patchcord 0.5.126 → 0.5.128

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "patchcord",
   "description": "Cross-machine agent messaging. Messages from other agents land in the inbox and wake the agent to reply.",
-  "version": "0.5.126",
+  "version": "0.5.128",
   "author": {
     "name": "ppravdin"
   },

package/bin/patchcord.mjs

@@ -934,11 +934,26 @@ if (cmd === "login" || cmd === "orchestrator" || cmd === "teamlead" || cmd === "
   const accountCall = async (method, path, body) => {
     let m = await requireAuth();
     let r = await _httpJSON(method, `${m.baseUrl}${path}`, m.token, body);
-    if (r.status === "401" || r.status === "403") {
-      // Stale/invalid account token. Forget it and fail fast — do NOT auto-relogin
-      // (would hang headless, see requireAuth). The user re-runs `patchcord login`.
-      forgetAuth();
-      console.error(`patchcord account token rejected (HTTP ${r.status}). Run \`patchcord login\` again. Cannot continue.`);
+    // NEVER delete the stored credential on a request-level failure. The account
+    // token (pcm-) does not expire, and a 401/403 is almost never proof it is bad:
+    //   - 401 can be transient (server restart / DB blip surfaces as a false
+    //     "invalid main token"). Deleting it would strand a headless agent that
+    //     cannot open a browser login.
+    //   - 403 means THIS action is forbidden (namespace/role) — it says nothing
+    //     about credential validity.
+    // Surface the error and stop. If the token is genuinely revoked, the user
+    // runs `patchcord login` — an explicit, human action, never automatic.
+    if (r.status === "401") {
+      console.error(`patchcord: account request returned HTTP 401. Your login was NOT deleted. If this keeps happening, run \`patchcord login\`.`);
+      process.exit(1);
+    }
+    if (r.status === "403") {
+      const reason = (r.json && (r.json.error || r.json.message)) || (r.body || "").slice(0, 200) || "forbidden";
+      console.error(`patchcord: request forbidden (HTTP 403): ${reason}`);
+      process.exit(1);
+    }
+    if (r.status === "503") {
+      console.error(`patchcord: server temporarily unavailable (HTTP 503). Retry in a moment.`);
       process.exit(1);
     }
     return { ...r, m };
@@ -1675,10 +1690,15 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
   // (~/.gemini/settings.json) while Antigravity is PER-PROJECT
   // (<project>/.agents/mcp_config.json). So the shared global skill must be
   // seeded ONLY off Gemini CLI's global config — never off an Antigravity config.
-  // A patchcord entry in the global ~/.gemini/antigravity(-cli)/mcp_config.json is
-  // a leaked per-project token: it makes agy load the patchcord MCP (and its
-  // "check inbox first" instruction) in EVERY project, and it kept this skill
-  // seeded everywhere. We strip that leak below and gate the skill on Gemini only.
+  // A patchcord entry in the global ~/.gemini/antigravity(-cli)/mcp_config.json or
+  // ~/.gemini/config/mcp_config.json (Antigravity's post-migration global path —
+  // confirmed live via the sibling ~/.gemini/config/.migrated marker; the older
+  // two paths are its predecessors) is a leaked per-project token: it makes agy
+  // load the patchcord MCP (and its "check inbox first" instruction) in EVERY
+  // project, and it kept this skill seeded everywhere. We strip that leak below
+  // and gate the skill on Gemini only. Keep all three paths in sync — a prior
+  // fix (a36809c) covered only the first two and missed the migrated path,
+  // leaving leaks there uncleaned.
   if (existsSync(join(HOME, ".gemini"))) {
     // Remove any leaked patchcord server from Antigravity's GLOBAL configs so a
     // per-project token stops hijacking every agy session. Preserve other MCP
@@ -1686,6 +1706,7 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
     for (const agGlobal of [
       join(HOME, ".gemini", "antigravity", "mcp_config.json"),
       join(HOME, ".gemini", "antigravity-cli", "mcp_config.json"),
+      join(HOME, ".gemini", "config", "mcp_config.json"),
     ]) {
       if (!existsSync(agGlobal)) continue;
       try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchcord",
-  "version": "0.5.126",
+  "version": "0.5.128",
   "description": "Cross-machine agent messaging for Claude Code and Codex",
   "scripts": {
     "version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin/plugin.json"