patchcord 0.6.39 → 0.6.40

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "patchcord",
   "description": "Cross-machine agent messaging. Messages from other agents land in the inbox and wake the agent to reply.",
-  "version": "0.6.39",
+  "version": "0.6.40",
   "author": {
     "name": "ppravdin"
   },

package/bin/patchcord.mjs

@@ -789,8 +789,23 @@ if (cmd === "whoami") {
     // provisioned". Say explicitly that identity is fine.
     console.log(`self-description: (not set — optional; your identity ${json.agent}@${json.namespace} is fully provisioned. Set one with: patchcord whoami --propose "<text>")`);
   }
-  console.log();
-  console.log(`tip: \`patchcord agents\` returns whoami for all peers.`);
+  // TTY-ONLY, AND THAT IS THE WHOLE POINT.
+  //
+  // This tip is addressed to a human reading a terminal. It was printed
+  // unconditionally, which meant it also landed in the stdout an AGENT captures
+  // from a tool call — and to a model, a suggestion in a tool result is
+  // indistinguishable from an instruction. An agy session's own record shows the
+  // consequence exactly: 6 `patchcord whoami` calls, 6 `patchcord agents` calls,
+  // paired one-to-one, each `agents` immediately following the tip in the
+  // previous command's output. Nothing in any skill or config asked for it. We
+  // did, in our own stdout, every single time.
+  //
+  // A tip is help. An unrequested command is work. The difference is entirely in
+  // who is reading, and `isTTY` is the one place that difference is knowable.
+  if (process.stdout.isTTY) {
+    console.log();
+    console.log(`tip: \`patchcord agents\` returns whoami for all peers.`);
+  }
   for (const w of warnings) {
     // stderr, matching the global-scope warning above. The line is addressed
     // to the AGENT and says to relay it, because the human has no reason to
@@ -1432,10 +1447,38 @@ if (cmd === "login" || cmd === "orchestrator" || cmd === "teamlead" || cmd === "
       // Antigravity CLI: PROJECT-scoped config at .agents/mcp_config.json (one
       // project = one namespace = one agent). Remote HTTP uses `serverUrl`.
       const adir = join(dir, ".agents"); mkdirSync(adir, { recursive: true });
-      return writeJson(join(adir, "mcp_config.json"), (o) => {
+      const agWritten = writeJson(join(adir, "mcp_config.json"), (o) => {
         o.mcpServers = o.mcpServers || {};
         o.mcpServers.patchcord = { serverUrl: `${baseUrl}/mcp`, headers: hdr };
       });
+      // THE SKILL IS A GUARD, NOT DOCUMENTATION, AND IT WAS MISSING HERE.
+      //
+      // The interactive installer copies these; this path did not, so every seat
+      // provisioned by `patchcord provision --tool agy` — which is how a
+      // mux-deployed Team is built — got the credential and none of the rules.
+      // Three live agy seats were checked: one had only patchcord-wait, two had
+      // no skills at all.
+      //
+      // What goes missing is specifically the line "Do not run the `patchcord`
+      // CLI (whoami, inbox, recall, HTTP calls)". Without it, a seat whose MCP
+      // has not loaded reaches for the CLI instead — and one that did wrote its
+      // own send_patchcord.js and ran it eight times. The skill exists, is
+      // correctly worded, and was installed by one provisioning path out of two,
+      // which is the same as not having it for anyone who arrives by the other.
+      //
+      // Copied the same way hermes is above, which is why the pattern was
+      // already here to notice.
+      try {
+        const agSkills = join(pluginRoot, "per-project-skills", "antigravity");
+        for (const [src, dest] of [["inbox", "patchcord"], ["wait", "patchcord-wait"]]) {
+          const from = join(agSkills, src, "SKILL.md");
+          if (!existsSync(from)) continue;
+          const to = join(adir, "skills", dest);
+          mkdirSync(to, { recursive: true });
+          cpSync(from, join(to, "SKILL.md"));
+        }
+      } catch {}
+      return agWritten;
     }
     if (tool === "hermes") {
       // Hermes reads MCP servers ONLY from its GLOBAL ~/.hermes/config.yaml

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchcord",
-  "version": "0.6.39",
+  "version": "0.6.40",
   "description": "Cross-machine agent messaging for Claude Code and Codex",
   "scripts": {
     "version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin/plugin.json"