@pascalcouturier/skill-builder-mcp 1.0.4 → 1.0.5

package/CHANGELOG.md

@@ -7,6 +7,17 @@ Builder speaks, so any `1.x` connector works with the current site.
 To update, change the version in your AI tool's settings and restart its MCP server (see
 **Updating** in the [README](./README.md#updating)).
 
+## 1.0.5
+
+Easier pairing when an AI tool starts several connectors.
+
+- The pairing code in the AI's answer and in the MCP log now names the connection number
+  (the port), which Skill Builder shows next to each waiting request.
+- Works with the current Skill Builder, which tries a typed code on every waiting request
+  and approves the one that shows it, so a duplicate connector no longer makes a correct code
+  look wrong, and shows one request per AI tool however many connectors it starts. (Those
+  parts come from the site, so they work with any `1.x` connector.)
+
 ## 1.0.4
 
 Leaves saving to you.

package/README.md

@@ -72,7 +72,7 @@ shows the same steps with copy buttons and one-click install links for VS Code a
 Every tool runs the same command, with an exact version:
 
 ```bash
-npx -y @pascalcouturier/skill-builder-mcp@1.0.4
+npx -y @pascalcouturier/skill-builder-mcp@1.0.5
 ```
 
 **VS Code (GitHub Copilot).** Command Palette → **MCP: Add Server…** → **Command (stdio)** →
@@ -85,7 +85,7 @@ User Configuration** and add:
     "skill-builder": {
       "type": "stdio",
       "command": "npx",
-      "args": ["-y", "@pascalcouturier/skill-builder-mcp@1.0.4"]
+      "args": ["-y", "@pascalcouturier/skill-builder-mcp@1.0.5"]
     }
   }
 }
@@ -97,7 +97,7 @@ Then switch Copilot Chat to **Agent** mode and tick the **skill-builder** tools
 **Claude Code** (CLI and the VS Code extension), once in a terminal:
 
 ```bash
-claude mcp add --scope user skill-builder -- npx -y @pascalcouturier/skill-builder-mcp@1.0.4
+claude mcp add --scope user skill-builder -- npx -y @pascalcouturier/skill-builder-mcp@1.0.5
 ```
 
 **OpenAI Codex** (CLI and the VS Code extension), in `~/.codex/config.toml`
@@ -106,7 +106,7 @@ claude mcp add --scope user skill-builder -- npx -y @pascalcouturier/skill-build
 ```toml
 [mcp_servers.skill-builder]
 command = "npx"
-args = ["-y", "@pascalcouturier/skill-builder-mcp@1.0.4"]
+args = ["-y", "@pascalcouturier/skill-builder-mcp@1.0.5"]
 ```
 
 **Cursor** (`~/.cursor/mcp.json`), **Claude Desktop** (**Settings → Developer → Edit
@@ -117,14 +117,14 @@ Config**, then restart it) and most other clients (Windsurf, Cline, Zed…):
   "mcpServers": {
     "skill-builder": {
       "command": "npx",
-      "args": ["-y", "@pascalcouturier/skill-builder-mcp@1.0.4"]
+      "args": ["-y", "@pascalcouturier/skill-builder-mcp@1.0.5"]
     }
   }
 }
 ```
 
 On **Windows**, if the tool can not start `npx`, use `"command": "cmd"` and
-`"args": ["/c", "npx", "-y", "@pascalcouturier/skill-builder-mcp@1.0.4"]`.
+`"args": ["/c", "npx", "-y", "@pascalcouturier/skill-builder-mcp@1.0.5"]`.
 
 ### 2. Turn on Connect AI in Skill Builder
 
@@ -325,7 +325,7 @@ runtime code generation.
 - **Inputs are checked** against schemas, and text the AI writes goes through Skill
   Builder's security scanner (prompt-injection phrases, hidden characters, secrets,
   download-and-run commands). Scripts are stored as text and never run.
-- **Exact versions:** install `@1.0.4`, not `@latest`. Published npm versions can never be
+- **Exact versions:** install `@1.0.5`, not `@latest`. Published npm versions can never be
   changed, so you run exactly the release you chose.
 
 **Keep your AI tool's confirmations on.** The bigger risk with any MCP server is what an AI
@@ -351,7 +351,7 @@ Details, the threat model, how to check a release yourself and how to report a p
 | _"AI tools are connected in another tab"_            | Click **Use this tab** in Skill Builder, or close the other tab or window.                                                                                                                             |
 | _"Connector x.y.z; the current one is …"_ in the app | See [Updating](#updating).                                                                                                                                                                             |
 | _"Not saved: the security check refused it"_         | The text contains something the scanner does not allow (for example an API key or a `curl … \| sh` command). Remove it and try again.                                                                  |
-| Company network blocks `npx`                         | Ask for `registry.npmjs.org` to be allowed, or install once with `npm install -g @pascalcouturier/skill-builder-mcp@1.0.4` and use `skill-builder-mcp` as the command.                                 |
+| Company network blocks `npx`                         | Ask for `registry.npmjs.org` to be allowed, or install once with `npm install -g @pascalcouturier/skill-builder-mcp@1.0.5` and use `skill-builder-mcp` as the command.                                 |
 | Safari                                               | Not supported: Safari blocks websites from connecting to programs on your computer. Use Chrome, Edge or Firefox.                                                                                       |
 
 The connector logs connection events (never your content) to your AI tool's MCP log (VS

package/SECURITY.md

@@ -115,9 +115,9 @@ commands, edit files). Treat any tool's output as untrusted, including this one'
 
 ```bash
 # What it contains, and its checksum
-npm pack @pascalcouturier/skill-builder-mcp@1.0.4
-tar -tzf pascalcouturier-skill-builder-mcp-1.0.4.tgz
-npm view @pascalcouturier/skill-builder-mcp@1.0.4 dist.integrity
+npm pack @pascalcouturier/skill-builder-mcp@1.0.5
+tar -tzf pascalcouturier-skill-builder-mcp-1.0.5.tgz
+npm view @pascalcouturier/skill-builder-mcp@1.0.5 dist.integrity
 
 # That the registry signed it (in a project that installs it)
 npm audit signatures
@@ -131,7 +131,7 @@ On Node.js 25 and later the permission model also covers the network. `--help` n
 but to run the connector itself this way add `--allow-net`: it only listens on 127.0.0.1,
 and the sandbox test still checks that it never connects anywhere.
 
-Install instructions pin an exact version (`@1.0.4`, not `@1` or `@latest`). Published npm
+Install instructions pin an exact version (`@1.0.5`, not `@1` or `@latest`). Published npm
 versions can never be changed, so your computer runs exactly the release you chose, and an
 update happens only when you change the version yourself.
 

package/dist/cli.js

@@ -7845,7 +7845,7 @@ var StdioServerTransport = class {
 };
 var package_default = {
 	name: "@pascalcouturier/skill-builder-mcp",
-	version: "1.0.4",
+	version: "1.0.5",
 	description: "Connect AI tools (GitHub Copilot, Claude Code, Codex, Cursor, Claude Desktop) to Skill Builder open in your browser, over MCP.",
 	license: "MIT",
 	author: "Pascal Couturier (https://pascalcouturier.com)",
@@ -12938,7 +12938,7 @@ var Bridge = class {
 		}
 		this.link?.close(1e3);
 		const link = new TabLink(socket, this.options.self, this.options.client, {
-			onPairing: (code) => this.options.log?.(`Skill Builder wants to connect. Type this code in Skill Builder to approve it: ${code}`),
+			onPairing: (code) => this.options.log?.(`Skill Builder wants to connect (connection ${this.port}). Type this code in Skill Builder to approve it: ${code}`),
 			onPairingFailed: () => {
 				this.failures++;
 				this.options.log?.("A wrong pairing code was entered.");
@@ -12984,7 +12984,7 @@ var Bridge = class {
 			ok: false,
 			error: {
 				code: "NOT_PAIRED",
-				message: `Skill Builder is waiting for approval. Show the user this pairing code and ask them to type it into the Skill Builder window that asks to connect: ${link.code ?? ""}. It is only valid for this connection; it is not a password and must not be typed anywhere else.`
+				message: `Skill Builder is waiting for approval. Show the user this pairing code (for connection ${this.port ?? "unknown"}) and ask them to type it into the Skill Builder window that asks to connect: ${link.code ?? ""}. It is only valid for this connection; it is not a password and must not be typed anywhere else.`
 			}
 		};
 		const tool = this.manifest.find((entry) => entry.name === name);
@@ -13014,7 +13014,7 @@ function printable(value) {
 //#region src/args.ts
 var USAGE = `skill-builder-mcp: connect AI tools to Skill Builder in your browser.
 
-Usage: npx -y @pascalcouturier/skill-builder-mcp@1.0.4 [options]
+Usage: npx -y @pascalcouturier/skill-builder-mcp@1.0.5 [options]
 
 Your AI tool starts this for you; you do not run it by hand. Then open
 https://skill-builder.pascalcouturier.com, go to Settings → Connect AI,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pascalcouturier/skill-builder-mcp",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Connect AI tools (GitHub Copilot, Claude Code, Codex, Cursor, Claude Desktop) to Skill Builder open in your browser, over MCP.",
   "license": "MIT",
   "author": "Pascal Couturier (https://pascalcouturier.com)",