patchcord 0.6.5 → 0.6.7

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "patchcord",
   "description": "Cross-machine agent messaging. Messages from other agents land in the inbox and wake the agent to reply.",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "author": {
     "name": "ppravdin"
   },

package/bin/patchcord.mjs

@@ -1195,7 +1195,10 @@ if (cmd === "login" || cmd === "orchestrator" || cmd === "teamlead" || cmd === "
     const hostname = run("hostname -s") || run("hostname") || "unknown";
     writeWorkerConfig(tool, dir, base, json.token, hostname);
     if (role) {
-      try { writeFileSync(join(dir, "AGENTS.md"), `# ${arg} — role: ${role}\n\nYou are \`${arg}\` in the \`${ns}\` Patchcord team. Role: ${role}.\nCoordinate with teammates over Patchcord (inbox / send_message / reply).\n`); } catch {}
+      const agyNote = (tool === "antigravity" || tool === "agy")
+        ? "\nIf the `inbox` MCP tool is not loaded, Patchcord is disconnected — do not run the patchcord CLI or read tokens from config files; do the user's/mux task only.\n"
+        : "";
+      try { writeFileSync(join(dir, "AGENTS.md"), `# ${arg} — role: ${role}\n\nYou are \`${arg}\` in the \`${ns}\` Patchcord team. Role: ${role}.\nCoordinate with teammates over Patchcord (inbox / send_message / reply).${agyNote}`); } catch {}
     }
     // Record in the local team manifest so `team launch` / `team status` see it.
     try {
@@ -1949,6 +1952,18 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
     if (removedStaleGlobal) {
       globalChanges.push("Removed global Patchcord skills/instructions (agy reads ~/.gemini/skills — per-project only)");
     }
+    // agy-cli loads ALL of ~/.gemini/skills in every folder — warn if orchestrator/mux
+    // skills are present (they mention patchcord/inbox and trigger CLI/token scavenging).
+    const geminiSkillsRoot = join(HOME, ".gemini", "skills");
+    if (existsSync(geminiSkillsRoot)) {
+      const noisy = ["orchestrator-comms", "orchestrator-team", "orchestrator-flow", "mux", "actor-lead", "actor-team-lead", "patchcord"];
+      let entries = [];
+      try { entries = readdirSync(geminiSkillsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name); } catch {}
+      const found = entries.filter((n) => noisy.some((p) => n.includes(p)));
+      if (found.length) {
+        console.log(`  ${M.yellow}warning:${M.rst} ~/.gemini/skills has global skills (${found.join(", ")}) — agy-cli reads them in every folder and may hunt patchcord without MCP. Keep orchestrator/patchcord skills in ~/.claude/skills or per-project .agents/skills only.`);
+      }
+    }
     // true = configured, false = file absent (definitely not), null = unparseable (unknown)
     const hasPatchcordMcp = (p, keyPath) => {
       if (!existsSync(p)) return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchcord",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "description": "Cross-machine agent messaging for Claude Code and Codex",
   "scripts": {
     "version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin/plugin.json"

package/per-project-skills/antigravity/inbox/SKILL.md

@@ -1,15 +1,24 @@
 ---
 name: patchcord-inbox
-description: Patchcord MCP inbox workflow for this project's Antigravity agent
+description: >
+  Antigravity-only. Patchcord MCP inbox workflow for THIS project's agy seat.
+  Active ONLY when mcp_patchcord_inbox (or patchcord/inbox) is loaded — ignore
+  entirely when Patchcord MCP is absent.
 ---
 
 ## Applies only when Patchcord MCP tools are loaded
 
-If the `inbox` MCP tool is not available in this session, this skill does not
-apply. Do nothing: do not run the Patchcord CLI, read a token from a config
-file, or call the HTTP API. A missing project MCP config is a normal state.
+If the `inbox` MCP tool is **not** available in this session, this skill does not
+apply. **Stop here.** Do nothing patchcord-related:
 
-Invoke with `/patchcord-inbox` when Patchcord MCP is connected in this project.
+- Do **not** run the `patchcord` CLI (`whoami`, `inbox`, `recall`, HTTP calls, etc.).
+- Do **not** read a bearer token from `.agents/mcp_config.json`, `.mcp.json`,
+  `settings.json`, env vars, or **any other project's folder**.
+- Do **not** "check patchcord", "find the session", or fabricate an MCP connection.
+- A missing MCP tool is normal — proceed with the user's actual task (mux paste,
+  files, commands) with zero patchcord steps.
+
+Invoke with `/patchcord-inbox` only when Patchcord MCP is connected in this project.
 
 Call the `inbox` MCP tool now. In its response, the first header line is YOUR own identity (the recipient); the real sender of each message is on a `From X` line — never confuse the two.
 

package/per-project-skills/antigravity/wait/SKILL.md

@@ -1,13 +1,15 @@
 ---
 name: patchcord-wait
-description: Block until one Patchcord message arrives (this project's Antigravity agent)
+description: >
+  Antigravity-only. Block until one Patchcord message arrives. Active ONLY when
+  wait_for_message MCP is loaded — ignore when Patchcord MCP is absent.
 ---
 
 ## Applies only when Patchcord MCP tools are loaded
 
-If the `wait_for_message` MCP tool is not available in this session, this skill
-does not apply. Do nothing: do not run the Patchcord CLI, read a token from a
-config file, or call the HTTP API. A missing project MCP config is a normal state.
+If the `wait_for_message` MCP tool is **not** available in this session, this skill
+does not apply. **Stop here.** Do not run the Patchcord CLI, read tokens from config
+files (this project or any other), or call the HTTP API.
 
 Invoke with `/patchcord-wait` when Patchcord MCP is connected in this project.