slashvibe-mcp 0.8.13 → 0.8.14

package/index.js

@@ -599,6 +599,9 @@ class VibeMCPServer {
             });
           }
 
+          // The HTTP store creates one random key per logical send and preserves it
+          // across its internal transport retries. JSON-RPC ids restart every MCP
+          // process, so deriving a durable key from `id` would collapse future sends.
           const result = await tool.handler(args);
 
           // Emit list_changed notification for state-changing tools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "slashvibe-mcp",
-  "version": "0.8.13",
+  "version": "0.8.14",
   "mcpName": "io.github.vibecodinginc/vibe",
   "description": "Presence + messaging for terminal coding agents (Claude Code, Codex, Cursor) — the /vibe kernel",
   "main": "index.js",

package/store/api.js

@@ -8,6 +8,7 @@
 
 const https = require('https');
 const http = require('http');
+const { randomUUID } = require('crypto');
 const config = require('../config');
 const crypto = require('../crypto');
 const authStore = require('../auth-store');
@@ -469,6 +470,9 @@ async function sendMessage(from, to, body, type = 'dm', payload = null, options
   try {
     let data;
     let endpoint = '/api/messages';
+    // Generated once per logical store call, outside request()'s retry loop. Every
+    // transport retry therefore carries the same key and cannot insert a second DM.
+    const idempotencyKey = options.idempotencyKey || randomUUID();
 
     // V2 API: Uses Postgres, simpler payload
     const hasAuth = config.hasOAuth();
@@ -479,6 +483,7 @@ async function sendMessage(from, to, body, type = 'dm', payload = null, options
         to,
         body: body || '',
         payload: payload || undefined,
+        idempotency_key: idempotencyKey,
         reply_to: options.replyTo || undefined,  // Threaded reply support
         origin: options.origin || undefined,     // work-object lifecycle state
       };

package/tools/dm.js

@@ -283,4 +283,4 @@ async function handler(args) {
   return response;
 }
 
-module.exports = { definition, handler };
+module.exports = { definition, handler };

package/version.json

@@ -1,11 +1,11 @@
 {
-  "version": "0.8.13",
-  "updated": "2026-08-10",
-  "changelog": "One DM now has one Mac notification voice. Buddy owns native notifications; the MCP runtime no longer raises a second macOS banner or polls notification-only endpoints. The stdio server also exits explicitly when its host closes the pipe or sends a termination signal.",
+  "version": "0.8.14",
+  "updated": "2026-08-12",
+  "changelog": "Message retries no longer disappear or collide when an MCP host restarts. Each logical DM or reply gets one fresh key that survives its HTTP transport retries, while recycled JSON-RPC request IDs never become durable identities across sessions.",
   "features": [
-    "Buddy is the single native Mac notifier while active-terminal MCP delivery stays unchanged",
-    "The packed MCP artifact contains no native desktop notification code",
-    "Stdio EOF, close, disconnect, and termination signals share one graceful shutdown path"
+    "DM and reply transport retries reuse one caller-owned key without reusing it across MCP sessions",
+    "Server-side replays return the original durable message and do not repeat notification or analytics effects",
+    "Newly registered senders remain able to message while Actor ownership is still in shadow adoption"
   ],
   "deprecated": [],
   "breaking": false,