slashvibe-mcp 0.4.7 → 0.4.9

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Slash Vibe, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,83 +1,108 @@
-# vibe-mcp
+# /vibe MCP Server
 
-Social layer for AI-assisted coding. DMs, presence, and connection between developers.
+[![npm version](https://img.shields.io/npm/v/slashvibe-mcp.svg)](https://www.npmjs.com/package/slashvibe-mcp)
+[![npm downloads](https://img.shields.io/npm/dw/slashvibe-mcp.svg)](https://www.npmjs.com/package/slashvibe-mcp)
+[![CI](https://github.com/VibeCodingInc/vibe-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/VibeCodingInc/vibe-mcp/actions/workflows/ci.yml)
+[![license](https://img.shields.io/npm/l/slashvibe-mcp.svg)](./LICENSE)
+[![node](https://img.shields.io/node/v/slashvibe-mcp.svg)](https://nodejs.org)
+[![MCP](https://img.shields.io/badge/MCP-compatible-blue)](https://modelcontextprotocol.io)
+[![Smithery](https://smithery.ai/badge/slashvibe-mcp)](https://smithery.ai/server/slashvibe-mcp)
 
-**Works in:** Claude Code • Cursor • Any MCP-compatible IDE
+Social MCP server — DMs, presence, and discovery for AI-assisted developers. See who's building, message them, share what you shipped. Works with Claude Code, Cursor, VS Code, Windsurf, and any MCP client.
 
-## Quick Start
+## Install
 
-**Claude Code:**
 ```bash
-npx slashvibe-mcp setup
+claude mcp add vibe -- npx -y slashvibe-mcp
 ```
 
-**Cursor:** See [Cursor Setup Guide](docs/CURSOR_SETUP.md)
+<details>
+<summary><strong>Other editors</strong></summary>
 
-**Other IDEs:** Any editor supporting MCP protocol can use the manual config below.
+**Cursor** — add to `~/.cursor/mcp.json`:
+```json
+{ "mcpServers": { "vibe": { "command": "npx", "args": ["-y", "slashvibe-mcp"] } } }
+```
 
-## Installation
+**VS Code** — add to `.vscode/mcp.json`:
+```json
+{ "servers": { "vibe": { "command": "npx", "args": ["-y", "slashvibe-mcp"] } } }
+```
 
-```bash
-# Install globally
-npm install -g vibe-mcp
+**Windsurf** — add to `~/.codeium/windsurf/mcp_config.json`:
+```json
+{ "mcpServers": { "vibe": { "command": "npx", "args": ["-y", "slashvibe-mcp"] } } }
+```
+
+**Cline** — MCP Servers > Configure > Edit JSON, add `vibe` server as above.
 
-# Or add to Claude Code MCP config
-claude mcp add vibe-mcp
+**Continue.dev** — create `.continue/mcpServers/vibe.json`:
+```json
+{ "command": "npx", "args": ["-y", "slashvibe-mcp"] }
 ```
 
-## Manual Setup
+**JetBrains** — Settings > Tools > AI Assistant > MCP, command `npx`, args `-y slashvibe-mcp`.
+</details>
 
-Add to `~/.claude.json`:
+## Getting Started
 
-```json
-{
-  "mcpServers": {
-    "vibe": {
-      "command": "npx",
-      "args": ["vibe-mcp"],
-      "env": {
-        "VIBE_API_URL": "https://www.slashvibe.dev"
-      }
-    }
-  }
-}
+```
+"let's vibe"
 ```
 
-## Features
+That's it. Authenticates via GitHub, shows who's online, checks your inbox.
 
-- **Presence** - See who's online building with Claude Code
-- **DMs** - Direct messages between developers
-- **Memory** - Remember context about connections
-- **Status** - Share what you're working on
-- **Games** - Play tic-tac-toe while coding
+## Tools
 
-## Commands
+| Tool | What it does |
+|------|-------------|
+| `vibe_start` | Entry point — authenticates, shows presence, checks inbox |
+| `vibe_init` | Set up your identity (GitHub OAuth) |
+| `vibe_who` | See who's online and what they're building |
+| `vibe_dm` | Send a direct message |
+| `vibe_inbox` | Check your unread messages |
+| `vibe_status` | Set your mood (shipping, thinking, debugging, etc.) |
+| `vibe_ship` | Share what you shipped |
+| `vibe_discover` | Find people building similar things |
+| `vibe_help` | Show available commands |
 
-Once installed, use these in Claude Code:
+## How It Works
 
-| Command | Description |
-|---------|-------------|
-| `vibe` | Check inbox and see who's online |
-| `vibe who` | List online users |
-| `vibe dm @handle "message"` | Send a DM |
-| `vibe status shipping` | Set your status |
-| `vibe remember @handle "note"` | Save a memory |
-| `vibe recall @handle` | Recall memories |
+```
+Your Editor <-> /vibe MCP (stdio) <-> slashvibe.dev API <-> Other users
+```
+
+- **Presence** broadcasts via heartbeat — others see you in real time
+- **Messages** are delivered through the slashvibe.dev API
+- **Identity** persists via GitHub OAuth — your handle follows you across editors
+
+## Troubleshooting
 
-## API
+**"I installed but don't see /vibe tools"** — restart your editor after adding the MCP config.
 
-The MCP server connects to `slashvibe.dev` for:
-- User presence and discovery
-- Message routing
-- Identity verification
+**"Authentication failed"** — OAuth opens a browser window. If it didn't open, go to [slashvibe.dev/login](https://slashvibe.dev/login). The callback runs on `localhost:9876` — make sure that port is free.
 
-## Related
+## Development
+
+```bash
+npm install
+npm test
+npm run lint
+```
 
-- [GitHub](https://github.com/VibeCodingInc/vibe-mcp) - Source code
-- [slashvibe.dev](https://slashvibe.dev) - Web presence
-- [Spirit Protocol](https://spiritprotocol.io) - Parent ecosystem
-- [AIRC](https://airc.chat) - Agent identity protocol
+## Contributing
+
+We welcome contributions. See [CLA.md](./CLA.md) before submitting pull requests.
 
 ## License
 
-MIT
+MIT — see [LICENSE](./LICENSE)
+
+## Links
+
+- [slashvibe.dev](https://slashvibe.dev)
+- [@slashvibe on X](https://twitter.com/slashvibe)
+
+---
+
+Built by [Slash Vibe, Inc.](https://slashvibe.dev)

package/analytics.js

@@ -97,11 +97,35 @@ function trackSession(event, sessionData = {}) {
   track(event === 'started' ? 'session_started' : 'session_ended', sessionData);
 }
 
+/**
+ * Track editor install via universal installer
+ * @param {string} editor - Editor name configured
+ * @param {string} status - 'configured', 'exists', 'error'
+ */
+function trackInstall(editor, status) {
+  track('editor_install', {
+    editor,
+    status,
+    platform: process.platform,
+    node: process.version
+  });
+}
+
+/**
+ * Track tool usage distribution (called per tool invocation)
+ * @param {string} toolName - Tool name (vibe_*)
+ */
+function trackToolUsage(toolName) {
+  track('tool_call', { tool: toolName });
+}
+
 module.exports = {
   track,
   trackEmptyInbox,
   trackLurkMode,
   trackOnboardingTask,
   trackDiscovery,
-  trackSession
+  trackSession,
+  trackInstall,
+  trackToolUsage
 };

package/auto-update.js

@@ -3,14 +3,16 @@
  * Checks for updates and prompts user to update
  */
 
-const { exec } = require('child_process');
-const { promisify } = require('util');
-const fs = require('fs').promises;
-const path = require('path');
+import { exec } from 'child_process';
+import { promisify } from 'util';
+import fs from 'fs/promises';
+import path from 'path';
+import { fileURLToPath } from 'url';
 
 const execAsync = promisify(exec);
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
-async function checkForUpdates() {
+export async function checkForUpdates() {
   try {
     // Read local version
     const versionPath = path.join(__dirname, 'version.json');
@@ -45,7 +47,7 @@ async function checkForUpdates() {
   }
 }
 
-async function performUpdate() {
+export async function performUpdate() {
   try {
     const repoPath = path.join(__dirname, '..');
 
@@ -82,7 +84,7 @@ async function performUpdate() {
   }
 }
 
-function compareVersions(v1, v2) {
+export function compareVersions(v1, v2) {
   const parts1 = v1.split('.').map(Number);
   const parts2 = v2.split('.').map(Number);
 
@@ -94,7 +96,7 @@ function compareVersions(v1, v2) {
   return 0;
 }
 
-function formatUpdateNotification(update) {
+export function formatUpdateNotification(update) {
   if (!update) return null;
 
   let message = `\n${'='.repeat(60)}\n`;
@@ -121,10 +123,3 @@ function formatUpdateNotification(update) {
 
   return message;
 }
-
-module.exports = {
-  checkForUpdates,
-  performUpdate,
-  compareVersions,
-  formatUpdateNotification
-};

package/config.js

@@ -1,8 +1,8 @@
 /**
  * Config — User identity and paths
  *
- * Canonical location: ~/.vibe/config.json
- * Falls back to ~/.vibecodings/config.json for backward compat
+ * UNIFIED: Uses ~/.vibecodings/config.json as primary source
+ * Falls back to ~/.vibe/config.json for backward compat
  */
 
 const fs = require('fs');
@@ -10,31 +10,16 @@ const path = require('path');
 
 const VIBE_DIR = path.join(process.env.HOME, '.vibe');
 const VIBECODINGS_DIR = path.join(process.env.HOME, '.vibecodings');
-const PRIMARY_CONFIG = path.join(VIBE_DIR, 'config.json');          // Primary
-const FALLBACK_CONFIG = path.join(VIBECODINGS_DIR, 'config.json');  // Fallback
-const TERMINAL_AUTH_FILE = path.join(VIBE_DIR, 'auth.json');        // Cross-client (Buddy/Terminal)
+const PRIMARY_CONFIG = path.join(VIBECODINGS_DIR, 'config.json'); // Primary
+const FALLBACK_CONFIG = path.join(VIBE_DIR, 'config.json'); // Fallback
 const CONFIG_FILE = PRIMARY_CONFIG;
 
 function ensureDir() {
-  if (!fs.existsSync(VIBE_DIR)) {
-    fs.mkdirSync(VIBE_DIR, { recursive: true });
+  if (!fs.existsSync(VIBECODINGS_DIR)) {
+    fs.mkdirSync(VIBECODINGS_DIR, { recursive: true });
   }
 }
 
-/**
- * Load terminal/buddy auth file (~/.vibe/auth.json)
- * Cross-client: if user authenticated via Buddy app, MCP server can pick it up
- * Format: { token, handle, provider, authenticated_at }
- */
-function loadTerminalAuth() {
-  try {
-    if (fs.existsSync(TERMINAL_AUTH_FILE)) {
-      return JSON.parse(fs.readFileSync(TERMINAL_AUTH_FILE, 'utf8'));
-    }
-  } catch (e) {}
-  return null;
-}
-
 function load() {
   ensureDir();
   // Try primary config first
@@ -72,7 +57,7 @@ function save(config) {
     }
   } catch (e) {}
 
-  // Save to primary config (~/.vibe/config.json)
+  // Save to primary config in vibecodings format
   const data = {
     username: config.handle || config.username || existing.username,
     workingOn: config.one_liner || config.workingOn || existing.workingOn,
@@ -85,27 +70,27 @@ function save(config) {
     // Notification level
     notifications: config.notifications || existing.notifications || null,
     // GitHub Activity settings
-    github_activity_enabled: config.github_activity_enabled !== undefined ? config.github_activity_enabled : existing.github_activity_enabled,
+    github_activity_enabled:
+      config.github_activity_enabled !== undefined ? config.github_activity_enabled : existing.github_activity_enabled,
     github_activity_privacy: config.github_activity_privacy || existing.github_activity_privacy || null,
-    // OAuth token (persisted across MCP process restarts)
-    authToken: config.authToken || config.privyToken || existing.authToken || existing.privyToken || null,
+    // Privy OAuth token (persisted across MCP process restarts)
+    privyToken: config.privyToken || existing.privyToken || null,
     authMethod: config.authMethod || existing.authMethod || null
   };
   fs.writeFileSync(PRIMARY_CONFIG, JSON.stringify(data, null, 2));
 }
 
+/** @returns {string|null} Current user handle */
 function getHandle() {
   // Prefer session-specific handle over shared config
   const sessionHandle = getSessionHandle();
   if (sessionHandle) return sessionHandle;
   // Fall back to shared config
-  const cfg = load();
-  if (cfg.handle) return cfg.handle;
-  // Cross-client: check terminal/buddy auth file
-  const terminalAuth = loadTerminalAuth();
-  return terminalAuth?.handle || null;
+  const config = load();
+  return config.handle || null;
 }
 
+/** @returns {string|null} Current user one-liner */
 function getOneLiner() {
   // Prefer session-specific one_liner over shared config
   const sessionOneLiner = getSessionOneLiner();
@@ -115,6 +100,7 @@ function getOneLiner() {
   return config.one_liner || null;
 }
 
+/** @returns {boolean} Whether user identity is set */
 function isInitialized() {
   // Check session first, then shared config
   const sessionHandle = getSessionHandle();
@@ -125,8 +111,9 @@ function isInitialized() {
 
 // Session management - unique ID per Claude Code instance
 // Now stores full identity (handle + one_liner), not just sessionId
-const SESSION_FILE = path.join(VIBE_DIR, `.session_${process.pid}`);
+const SESSION_FILE = path.join(VIBECODINGS_DIR, `.session_${process.pid}`);
 
+/** @returns {string} New session ID (sess_*) */
 function generateSessionId() {
   return 'sess_' + Date.now().toString(36) + Math.random().toString(36).substring(2, 10);
 }
@@ -235,64 +222,43 @@ function getAuthToken() {
 
   // Fall back to shared config (persisted across MCP process restarts)
   const cfg = load();
-  if (cfg?.authToken || cfg?.privyToken) return cfg.authToken || cfg.privyToken;
-
-  // Cross-client: check terminal/buddy auth file (~/.vibe/auth.json)
-  const terminalAuth = loadTerminalAuth();
-  if (terminalAuth?.token) return terminalAuth.token;
-
-  return null;
+  return cfg?.privyToken || null;
 }
 
 /**
- * Save auth token (used after browser OAuth flow)
- * @param {string} token - JWT access token from GitHub OAuth
+ * Save Privy JWT token (used after browser OAuth flow)
+ * @param {string} token - Privy access token
  */
-function saveAuthToken(token) {
+function savePrivyToken(token) {
   // Save to session data
   const data = getSessionData() || {};
   saveSessionData({
     ...data,
     sessionId: data.sessionId || generateSessionId(),
     token,
-    authMethod: 'github'  // Track that this is GitHub OAuth
+    authMethod: 'privy' // Track that this is a Privy token
   });
 
   // Also save to shared config for persistence across MCP restarts
   const cfg = load();
-  cfg.authToken = token;
-  cfg.authMethod = 'github';
+  cfg.privyToken = token;
+  cfg.authMethod = 'privy';
   save(cfg);
 }
 
-// Backwards compatibility alias
-const savePrivyToken = saveAuthToken;
-
 /**
- * Check if user has OAuth auth (vs legacy keypair)
- * Accepts 'github', 'privy', and 'browser' as valid auth methods (backwards compat)
+ * Check if user has Privy auth (vs legacy keypair)
  */
-function hasOAuth() {
-  const validAuthMethods = ['github', 'privy', 'browser'];
-
+function hasPrivyAuth() {
   const data = getSessionData();
-  if (validAuthMethods.includes(data?.authMethod) && data?.token) return true;
+  if (data?.authMethod === 'privy' && data?.token) return true;
 
   const cfg = load();
-  if (validAuthMethods.includes(cfg?.authMethod) && (cfg?.authToken || cfg?.privyToken)) return true;
-
-  // Cross-client: check terminal/buddy auth file
-  const terminalAuth = loadTerminalAuth();
-  if (terminalAuth?.token && validAuthMethods.includes(terminalAuth?.provider)) return true;
-
-  return false;
+  return cfg?.authMethod === 'privy' && cfg?.privyToken;
 }
 
-// Backwards compatibility alias
-const hasPrivyAuth = hasOAuth;
-
 /**
- * Remove keypair after migration to GitHub OAuth
+ * Remove keypair after migration to Privy
  * Clears private key from config (security improvement)
  */
 function removeKeypair() {
@@ -398,7 +364,7 @@ function setGithubActivityPrivacy(level) {
   save(config);
 }
 
-// API URL — central endpoint for all API calls
+/** @returns {string} API base URL */
 function getApiUrl() {
   return process.env.VIBE_API_URL || 'https://www.slashvibe.dev';
 }
@@ -410,10 +376,22 @@ function getApiUrl() {
 // ─────────────────────────────────────────────────────────────
 const sessionState = {};
 
+/**
+ * Get ephemeral session state value
+ * @param {string} key - State key
+ * @param {*} [defaultValue=null] - Default if not set
+ * @returns {*} Stored value or default
+ */
 function get(key, defaultValue = null) {
   return sessionState[key] !== undefined ? sessionState[key] : defaultValue;
 }
 
+/**
+ * Set ephemeral session state value
+ * @param {string} key - State key
+ * @param {*} value - Value to store
+ * @returns {*} The stored value
+ */
 function set(key, value) {
   sessionState[key] = value;
   return value;
@@ -424,7 +402,6 @@ module.exports = {
   CONFIG_FILE,
   load,
   save,
-  loadTerminalAuth,
   getHandle,
   getOneLiner,
   isInitialized,
@@ -449,10 +426,7 @@ module.exports = {
   getGithubActivityPrivacy,
   setGithubActivityPrivacy,
   getApiUrl,
-  // OAuth helpers
-  saveAuthToken,
-  hasOAuth,
-  // Backwards compatibility aliases
+  // Privy OAuth helpers
   savePrivyToken,
   hasPrivyAuth,
   removeKeypair,

package/crypto.js

@@ -106,12 +106,7 @@ function verify(obj, publicKeyBase64) {
     });
 
     // Verify
-    return crypto.verify(
-      null,
-      Buffer.from(canonical, 'utf8'),
-      publicKey,
-      Buffer.from(signature, 'base64')
-    );
+    return crypto.verify(null, Buffer.from(canonical, 'utf8'), publicKey, Buffer.from(signature, 'base64'));
   } catch (e) {
     console.error('[crypto] Verification failed:', e.message);
     return false;

package/debug.js

@@ -0,0 +1,12 @@
+/**
+ * Debug logging — conditional on VIBE_DEBUG env var
+ *
+ * @param {...*} args Arguments to log
+ */
+function debug(...args) {
+  if (process.env.VIBE_DEBUG === 'true') {
+    console.error(...args);
+  }
+}
+
+module.exports = debug;