@paigy/mcp 0.20.0 → 0.22.0

package/dist/{chunk-HO3OJHRA.js → chunk-JNQ4KHZA.js}

@@ -1,6 +1,6 @@
 import {
   AGENT_NAME
-} from "./chunk-VWQQ3VJF.js";
+} from "./chunk-XVZDHNKB.js";
 
 // src/clients.ts
 import { execFile } from "child_process";

package/dist/{chunk-VWQQ3VJF.js → chunk-XVZDHNKB.js}

@@ -3243,24 +3243,36 @@ var PROTO = "paigy-pair-v2|sas=24";
 var SAS_BITS = 24;
 var TOKEN_PATH = join(homedir(), ".paigy", "token.json");
 var KEY_PATH = join(homedir(), ".paigy", "key.json");
-function saveToken(token) {
+var SHARED = "*";
+function readTokenFile() {
+  if (!existsSync(TOKEN_PATH)) return {};
+  try {
+    const parsed = JSON.parse(readFileSync(TOKEN_PATH, "utf8"));
+    if (typeof parsed.access_token === "string") return { [SHARED]: parsed };
+    return parsed;
+  } catch {
+    return {};
+  }
+}
+function saveToken(token, agent2 = AGENT_NAME) {
+  const slots = { ...readTokenFile(), [agent2]: token };
   mkdirSync(join(homedir(), ".paigy"), { recursive: true });
-  writeFileSync(TOKEN_PATH, JSON.stringify(token, null, 2) + "\n", { mode: 384 });
+  writeFileSync(TOKEN_PATH, JSON.stringify(slots, null, 2) + "\n", { mode: 384 });
 }
 var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-function readToken() {
+function readToken(agent2 = AGENT_NAME) {
   if (process.env.PAIGY_TOKEN) return process.env.PAIGY_TOKEN;
-  if (existsSync(TOKEN_PATH)) {
-    try {
-      return JSON.parse(readFileSync(TOKEN_PATH, "utf8")).access_token ?? "";
-    } catch {
-    }
-  }
-  return "";
-}
-function deleteToken() {
-  if (!existsSync(TOKEN_PATH)) return false;
-  rmSync(TOKEN_PATH);
+  const slots = readTokenFile();
+  return (slots[agent2] ?? slots[SHARED])?.access_token ?? "";
+}
+function deleteToken(agent2 = AGENT_NAME) {
+  const slots = readTokenFile();
+  const removed = agent2 in slots || SHARED in slots;
+  if (!removed) return false;
+  delete slots[agent2];
+  delete slots[SHARED];
+  if (Object.keys(slots).length === 0) rmSync(TOKEN_PATH);
+  else writeFileSync(TOKEN_PATH, JSON.stringify(slots, null, 2) + "\n", { mode: 384 });
   return true;
 }
 async function revokeToken(token) {

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   autoConfigureClients,
   claudeInstallHint,
   enablePaigyTools
-} from "./chunk-HO3OJHRA.js";
+} from "./chunk-JNQ4KHZA.js";
 import {
   clearSurface,
   writeSurface
@@ -38,7 +38,7 @@ import {
   sleep,
   startE2ee,
   submitNotification
-} from "./chunk-VWQQ3VJF.js";
+} from "./chunk-XVZDHNKB.js";
 
 // src/index.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -267,7 +267,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
   tools: [
     {
       name: "pair",
-      description: "Pair this agent with the user's Paigy account (one-time) \u2014 required before notify_user/await_reply work. It does NOT open a browser; the user enters the code in the Paigy app (or scans `qr`). Step 1: call with NO args \u2014 returns { user_code, device_code, qr, user_message } AND starts polling for approval in the background. SHOW the user `user_message` (the bare code) so it isn't buried in prose, THEN call step 2 \u2014 you can do both in the same turn (emit the code text first, then call pair). Step 2: call with that device_code to collect the result. Because approval is already being polled in the background, this returns the moment the user approves; on { status:'pending' } just call again to keep waiting; on { status:'awaiting_confirmation' } (E2EE) show the bare `user_message` verify code and call again to finish. The leading text block of every result states the code plainly, so it shows even if you emit no prose. On { status:'paired' } ALWAYS follow the `enable_prompt` \u2014 ask the user to allowlist Paigy's tools so notify/await don't prompt each time.",
+      description: "Pair this agent with the user's Paigy account (one-time) \u2014 required before notify_user/await_reply work. It does NOT open a browser; the user enters the code in the Paigy app (or scans `qr`). Step 1: call with NO args \u2014 returns { user_code, device_code, qr, user_message } AND starts polling for approval in the background. REQUIRED: You MUST immediately print the `user_message` (the bare code) as a text message to the user, AND in that same turn call step 2 (pair with the device_code). This ensures the user sees the code in chat while the tool blocks/polls in the background for approval. Step 2: call with that device_code to collect the result. Because approval is already being polled in the background, this returns the moment the user approves; on { status:'pending' } just call again to keep waiting; on { status:'awaiting_confirmation' } (E2EE) show the bare `user_message` verify code and call again to finish. The leading text block of every result states the code plainly, so it shows even if you emit no prose. On { status:'paired' } ALWAYS follow the `enable_prompt` \u2014 ask the user to allowlist Paigy's tools so notify/await don't prompt each time.",
       inputSchema: json(PairSchema)
     },
     {
@@ -382,7 +382,7 @@ Enter it in the Paigy app: Inbox \u2192 Add a new agent.` },
                 user_message: `# ${code.user_code}
 
 Enter it in the Paigy app (Inbox \u2192 Add a new agent).`,
-                message: `SHOW the user \`user_message\` now (the bare code) so it isn't buried in prose, then call pair again with this device_code to finish \u2014 I'm ALREADY polling for approval in the background, so that call returns the moment they approve (it may still be pending, just call it again). You can do both in this same turn: emit the code text first, THEN call pair. Do NOT open a browser. The user may prefer scanning \`qr\` (print it verbatim in a fenced code block on request).`
+                message: `REQUIRED: You MUST immediately print \`user_message\` (the bare code) as a text message to the user, AND in that same turn call pair again with this device_code to poll. Do NOT end your turn without printing the code text, or it will be hidden inside the tool output. Because approval is already polling in the background, this call will wait for the user to approve and then return the token. Do NOT open a browser. The user may prefer scanning \`qr\` (print it verbatim in a fenced code block on request).`
               })
             }
           ]

package/dist/listen.js

@@ -6,7 +6,7 @@ import {
 import {
   checkReplies,
   registerDelivery
-} from "./chunk-VWQQ3VJF.js";
+} from "./chunk-XVZDHNKB.js";
 
 // src/listen.ts
 import { createClient } from "@supabase/supabase-js";

package/dist/onboard.js

@@ -3,7 +3,7 @@ import {
   autoConfigureClients,
   claudeInstallHint,
   openBrowser
-} from "./chunk-HO3OJHRA.js";
+} from "./chunk-JNQ4KHZA.js";
 import {
   AGENT_NAME,
   TOKEN_PATH,
@@ -11,7 +11,7 @@ import {
   requestCode,
   saveToken,
   sleep
-} from "./chunk-VWQQ3VJF.js";
+} from "./chunk-XVZDHNKB.js";
 
 // src/onboard.ts
 async function main() {

package/dist/statusline.js

@@ -6,7 +6,7 @@ import {
   BACKEND_URL,
   reach,
   readToken
-} from "./chunk-VWQQ3VJF.js";
+} from "./chunk-XVZDHNKB.js";
 
 // src/statusline.ts
 import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paigy/mcp",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "description": "Paigy MCP server — a voice inbox for your AI agents. Lets an agent notify a user and await their reply.",
   "license": "MIT",
   "type": "module",
@@ -36,8 +36,8 @@
     "tsup": "^8.3.5",
     "typescript": "^5.7.2",
     "vitest": "^2.1.8",
-    "@paigy/sdk": "0.1.0",
     "@paigy/schema": "0.0.0",
+    "@paigy/sdk": "0.1.0",
     "@paigy/crypto": "0.0.0"
   },
   "scripts": {