patchcord 0.5.45 → 0.5.47

package/bin/patchcord.mjs

@@ -361,6 +361,35 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
   const bold = "\x1b[1m";
   const r = "\x1b[0m";
 
+  // ── Purge stale npx cache entries ────────────────────────────
+  // npx never auto-updates a cached package. Users with an old `npx patchcord`
+  // entry get the stale binary indefinitely. On every install we sweep
+  // ~/.npm/_npx/ and remove any patchcord cache dirs that are older than
+  // the version we're installing right now.
+  const currentVersion = JSON.parse(readFileSync(join(pluginRoot, "package.json"), "utf-8")).version;
+  const npxCacheDir = join(HOME, ".npm", "_npx");
+  if (existsSync(npxCacheDir)) {
+    try {
+      for (const hash of readdirSync(npxCacheDir)) {
+        const pkgJson = join(npxCacheDir, hash, "node_modules", "patchcord", "package.json");
+        if (!existsSync(pkgJson)) continue;
+        try {
+          const cached = JSON.parse(readFileSync(pkgJson, "utf-8")).version || "";
+          if (cached && cached !== currentVersion) {
+            rmSync(join(npxCacheDir, hash), { recursive: true, force: true });
+          }
+        } catch {}
+      }
+    } catch {}
+  }
+
+  // ── Install patchcord as a global CLI tool ───────────────────
+  // Avoids relying on `npx patchcord subscribe` which is subject to npx
+  // caching and supply-chain-protection min-release-age policies that
+  // cause npx to silently downgrade to an older version.
+  // --prefer-offline reuses what npx already downloaded — no extra network.
+  run(`npm install -g patchcord@${currentVersion} --prefer-offline`);
+
   // ── Global setup (silent if nothing changed) ──
   let globalChanges = [];
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchcord",
-  "version": "0.5.45",
+  "version": "0.5.47",
   "description": "Cross-machine agent messaging for Claude Code and Codex",
   "author": "ppravdin",
   "license": "MIT",

package/skills/subscribe/SKILL.md

@@ -20,7 +20,7 @@ User invoked /patchcord:subscribe — do NOT substitute `wait_for_message()`. Sp
      description: "patchcord realtime listener",
      persistent: true,
      timeout_ms: 3600000,
-     command: "exec node \"${CLAUDE_PLUGIN_ROOT}/scripts/subscribe.mjs\""
+     command: "exec patchcord subscribe"
    )
    ```