shraga 0.1.73 → 0.1.74

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shraga",
-  "version": "0.1.73",
+  "version": "0.1.74",
   "description": "The teammate you delegate coding to — a self-hostable, multi-user AI coding agent web UI (Claude Code, with a pluggable engine seam).",
   "type": "module",
   "main": "./src/index.ts",

package/src/cli.ts

@@ -29,6 +29,9 @@ Subcommands:
   ingress                 Run the host-header TCP router (INGRESS_PORT, default 3100)
                           for previews + blue-green flips. Own process, survives restarts.
   user add <email> <pw>   Seed a local username/password user
+  para post [text]        Push a message into a linked para.li conversation.
+                          Text from [text], --file <path>, or stdin (preferred for
+                          multi-line reports). --conn <id> picks a link when several exist.
 
 Environment:
   CLOUDFLARE_TUNNEL_TOKEN   If set, starts a Cloudflare Tunnel alongside the server.
@@ -59,6 +62,60 @@ if (args[0] === 'user' && args[1] === 'add') {
   process.exit(0);
 }
 
+// `shraga para post [text]` — the PROACTIVE half of the para.li agent lane.
+//
+// The reactive half (para asks, shraga answers) is driven by para.li calling `/api/para/turn`, and
+// the only other outbound path is the deploy-notice bus subscriber in `para/feature.ts` — which is
+// gated on `kind === 'deploy'`. So a SCHEDULED run (a daily digest) had no way to reach the lane at
+// all: it composes text on its own clock with no inbound turn to answer and no deploy event to ride.
+// This is that door, and it is a CLI rather than a route because the caller is the agent itself,
+// running Bash on this very box: a local process reading the same `para-links.json` the feature
+// writes needs no listener, no API key, and no second copy of the callback secret.
+//
+// Text comes from stdin by default. A digest is multi-line markdown with backticks and emoji, and
+// making a model shell-quote that into argv is a defect generator; `... | shraga para post` is not.
+if (args[0] === 'para' && args[1] === 'post') {
+  const { loadLinks } = await import('./server/para/feature.ts');
+  const { postProactive } = await import('./server/para/streamer.ts');
+
+  const links = loadLinks();
+  const wanted = flag('conn');
+  const ids = Object.keys(links);
+  // Refuse to guess. Picking "the first" would silently deliver a private report to whichever
+  // connection happened to sort first the day a second one is added.
+  const connId = wanted ?? (ids.length === 1 ? ids[0] : undefined);
+  if (!connId || !links[connId]) {
+    console.error(ids.length
+      ? `usage: shraga para post --conn <connId>   (linked: ${ids.join(', ')})`
+      : 'no para link yet — send one message from para.li to this agent first, then retry.');
+    process.exit(1);
+  }
+  const link = links[connId];
+
+  const file = flag('file');
+  let text: string;
+  if (file) {
+    text = (await import('node:fs')).readFileSync(file, 'utf-8');
+  } else {
+    // A bare positional (not a flag, and not a flag's VALUE) is accepted for one-liners.
+    const flagVals = new Set<string>();
+    for (let i = 0; i < args.length; i++) if (args[i].startsWith('--')) flagVals.add(args[i + 1]);
+    const positional = args.slice(2).find((a) => !a.startsWith('--') && !flagVals.has(a));
+    text = positional ?? await new Response(Bun.stdin.stream()).text();
+  }
+  if (!text.trim()) {
+    console.error('nothing to post: text was empty (pipe it on stdin, pass --file, or give it as an argument)');
+    process.exit(1);
+  }
+
+  const ok = await postProactive({ url: link.url, secret: link.secret, connId }, link.convId, text);
+  // Exit code is the point: `postProactive` swallows transport failures into `false`, so a caller
+  // that only looked at stdout would read a silent drop as a successful delivery.
+  if (!ok) { console.error(`\u2716 para post FAILED \u2192 ${link.convId}`); process.exit(1); }
+  console.log(`\u2705 posted to ${link.convId}`);
+  process.exit(0);
+}
+
 // `shraga ingress` — host-header TCP router for previews + blue-green flips.
 // Runs as its OWN process (INGRESS_PORT), deliberately separate from the server so it
 // survives server restarts during a flip. Reads dataPath('ingress-router.json').

package/src/server/para/feature.ts

@@ -50,9 +50,9 @@ const LINKS_PATH = dataPath('para-links.json');
  *  taken from `validateApiKey`, never from the request body. A link written before this field
  *  existed has no email and is therefore not an owner: it receives no notices until its next turn
  *  refreshes the entry. */
-type Link = ParaCallback & { convId: string; at: number; uid: string; email?: string };
+export type Link = ParaCallback & { convId: string; at: number; uid: string; email?: string };
 
-function loadLinks(): Record<string, Link> {
+export function loadLinks(): Record<string, Link> {
   if (!existsSync(LINKS_PATH)) return {};
   try { return JSON.parse(readFileSync(LINKS_PATH, 'utf-8')); } catch (err) {
     console.warn('[para] links file unreadable, starting empty:', (err as Error).message);