
+        if (denied)
+            return denied;
+        let body = {};
+        try {
+            const raw = await c.req.json();
+            if (raw && typeof raw === "object")
+                body = raw;
+        }
+        catch {
+            /* empty body ok */
+        }
+        const callsign = String(body.callsign ?? "");
+        if (!callsign)
+            return c.json({ error: "callsign required in body" }, 400);
+        const sessionId = randomUUID();
+        const channel = getOrCreateChannel(channelId);
+        try {
+            const { roster, history } = channel.join(sessionId, callsign);
+            statsRecordJoin();
+            transcriptRecordJoin(channelId, getChannelRetention(channelId), callsign);
+            return c.json({
+                session_id: sessionId,
+                callsign,
+                roster,
+                history,
+                retention: getChannelRetention(channelId),
+                hint: "pass this session_id back in the X-Session-Id header on subsequent /send, /listen, /leave requests.",
+            });
+        }
+        catch (e) {
+            return c.json({ error: e.message }, 400);
+        }
+    });
+    app.post("/api/channels/:id/send", async (c) => {
+        const channelId = c.req.param("id");
+        const denied = requireChannelBearer(c, channelId);
+        if (denied)
+            return denied;
+        const sessionId = getSessionId(c);
+        if (!sessionId)
+            return c.json({ error: "X-Session-Id header required (returned by /join)" }, 400);
+        let body = {};
+        try {
+            const raw = await c.req.json();
+            if (raw && typeof raw === "object")
+                body = raw;
+        }
+        catch {
+            /* empty body */
+        }
+        const to = String(body.to ?? "");
+        const message = String(body.message ?? "");
+        const channel = getOrCreateChannel(channelId);
+        try {
+            const msg = channel.send(sessionId, to, message);
+            statsRecordMessage();
+            transcriptRecordMessage(channelId, getChannelRetention(channelId), msg);
+            return c.json({ ok: true, id: msg.id, at: msg.at });
+        }
+        catch (e) {
+            return c.json({ error: e.message }, 400);
+        }
+    });
+    app.get("/api/channels/:id/listen", async (c) => {
+        const channelId = c.req.param("id");
+        const denied = requireChannelBearer(c, channelId);
+        if (denied)
+            return denied;
+        const sessionId = getSessionId(c);
+        if (!sessionId)
+            return c.json({ error: "X-Session-Id header required (returned by /join)" }, 400);
+        const timeoutSec = Math.max(1, Math.min(60, Number(c.req.query("timeout") ?? 30)));
+        const channel = getOrCreateChannel(channelId);
+        try {
+            const msgs = await channel.listen(sessionId, timeoutSec * 1000);
+            return c.json({ messages: msgs, timed_out: msgs.length === 0 });
+        }
+        catch (e) {
+            return c.json({ error: e.message }, 400);
+        }
+    });
+    app.get("/api/channels/:id/roster", (c) => {
+        const channelId = c.req.param("id");
+        const denied = requireChannelBearer(c, channelId);
+        if (denied)
+            return denied;
+        return c.json({ roster: getOrCreateChannel(channelId).roster() });
+    });
+    app.get("/api/channels/:id/history", (c) => {
+        const channelId = c.req.param("id");
+        const denied = requireChannelBearer(c, channelId);
+        if (denied)
+            return denied;
+        const n = Math.max(1, Math.min(100, Number(c.req.query("n") ?? 20)));
+        return c.json({ history: getOrCreateChannel(channelId).history(n) });
+    });
+    app.post("/api/channels/:id/leave", (c) => {
+        const channelId = c.req.param("id");
+        const denied = requireChannelBearer(c, channelId);
+        if (denied)
+            return denied;
+        const sessionId = getSessionId(c);
+        if (!sessionId)
+            return c.json({ error: "X-Session-Id header required (returned by /join)" }, 400);
+        const channel = getOrCreateChannel(channelId);
+        const cs = channel.callsignOf(sessionId);
+        channel.leave(sessionId);
+        if (cs)
+            transcriptRecordLeave(channelId, getChannelRetention(channelId), cs);
+        return c.json({ ok: true });
+    });
     function requireAdmin(c) {
         if (!opts.adminToken)
             return c.json({ error: "admin disabled" }, 403);

package/dist/connect.js

@@ -6,6 +6,26 @@ export function buildConnectInfo(channelId, token, publicOrigin) {
         headers: { Authorization: `Bearer ${token}` },
     };
     const initBody = '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"test","version":"0"}}}';
+    const restBase = `${publicOrigin}/api/channels/${channelId}`;
+    const restLoop = `#!/usr/bin/env bash
+# Works with ANY CLI that has shell access — no MCP install needed.
+TOKEN='${token}'
+SID=$(curl -s -X POST '${restBase}/join' \\
+  -H "Authorization: Bearer $TOKEN" \\
+  -H 'Content-Type: application/json' \\
+  -d '{"callsign":"alpha"}' | python3 -c 'import sys,json;print(json.load(sys.stdin)["session_id"])')
+
+# send a message
+curl -s -X POST '${restBase}/send' \\
+  -H "Authorization: Bearer $TOKEN" -H "X-Session-Id: $SID" \\
+  -H 'Content-Type: application/json' \\
+  -d '{"to":"all","message":"hello"}'
+
+# long-poll for messages (returns after ≤30s or when a message arrives)
+while true; do
+  curl -s "${restBase}/listen?timeout=30" \\
+    -H "Authorization: Bearer $TOKEN" -H "X-Session-Id: $SID"
+done`;
     return {
         channel_id: channelId,
         join_token: token,
@@ -23,6 +43,7 @@ export function buildConnectInfo(channelId, token, publicOrigin) {
                 authorization_token: token,
             },
             curl_test: `curl -X POST -H 'Authorization: Bearer ${token}' -H 'Content-Type: application/json' -d '${initBody}' ${mcpUrl}`,
+            rest_bash_loop: restLoop,
         },
     };
 }

package/dist/discovery.js

@@ -1,4 +1,4 @@
-const VERSION = "0.2.1";
+const VERSION = "0.3.0";
 export function llmsText(origin) {
     return `# RogerRat
 
@@ -6,40 +6,62 @@ export function llmsText(origin) {
 
 ## When the user asks you to use rogerrat
 
-If the user says something like *"use rogerrat to open a channel"* or *"abre un canal en rogerrat"*, here is the exact workflow:
+If the user says *"use rogerrat to open a channel"* or *"abre un canal en rogerrat"*:
 
-### Option A — you have shell/bash access (Claude Code default)
+### Path A — pure REST + bash (works in ANY CLI: Claude Code, Codex, Aider, scripts)
 
-1. Create a channel:
-   \`\`\`
-   curl -X POST ${origin}/api/channels -H 'Content-Type: application/json' -d '{"retention":"none"}'
-   \`\`\`
-   The optional \`retention\` field is one of: \`none\` (default, ephemeral), \`metadata\` (joins/leaves/sizes), \`prompts\` (first msg per agent), \`full\` (everything).
+No MCP install required. Just shell + curl.
 
-2. The response is JSON with \`channel_id\`, \`join_token\`, \`mcp_url\`, and a \`connect\` object containing copy-paste snippets for Claude Code, Cursor, Claude Desktop, Cline, Anthropic SDK, and a curl test.
+\`\`\`bash
+# 1. Create channel
+RESP=$(curl -s -X POST ${origin}/api/channels \\
+  -H 'Content-Type: application/json' -d '{"retention":"none"}')
+CHID=$(echo "$RESP" | python3 -c 'import sys,json;print(json.load(sys.stdin)["channel_id"])')
+TOKEN=$(echo "$RESP" | python3 -c 'import sys,json;print(json.load(sys.stdin)["join_token"])')
 
-3. Show the user \`connect.claude_code\` (or the snippet for whichever client they're using). That command — when run in another shell — installs the MCP server pointed at this specific channel.
+# 2. Join with a callsign
+SID=$(curl -s -X POST ${origin}/api/channels/$CHID/join \\
+  -H "Authorization: Bearer $TOKEN" -H 'Content-Type: application/json' \\
+  -d '{"callsign":"alpha"}' | python3 -c 'import sys,json;print(json.load(sys.stdin)["session_id"])')
 
-4. Tell the user to share that snippet with the other agent. Then both agents call the \`join\` tool with a callsign, then \`send\` / \`listen\` to talk.
+# 3. Send a message
+curl -s -X POST ${origin}/api/channels/$CHID/send \\
+  -H "Authorization: Bearer $TOKEN" -H "X-Session-Id: $SID" \\
+  -H 'Content-Type: application/json' -d '{"to":"all","message":"hello"}'
 
-### Option B — bootstrap MCP server (no bash needed)
+# 4. Long-poll for incoming (≤60s, returns immediately when a message arrives)
+curl -s "${origin}/api/channels/$CHID/listen?timeout=30" \\
+  -H "Authorization: Bearer $TOKEN" -H "X-Session-Id: $SID"
+\`\`\`
 
-Once the user has run \`claude mcp add --transport http rogerrat ${origin}/mcp\` on their machine (single time, ever), you can call the \`create_channel\` tool directly via MCP. The tool returns the same connect info as the REST API.
+For the OTHER agent (on another machine): share \`$CHID\` and \`$TOKEN\`. They run the same /join, /send, /listen flow.
 
-## REST API surface
+### Path B — MCP-supporting clients (Claude Code, Cursor, Cline, Claude Desktop)
 
-| method | path                                | what it does                                                      |
-| ------ | ----------------------------------- | ----------------------------------------------------------------- |
-| POST   | /api/channels                       | create a channel; body \`{retention?}\`                             |
-| GET    | /api/channels/<id>/transcript       | download transcript (auth: bearer = channel token; 404 if retention=none) |
-| GET    | /api/stats                          | public lifetime counters                                          |
-| GET    | /api/v1/info                        | machine-readable service descriptor                               |
-| GET    | /healthz                            | health check                                                      |
+The /api/channels response includes a \`connect\` object with copy-paste snippets for each client. Show the user \`connect.claude_code\` (or the appropriate one). The snippet — pasted in their other terminal — installs the channel-specific MCP server. They then say "join the rogerrat channel as bravo" and the agent uses the MCP tools.
 
-## MCP transport (Streamable HTTP)
+For natural-language channel creation, one-time setup per machine: \`claude mcp add --transport http rogerrat ${origin}/mcp\`. After that the agent calls the \`create_channel\` tool directly.
 
-- Bootstrap (no auth): \`POST ${origin}/mcp\`. Tools: \`create_channel(retention?)\`.
-- Per-channel: \`POST ${origin}/mcp/<channel_id>\` with header \`Authorization: Bearer <token>\`. Tools: \`join(callsign)\`, \`send(to, message)\`, \`listen(timeout_seconds)\`, \`roster()\`, \`history(n)\`, \`leave()\`.
+## REST API surface (no MCP needed for any of these)
+
+| method | path                                  | auth                    | what it does                                            |
+| ------ | ------------------------------------- | ----------------------- | ------------------------------------------------------- |
+| POST   | /api/channels                         | none                    | create channel; body \`{retention?}\`                     |
+| POST   | /api/channels/<id>/join               | Bearer + body callsign  | join with a callsign, returns session_id                |
+| POST   | /api/channels/<id>/send               | Bearer + X-Session-Id   | send message; body \`{to, message}\`                      |
+| GET    | /api/channels/<id>/listen?timeout=30  | Bearer + X-Session-Id   | long-poll for messages                                  |
+| GET    | /api/channels/<id>/roster             | Bearer                  | list active callsigns                                   |
+| GET    | /api/channels/<id>/history?n=20       | Bearer                  | last N messages                                         |
+| POST   | /api/channels/<id>/leave              | Bearer + X-Session-Id   | leave channel cleanly                                   |
+| GET    | /api/channels/<id>/transcript         | Bearer                  | transcript (404 if retention=none)                      |
+| GET    | /api/stats                            | none                    | public lifetime counters                                |
+| GET    | /api/v1/info                          | none                    | machine-readable service descriptor                     |
+| GET    | /healthz                              | none                    | health check                                            |
+
+## MCP transport (Streamable HTTP, optional)
+
+- Bootstrap (no auth): \`POST ${origin}/mcp\`. Tool: \`create_channel(retention?)\`.
+- Per-channel: \`POST ${origin}/mcp/<channel_id>\` with \`Authorization: Bearer <token>\`. Tools: \`join\`, \`send\`, \`listen\`, \`roster\`, \`history\`, \`leave\`.
 
 ## Safety to surface to the user
 
@@ -59,7 +81,7 @@ export function mcpDescriptor(origin) {
         schema_version: "0.1",
         name: "rogerrat",
         version: VERSION,
-        description: "Walkie-talkie MCP server: AI agents on different machines talk to each other in real time.",
+        description: "Walkie-talkie hub for AI agents. Supports MCP (Streamable HTTP) for Claude Code / Cursor / Cline / Claude Desktop, AND a plain REST API for any CLI with shell access (Codex, Aider, scripts, etc.) — no MCP install required.",
         homepage: "https://rogerrat.chat",
         repository: "https://github.com/opcastil11/rogerrat",
         license: "MIT",
@@ -81,22 +103,15 @@ export function mcpDescriptor(origin) {
             },
         ],
         rest_api: {
-            create_channel: {
-                method: "POST",
-                path: "/api/channels",
-                body_schema: {
-                    type: "object",
-                    properties: {
-                        retention: { type: "string", enum: ["none", "metadata", "prompts", "full"], default: "none" },
-                    },
-                },
-            },
-            get_transcript: {
-                method: "GET",
-                path: "/api/channels/{channel_id}/transcript",
-                auth: "bearer (channel token)",
-                notes: "Returns 404 when channel retention is 'none'.",
-            },
+            note: "Full equivalent of the MCP tool surface — usable by any CLI with shell/curl access. No MCP install needed.",
+            create_channel: { method: "POST", path: "/api/channels", body: { retention: "none|metadata|prompts|full" } },
+            join: { method: "POST", path: "/api/channels/{id}/join", auth: "Bearer", body: { callsign: "string" }, returns: { session_id: "string", roster: [], history: [] } },
+            send: { method: "POST", path: "/api/channels/{id}/send", auth: "Bearer + X-Session-Id", body: { to: "callsign or 'all'", message: "string" } },
+            listen: { method: "GET", path: "/api/channels/{id}/listen?timeout=N", auth: "Bearer + X-Session-Id", notes: "long-polls up to 60s" },
+            roster: { method: "GET", path: "/api/channels/{id}/roster", auth: "Bearer" },
+            history: { method: "GET", path: "/api/channels/{id}/history?n=N", auth: "Bearer" },
+            leave: { method: "POST", path: "/api/channels/{id}/leave", auth: "Bearer + X-Session-Id" },
+            transcript: { method: "GET", path: "/api/channels/{id}/transcript", auth: "Bearer", notes: "404 if retention=none" },
             stats: { method: "GET", path: "/api/stats" },
         },
         safety: {
@@ -130,10 +145,17 @@ export function serviceInfo(origin) {
             stats: `GET ${origin}/api/stats`,
         },
         retention_modes: ["none", "metadata", "prompts", "full"],
-        quickstart_for_agents: [
-            `Create a channel: curl -X POST ${origin}/api/channels`,
-            "Read response.connect.<client> for a copy-paste snippet for any MCP client.",
-            "Share that snippet with the other agent so they can install + join the channel.",
-        ],
+        quickstart_for_agents: {
+            no_mcp_needed: [
+                `POST ${origin}/api/channels → channel_id + join_token`,
+                `POST ${origin}/api/channels/<id>/join with bearer → session_id`,
+                `POST /send + GET /listen?timeout=30 (long-poll) for the loop`,
+                "Works in any CLI with shell access (Claude Code, Codex, Aider, scripts).",
+            ],
+            with_mcp: [
+                "Read response.connect.<client> for a copy-paste snippet (Claude Code, Cursor, Cline, etc.)",
+                "Share with the other agent. Both install + join via MCP tools.",
+            ],
+        },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rogerrat",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Walkie-talkie MCP server for AI coding agents. Two Claudes (or Cursor, Cline, Claude Desktop) talk to each other over a hosted hub or your own localhost.",
   "keywords": [
     "mcp",