@paigy/mcp 0.36.0 → 0.38.0

package/dist/{chunk-VWVZLPZD.js → chunk-4UEL7Y5U.js}

@@ -10,7 +10,7 @@ import {
   saveToken,
   sleep,
   startE2ee
-} from "./chunk-PRC6GKRN.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/identity.ts
 var CLIENT_LABELS = {

package/dist/{chunk-XIPO3U6I.js → chunk-7IGGSB3H.js}

@@ -13,10 +13,10 @@ import {
   SetWorkStateSchema,
   mcpInputSchema,
   serverInstructions
-} from "./chunk-WNE6STMA.js";
+} from "./chunk-KE63GZEQ.js";
 import {
   AGENT_NAME
-} from "./chunk-PRC6GKRN.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/toolset.ts
 var ONBOARD_DESCRIPTION = "Get this agent talking to Paigy \u2014 call it FIRST, before contact/await_reply, and any time you're unsure who you are. One call, and it does whatever the situation needs: NOT SET UP \u2192 hatches an identity instantly if this machine holds a device credential (the user ran the Paigy desktop app or harness), otherwise starts the code ceremony; ALREADY SET UP \u2192 returns your current identity and offers the two things left to decide, renaming it or unpairing; TOKEN NO LONGER VALID \u2192 says so, then re-pairs. Pass { name, voice } to choose who you are when hatching, or to RENAME yourself when already set up (voices: rachel, george, jessica, brian, lily). Safe to call any time: idempotent, and it never writes settings \u2014 the tool-allowlist state it reports is read-only. If it returns a `user_code`, print it to the user immediately and call onboard again with the `device_code`. If it returns `enable_command`, PRINT that command for the user to run \u2014 you cannot apply it yourself (it writes your own permission allowlist, which hosts block as privilege escalation), so print it, don't wait for it, and carry on.";
@@ -24,9 +24,11 @@ var SERVER_INSTRUCTIONS = serverInstructions({ waits: true });
 
 // src/tools.ts
 import { z } from "zod";
+var UpdateGoalToolSchema = z.object({ goalId: z.string().uuid(), revision: z.number().int().positive(), changes: z.record(z.unknown()), reason: z.string().min(1) });
 var AwaitReplySchema = z.object({
   notificationId: z.string().describe("The notificationId returned by contact \u2014 waits for the user's reply to THIS notification only.")
 });
+var ClaimGoalSchema = z.object({ goalId: z.string().uuid() });
 var OnboardSchema = z.object({
   name: z.string().max(60).optional(),
   voice: z.string().max(40).optional(),
@@ -106,6 +108,8 @@ var TOOLS = [
     description: CREATE_GOAL_DESCRIPTION,
     inputSchema: mcpInputSchema(CreateGoalSchema)
   },
+  { name: "claim_goal", description: "Claim a ready Goal you own and begin work. Returns its active revision.", inputSchema: mcpInputSchema(ClaimGoalSchema) },
+  { name: "update_goal", description: "Update an owned Goal at an exact revision; stale revisions are rejected.", inputSchema: mcpInputSchema(UpdateGoalToolSchema) },
   {
     name: "set_work_state",
     description: SET_WORK_STATE_DESCRIPTION,
@@ -291,7 +295,9 @@ function enablePaigyTools(scope = "user", cwd = process.cwd()) {
 
 export {
   SERVER_INSTRUCTIONS,
+  UpdateGoalToolSchema,
   AwaitReplySchema,
+  ClaimGoalSchema,
   OnboardSchema,
   PairSchema,
   GetThreadSchema,

package/dist/{chunk-WNE6STMA.js → chunk-KE63GZEQ.js}

@@ -42,6 +42,16 @@ var CreateGoalSchema = z.object({
   idempotencyKey: z.string().trim().min(1).max(200)
 });
 var CREATE_GOAL_DESCRIPTION = "Create a durable root Goal for an outcome. Admission only: claim it before doing work, then update its state as it advances. Use a stable idempotencyKey so retries do not create duplicates. Returns goalId, state, revision, ownerParticipant, and next claim_goal.";
+var UpdateGoalSchema = z.object({
+  revision: z.number().int().positive(),
+  changes: z.object({
+    outcome: z.string().trim().min(1).max(1e4).optional(),
+    state: z.enum(["active", "waiting", "done", "cancelled"]).optional(),
+    progress: z.string().trim().min(1).max(1e4).optional(),
+    reviewed: z.literal(true).optional()
+  }).refine((v) => Object.keys(v).length > 0),
+  reason: z.string().trim().min(1).max(2e3)
+});
 var fmtMin = (m) => m >= 60 ? `${m / 60} hr` : `${m} min`;
 var STANDARD_MEANS = (() => {
   const plan = MISSED_CALL_PLAN.backoff_standard;
@@ -455,6 +465,7 @@ var AwaitItemSchema = z2.discriminatedUnion("type", [
 var CallbackTriggerSchema = z2.enum(["on_done", "on_blocked", "scheduled"]);
 var ScheduleCallbackSchema = z2.object({
   parentId: z2.string().describe("The thread to call back on (from a prior contact / reply / request)."),
+  goalId: z2.string().uuid().optional().describe("The Goal this callback advances; preferred for Goal-owned work."),
   trigger: CallbackTriggerSchema,
   dueInSeconds: z2.number().int().positive().optional().describe("For 'scheduled' only: how many seconds from now to fire."),
   note: z2.string().optional().describe("What to tell the user when you follow up.")
@@ -899,6 +910,15 @@ var AgentActivitySchema = z2.object({
 var ConnectionSummarySchema = z2.object({
   /** The connection = the agent's token id (used to address a request). */
   id: z2.string(),
+  /** The credential kind: "device" = a paired machine (mint-only — it hosts and mints, it
+   *  never talks); "agent" = an identity that sends. The roster and devices surfaces split
+   *  on this. Optional/absent reads as "agent" (a row predating the kind column). See
+   *  apps/api/src/tokens/devices-vs-agents-design.md. */
+  kind: z2.enum(["device", "agent"]).optional(),
+  /** For an agent, the token id of the DEVICE that minted it — so agents group under their
+   *  machine, and revoking a device cascades to them. Null on devices, and on unlinked
+   *  agents (phone-launched, provider-managed, or minted before the link existed). */
+  mintedByDevice: z2.string().nullable().optional(),
   device: z2.string().nullable(),
   /** The agent's display name (the single pairing name). */
   name: z2.string(),

package/dist/{chunk-PRC6GKRN.js → chunk-PPACGOTU.js}

@@ -1,12 +1,12 @@
 // ../../packages/sdk/dist/index.js
 import { createRequire as __sdkCreateRequire } from "module";
-import { randomUUID } from "crypto";
+import { createHash, randomUUID } from "crypto";
 import { z as z2 } from "zod";
 import { z } from "zod";
 import { ZodFirstPartyTypeKind as ZodFirstPartyTypeKind3 } from "zod/v3";
 import { ZodFirstPartyTypeKind } from "zod/v3";
 import { ZodFirstPartyTypeKind as ZodFirstPartyTypeKind2 } from "zod/v3";
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, rmSync, statSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
@@ -2274,7 +2274,18 @@ async function proxy() {
   return agent ??= new (await import("undici")).EnvHttpProxyAgent();
 }
 var INSTANCE_ID = randomUUID();
-var SESSION_ID = process.env.PAIGY_SESSION_ID ?? process.env.CLAUDE_CODE_SESSION_ID ?? INSTANCE_ID;
+var WORKSPACE_ID = (() => {
+  try {
+    return `cwd-${createHash("sha256").update(process.cwd()).digest("hex").slice(0, 16)}`;
+  } catch {
+    return INSTANCE_ID;
+  }
+})();
+var envSession = (key) => {
+  const v = process.env[key];
+  return v && v.trim() ? v : void 0;
+};
+var SESSION_ID = envSession("PAIGY_SESSION_ID") ?? envSession("CLAUDE_CODE_SESSION_ID") ?? envSession("CODEX_THREAD_ID") ?? envSession("CODEX_SESSION_ID") ?? WORKSPACE_ID;
 function sessionId() {
   return SESSION_ID;
 }
@@ -3542,6 +3553,16 @@ var CreateGoalSchema = z.object({
   ownerParticipant: z.string().trim().min(1).optional(),
   idempotencyKey: z.string().trim().min(1).max(200)
 });
+var UpdateGoalSchema = z.object({
+  revision: z.number().int().positive(),
+  changes: z.object({
+    outcome: z.string().trim().min(1).max(1e4).optional(),
+    state: z.enum(["active", "waiting", "done", "cancelled"]).optional(),
+    progress: z.string().trim().min(1).max(1e4).optional(),
+    reviewed: z.literal(true).optional()
+  }).refine((v) => Object.keys(v).length > 0),
+  reason: z.string().trim().min(1).max(2e3)
+});
 var fmtMin = (m) => m >= 60 ? `${m / 60} hr` : `${m} min`;
 var STANDARD_MEANS = (() => {
   const plan = MISSED_CALL_PLAN.backoff_standard;
@@ -3989,6 +4010,7 @@ var AwaitItemSchema = z2.discriminatedUnion("type", [
 var CallbackTriggerSchema = z2.enum(["on_done", "on_blocked", "scheduled"]);
 var ScheduleCallbackSchema = z2.object({
   parentId: z2.string().describe("The thread to call back on (from a prior contact / reply / request)."),
+  goalId: z2.string().uuid().optional().describe("The Goal this callback advances; preferred for Goal-owned work."),
   trigger: CallbackTriggerSchema,
   dueInSeconds: z2.number().int().positive().optional().describe("For 'scheduled' only: how many seconds from now to fire."),
   note: z2.string().optional().describe("What to tell the user when you follow up.")
@@ -4433,6 +4455,15 @@ var AgentActivitySchema = z2.object({
 var ConnectionSummarySchema = z2.object({
   /** The connection = the agent's token id (used to address a request). */
   id: z2.string(),
+  /** The credential kind: "device" = a paired machine (mint-only — it hosts and mints, it
+   *  never talks); "agent" = an identity that sends. The roster and devices surfaces split
+   *  on this. Optional/absent reads as "agent" (a row predating the kind column). See
+   *  apps/api/src/tokens/devices-vs-agents-design.md. */
+  kind: z2.enum(["device", "agent"]).optional(),
+  /** For an agent, the token id of the DEVICE that minted it — so agents group under their
+   *  machine, and revoking a device cascades to them. Null on devices, and on unlinked
+   *  agents (phone-launched, provider-managed, or minted before the link existed). */
+  mintedByDevice: z2.string().nullable().optional(),
   device: z2.string().nullable(),
   /** The agent's display name (the single pairing name). */
   name: z2.string(),
@@ -5140,7 +5171,7 @@ function subagentThread(env = process.env, sessionId2) {
   return sub ? `${base}:sub:${sub}` : base;
 }
 function uuidFromKey(key) {
-  const h = createHash("sha1").update(`paigy-thread:${key}`).digest();
+  const h = createHash2("sha1").update(`paigy-thread:${key}`).digest();
   h[6] = h[6] & 15 | 80;
   h[8] = h[8] & 63 | 128;
   const hex = h.subarray(0, 16).toString("hex");
@@ -5424,6 +5455,18 @@ async function createGoal(input, opts = {}) {
   if (!res.ok) throw new Error(`create_goal failed: ${res.status} ${await res.text()}`);
   return await res.json();
 }
+async function claimGoal(goalId, opts = {}) {
+  const token = authToken(opts.token) ?? "";
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/goals/${encodeURIComponent(goalId)}/claim`, { method: "POST", headers: { authorization: `Bearer ${token}` } }));
+  if (!res.ok) throw new Error(`claim_goal failed: ${res.status} ${await res.text()}`);
+  return await res.json();
+}
+async function updateGoal(goalId, input, opts = {}) {
+  const token = authToken(opts.token) ?? "";
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/goals/${encodeURIComponent(goalId)}`, { method: "PATCH", headers: { "content-type": "application/json", authorization: `Bearer ${token}` }, body: JSON.stringify(input) }));
+  if (!res.ok) throw new Error(`update_goal failed: ${res.status} ${await res.text()}`);
+  return await res.json();
+}
 async function submitNotification(req, opts = {}) {
   const token = authToken(opts.token) ?? "";
   const body = await sealForE2ee(req, token);
@@ -5774,6 +5817,7 @@ export {
   NotifyRequestSchema,
   SetWorkStateSchema,
   ScheduleCallbackSchema,
+  sessionSlot,
   contactParentId,
   AGENT_NAME,
   TOKEN_PATH,
@@ -5794,6 +5838,8 @@ export {
   pairStep,
   UnpairedError,
   createGoal,
+  claimGoal,
+  updateGoal,
   submitNotification,
   getThread,
   searchThreads,

package/dist/enable.js

@@ -2,9 +2,9 @@
 import {
   PAIGY_TOOL_IDS,
   enablePaigyTools
-} from "./chunk-XIPO3U6I.js";
-import "./chunk-WNE6STMA.js";
-import "./chunk-PRC6GKRN.js";
+} from "./chunk-7IGGSB3H.js";
+import "./chunk-KE63GZEQ.js";
+import "./chunk-PPACGOTU.js";
 
 // src/enable.ts
 function main() {

package/dist/index.js

@@ -9,10 +9,11 @@ import {
   resolvePairing,
   startPairing,
   suggestedAgentName
-} from "./chunk-VWVZLPZD.js";
+} from "./chunk-4UEL7Y5U.js";
 import {
   AnswerCallerQuestionSchema,
   AwaitReplySchema,
+  ClaimGoalSchema,
   ENABLE_COMMAND,
   GetThreadSchema,
   OnboardSchema,
@@ -22,14 +23,15 @@ import {
   SearchThreadsSchema,
   SetTaskStateToolSchema,
   TOOLS,
+  UpdateGoalToolSchema,
   autoConfigureClients,
   claudeInstallHint,
   paigyToolsAllowlisted
-} from "./chunk-XIPO3U6I.js";
+} from "./chunk-7IGGSB3H.js";
 import {
   CreateGoalSchema,
   HandoffSchema
-} from "./chunk-WNE6STMA.js";
+} from "./chunk-KE63GZEQ.js";
 import {
   clearSurface,
   writeSurface
@@ -43,6 +45,7 @@ import {
   answerCallerQuestion,
   awaitReply2,
   checkReplies,
+  claimGoal,
   contactParentId,
   createGoal,
   deleteKeyFile,
@@ -63,8 +66,9 @@ import {
   setWorkState,
   slotName,
   submitNotification,
+  updateGoal,
   whoAmI
-} from "./chunk-PRC6GKRN.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/index.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -189,6 +193,7 @@ function pairStartResult(start, loggedOut) {
   qr.make();
   const link = start.verificationUri;
   const ascii = qr.createASCII(1, 2);
+  const door = "in Paigy \u2192 Devices \u2192 Connect a computer";
   const userMessage = loggedOut ? `**Your machine was logged out.** Reconnect and every agent here pairs itself again \u2014 no more codes.
 
 **[Reconnect this machine](${link})**
@@ -201,14 +206,17 @@ Or scan:
 ${ascii}
 \`\`\`
 
-Or enter code **${start.userCode}** in the Paigy app (Inbox \u2192 Add a new agent).` : `**[Approve this agent](${link})**
+Or type **${start.userCode}** ${door}.` : `**Approve this agent from your phone**
 
-Or open: ${link}
-Or enter code **${start.userCode}** in the Paigy app (Inbox \u2192 Add a new agent).`;
+**[Open](${link})** ${link}
+
+Or scan the QR, or type **${start.userCode}** ${door}.
+
+This session isn't on a connected computer, so it asks by code.`;
   return { content: [
     { type: "text", text: loggedOut ? `YOUR MACHINE WAS LOGGED OUT \u2014 reconnect: ${link}
-(or scan the QR, or enter code ${start.userCode} in the app)` : `APPROVE: ${link}
-(or code ${start.userCode} in the app: Inbox \u2192 Add a new agent)` },
+(or scan the QR, or type ${start.userCode} ${door})` : `APPROVE THIS AGENT FROM YOUR PHONE: ${link}
+(or scan the QR, or type ${start.userCode} ${door})` },
     { type: "text", text: JSON.stringify({
       status: "awaiting_approval",
       verification_uri_complete: link,
@@ -443,6 +451,14 @@ async function handleTool(request, signal) {
       const result = await createGoal(CreateGoalSchema.parse(request.params.arguments));
       return { content: [{ type: "text", text: JSON.stringify(result) }] };
     }
+    case "claim_goal": {
+      const { goalId } = ClaimGoalSchema.parse(request.params.arguments);
+      return { content: [{ type: "text", text: JSON.stringify(await claimGoal(goalId)) }] };
+    }
+    case "update_goal": {
+      const { goalId, ...input } = UpdateGoalToolSchema.parse(request.params.arguments);
+      return { content: [{ type: "text", text: JSON.stringify(await updateGoal(goalId, input)) }] };
+    }
     case "schedule_callback": {
       const result = await scheduleCallback(ScheduleCallbackSchema.parse(request.params.arguments));
       return { content: [{ type: "text", text: JSON.stringify(result) }] };

package/dist/listen.js

@@ -5,14 +5,14 @@ import {
 import {
   WAKE_EVENT,
   wakeChannel
-} from "./chunk-WNE6STMA.js";
+} from "./chunk-KE63GZEQ.js";
 import {
   ackReply,
   authToken,
   decodeReply,
   registerDelivery,
   sweepLeased
-} from "./chunk-PRC6GKRN.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/listen.ts
 import { createClient } from "@supabase/supabase-js";

package/dist/onboard.js

@@ -3,13 +3,13 @@ import {
   resolvePairing,
   startPairing,
   suggestedAgentName
-} from "./chunk-VWVZLPZD.js";
+} from "./chunk-4UEL7Y5U.js";
 import {
   autoConfigureClients,
   claudeInstallHint,
   openBrowser
-} from "./chunk-XIPO3U6I.js";
-import "./chunk-WNE6STMA.js";
+} from "./chunk-7IGGSB3H.js";
+import "./chunk-KE63GZEQ.js";
 import {
   AGENT_NAME,
   TOKEN_PATH,
@@ -20,7 +20,7 @@ import {
   saveToken,
   setIdentity,
   whoAmI
-} from "./chunk-PRC6GKRN.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/onboard.ts
 function reportRegistered() {

package/dist/slot.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import {
+  AGENT_NAME
+} from "./chunk-PPACGOTU.js";
+
+// src/slot.ts
+process.stdout.write(AGENT_NAME);

package/dist/statusline.js

@@ -4,9 +4,12 @@ import {
 } from "./chunk-3SVNPJPN.js";
 import {
   BACKEND_URL,
+  listSlots,
   reach,
-  readToken
-} from "./chunk-PRC6GKRN.js";
+  readToken,
+  sessionSlot,
+  slotName
+} from "./chunk-PPACGOTU.js";
 
 // src/statusline.ts
 import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
@@ -21,10 +24,43 @@ var MODE_LABEL = {
   all_calls: "all calls",
   silent: "silent"
 };
-function render(status, surface = null) {
-  if (surface) return `paigy \u26A0 ${surface.label}: ${surface.code}`;
-  if (!status) return "paigy: unpaired";
-  return `paigy: ${MODE_LABEL[status.sessionMode]} \xB7 ${status.phone ? "phone \u2713" : "no phone"}`;
+function render(v) {
+  switch (v.kind) {
+    case "surface":
+      return `paigy \u26A0 ${v.label}: ${v.code}`;
+    case "unpaired":
+      return "paigy: unpaired";
+    case "device-only":
+      return "paigy: paired \xB7 session hatches on first use";
+    case "session": {
+      const who = v.name ? `${v.name} \xB7 ` : "";
+      if (!v.status) return `paigy: ${who}revoked`;
+      return `paigy: ${who}${MODE_LABEL[v.status.sessionMode]} \xB7 ${v.status.phone ? "phone \u2713" : "no phone"}`;
+    }
+  }
+}
+async function stdinSessionId(input = process.stdin) {
+  if (input.isTTY) return void 0;
+  try {
+    const raw = await new Promise((resolve) => {
+      let buf = "";
+      const done = () => resolve(buf);
+      input.setEncoding("utf8");
+      input.on("data", (c) => {
+        buf += c;
+      });
+      input.on("end", done);
+      input.on("error", done);
+      setTimeout(done, 300).unref();
+    });
+    const sid = JSON.parse(raw).session_id;
+    return typeof sid === "string" && sid.trim() ? sid : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function resolveSlot(sid) {
+  return process.env.PAIGY_AGENT || sessionSlot(sid);
 }
 function readCache() {
   try {
@@ -49,18 +85,22 @@ async function fetchStatus(token) {
 }
 async function main() {
   const surface = readSurface();
-  if (surface) return render(null, surface);
-  const token = readToken();
-  if (!token) return render(null);
+  if (surface) return render({ kind: "surface", ...surface });
+  const slot = resolveSlot(await stdinSessionId());
+  const token = readToken(slot);
+  if (!token) {
+    return render(listSlots().includes("Desktop") ? { kind: "device-only" } : { kind: "unpaired" });
+  }
+  const name = slotName(slot);
   const cached = readCache();
-  if (cached && Date.now() - cached.at < TTL_MS) return render(cached.status);
+  if (cached && Date.now() - cached.at < TTL_MS) return render({ kind: "session", name, status: cached.status });
   try {
     const status = await fetchStatus(token);
     mkdirSync(DIR, { recursive: true });
     writeFileSync(CACHE, JSON.stringify({ at: Date.now(), status }));
-    return render(status);
+    return render({ kind: "session", name, status });
   } catch {
-    return cached ? render(cached.status) : "paigy: \u2026";
+    return cached ? render({ kind: "session", name, status: cached.status }) : "paigy: \u2026";
   }
 }
 function isEntry() {
@@ -75,5 +115,7 @@ function isEntry() {
 if (isEntry()) void main().then((line) => console.log(line));
 export {
   main,
-  render
+  render,
+  resolveSlot,
+  stdinSessionId
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paigy/mcp",
-  "version": "0.36.0",
+  "version": "0.38.0",
   "description": "Paigy MCP server — the AI agent harness that calls you. Lets an agent notify a user and await their reply.",
   "license": "MIT",
   "type": "module",
@@ -10,7 +10,8 @@
     "paigy-mcp-onboard": "dist/onboard.js",
     "paigy-listen": "dist/listen.js",
     "paigy-statusline": "dist/statusline.js",
-    "paigy-enable-tools": "dist/enable.js"
+    "paigy-enable-tools": "dist/enable.js",
+    "paigy-slot": "dist/slot.js"
   },
   "files": [
     "dist"