patchcord 0.5.128 → 0.5.129

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "patchcord",
   "description": "Cross-machine agent messaging. Messages from other agents land in the inbox and wake the agent to reply.",
-  "version": "0.5.128",
+  "version": "0.5.129",
   "author": {
     "name": "ppravdin"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchcord",
-  "version": "0.5.128",
+  "version": "0.5.129",
   "description": "Cross-machine agent messaging for Claude Code and Codex",
   "scripts": {
     "version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin/plugin.json"

package/scripts/subscribe.mjs

@@ -426,18 +426,17 @@ function runOnce(ticket, baseUrl, token, refreshTicket) {
         try {
           const fresh = await refreshTicket();
           currentJwt = fresh.jwt;
-          // Socket-level auth update (phoenix topic) — what Supabase
-          // actually uses for the connection's own JWT expiry check.
-          // Without this, the server closes the socket at the original
-          // JWT's exp regardless of per-channel updates.
-          ws.send(
-            JSON.stringify({
-              topic: "phoenix",
-              event: "access_token",
-              payload: { access_token: currentJwt },
-              ref: String(ref++),
-            })
-          );
+          // NO socket-level "phoenix" topic update. Verified live against
+          // production Realtime: the reserved "phoenix" topic has no joined
+          // channel behind it, so any non-heartbeat event sent there —
+          // including access_token — is rejected with a phx_reply
+          // {status:"error", reason:"unmatched topic"}, every time. Per
+          // Supabase's own protocol, access_token is a per-channel-only
+          // event; there is no socket-level refresh mechanism. Sending it
+          // here previously triggered that error on every refresh cycle
+          // (~8min), which the generic phx_reply-error handler below treated
+          // as fatal and force-reconnected on — a full disconnect/rejoin
+          // cycle every ~8 minutes, forever, on every subscribe listener.
           // Channel-level updates — matches supabase-js's setAuth() pattern.
           for (const topic of fresh.topics) {
             ws.send(