@trygocode/notify 0.3.2 → 0.3.3

package/dist/src/claude.js

@@ -56,9 +56,14 @@ export const MCP_SERVER_ENTRY = {
  * We intentionally register ONLY `Stop` + `Notification`. `SubagentStop` is NOT
  * here on purpose — see {@link SUBAGENT_STOP_EVENT}.
  */
+// `@latest` is REQUIRED: bare `npx -y @trygocode/notify` caches the
+// first-resolved version forever and never auto-updates (npm/cli#6664). Pinning
+// `@latest` makes every hook fire the newest published version, so users get our
+// fixes without ever clearing their npx cache by hand. Matchers below key on the
+// `@trygocode/notify` substring, which `@latest` preserves.
 export const CLAUDE_HOOK_COMMANDS = {
-    Stop: 'npx -y @trygocode/notify on-stop --source claude_code --dedupe-key "$CLAUDE_SESSION_ID-stop" || true',
-    Notification: 'npx -y @trygocode/notify send --kind awaiting_input --source claude_code --title "Agent needs you" --dedupe-key "$CLAUDE_SESSION_ID-notify" || true',
+    Stop: 'npx -y @trygocode/notify@latest on-stop --source claude_code --dedupe-key "$CLAUDE_SESSION_ID-stop" || true',
+    Notification: 'npx -y @trygocode/notify@latest send --kind awaiting_input --source claude_code --title "Agent needs you" --dedupe-key "$CLAUDE_SESSION_ID-notify" || true',
 };
 /**
  * The Claude event we DELIBERATELY do not register and actively scrub on every

package/dist/src/cursor.js

@@ -48,7 +48,15 @@ export const MCP_SERVER_ENTRY = {
  * both old and new commands contain the {@link HOOK_MARKERS} tokens, so an old
  * install still upgrades idempotently and uninstalls cleanly (PRD §2.2).
  */
-export const CURSOR_STOP_COMMAND = "npx -y @trygocode/notify on-stop --source cursor --dedupe-key cursor-stop || true";
+// `@latest` is REQUIRED, not cosmetic: bare `npx -y @trygocode/notify` caches the
+// first-resolved version FOREVER and never picks up a newer publish (documented
+// npx behaviour — npm/cli#6664; the whole `clear-npx-cache` package exists for
+// this). Without `@latest`, a user who installed an old version would keep
+// running it after we ship a fix, with no way to update short of wiping
+// ~/.npm/_npx by hand. Pinning `@latest` forces npx to resolve the newest
+// version on every turn, so users self-update seamlessly. (Matchers below key on
+// the `@trygocode/notify` substring, which `@latest` preserves.)
+export const CURSOR_STOP_COMMAND = "npx -y @trygocode/notify@latest on-stop --source cursor --dedupe-key cursor-stop || true";
 /**
  * Substrings that together identify a `stop` hook entry as OURS. Used for
  * idempotent merge (replace, don't duplicate) and for surgical uninstall (remove

package/dist/src/on_stop.js

@@ -238,7 +238,17 @@ export function ideChatIdFromHookStdin(source, cwd, hookStdin) {
     const ideSessionId = str(p.conversation_id, p.conversationId, p.session_id, p.sessionId, sessionFromPath);
     if (!ideSessionId)
         return undefined;
-    const workspacePath = str(p.workspace_path, Array.isArray(p.workspaceRoots) ? p.workspaceRoots[0] : undefined, p.cwd, cwd);
+    // CRITICAL parity: the deep-link id hashes the workspace, and gocode-sync hashes
+    // the SAME workspace when it stores the chat — they MUST agree or a tapped push
+    // hits "Chat not found". gocode-sync resolves the workspace from Cursor's REAL
+    // field `workspace_roots` (snake_case), so we MUST read it here too. Reuse
+    // workspaceRootFromHookStdin (which already prefers workspace_roots and every
+    // spelling) so the two packages can never drift. Fall back to camelCase / cwd
+    // for older Cursor builds, then the process cwd.
+    const workspacePath = workspaceRootFromHookStdin(hookStdin) ??
+        str(p.workspace_path, Array.isArray(p.workspace_roots)
+            ? p.workspace_roots[0]
+            : undefined, Array.isArray(p.workspaceRoots) ? p.workspaceRoots[0] : undefined, p.cwd, cwd);
     if (!workspacePath)
         return undefined;
     // The capture side stores `source: "cursor" | "claude_code"`; the hook passes

package/dist/src/opencode.js

@@ -68,7 +68,10 @@ export const OPENCODE_MCP_ENTRY = {
  * Claude/Cursor. Ends in `|| true` so a failure can never block the session, and
  * carries a `--dedupe-key` so overlapping triggers coalesce server-side.
  */
-export const OPENCODE_STOP_COMMAND = "npx -y @trygocode/notify on-stop --source opencode --dedupe-key opencode-idle || true";
+// `@latest` is REQUIRED: bare `npx -y @trygocode/notify` caches the first
+// resolved version forever and never auto-updates (npm/cli#6664). Pinning
+// `@latest` makes the hook always fetch the newest publish so users self-update.
+export const OPENCODE_STOP_COMMAND = "npx -y @trygocode/notify@latest on-stop --source opencode --dedupe-key opencode-idle || true";
 /**
  * Substrings that together identify our plugin file as OURS. Used to keep
  * uninstall surgical: we only delete the plugin file when BOTH markers are

package/dist/src/version.js

@@ -1,2 +1,2 @@
 // Single source of truth for the CLI version. Keep in sync with package.json.
-export const VERSION = "0.3.2";
+export const VERSION = "0.3.3";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trygocode/notify",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Free phone notifications for any coding agent (Cursor, Claude Code, OpenCode, Ralph/Homer) via the GoCode app.",
   "license": "MIT",
   "type": "module",