@somacheck/vibecheck 0.3.0 → 0.5.0

package/README.md

@@ -9,13 +9,13 @@ Your agent has your context. It does not have your gut. This is the bridge.
 
 Fair. Here is what you need, without executing anything.
 
-**What the `link` command does.** `npx -y @somacheck/vibecheck@0.3.0 link <CODE> --client <CLIENT>`
+**What the `link` command does.** `npx -y @somacheck/vibecheck@0.5.0 link <CODE> --client <CLIENT>`
 exchanges a short-lived pairing code, generated inside the SomaCheck iOS app, for
 a bearer token. It writes that token to `~/.sensie/config.json` with mode `0600`,
 offers to configure supported agent clients found on the computer, and checks the
 connection without printing the token. Setup is not reported ready until the
 selected client has the exact pinned `vibecheck` MCP registration, the backend
-accepts protocol `3` / toolset `vibecheck-0.3`, and both status and context
+accepts protocol `4` / toolset `vibecheck-0.5`, and both status and context
 probes succeed. It contacts exactly one network host: the Supabase project below.
 
 **It will refuse unsafe sandbox linking, on purpose.** `link` checks safety
@@ -32,13 +32,17 @@ and that its persistent MCP config can be inspected and written. If that preflig
 fails, the pairing code is not used. Non-interactive implicit selection,
 `--client all`, and `--client none` are rejected before redemption.
 
-**What the server does once running.** It exposes MCP tools that create a
-statement for the user to test, read its outcome, recover recent completed
-gesture context, and keep a three-statement feed stocked. That is the whole
-surface.
-
-**What is sent.** A question string you supply, and a bearer token identifying
-the link. **What is never sent: raw sensor data.** The agent receives a verdict
+**What the server does once running.** It exposes MCP tools that share bounded,
+user-authorized context summaries, create a statement for the user to test,
+read its outcome, recover recent completed gesture context, and keep a
+three-statement feed stocked.
+
+**What is sent.** A statement string, bounded derived context observations the
+agent explicitly shares, and a bearer token identifying the link. Tool
+instructions forbid raw conversations, photos, identifiers, and diagnostic
+claims; the backend enforces the bounded capsule shape and rejects
+secret-shaped content. **What is never sent: raw sensor
+data.** The agent receives a verdict
 (`aligned` / `unaligned`) plus a confidence percentage and latency. Model
 abstention is a failed capture, never a third user-facing outcome.
 Accelerometer and gyroscope streams never leave the user's device through this
@@ -72,9 +76,9 @@ before the pairing code is redeemed.
 To configure or repair a client later:
 
 ```text
-npx -y @somacheck/vibecheck@0.3.0 setup codex
-npx -y @somacheck/vibecheck@0.3.0 setup claude
-npx -y @somacheck/vibecheck@0.3.0 doctor
+npx -y @somacheck/vibecheck@0.5.0 setup codex
+npx -y @somacheck/vibecheck@0.5.0 setup claude
+npx -y @somacheck/vibecheck@0.5.0 doctor
 ```
 
 Manual registration remains available:
@@ -84,13 +88,13 @@ Manual registration remains available:
      "mcpServers": {
        "vibecheck": {
          "command": "npx",
-        "args": ["-y", "@somacheck/vibecheck@0.3.0", "serve", "--client", "codex"]
+        "args": ["-y", "@somacheck/vibecheck@0.5.0", "serve", "--client", "codex"]
        }
      }
    }
    ```
 
-   For Claude Code: `claude mcp add --scope user vibecheck -- npx -y @somacheck/vibecheck@0.3.0 serve --client claude`
+   For Claude Code: `claude mcp add --scope user vibecheck -- npx -y @somacheck/vibecheck@0.5.0 serve --client claude`
 
 The link step writes only the bearer token in `~/.sensie/config.json`. The client
 setup step asks Codex or Claude to add the pinned MCP command to that client's own
@@ -98,7 +102,7 @@ configuration; it never copies the bearer token there. The interactive command
 completes both steps. Most clients only pick up a new server after restart.
 
 If `doctor` reports another MCP server named `somacheck`, that is the legacy
-hosted connector and is not part of this local 0.3 release. The setup command
+hosted connector and is separate from this local package. The setup command
 will explain it and leave it alone. The canonical local MCP key is `vibecheck`.
 
 ## Tools
@@ -107,6 +111,7 @@ will explain it and leave it alone. The canonical local MCP key is `vibecheck`.
 |---|---|
 | `get_vibecheck_context` | Read recent completed gestures for this exact agent link without retaining every `request_id`. |
 | `get_vibecheck_status` | Read the live three-proposition cache and how many distinct insights it needs. |
+| `share_somacheck_context` | Share 1–20 bounded, derived, user-authorized observations; raw conversations and secrets are rejected. |
 | `post_vibecheck_statement` | Add one to three personalized statements without blocking; returns a stable `request_id` for each. |
 | `get_vibecheck_result` | Read that exact proposition once by `request_id`; returns queued, pending, or its terminal result. |
 

package/dist/api.js

@@ -10,6 +10,16 @@ const HANDSHAKE_READINESS_STATUSES = new Set([
     "setup_incomplete",
     "health_check_failed",
 ]);
+const CONTEXT_CATEGORY = {
+    goal: "goals_projects", project: "goals_projects",
+    decision: "decisions_commitments", commitment: "decisions_commitments",
+    tension: "tensions_questions_blind_spots", question: "tensions_questions_blind_spots",
+    blindSpot: "tensions_questions_blind_spots",
+    relationship: "relationships_situational", situation: "relationships_situational",
+    change: "changes_deadlines_developments", deadline: "changes_deadlines_developments",
+    development: "changes_deadlines_developments", moodTheme: "emotional_mood_themes",
+    preference: "corrections_dismissals_saves_preferences",
+};
 export class SomaCheckHttpError extends Error {
     status;
     constructor(status) {
@@ -128,6 +138,75 @@ function parseStatus(row) {
         },
     };
 }
+/** Shared strict decoders used by both local stdio and hosted OAuth MCP. */
+export function decodeVibecheckStatus(value) {
+    return parseStatus(asObject(value));
+}
+export function decodeCreatedRequests(value) {
+    return allRows(value).map((row) => {
+        const presentationState = requiredString(row, "presentation_state");
+        if (presentationState !== "presented" && presentationState !== "queued") {
+            throw new Error("SomaCheck returned an incomplete response.");
+        }
+        return {
+            request_id: requiredString(row, "request_id"),
+            presentation_state: presentationState,
+            stale_at: nullableString(row, "expires_at"),
+        };
+    });
+}
+export function decodePollResponse(value) {
+    const row = asObject(value);
+    const status = row.status;
+    if (typeof status !== "string" || !STATUSES.has(status)) {
+        throw new Error("SomaCheck returned an invalid request status.");
+    }
+    const verdict = row.verdict;
+    const confidence = row.confidence;
+    const latency = row.latency_s;
+    if (verdict !== null && (typeof verdict !== "string" || !VERDICTS.has(verdict))) {
+        throw new Error("SomaCheck returned an invalid verdict.");
+    }
+    if (confidence !== null && (typeof confidence !== "number" || !Number.isFinite(confidence))) {
+        throw new Error("SomaCheck returned an invalid confidence.");
+    }
+    if (latency !== null && (typeof latency !== "number" || !Number.isFinite(latency) || latency < 0)) {
+        throw new Error("SomaCheck returned an invalid latency.");
+    }
+    if (status === "answered") {
+        if (verdict === null || confidence === null || confidence < 0 || confidence > 1 || latency === null) {
+            throw new Error("SomaCheck returned an incomplete answered result.");
+        }
+    }
+    else if (verdict !== null || confidence !== null || latency !== null) {
+        throw new Error("SomaCheck returned an inconsistent pending result.");
+    }
+    return {
+        status: status,
+        verdict: verdict,
+        confidence: confidence,
+        latency_s: latency,
+    };
+}
+export function decodeVibecheckContext(value) {
+    return allRows(value).map((row) => {
+        const verdict = requiredString(row, "verdict");
+        const confidence = requiredNumber(row, "confidence");
+        if (!VERDICTS.has(verdict)) {
+            throw new Error("SomaCheck returned an invalid verdict.");
+        }
+        if (confidence < 0 || confidence > 1) {
+            throw new Error("SomaCheck returned an invalid confidence.");
+        }
+        return {
+            request_id: requiredString(row, "request_id"),
+            statement: requiredString(row, "statement"),
+            verdict: verdict,
+            confidence,
+            answered_at: requiredTimestamp(row, "answered_at"),
+        };
+    });
+}
 function parseHandshake(row) {
     const readinessStatus = requiredString(row, "readiness_status");
     if (!HANDSHAKE_READINESS_STATUSES.has(readinessStatus)) {
@@ -151,6 +230,24 @@ function parseHandshake(row) {
     }
     return result;
 }
+export function decodeAgentContextShare(value) {
+    const row = firstRow(value);
+    const state = requiredString(row, "state");
+    if (state !== "ready")
+        throw new Error("SomaCheck returned an invalid context state.");
+    const observationCount = requiredInteger(row, "observation_count");
+    if (observationCount < 1 || observationCount > 20) {
+        throw new Error("SomaCheck returned an invalid observation count.");
+    }
+    return {
+        source_id: requiredString(row, "source_id"),
+        entry_id: requiredString(row, "entry_id"),
+        accepted: requiredBoolean(row, "accepted"),
+        state,
+        observation_count: observationCount,
+        captured_at: requiredTimestamp(row, "captured_at"),
+    };
+}
 export class SupabaseAgentApi {
     #endpoint;
     #apiKey;
@@ -165,77 +262,38 @@ export class SupabaseAgentApi {
         return requiredString(row, "token");
     }
     async createRequests(token, statements) {
-        const rows = await this.#rpcRows("agent_proposition_batch_create", { token, statements });
-        return rows.map((row) => {
-            const presentationState = requiredString(row, "presentation_state");
-            if (presentationState !== "presented" && presentationState !== "queued") {
-                throw new Error("SomaCheck returned an incomplete response.");
-            }
-            return {
-                request_id: requiredString(row, "request_id"),
-                presentation_state: presentationState,
-                stale_at: nullableString(row, "expires_at"),
-            };
-        });
+        return decodeCreatedRequests(await this.#rpcJson("agent_proposition_batch_create", { token, statements }));
     }
     async pollRequest(token, requestId) {
-        const row = await this.#rpc("agent_proposition_result", { token, proposition_id: requestId });
-        const status = row.status;
-        if (typeof status !== "string" || !STATUSES.has(status)) {
-            throw new Error("SomaCheck returned an invalid request status.");
-        }
-        const verdict = row.verdict;
-        const confidence = row.confidence;
-        const latency = row.latency_s;
-        if (verdict !== null && (typeof verdict !== "string" || !VERDICTS.has(verdict))) {
-            throw new Error("SomaCheck returned an invalid verdict.");
-        }
-        if (confidence !== null && (typeof confidence !== "number" || !Number.isFinite(confidence))) {
-            throw new Error("SomaCheck returned an invalid confidence.");
-        }
-        if (latency !== null && (typeof latency !== "number" || !Number.isFinite(latency) || latency < 0)) {
-            throw new Error("SomaCheck returned an invalid latency.");
-        }
-        if (status === "answered") {
-            if (verdict === null || confidence === null || confidence < 0 || confidence > 1 || latency === null) {
-                throw new Error("SomaCheck returned an incomplete answered result.");
-            }
-        }
-        else if (verdict !== null || confidence !== null || latency !== null) {
-            throw new Error("SomaCheck returned an inconsistent pending result.");
-        }
-        return {
-            status: status,
-            verdict: verdict,
-            confidence: confidence,
-            latency_s: latency,
-        };
+        return decodePollResponse(await this.#rpc("agent_proposition_result", { token, proposition_id: requestId }));
     }
     async statusRequest(token) {
-        return parseStatus(await this.#rpc("agent_proposition_cache_status", { token }));
+        return decodeVibecheckStatus(await this.#rpc("agent_proposition_cache_status", { token }));
     }
     async contextRequest(token, limit = 20) {
-        const rows = await this.#rpcRows("agent_proposition_context", { token, p_limit: limit });
-        return rows.map((row) => {
-            const verdict = requiredString(row, "verdict");
-            const confidence = requiredNumber(row, "confidence");
-            if (!VERDICTS.has(verdict)) {
-                throw new Error("SomaCheck returned an invalid verdict.");
-            }
-            if (confidence < 0 || confidence > 1) {
-                throw new Error("SomaCheck returned an invalid confidence.");
-            }
-            return {
-                request_id: requiredString(row, "request_id"),
-                statement: requiredString(row, "statement"),
-                verdict: verdict,
-                confidence,
-                answered_at: requiredTimestamp(row, "answered_at"),
-            };
-        });
+        return decodeVibecheckContext(await this.#rpcJson("agent_proposition_context", { token, p_limit: limit }));
+    }
+    async shareContext(token, observations) {
+        const capturedAt = new Date().toISOString();
+        const payload = {};
+        for (const observation of observations) {
+            const category = CONTEXT_CATEGORY[observation.type];
+            (payload[category] ??= []).push({
+                type: observation.type,
+                summary: observation.summary.trim(),
+                confidence: observation.confidence,
+                evidence_count: observation.evidence_count,
+                captured_at: capturedAt,
+            });
+        }
+        return decodeAgentContextShare(await this.#rpcJson("agent_context_capsule_share", {
+            token,
+            p_payload: payload,
+            p_confidence: observations.reduce((sum, item) => sum + item.confidence, 0) / observations.length,
+        }));
     }
     async clientHandshake(token, input) {
-        const row = await this.#rpc("agent_client_handshake", {
+        const row = await this.#rpc("agent_client_handshake_v2", {
             token,
             p_client_key: input.client_key,
             p_client_label: input.client_label,

package/dist/cli.js

@@ -5,7 +5,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { SupabaseAgentApi } from "./api.js";
 import { clientDisplayName, detectInstalledClients, detectLegacyHostedRegistration, LocalCommandRunner, manualLegacyHostedRemoveCommand, manualRemoveCommand, manualSetupCommand, parseClientChoice, preflightClientPersistence, registerClient, singleNonInteractiveClientSelection, } from "./client-setup.js";
 import { readConfig } from "./config.js";
-import { SUPABASE_PUBLISHABLE_KEY, SUPABASE_URL } from "./constants.js";
+import { PACKAGE_SPEC, SUPABASE_PUBLISHABLE_KEY, SUPABASE_URL } from "./constants.js";
 import { LinkPersistenceError, NonInteractiveLinkError, linkAgent } from "./link.js";
 import { checkReadiness } from "./readiness.js";
 import { createVibecheckServer } from "./server.js";
@@ -100,6 +100,13 @@ async function preflightLinkClients(clients, interactive) {
     const selectedClients = interactive
         ? clients === "prompt" ? [] : clients
         : nonInteractiveClient === null ? [] : [nonInteractiveClient];
+    if (selectedClients.length > 1) {
+        throw new ClientPreflightError([
+            "Not linking yet: each local agent needs its own independently revocable pairing code.",
+            "Link Claude and Codex separately so one credential is never shared between them.",
+            "The pairing code has NOT been used.",
+        ].join("\n"));
+    }
     if (selectedClients.length === 0) {
         throw new ClientPreflightError([
             interactive
@@ -108,8 +115,8 @@ async function preflightLinkClients(clients, interactive) {
             "",
             "Run the command in Terminal, or paste it into the local agent with exactly one",
             "client selection, for example:",
-            "  npx -y @somacheck/vibecheck@0.3.0 link <CODE> --client claude",
-            "  npx -y @somacheck/vibecheck@0.3.0 link <CODE> --client codex",
+            `  npx -y ${PACKAGE_SPEC} link <CODE> --client claude`,
+            `  npx -y ${PACKAGE_SPEC} link <CODE> --client codex`,
             "",
             "The pairing code has NOT been used.",
         ].join("\n"));
@@ -142,7 +149,7 @@ async function preflightLinkClients(clients, interactive) {
                 ? `${clientDisplayName(client)} has an existing "vibecheck" MCP entry with a different command or version.`
                 : `${clientDisplayName(client)} configuration could not be inspected and written.`;
         const repair = preflight.status === "needs_update"
-            ? ["", `Remove the stale entry: ${manualRemoveCommand(client)}`, `Then configure 0.3: ${manualSetupCommand(client)}`]
+            ? ["", `Remove the stale entry: ${manualRemoveCommand(client)}`, `Then configure the current version: ${manualSetupCommand(client)}`]
             : [];
         throw new ClientPreflightError([
             `Not linking here: ${reason}`,
@@ -160,7 +167,7 @@ async function runDoctor() {
     return readiness.ready;
 }
 async function refreshRuntimeHealth(client) {
-    const token = (await readConfig(homedir())).token;
+    const token = (await readConfig(homedir(), client)).token;
     await api.statusRequest(token);
     await api.contextRequest(token);
     await api.clientHandshake(token, {
@@ -174,7 +181,7 @@ async function refreshRuntimeHealth(client) {
 async function startServer(runtimeClient) {
     const server = createVibecheckServer({
         api,
-        loadToken: async () => (await readConfig(homedir())).token,
+        loadToken: async () => (await readConfig(homedir(), runtimeClient ?? undefined)).token,
     });
     await server.connect(new StdioServerTransport());
     if (runtimeClient !== null) {
@@ -196,15 +203,14 @@ async function main() {
                 ? await promptForClients(await detectInstalledClients(runner))
                 : requestedClients
             : requestedClients;
+        const selectedClients = await preflightLinkClients(requestedOrPromptedClients, interactive);
         await linkAgent(args[1] ?? "", {
             home: homedir(),
             redeem: (code) => api.redeemLink(code),
             output,
             isInteractive: () => interactive,
             allowNonInteractive: !interactive || process.env.SOMACHECK_ALLOW_NON_INTERACTIVE === "1",
-            preflight: async () => {
-                await preflightLinkClients(requestedOrPromptedClients, interactive);
-            },
+            client: selectedClients[0],
         });
         return (await runDoctor()) ? 0 : 2;
     }

package/dist/client-setup.js

@@ -124,7 +124,7 @@ function isManagedSomaCheckRegistration(client, stdout) {
         return false;
     const packageArgs = args.filter((arg) => arg.startsWith("@somacheck/vibecheck@"));
     return packageArgs.length === 1
-        && /^@somacheck\/vibecheck@0\.[0-2]\.\d+$/.test(packageArgs[0])
+        && /^@somacheck\/vibecheck@0\.[0-3]\.\d+$/.test(packageArgs[0])
         && args.every((arg) => arg === "-y" || arg === "--yes" || arg === packageArgs[0]);
 }
 export async function isClientRegistered(client, runner) {

package/dist/config.js

@@ -20,7 +20,7 @@ export async function preflightConfigPersistence(home) {
         await rm(renamedProbe, { force: true });
     }
 }
-export async function readConfig(home) {
+export async function readConfig(home, client) {
     let value;
     try {
         value = JSON.parse(await readFile(configPath(home), "utf8"));
@@ -28,23 +28,41 @@ export async function readConfig(home) {
     catch {
         throw new Error("SomaCheck is not linked. Run: npx -y @somacheck/vibecheck link <CODE>");
     }
-    if (value === null || typeof value !== "object" || !("token" in value)) {
+    if (value === null || typeof value !== "object") {
         throw new Error("SomaCheck link configuration is invalid.");
     }
-    const token = value.token;
+    // 0.3.0 legacy config. Keep reading it so existing installations do not
+    // break, but every new link is written in the client-scoped v2 shape.
+    if ("token" in value) {
+        return validatedToken(value.token);
+    }
+    const stored = value;
+    if (stored.version !== 2 || stored.connections === null || typeof stored.connections !== "object") {
+        throw new Error("SomaCheck link configuration is invalid.");
+    }
+    const selected = client ?? stored.default_client;
+    if (selected !== "codex" && selected !== "claude") {
+        throw new Error("SomaCheck link configuration is invalid.");
+    }
+    return validatedToken(stored.connections[selected]?.token);
+}
+function validatedToken(token) {
     if (typeof token !== "string" || token.length === 0) {
         throw new Error("SomaCheck link configuration is invalid.");
     }
     return { token };
 }
-export async function writeConfig(home, config) {
+export async function writeConfig(home, config, client) {
     const directory = join(home, ".sensie");
     const destination = configPath(home);
     const temporary = join(directory, `.config.json.${process.pid}.${Date.now()}.tmp`);
     await mkdir(directory, { recursive: true, mode: 0o700 });
     await chmod(directory, 0o700);
     try {
-        await writeFile(temporary, `${JSON.stringify(config, null, 2)}\n`, {
+        const stored = client === undefined
+            ? config
+            : await mergedClientConfig(home, client, config);
+        await writeFile(temporary, `${JSON.stringify(stored, null, 2)}\n`, {
             encoding: "utf8",
             flag: "wx",
             mode: 0o600,
@@ -56,4 +74,27 @@ export async function writeConfig(home, config) {
         await rm(temporary, { force: true });
     }
 }
+async function mergedClientConfig(home, client, config) {
+    let connections = {};
+    try {
+        const parsed = JSON.parse(await readFile(configPath(home), "utf8"));
+        if (parsed !== null && typeof parsed === "object" && "version" in parsed && parsed.version === 2
+            && "connections" in parsed && parsed.connections !== null && typeof parsed.connections === "object") {
+            const existing = parsed.connections;
+            for (const key of ["codex", "claude"]) {
+                const candidate = existing[key]?.token;
+                if (typeof candidate === "string" && candidate.length > 0) {
+                    connections[key] = { token: candidate };
+                }
+            }
+        }
+    }
+    catch {
+        // Missing or legacy config is intentionally migrated by the new link.
+        // A legacy token cannot be attributed safely to a client, so it remains
+        // readable until the first scoped link and is then replaced.
+    }
+    connections = { ...connections, [client]: config };
+    return { version: 2, default_client: client, connections };
+}
 //# sourceMappingURL=config.js.map

package/dist/constants.js

@@ -2,15 +2,16 @@
 export const SUPABASE_URL = "https://pbldcmniommltbdwuykk.supabase.co";
 export const SUPABASE_PUBLISHABLE_KEY = "sb_publishable_af-lUNI2FqEcb-oGy-4uxQ_cnm6kY85";
 export const PACKAGE_NAME = "@somacheck/vibecheck";
-export const PACKAGE_VERSION = "0.3.0";
+export const PACKAGE_VERSION = "0.5.0";
 export const PACKAGE_SPEC = `${PACKAGE_NAME}@${PACKAGE_VERSION}`;
 export const MCP_SERVER_NAME = "vibecheck";
 export const LEGACY_HOSTED_MCP_SERVER_NAME = "somacheck";
-export const BACKEND_PROTOCOL_VERSION = 3;
-export const TOOLSET_VERSION = "vibecheck-0.3";
+export const BACKEND_PROTOCOL_VERSION = 4;
+export const TOOLSET_VERSION = "vibecheck-0.5";
 export const TOOL_NAMES = [
     "get_vibecheck_context",
     "get_vibecheck_status",
+    "share_somacheck_context",
     "post_vibecheck_statement",
     "get_vibecheck_result",
 ];

package/dist/link.js

@@ -54,7 +54,7 @@ export async function linkAgent(code, dependencies) {
         throw new LinkPersistenceError();
     }
     const token = await dependencies.redeem(normalizedCode);
-    await writeConfig(dependencies.home, { token });
+    await writeConfig(dependencies.home, { token }, dependencies.client);
     dependencies.output("SomaCheck pairing code redeemed on this computer.");
 }
 //# sourceMappingURL=link.js.map

package/dist/readiness.js

@@ -1,6 +1,7 @@
 import { readConfig } from "./config.js";
 import { SomaCheckCompatibilityError, SomaCheckHttpError } from "./api.js";
 import { clientDisplayName, clientRegistrationState, detectLegacyHostedRegistration, isClientInstalled, manualLegacyHostedRemoveCommand, manualRemoveCommand, manualSetupCommand, } from "./client-setup.js";
+import { BACKEND_PROTOCOL_VERSION, PACKAGE_VERSION } from "./constants.js";
 export async function checkReadiness(dependencies) {
     let token;
     try {
@@ -62,7 +63,7 @@ export async function checkReadiness(dependencies) {
                 ? " It currently reports: Needs authentication."
                 : "";
             dependencies.output(`○ ${clientDisplayName(client)} also has a separate legacy server named "somacheck".${authNote}`);
-            dependencies.output('  SomaCheck MCP 0.3 uses "vibecheck"; the legacy entry was not changed.');
+            dependencies.output(`  SomaCheck MCP ${PACKAGE_VERSION} uses "vibecheck"; the legacy entry was not changed.`);
             dependencies.output(`  Optional manual cleanup: ${manualLegacyHostedRemoveCommand(client)}`);
         }
         const registration = await clientRegistrationState(client, dependencies.runner);
@@ -81,7 +82,7 @@ export async function checkReadiness(dependencies) {
         }
     }
     if (registeredClients.length === 0) {
-        dependencies.output("✗ No supported agent client has the current SomaCheck 0.3 configuration.");
+        dependencies.output(`✗ No supported agent client has the current SomaCheck ${PACKAGE_VERSION} configuration.`);
         if (installedClientCount === 0) {
             dependencies.output("  Install Codex or Claude Code, then run the matching setup command.");
         }
@@ -101,7 +102,7 @@ export async function checkReadiness(dependencies) {
                 if (handshake.readiness_status === "ready") {
                     backendCompatible = true;
                     readyClients.push(client);
-                    dependencies.output(`✓ ${clientDisplayName(client)} completed the SomaCheck protocol-3 health check.`);
+                    dependencies.output(`✓ ${clientDisplayName(client)} completed the SomaCheck protocol-${BACKEND_PROTOCOL_VERSION} health check.`);
                 }
                 else {
                     dependencies.output(`✗ ${clientDisplayName(client)} is not ready yet (${handshake.readiness_status}).`);

package/dist/server.js

@@ -2,7 +2,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 import { StatementPendingError } from "./vibecheck.js";
 import { SomaCheckCompatibilityError, SomaCheckHttpError } from "./api.js";
-import { PACKAGE_NAME, PACKAGE_VERSION } from "./constants.js";
+import { PACKAGE_NAME, PACKAGE_SPEC, PACKAGE_VERSION } from "./constants.js";
 const cadenceSchema = z.object({
     reason: z.string(),
     create_due_at: z.string().nullable(),
@@ -48,10 +48,29 @@ const contextItemSchema = z.object({
     answered_at: z.string().datetime({ offset: true }),
 });
 const contextSchema = { checkins: z.array(contextItemSchema) };
+const agentContextTypeSchema = z.enum([
+    "goal", "project", "decision", "commitment", "tension", "question",
+    "blindSpot", "relationship", "situation", "change", "deadline",
+    "development", "moodTheme", "preference",
+]);
+const agentContextObservationSchema = z.object({
+    type: agentContextTypeSchema,
+    summary: z.string().trim().min(1).max(500)
+        .describe("A concise derived theme or fact the person authorized you to share. Never paste raw conversations."),
+    confidence: z.number().min(0).max(1).default(0.8),
+    evidence_count: z.number().int().min(1).max(100).default(1),
+});
+const contextShareSchema = {
+    source_id: z.string(), entry_id: z.string(), accepted: z.boolean(),
+    state: z.literal("ready"), observation_count: z.number().int().min(1).max(20),
+    captured_at: z.string().datetime({ offset: true }),
+};
 const SERVER_INSTRUCTIONS = [
     "SomaCheck lets you offer the person a statement to test through a quick phone check-in.",
     "Call get_vibecheck_context and get_vibecheck_status at the start of a session or background run, and call status again after a completed check-in.",
     "Treat gesture outcomes as contextual signals, never fixed facts or blanket authorization.",
+    "When you have meaningful user-authorized context, call share_somacheck_context with concise derived observations before creating propositions.",
+    "Never share raw conversation text, photos, credentials, private identifiers, or diagnostic claims.",
     "Maintain three distinct propositions drawn from your own context about this person.",
     "When propositions_needed is greater than zero, post exactly that many in one call.",
     "Offer each statement as something to test, never as a claim of fact about the user.",
@@ -111,6 +130,32 @@ export function createVibecheckServer(dependencies) {
             return failureMessage("read SomaCheck status", error);
         }
     });
+    server.registerTool("share_somacheck_context", {
+        title: "Share SomaCheck Context",
+        description: "Share 1-20 concise, user-authorized context observations so SomaCheck can prepare richer propositions. Send derived summaries only—never raw conversation text, photos, credentials, identifiers, or diagnostic claims.",
+        inputSchema: {
+            observations: z.array(agentContextObservationSchema).min(1).max(20),
+        },
+        outputSchema: contextShareSchema,
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async ({ observations }) => {
+        try {
+            const token = await dependencies.loadToken();
+            const result = await dependencies.api.shareContext(token, observations);
+            return {
+                content: [{ type: "text", text: `Shared ${result.observation_count} bounded context observation${result.observation_count === 1 ? "" : "s"}. SomaCheck can now prepare contextual propositions.` }],
+                structuredContent: { ...result },
+            };
+        }
+        catch (error) {
+            return failureMessage("share context with SomaCheck", error);
+        }
+    });
     server.registerTool("post_vibecheck_statement", {
         title: "Post Vibecheck Statement",
         description: "Fill the person's SomaCheck cache with one to three personalized statements and return immediately. Call get_vibecheck_status first and submit exactly propositions_needed statements.",
@@ -202,12 +247,15 @@ function failureMessage(operation, error) {
     return failure(operationalFailureText(operation, error));
 }
 function operationalFailureText(operation, error) {
-    const doctor = "Run: npx -y @somacheck/vibecheck@0.3.0 doctor";
+    const doctor = `Run: npx -y ${PACKAGE_SPEC} doctor`;
     if (error instanceof SomaCheckCompatibilityError) {
         return `Could not ${operation}: this MCP package and the SomaCheck backend are incompatible. ${doctor}`;
     }
     if (error instanceof SomaCheckHttpError) {
         if (error.status === 401 || error.status === 403) {
+            if (operation === "share context with SomaCheck") {
+                return `Could not ${operation}: context is not enabled for this link, or the link was rejected or revoked. Open SomaCheck → Connect context, then retry. ${doctor}`;
+            }
             return `Could not ${operation}: this SomaCheck link was rejected or revoked. Reconnect in the app. ${doctor}`;
         }
         if (error.status === 404) {

package/package.json

@@ -1,7 +1,12 @@
 {
   "name": "@somacheck/vibecheck",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Ask your embodied sense for an answer through SomaCheck.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sensie-app/Somacheck.git",
+    "directory": "packages/vibecheck"
+  },
   "type": "module",
   "bin": {
     "vibecheck": "dist/cli.js"
@@ -13,8 +18,8 @@
     "dist/*.js"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "test": "npm run build && node --import tsx --test test/*.test.ts && node --test test/server.test.mjs",
+    "build": "rm -rf dist && tsc -p tsconfig.json",
+    "test": "npm run build && node --import tsx --test test/*.test.ts && node --test test/*.test.mjs",
     "test:release-artifacts": "bash ./verify-release-artifacts.sh",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "prepack": "npm run build"