@paigy/mcp 0.8.1 → 0.8.4

package/README.md

@@ -20,7 +20,7 @@ approve).
 No clone needed. Add it to Claude Code (`-s user` = available in every project; drop it for just the current one):
 
 ```bash
-claude mcp add paigy -s user -- npx -y @paigy/mcp
+claude mcp add paigy -s user -- npx -y @paigy/mcp@latest
 ```
 
 Or wire it into any MCP client config:
@@ -30,7 +30,7 @@ Or wire it into any MCP client config:
   "mcpServers": {
     "paigy": {
       "command": "npx",
-      "args": ["-y", "@paigy/mcp"]
+      "args": ["-y", "@paigy/mcp@latest"]
     }
   }
 }
@@ -39,7 +39,7 @@ Or wire it into any MCP client config:
 First-time pairing (link the server to your Paigy account):
 
 ```bash
-npx -p @paigy/mcp paigy-mcp-onboard
+npx -p @paigy/mcp@latest paigy-mcp-onboard
 ```
 
 It talks to the hosted backend by default — no config needed. Set
@@ -50,7 +50,7 @@ It talks to the hosted backend by default — no config needed. Set
 Codex speaks MCP, so the same server drops in. Add it (writes `~/.codex/config.toml`):
 
 ```bash
-codex mcp add paigy --env PAIGY_AGENT=codex -- npx -y @paigy/mcp
+codex mcp add paigy --env PAIGY_AGENT=codex -- npx -y @paigy/mcp@latest
 ```
 
 Or add the entry to `~/.codex/config.toml` by hand:
@@ -58,16 +58,16 @@ Or add the entry to `~/.codex/config.toml` by hand:
 ```toml
 [mcp_servers.paigy]
 command = "npx"
-args = ["-y", "@paigy/mcp"]
+args = ["-y", "@paigy/mcp@latest"]
 env = { PAIGY_AGENT = "codex" }
 ```
 
-Then pair: `npx -p @paigy/mcp paigy-mcp-onboard` (or have the agent call the `pair` tool).
+Then pair: `npx -p @paigy/mcp@latest paigy-mcp-onboard` (or have the agent call the `pair` tool).
 
 ### Gemini CLI
 
 ```bash
-gemini mcp add -s user -e PAIGY_AGENT=gemini paigy npx -y @paigy/mcp
+gemini mcp add -s user -e PAIGY_AGENT=gemini paigy npx -y @paigy/mcp@latest
 ```
 
 `-s user` makes it available across all projects — omit it for just the current one.
@@ -78,14 +78,14 @@ Or add the entry to `~/.gemini/settings.json`:
   "mcpServers": {
     "paigy": {
       "command": "npx",
-      "args": ["-y", "@paigy/mcp"],
+      "args": ["-y", "@paigy/mcp@latest"],
       "env": { "PAIGY_AGENT": "gemini" }
     }
   }
 }
 ```
 
-Then pair: `npx -p @paigy/mcp paigy-mcp-onboard`.
+Then pair: `npx -p @paigy/mcp@latest paigy-mcp-onboard`.
 
 > `PAIGY_AGENT` just names the agent on the device-approval screen (defaults to
 > `mcp-agent`) — set it per client so you can tell your connected agents apart.
@@ -102,6 +102,17 @@ Then pair: `npx -p @paigy/mcp paigy-mcp-onboard`.
 
 - `PAIGY_BACKEND_URL` — the Paigy API base (defaults to the hosted backend).
 
+## Publishing (maintainers)
+
+Tool input schemas are generated from zod in `src/schema.ts` as draft-2020-12 JSON
+Schema, and `src/schema.test.ts` guards that every tool stays valid (strict clients
+like the Anthropic API reject anything else). **A schema fix only reaches agents once
+a new version is published to npm** — 0.8.0 once shipped *without* a committed fix and
+400'd strict clients for weeks. So after any change under `src/schema*` or the tool
+definitions: **bump the version and `pnpm publish`** (don't rely on the commit alone).
+Install recipes pin `@paigy/mcp@latest` so a fresh `npx` picks up the new version; if a
+stale one sticks, `rm -rf ~/.npm/_npx` and restart the client.
+
 ## License
 
 MIT

package/dist/{chunk-XXBSXCOC.js → chunk-AILC3H3U.js}

@@ -1,9 +1,13 @@
+import {
+  BACKEND_URL,
+  reach
+} from "./chunk-GU7C5H6L.js";
+
 // src/device.ts
 import { execFile } from "child_process";
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
 import { homedir, platform } from "os";
 import { join } from "path";
-var BACKEND_URL = process.env.PAIGY_BACKEND_URL ?? "https://paigy.ai";
 var AGENT_NAME = process.env.PAIGY_AGENT ?? "mcp-agent";
 var TOKEN_PATH = join(homedir(), ".paigy", "token.json");
 function openBrowser(url) {
@@ -33,14 +37,14 @@ function deleteToken() {
   return true;
 }
 async function revokeToken(token) {
-  const res = await fetch(`${BACKEND_URL}/api/device/revoke`, {
+  const res = await reach(`${BACKEND_URL}/api/device/revoke`, {
     method: "POST",
     headers: { authorization: `Bearer ${token}` }
   });
   return res.ok;
 }
 async function requestCode(agent = AGENT_NAME) {
-  const res = await fetch(`${BACKEND_URL}/api/device/code`, {
+  const res = await reach(`${BACKEND_URL}/api/device/code`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: JSON.stringify({ agent })
@@ -49,7 +53,7 @@ async function requestCode(agent = AGENT_NAME) {
   return await res.json();
 }
 async function pollToken(deviceCode) {
-  const res = await fetch(`${BACKEND_URL}/api/device/token`, {
+  const res = await reach(`${BACKEND_URL}/api/device/token`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: JSON.stringify({ device_code: deviceCode })

package/dist/chunk-GU7C5H6L.js

@@ -0,0 +1,15 @@
+// src/http.ts
+var BACKEND_URL = process.env.PAIGY_BACKEND_URL ?? "https://paigy.ai";
+var NETWORK_MSG = `Can't reach ${BACKEND_URL} \u2014 the connection was blocked or dropped before an HTTP response. If this agent runs in a sandboxed environment with a network allowlist (e.g. Claude Code on the web, CI), ask the user to add the Paigy domain (paigy.ai) to the environment's allowed domains, then retry.`;
+async function reach(url, init) {
+  try {
+    return await fetch(url, init);
+  } catch (e) {
+    throw new Error(`${NETWORK_MSG} (${e?.message ?? String(e)})`);
+  }
+}
+
+export {
+  BACKEND_URL,
+  reach
+};

package/dist/{chunk-2BJSWNUX.js → chunk-SLK7NHHQ.js}

@@ -1,3 +1,8 @@
+import {
+  BACKEND_URL,
+  reach
+} from "./chunk-GU7C5H6L.js";
+
 // ../../packages/schema/dist/index.js
 import { z } from "zod";
 var ContextSchema = z.object({
@@ -157,7 +162,8 @@ var SnoozeRequestSchema = z.object({
 var PushTokenSchema = z.object({
   voipToken: z.string().min(1).optional(),
   alertToken: z.string().min(1).optional(),
-  platform: z.literal("ios")
+  fcmToken: z.string().min(1).optional(),
+  platform: z.enum(["ios", "android"])
 });
 var MissedCallSchema = z.enum([
   "retry_10m",
@@ -275,7 +281,6 @@ var SupportRequestSchema = z.object({
 import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
-var BACKEND_URL = process.env.PAIGY_BACKEND_URL ?? "https://paigy.ai";
 var TOKEN_PATH = join(homedir(), ".paigy", "token.json");
 function loadToken() {
   if (process.env.PAIGY_TOKEN) return process.env.PAIGY_TOKEN;
@@ -296,7 +301,7 @@ function ensureAuthed(res) {
 }
 async function submitNotification(req) {
   const token = loadToken();
-  const res = ensureAuthed(await fetch(`${BACKEND_URL}/api/notify`, {
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/notify`, {
     method: "POST",
     headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
     body: JSON.stringify(req)
@@ -313,7 +318,7 @@ async function awaitReply(notificationId, opts = {}) {
   const token = loadToken();
   const start = now();
   while (true) {
-    const res = ensureAuthed(await fetch(`${BACKEND_URL}/api/await?notificationId=${encodeURIComponent(notificationId)}`, {
+    const res = ensureAuthed(await reach(`${BACKEND_URL}/api/await?notificationId=${encodeURIComponent(notificationId)}`, {
       headers: { authorization: `Bearer ${token}` }
     }));
     if (!res.ok) throw new Error(`await failed: ${res.status} ${await res.text()}`);
@@ -325,14 +330,14 @@ async function awaitReply(notificationId, opts = {}) {
 }
 async function checkReplies() {
   const token = loadToken();
-  const res = ensureAuthed(await fetch(`${BACKEND_URL}/api/pending`, {
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/pending`, {
     headers: { authorization: `Bearer ${token}` }
   }));
   if (!res.ok) throw new Error(`check_replies failed: ${res.status} ${await res.text()}`);
   return await res.json();
 }
 async function setTaskState(id, state) {
-  const res = ensureAuthed(await fetch(`${BACKEND_URL}/api/notify/${id}/state`, {
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/notify/${id}/state`, {
     method: "PATCH",
     headers: { "content-type": "application/json", authorization: `Bearer ${loadToken()}` },
     body: JSON.stringify({ state })
@@ -341,7 +346,7 @@ async function setTaskState(id, state) {
   return await res.json();
 }
 async function registerDelivery(mode) {
-  const res = ensureAuthed(await fetch(`${BACKEND_URL}/api/delivery`, {
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/delivery`, {
     method: "POST",
     headers: { "content-type": "application/json", authorization: `Bearer ${loadToken()}` },
     body: JSON.stringify({ mode })
@@ -351,7 +356,7 @@ async function registerDelivery(mode) {
 }
 async function scheduleCallback(req) {
   const token = loadToken();
-  const res = ensureAuthed(await fetch(`${BACKEND_URL}/api/callback`, {
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/callback`, {
     method: "POST",
     headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
     body: JSON.stringify(req)
@@ -361,7 +366,7 @@ async function scheduleCallback(req) {
 }
 async function pollAnswer(id) {
   const token = loadToken();
-  const res = ensureAuthed(await fetch(`${BACKEND_URL}/api/poll/${id}`, {
+  const res = ensureAuthed(await reach(`${BACKEND_URL}/api/poll/${id}`, {
     headers: { authorization: `Bearer ${token}` }
   }));
   if (!res.ok) throw new Error(`poll failed: ${res.status} ${await res.text()}`);

package/dist/index.js

@@ -11,7 +11,7 @@ import {
   scheduleCallback,
   setTaskState,
   submitNotification
-} from "./chunk-2BJSWNUX.js";
+} from "./chunk-SLK7NHHQ.js";
 import {
   deleteToken,
   openBrowser,
@@ -21,7 +21,8 @@ import {
   revokeToken,
   saveToken,
   sleep
-} from "./chunk-XXBSXCOC.js";
+} from "./chunk-AILC3H3U.js";
+import "./chunk-GU7C5H6L.js";
 
 // src/index.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -98,7 +99,7 @@ var server = new Server(
   { name: "paigy", version: "0.0.0" },
   {
     capabilities: { tools: {} },
-    instructions: "On startup, call check_replies once to pick up any replies or pending work you missed while away. To wait for the answer to something you just asked, call await_reply with that notification's id \u2014 it's scoped to that one request, so it never returns replies meant for other requests. Use check_replies again only when re-booting or after waiting a long time on something else. Never end a turn that still needs the user without notify_user + await_reply. When you need a decision or input, MATCH the answer shape to the question \u2014 don't default everything to free text, and don't reflexively make everything yes/no. Pick the best tool for the job: yes/no \u2192 select:'confirm'; approve/deny an action \u2192 select:'confirm' + confirmStyle:'approve'; pick one of several \u2192 options + select:'one'; pick several / a subset \u2192 options + select:'many'; rank or prioritize \u2192 options + select:'rank'. Reserve open-ended free text only for answers that genuinely can't be structured (the user can always add free text on top of any shape). If a reply comes back as { kind: 'clarify', chunks: [...] }, the user wants more detail on those chunks \u2014 respond by calling notify_user again with the SAME threadId and an expanded description covering them. When urgency is 'call', remember the title + description are spoken aloud \u2014 write them short and conversational, and name things instead of using IDs (e.g. 'the pull request about the agents page', not 'PR #235'). When the user asks you to follow up later \u2014 when you're done, if you're blocked, or at a set time \u2014 record it with schedule_callback so you don't drop it if you go idle."
+    instructions: "On startup, call check_replies once to pick up any replies or pending work you missed while away. To wait for the answer to something you just asked, call await_reply with that notification's id \u2014 it's scoped to that one request, so it never returns replies meant for other requests. Use check_replies again only when re-booting or after waiting a long time on something else. Never end a turn that still needs the user without notify_user + await_reply. When you need a decision or input, MATCH the answer shape to the question \u2014 don't default everything to free text, and don't reflexively make everything yes/no. Pick the best tool for the job: yes/no \u2192 select:'confirm'; approve/deny an action \u2192 select:'confirm' + confirmStyle:'approve'; pick one of several \u2192 options + select:'one'; pick several / a subset \u2192 options + select:'many'; rank or prioritize \u2192 options + select:'rank'. Reserve open-ended free text only for answers that genuinely can't be structured (the user can always add free text on top of any shape). If a reply comes back as { kind: 'clarify', chunks: [...] }, the user wants more detail on those chunks \u2014 respond by calling notify_user again with the SAME threadId and an expanded description covering them. When urgency is 'call', remember the title + description are spoken aloud \u2014 write them short and conversational, and name things instead of using IDs (e.g. 'the pull request about the agents page', not 'PR #235'). When the user asks you to follow up later \u2014 when you're done, if you're blocked, or at a set time \u2014 record it with schedule_callback so you don't drop it if you go idle. If you're about to start a genuinely long-running or blocking piece of work \u2014 one where the user would otherwise sit and wait \u2014 mention ONCE, in passing, that you can text or call them when it's done or if you hit a blocker, instead of them needing to babysit the terminal. Don't offer this for quick tasks, and don't repeat the offer if they've already said yes or no earlier in the conversation. Escalate silence, don't just wait on it: if you notified at a lower urgency (inbox/push/banner) for something that's genuinely blocking real progress, call await_reply up to twice (~5 min each, ~10 min total) \u2014 if it's still idle after that AND the item is genuinely blocking, send a fresh notify_user on the SAME threadId at urgency:'call'. Skip this for anything that isn't truly blocking; a normal question can just sit in the inbox."
   }
 );
 server.setRequestHandler(ListToolsRequestSchema, async () => ({

package/dist/listen.js

@@ -4,7 +4,8 @@ import {
   checkReplies,
   registerDelivery,
   wakeChannel
-} from "./chunk-2BJSWNUX.js";
+} from "./chunk-SLK7NHHQ.js";
+import "./chunk-GU7C5H6L.js";
 
 // src/listen.ts
 import { createClient } from "@supabase/supabase-js";

package/dist/onboard.js

@@ -7,7 +7,8 @@ import {
   requestCode,
   saveToken,
   sleep
-} from "./chunk-XXBSXCOC.js";
+} from "./chunk-AILC3H3U.js";
+import "./chunk-GU7C5H6L.js";
 
 // src/onboard.ts
 async function main() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paigy/mcp",
-  "version": "0.8.1",
+  "version": "0.8.4",
   "description": "Paigy MCP server — a voice inbox for your AI agents. Lets an agent notify a user and await their reply.",
   "license": "MIT",
   "type": "module",