@paigy/mcp 0.13.0 → 0.14.0

package/dist/{chunk-KNCXKXUG.js → chunk-OSQ3UXY6.js}

@@ -8,7 +8,7 @@ import {
   readKeyFile,
   sealFields,
   verifiedRecipients
-} from "./chunk-O6W2T6D2.js";
+} from "./chunk-WGOGS2JC.js";
 
 // src/client.ts
 import { existsSync, readFileSync } from "fs";

package/dist/{chunk-O6W2T6D2.js → chunk-WGOGS2JC.js}

@@ -2597,6 +2597,15 @@ var MissedCallSchema = z.enum([
   "inbox",
   "dismiss"
 ]);
+var BrokerTuningSchema = z.object({
+  /** 'none' = skip the spoken ack after a mapped answer (power users find it slow). */
+  ackVerbosity: z.enum(["normal", "none"]).optional(),
+  /** How readily the mapper asks its one clarification: 'low' = only when truly
+   *  uninterpretable, 'high' = whenever not fully certain. */
+  clarifyEagerness: z.enum(["low", "normal", "high"]).optional(),
+  /** The user's own shorthand: when they say `say`, they mean `mean`. */
+  phrasebook: z.array(z.object({ say: z.string().min(1).max(60), mean: z.string().min(1).max(120) })).max(24).optional()
+});
 var UserSettingsSchema = z.object({
   permissions: z.object({
     call: z.boolean(),
@@ -2622,7 +2631,10 @@ var UserSettingsSchema = z.object({
    *  settings object without it can't silently flip the account's E2EE state.
    *  Absent = leave unchanged on write, 'off' on read (see store.ts). The demo
    *  account is plaintext by construction and refuses any non-'off' value. */
-  e2eeMode: z.enum(["off", "on"]).optional()
+  e2eeMode: z.enum(["off", "on"]).optional(),
+  /** Rung-2 broker tuning (#381). Optional and NOT defaulted, same stale-client
+   *  clobber guard as voiceMode: absent = leave unchanged on write. */
+  broker: BrokerTuningSchema.optional()
 });
 var HistoryItemSchema = z.object({
   id: z.string(),
@@ -3091,6 +3103,32 @@ var PROTO = "paigy-pair-v2|sas=24";
 var SAS_BITS = 24;
 var TOKEN_PATH = join(homedir(), ".paigy", "token.json");
 var KEY_PATH = join(homedir(), ".paigy", "key.json");
+var SURFACE_PATH = join(homedir(), ".paigy", "surface.json");
+function writeSurface(label, code, ttlSeconds) {
+  try {
+    mkdirSync(join(homedir(), ".paigy"), { recursive: true });
+    writeFileSync(
+      SURFACE_PATH,
+      JSON.stringify({ label, code, expiresAt: Date.now() + ttlSeconds * 1e3 }),
+      { mode: 384 }
+    );
+  } catch {
+  }
+}
+function clearSurface() {
+  try {
+    rmSync(SURFACE_PATH, { force: true });
+  } catch {
+  }
+}
+function readSurface(now = Date.now) {
+  try {
+    const { label, code, expiresAt } = JSON.parse(readFileSync(SURFACE_PATH, "utf8"));
+    return label && code && typeof expiresAt === "number" && expiresAt > now() ? { label, code } : null;
+  } catch {
+    return null;
+  }
+}
 function openBrowser(url) {
   const cmd = platform() === "darwin" ? "open" : platform() === "win32" ? "cmd" : "xdg-open";
   const args = platform() === "win32" ? ["/c", "start", url] : [url];
@@ -3290,6 +3328,9 @@ export {
   reach,
   AGENT_NAME,
   TOKEN_PATH,
+  writeSurface,
+  clearSurface,
+  readSurface,
   openBrowser,
   saveToken,
   sleep,

package/dist/index.js

@@ -6,16 +6,16 @@ import {
   scheduleCallback,
   setTaskState,
   submitNotification
-} from "./chunk-KNCXKXUG.js";
+} from "./chunk-OSQ3UXY6.js";
 import {
   NotifyRequestSchema,
   ScheduleCallbackSchema,
   SetTaskStateSchema,
+  clearSurface,
   deleteKeyFile,
   deleteToken,
   fetchCredential,
   finalizeE2ee,
-  openBrowser,
   pairStep,
   readKeyFile,
   readToken,
@@ -24,8 +24,9 @@ import {
   saveKeyFile,
   saveToken,
   sleep,
-  startE2ee
-} from "./chunk-O6W2T6D2.js";
+  startE2ee,
+  writeSurface
+} from "./chunk-WGOGS2JC.js";
 
 // src/index.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -137,6 +138,7 @@ function detectGit() {
   };
 }
 function pairedResult(token, sas, note, e2ee) {
+  clearSurface();
   const base = {
     status: "paired",
     nickname: token.nickname,
@@ -152,6 +154,7 @@ function pairedResult(token, sas, note, e2ee) {
   return { content: [{ type: "text", text: JSON.stringify(base) }] };
 }
 function awaitingConfirmResult(sas, device_code) {
+  writeSurface("verify code", sas, 600);
   return {
     content: [{
       type: "text",
@@ -160,8 +163,8 @@ function awaitingConfirmResult(sas, device_code) {
         e2ee: true,
         sas,
         device_code,
-        verify_message: `This account requires end-to-end encryption, so no access token is issued until you confirm the pairing. Ask the user to check that this code matches the one on their phone and CONFIRM it there: ${sas}. Pairing is NOT complete yet.`,
-        message: "The user must compare the SAS above and confirm on their phone. Once they do, call pair again with this device_code to finish \u2014 the token is granted only after they confirm."
+        verify_message: `YOUR NEXT MESSAGE TO THE USER MUST BE EXACTLY THIS CODE AND NOTHING ELSE, displayed large (a markdown heading): ${sas} \u2014 it is the verification code they must compare and type on their phone. Do not wrap it in explanation; every extra sentence buries it. This code REPLACES any earlier one (older pairing attempts are now stale).`,
+        message: "No token is issued until the user confirms the code match on their phone (E2EE account). After sending the bare code, call pair again with this device_code to keep waiting \u2014 the token arrives only after they confirm."
       })
     }]
   };
@@ -220,7 +223,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         const { keyFile, offer } = startE2ee();
         const code = await requestCode(void 0, offer);
         saveKeyFile({ ...keyFile, userCode: code.user_code });
-        openBrowser(code.verification_uri_complete);
+        writeSurface("pairing code", code.user_code, code.expires_in);
         const qr = qrcode(0, "M");
         qr.addData(code.verification_uri_complete);
         qr.make();
@@ -234,7 +237,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
               device_code: code.device_code,
               expires_in: code.expires_in,
               qr: qr.createASCII(1, 2),
-              message: "Show the user verification_uri_complete and user_code (their browser should have opened). If they'd rather scan than switch to a browser themselves, print `qr` verbatim in a fenced code block (monospace, no extra indentation) \u2014 it's a scannable QR code for the same link. After they approve, call pair again with this device_code to finish."
+              message: `YOUR NEXT MESSAGE TO THE USER MUST BE EXACTLY THIS CODE displayed large (a markdown heading): ${code.user_code} \u2014 plus ONE short line: enter it in the Paigy app (Inbox \u2192 Add a new agent). No other prose. Do NOT open a browser for the user. If their phone is handy they may prefer scanning \`qr\` (print it verbatim in a fenced code block on request). Then immediately call pair again with this device_code \u2014 it polls for the approval.`
             })
           }]
         };
@@ -243,7 +246,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       const start = Date.now();
       const capMs = 9e4;
       while (Date.now() - start < capMs) {
-        const step = await pairStep(device_code, kf);
+        let step;
+        try {
+          step = await pairStep(device_code, kf);
+        } catch (e) {
+          clearSurface();
+          throw e;
+        }
         if (step.kind === "e2ee_aborted") {
           deleteKeyFile();
           kf = null;

package/dist/listen.js

@@ -3,11 +3,11 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   checkReplies,
   registerDelivery
-} from "./chunk-KNCXKXUG.js";
+} from "./chunk-OSQ3UXY6.js";
 import {
   WAKE_EVENT,
   wakeChannel
-} from "./chunk-O6W2T6D2.js";
+} from "./chunk-WGOGS2JC.js";
 
 // src/listen.ts
 import { createClient } from "@supabase/supabase-js";

package/dist/onboard.js

@@ -8,7 +8,7 @@ import {
   requestCode,
   saveToken,
   sleep
-} from "./chunk-O6W2T6D2.js";
+} from "./chunk-WGOGS2JC.js";
 
 // src/onboard.ts
 async function main() {

package/dist/statusline.js

@@ -2,8 +2,9 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   BACKEND_URL,
+  readSurface,
   readToken
-} from "./chunk-O6W2T6D2.js";
+} from "./chunk-WGOGS2JC.js";
 
 // src/statusline.ts
 import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
@@ -18,7 +19,8 @@ var MODE_LABEL = {
   all_calls: "all calls",
   silent: "silent"
 };
-function render(status) {
+function render(status, surface = null) {
+  if (surface) return `paigy \u26A0 ${surface.label}: ${surface.code}`;
   if (!status) return "paigy: unpaired";
   return `paigy: ${MODE_LABEL[status.sessionMode]} \xB7 ${status.phone ? "phone \u2713" : "no phone"}`;
 }
@@ -44,6 +46,8 @@ async function fetchStatus(token) {
   return await res.json();
 }
 async function main() {
+  const surface = readSurface();
+  if (surface) return render(null, surface);
   const token = readToken();
   if (!token) return render(null);
   const cached = readCache();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paigy/mcp",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Paigy MCP server — a voice inbox for your AI agents. Lets an agent notify a user and await their reply.",
   "license": "MIT",
   "type": "module",