pendingyou 0.26.0 → 0.27.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.27.0 (2026-10-07)
+
+- Claude Code's pendingyou MCP server no longer gets stuck on “needs authentication” after a computer sleeps. When it
+  reconnected during a brief wake, the sign-in's 15-minute access token had run out, the refresh couldn't land in the
+  headers helper's time, and the helper printed nothing. With no `Authorization` from its helper, Claude Code turns on
+  its own OAuth, and the 401 left the server needing authentication, every pendingyou tool failing, until `/mcp`. Now
+  the helper tries the refresh again every 1.5 seconds within its time when one fails (a network still coming up), and
+  while it has a sign-in it always hands over a token, even one that has run out: that's refused as a failed connect,
+  which Claude Code tries again by running the helper, never as a reason to start its own sign-in. It still prints
+  nothing when there's no sign-in or the sign-in has ended.
+- When the helper last handed over a token that had run out, the next-message hook says so: if a pendingyou tool fails,
+  the agent tells you in chat to run `/mcp`, choose pendingyou and Reconnect (or restart Claude Code; Codex: restart
+  it), and asks in chat until it works. Said only within 12 hours, and no more once a later connect got a fresh token.
+
 ## 0.26.0 (2026-10-07)
 
 - A session that sat idle past its sign-in's 15-minute access token hears its answers again. The next message's

package/dist/api.js

@@ -97,14 +97,22 @@ async function hookToken(io, origin, force, signal, app, expiredWaitMs) {
     }
     throw new Unavailable('The sign-in is being refreshed in the background.');
 }
+export const REFRESH_RETRY_MS = 1500;
 export async function helperToken(io, origin, waitMs, app = DEFAULT_APP, force = false) {
     const stored = await readCredential(io, origin, app);
     if (!stored)
         throw new SignInNeeded(false);
     if (!force && stored.expiresAt - io.now() > SOON_MS)
         return stored.accessToken;
-    if (!(await isLocked(credentialsPath(io))))
+    const lock = credentialsPath(io);
+    let started = Number.NEGATIVE_INFINITY;
+    const start = async () => {
+        if (await isLocked(lock))
+            return;
         io.background(refreshArgs(origin, app, force));
+        started = io.now();
+    };
+    await start();
     const until = io.now() + waitMs;
     while (io.now() < until) {
         await io.sleep(100);
@@ -113,6 +121,8 @@ export async function helperToken(io, origin, waitMs, app = DEFAULT_APP, force =
             throw new SignInNeeded(true);
         if (current.refreshToken !== stored.refreshToken)
             return current.accessToken;
+        if (io.now() - started >= REFRESH_RETRY_MS && io.now() + REFRESH_WAIT_MS < until)
+            await start();
     }
     if (!force && stored.expiresAt - io.now() > USABLE_MS)
         return stored.accessToken;

package/dist/mcp-health.js

@@ -0,0 +1,48 @@
+import { join } from 'node:path';
+import { APP_NAMES, DEFAULT_APP } from "./apps/ids.js";
+import { slotOf } from "./credentials.js";
+import { configDir, readJson, writeWhole } from "./files.js";
+export const STUCK_FOR_MS = 12 * 60 * 60_000;
+const helperStatePath = (io) => join(configDir(io), 'helper.json');
+async function readAll(io) {
+    const file = await readJson(helperStatePath(io)).catch(() => null);
+    return file && typeof file.slots === 'object' && file.slots !== null ? file.slots : {};
+}
+export async function recordHelper(io, origin, app, outcome) {
+    try {
+        const slots = await readAll(io);
+        const key = slotOf(origin, app);
+        if (slots[key]?.outcome === outcome && outcome === 'ok')
+            return;
+        slots[key] = { at: io.now(), outcome };
+        await writeWhole(helperStatePath(io), `${JSON.stringify({ version: 1, slots }, null, 2)}\n`, {
+            secret: true,
+        });
+    }
+    catch { }
+}
+export async function helperOutcome(io, origin, app = DEFAULT_APP) {
+    const entry = (await readAll(io).catch(() => ({})))[slotOf(origin, app)];
+    return entry &&
+        typeof entry.at === 'number' &&
+        (entry.outcome === 'ok' || entry.outcome === 'stale')
+        ? entry
+        : null;
+}
+export function stuckText(app) {
+    const back = app === DEFAULT_APP
+        ? 'run /mcp, choose pendingyou and Reconnect (no need to Authenticate), or restart Claude Code'
+        : `restart ${APP_NAMES[app]}`;
+    return `Pending You: when ${APP_NAMES[app]} last connected to its pendingyou MCP server, this computer couldn’t refresh its sign-in in time, so that connection may have been refused. If a pendingyou tool fails (not connected, or needs authentication), tell your person in chat: ${back}. Until it works, ask them in chat.`;
+}
+export async function stuckLine(io, origin, app) {
+    try {
+        const last = await helperOutcome(io, origin, app);
+        if (last?.outcome !== 'stale' || io.now() - last.at > STUCK_FOR_MS)
+            return null;
+        return stuckText(app);
+    }
+    catch {
+        return null;
+    }
+}

package/dist/pickup.js

@@ -9,6 +9,7 @@ import { goesBy, HANDED_GRACE_MS, namesAnotherComputer } from "./handed.js";
 import { herdrTarget, reportCommand } from "./herdr.js";
 import { holdCommand } from "./hold.js";
 import { unwokenLine } from "./loaded.js";
+import { stuckLine } from "./mcp-health.js";
 import { isPermissionCard, isPromptApp, POSTED_MAX, sessionName, sessionPosted, settlePrompts, } from "./permission.js";
 import { announce, keepPresent, readSaid } from "./presence.js";
 import { setupReminder } from "./setup.js";
@@ -142,6 +143,7 @@ export async function pickup(io, options, hook = { fallback: '' }) {
     let warning = null;
     let reminder = null;
     let unwoken = null;
+    let stuck = null;
     try {
         const input = await hookInput(io);
         const { cwd } = input;
@@ -176,6 +178,7 @@ export async function pickup(io, options, hook = { fallback: '' }) {
             hook.fallback = `${[REMINDER, warning].filter(Boolean).join('\n')}\n`;
             if (app === DEFAULT_APP)
                 unwoken = await unwokenLine(io, origin, input.session, known);
+            stuck = await stuckLine(io, origin, app);
         }
         if (app !== DEFAULT_APP && input.session) {
             await touchThread(io, app, input.session, input.given ? input.cwd : null);
@@ -281,11 +284,13 @@ export async function pickup(io, options, hook = { fallback: '' }) {
             ...(warning ? [warning] : []),
             ...(reminder ? [reminder] : []),
             ...(unwoken ? [unwoken] : []),
+            ...(stuck ? [stuck] : []),
         ].join('\n')}\n`);
         line = null;
         warning = null;
         reminder = null;
         unwoken = null;
+        stuck = null;
         await markHanded(io, origin, fresh.map((heard) => ({ requestId: heard.requestId, moment: momentOf(heard) })));
         return 0;
     }
@@ -299,7 +304,7 @@ export async function pickup(io, options, hook = { fallback: '' }) {
         return 0;
     }
     finally {
-        const last = [line, warning, reminder, unwoken].filter(Boolean);
+        const last = [line, warning, reminder, unwoken, stuck].filter(Boolean);
         if (last.length)
             io.out(`${last.join('\n')}\n`);
     }

package/dist/remote.js

@@ -5,6 +5,7 @@ import { APP_NAMES, DEFAULT_APP } from "./apps/ids.js";
 import { cleanName, DEFAULT_ORIGIN } from "./args.js";
 import { readCredential } from "./credentials.js";
 import { configDir, writeWhole } from "./files.js";
+import { recordHelper } from "./mcp-health.js";
 import { VERSION } from "./version.js";
 export const HELPER = 'pendingyou-mcp-headers';
 export const helperPath = (io) => join(configDir(io), 'bin', HELPER);
@@ -255,12 +256,23 @@ export async function mcpHeaders(io, options) {
         io.err(`pendingyou: this computer’s sign-in only hears answers, so ${name} can’t use it. Run: ${login}\n`);
         return 1;
     }
+    const headers = (token) => io.out(`${JSON.stringify({ Authorization: `Bearer ${token}` })}\n`);
     try {
         const token = await helperToken(io, options.origin, HELPER_WAIT_MS, app);
-        io.out(`${JSON.stringify({ Authorization: `Bearer ${token}` })}\n`);
+        headers(token);
+        await recordHelper(io, options.origin, app, 'ok');
         return 0;
     }
     catch (error) {
+        if (error instanceof Unavailable) {
+            const current = await readCredential(io, options.origin, app).catch(() => null);
+            if (current?.kind === 'connection') {
+                headers(current.accessToken);
+                io.err('pendingyou: couldn’t refresh the sign-in in time (is this computer online?), so this token may be refused; the refresh goes on in the background.\n');
+                await recordHelper(io, options.origin, app, current.expiresAt > io.now() ? 'ok' : 'stale');
+                return 0;
+            }
+        }
         io.err(error instanceof SignInNeeded
             ? `pendingyou: this computer’s sign-in has ended. Run: ${login}\n`
             : error instanceof Unavailable

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = '0.26.0';
+export const VERSION = '0.27.0';

package/mod/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pendingyou-wake",
   "displayName": "Pending You",
-  "version": "2.38.0",
+  "version": "2.39.0",
   "description": "Wakes Claude Code when your person answers a Pending You card it posted, even while it sits idle. Installed by `npx pendingyou init`.",
   "author": {
     "name": "RecordPlane",

package/mod/README.md

@@ -4,4 +4,4 @@ The pendingyou command line’s copy of the Pending You plugin’s wake mod, for
 
 In each session it learns the cards the session posts to Pending You, checks them through the session’s own Pending You connection, and starts a turn when your person answers, writes back or a fallback comes due, or hands the session a question from another of their assistants (CLI 0.14.0), even while it sits idle. It answers `npx pendingyou hold` itself, so nothing waits in the background, and shows “2 waiting on you” under the prompt, after the plugin’s name. With the Pending You plugin installed too, only one copy acts.
 
-Generated from recordplane/pendingyou (packages/claude-plugin/src/wake) with Pending You’s guide 2.38.0; send changes there.
+Generated from recordplane/pendingyou (packages/claude-plugin/src/wake) with Pending You’s guide 2.39.0; send changes there.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pendingyou",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Pending You for your coding agents: one command sets up Claude Code, Codex, OpenCode and Pi to ask you through Pending You and hear your answers, even while they sit idle.",
   "license": "Apache-2.0",
   "homepage": "https://www.pendingyou.com",