@paigy/mcp 0.37.0 → 0.38.0

package/dist/{chunk-V66NUNSQ.js → chunk-4UEL7Y5U.js}

@@ -10,7 +10,7 @@ import {
   saveToken,
   sleep,
   startE2ee
-} from "./chunk-VXHTA4PB.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/identity.ts
 var CLIENT_LABELS = {

package/dist/{chunk-PN7FDW26.js → chunk-7IGGSB3H.js}

@@ -13,10 +13,10 @@ import {
   SetWorkStateSchema,
   mcpInputSchema,
   serverInstructions
-} from "./chunk-242XN7FD.js";
+} from "./chunk-KE63GZEQ.js";
 import {
   AGENT_NAME
-} from "./chunk-VXHTA4PB.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/toolset.ts
 var ONBOARD_DESCRIPTION = "Get this agent talking to Paigy \u2014 call it FIRST, before contact/await_reply, and any time you're unsure who you are. One call, and it does whatever the situation needs: NOT SET UP \u2192 hatches an identity instantly if this machine holds a device credential (the user ran the Paigy desktop app or harness), otherwise starts the code ceremony; ALREADY SET UP \u2192 returns your current identity and offers the two things left to decide, renaming it or unpairing; TOKEN NO LONGER VALID \u2192 says so, then re-pairs. Pass { name, voice } to choose who you are when hatching, or to RENAME yourself when already set up (voices: rachel, george, jessica, brian, lily). Safe to call any time: idempotent, and it never writes settings \u2014 the tool-allowlist state it reports is read-only. If it returns a `user_code`, print it to the user immediately and call onboard again with the `device_code`. If it returns `enable_command`, PRINT that command for the user to run \u2014 you cannot apply it yourself (it writes your own permission allowlist, which hosts block as privilege escalation), so print it, don't wait for it, and carry on.";

package/dist/{chunk-242XN7FD.js → chunk-KE63GZEQ.js}

@@ -465,6 +465,7 @@ var AwaitItemSchema = z2.discriminatedUnion("type", [
 var CallbackTriggerSchema = z2.enum(["on_done", "on_blocked", "scheduled"]);
 var ScheduleCallbackSchema = z2.object({
   parentId: z2.string().describe("The thread to call back on (from a prior contact / reply / request)."),
+  goalId: z2.string().uuid().optional().describe("The Goal this callback advances; preferred for Goal-owned work."),
   trigger: CallbackTriggerSchema,
   dueInSeconds: z2.number().int().positive().optional().describe("For 'scheduled' only: how many seconds from now to fire."),
   note: z2.string().optional().describe("What to tell the user when you follow up.")
@@ -909,6 +910,15 @@ var AgentActivitySchema = z2.object({
 var ConnectionSummarySchema = z2.object({
   /** The connection = the agent's token id (used to address a request). */
   id: z2.string(),
+  /** The credential kind: "device" = a paired machine (mint-only — it hosts and mints, it
+   *  never talks); "agent" = an identity that sends. The roster and devices surfaces split
+   *  on this. Optional/absent reads as "agent" (a row predating the kind column). See
+   *  apps/api/src/tokens/devices-vs-agents-design.md. */
+  kind: z2.enum(["device", "agent"]).optional(),
+  /** For an agent, the token id of the DEVICE that minted it — so agents group under their
+   *  machine, and revoking a device cascades to them. Null on devices, and on unlinked
+   *  agents (phone-launched, provider-managed, or minted before the link existed). */
+  mintedByDevice: z2.string().nullable().optional(),
   device: z2.string().nullable(),
   /** The agent's display name (the single pairing name). */
   name: z2.string(),

package/dist/{chunk-VXHTA4PB.js → chunk-PPACGOTU.js}

@@ -4010,6 +4010,7 @@ var AwaitItemSchema = z2.discriminatedUnion("type", [
 var CallbackTriggerSchema = z2.enum(["on_done", "on_blocked", "scheduled"]);
 var ScheduleCallbackSchema = z2.object({
   parentId: z2.string().describe("The thread to call back on (from a prior contact / reply / request)."),
+  goalId: z2.string().uuid().optional().describe("The Goal this callback advances; preferred for Goal-owned work."),
   trigger: CallbackTriggerSchema,
   dueInSeconds: z2.number().int().positive().optional().describe("For 'scheduled' only: how many seconds from now to fire."),
   note: z2.string().optional().describe("What to tell the user when you follow up.")
@@ -4454,6 +4455,15 @@ var AgentActivitySchema = z2.object({
 var ConnectionSummarySchema = z2.object({
   /** The connection = the agent's token id (used to address a request). */
   id: z2.string(),
+  /** The credential kind: "device" = a paired machine (mint-only — it hosts and mints, it
+   *  never talks); "agent" = an identity that sends. The roster and devices surfaces split
+   *  on this. Optional/absent reads as "agent" (a row predating the kind column). See
+   *  apps/api/src/tokens/devices-vs-agents-design.md. */
+  kind: z2.enum(["device", "agent"]).optional(),
+  /** For an agent, the token id of the DEVICE that minted it — so agents group under their
+   *  machine, and revoking a device cascades to them. Null on devices, and on unlinked
+   *  agents (phone-launched, provider-managed, or minted before the link existed). */
+  mintedByDevice: z2.string().nullable().optional(),
   device: z2.string().nullable(),
   /** The agent's display name (the single pairing name). */
   name: z2.string(),
@@ -5807,6 +5817,7 @@ export {
   NotifyRequestSchema,
   SetWorkStateSchema,
   ScheduleCallbackSchema,
+  sessionSlot,
   contactParentId,
   AGENT_NAME,
   TOKEN_PATH,

package/dist/enable.js

@@ -2,9 +2,9 @@
 import {
   PAIGY_TOOL_IDS,
   enablePaigyTools
-} from "./chunk-PN7FDW26.js";
-import "./chunk-242XN7FD.js";
-import "./chunk-VXHTA4PB.js";
+} from "./chunk-7IGGSB3H.js";
+import "./chunk-KE63GZEQ.js";
+import "./chunk-PPACGOTU.js";
 
 // src/enable.ts
 function main() {

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   resolvePairing,
   startPairing,
   suggestedAgentName
-} from "./chunk-V66NUNSQ.js";
+} from "./chunk-4UEL7Y5U.js";
 import {
   AnswerCallerQuestionSchema,
   AwaitReplySchema,
@@ -27,11 +27,11 @@ import {
   autoConfigureClients,
   claudeInstallHint,
   paigyToolsAllowlisted
-} from "./chunk-PN7FDW26.js";
+} from "./chunk-7IGGSB3H.js";
 import {
   CreateGoalSchema,
   HandoffSchema
-} from "./chunk-242XN7FD.js";
+} from "./chunk-KE63GZEQ.js";
 import {
   clearSurface,
   writeSurface
@@ -68,7 +68,7 @@ import {
   submitNotification,
   updateGoal,
   whoAmI
-} from "./chunk-VXHTA4PB.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/index.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -193,6 +193,7 @@ function pairStartResult(start, loggedOut) {
   qr.make();
   const link = start.verificationUri;
   const ascii = qr.createASCII(1, 2);
+  const door = "in Paigy \u2192 Devices \u2192 Connect a computer";
   const userMessage = loggedOut ? `**Your machine was logged out.** Reconnect and every agent here pairs itself again \u2014 no more codes.
 
 **[Reconnect this machine](${link})**
@@ -205,14 +206,17 @@ Or scan:
 ${ascii}
 \`\`\`
 
-Or enter code **${start.userCode}** in the Paigy app (Inbox \u2192 Add a new agent).` : `**[Approve this agent](${link})**
+Or type **${start.userCode}** ${door}.` : `**Approve this agent from your phone**
 
-Or open: ${link}
-Or enter code **${start.userCode}** in the Paigy app (Inbox \u2192 Add a new agent).`;
+**[Open](${link})** ${link}
+
+Or scan the QR, or type **${start.userCode}** ${door}.
+
+This session isn't on a connected computer, so it asks by code.`;
   return { content: [
     { type: "text", text: loggedOut ? `YOUR MACHINE WAS LOGGED OUT \u2014 reconnect: ${link}
-(or scan the QR, or enter code ${start.userCode} in the app)` : `APPROVE: ${link}
-(or code ${start.userCode} in the app: Inbox \u2192 Add a new agent)` },
+(or scan the QR, or type ${start.userCode} ${door})` : `APPROVE THIS AGENT FROM YOUR PHONE: ${link}
+(or scan the QR, or type ${start.userCode} ${door})` },
     { type: "text", text: JSON.stringify({
       status: "awaiting_approval",
       verification_uri_complete: link,

package/dist/listen.js

@@ -5,14 +5,14 @@ import {
 import {
   WAKE_EVENT,
   wakeChannel
-} from "./chunk-242XN7FD.js";
+} from "./chunk-KE63GZEQ.js";
 import {
   ackReply,
   authToken,
   decodeReply,
   registerDelivery,
   sweepLeased
-} from "./chunk-VXHTA4PB.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/listen.ts
 import { createClient } from "@supabase/supabase-js";

package/dist/onboard.js

@@ -3,13 +3,13 @@ import {
   resolvePairing,
   startPairing,
   suggestedAgentName
-} from "./chunk-V66NUNSQ.js";
+} from "./chunk-4UEL7Y5U.js";
 import {
   autoConfigureClients,
   claudeInstallHint,
   openBrowser
-} from "./chunk-PN7FDW26.js";
-import "./chunk-242XN7FD.js";
+} from "./chunk-7IGGSB3H.js";
+import "./chunk-KE63GZEQ.js";
 import {
   AGENT_NAME,
   TOKEN_PATH,
@@ -20,7 +20,7 @@ import {
   saveToken,
   setIdentity,
   whoAmI
-} from "./chunk-VXHTA4PB.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/onboard.ts
 function reportRegistered() {

package/dist/slot.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   AGENT_NAME
-} from "./chunk-VXHTA4PB.js";
+} from "./chunk-PPACGOTU.js";
 
 // src/slot.ts
 process.stdout.write(AGENT_NAME);

package/dist/statusline.js

@@ -4,9 +4,12 @@ import {
 } from "./chunk-3SVNPJPN.js";
 import {
   BACKEND_URL,
+  listSlots,
   reach,
-  readToken
-} from "./chunk-VXHTA4PB.js";
+  readToken,
+  sessionSlot,
+  slotName
+} from "./chunk-PPACGOTU.js";
 
 // src/statusline.ts
 import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
@@ -21,10 +24,43 @@ var MODE_LABEL = {
   all_calls: "all calls",
   silent: "silent"
 };
-function render(status, surface = null) {
-  if (surface) return `paigy \u26A0 ${surface.label}: ${surface.code}`;
-  if (!status) return "paigy: unpaired";
-  return `paigy: ${MODE_LABEL[status.sessionMode]} \xB7 ${status.phone ? "phone \u2713" : "no phone"}`;
+function render(v) {
+  switch (v.kind) {
+    case "surface":
+      return `paigy \u26A0 ${v.label}: ${v.code}`;
+    case "unpaired":
+      return "paigy: unpaired";
+    case "device-only":
+      return "paigy: paired \xB7 session hatches on first use";
+    case "session": {
+      const who = v.name ? `${v.name} \xB7 ` : "";
+      if (!v.status) return `paigy: ${who}revoked`;
+      return `paigy: ${who}${MODE_LABEL[v.status.sessionMode]} \xB7 ${v.status.phone ? "phone \u2713" : "no phone"}`;
+    }
+  }
+}
+async function stdinSessionId(input = process.stdin) {
+  if (input.isTTY) return void 0;
+  try {
+    const raw = await new Promise((resolve) => {
+      let buf = "";
+      const done = () => resolve(buf);
+      input.setEncoding("utf8");
+      input.on("data", (c) => {
+        buf += c;
+      });
+      input.on("end", done);
+      input.on("error", done);
+      setTimeout(done, 300).unref();
+    });
+    const sid = JSON.parse(raw).session_id;
+    return typeof sid === "string" && sid.trim() ? sid : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function resolveSlot(sid) {
+  return process.env.PAIGY_AGENT || sessionSlot(sid);
 }
 function readCache() {
   try {
@@ -49,18 +85,22 @@ async function fetchStatus(token) {
 }
 async function main() {
   const surface = readSurface();
-  if (surface) return render(null, surface);
-  const token = readToken();
-  if (!token) return render(null);
+  if (surface) return render({ kind: "surface", ...surface });
+  const slot = resolveSlot(await stdinSessionId());
+  const token = readToken(slot);
+  if (!token) {
+    return render(listSlots().includes("Desktop") ? { kind: "device-only" } : { kind: "unpaired" });
+  }
+  const name = slotName(slot);
   const cached = readCache();
-  if (cached && Date.now() - cached.at < TTL_MS) return render(cached.status);
+  if (cached && Date.now() - cached.at < TTL_MS) return render({ kind: "session", name, status: cached.status });
   try {
     const status = await fetchStatus(token);
     mkdirSync(DIR, { recursive: true });
     writeFileSync(CACHE, JSON.stringify({ at: Date.now(), status }));
-    return render(status);
+    return render({ kind: "session", name, status });
   } catch {
-    return cached ? render(cached.status) : "paigy: \u2026";
+    return cached ? render({ kind: "session", name, status: cached.status }) : "paigy: \u2026";
   }
 }
 function isEntry() {
@@ -75,5 +115,7 @@ function isEntry() {
 if (isEntry()) void main().then((line) => console.log(line));
 export {
   main,
-  render
+  render,
+  resolveSlot,
+  stdinSessionId
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paigy/mcp",
-  "version": "0.37.0",
+  "version": "0.38.0",
   "description": "Paigy MCP server — the AI agent harness that calls you. Lets an agent notify a user and await their reply.",
   "license": "MIT",
   "type": "module",
@@ -24,13 +24,6 @@
     "url": "git+https://github.com/mauurda/paigy.git",
     "directory": "apps/mcp"
   },
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "prepublishOnly": "pnpm --filter @paigy/schema build && pnpm --filter @paigy/crypto build && pnpm --filter @paigy/sdk build && pnpm build"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.4",
     "@supabase/supabase-js": "^2.47.10",
@@ -40,13 +33,19 @@
     "zod-to-json-schema": "^3.24.1"
   },
   "devDependencies": {
-    "@paigy/crypto": "workspace:*",
-    "@paigy/schema": "workspace:*",
-    "@paigy/sdk": "workspace:*",
     "@types/node": "^22.0.0",
     "@types/qrcode-generator": "^1.0.6",
     "tsup": "^8.3.5",
     "typescript": "^5.7.2",
-    "vitest": "^2.1.8"
+    "vitest": "^2.1.8",
+    "@paigy/crypto": "0.0.0",
+    "@paigy/schema": "0.0.0",
+    "@paigy/sdk": "0.2.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
   }
-}
+}