slashvibe-mcp 0.8.22 → 0.8.23

package/index.js

@@ -595,7 +595,11 @@ class VibeMCPServer {
             // vibe_init reads only {handle, one_liner, auth_method} and ignores any
             // extra keys, so this is safe for every command yet lets relevant
             // context (e.g. a handle the caller already supplied) carry into auth.
-            const initResult = await initTool.handler(params.arguments || {});
+            // The gated tool's arguments describe ITS job, not the person signing in:
+            // vibe_dm's `handle` is the recipient. Forwarding it made a first message
+            // to @brightseth request a sign-in AS @brightseth (login?handle=brightseth,
+            // config.handle saved as the recipient). GitHub says who you are; pass nothing.
+            const initResult = await initTool.handler({});
             const initDisplay = initResult.display || JSON.stringify(initResult, null, 2);
 
             // After auth, emit tools/list_changed so Claude sees full toolset

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "slashvibe-mcp",
-  "version": "0.8.22",
+  "version": "0.8.23",
   "mcpName": "io.github.vibecodinginc/vibe",
-  "description": "Presence + messaging for terminal coding agents (Claude Code, Codex, Cursor) \u2014 the /vibe kernel",
+  "description": "Presence + messaging for terminal coding agents (Claude Code, Codex, Cursor) — the /vibe kernel",
   "main": "index.js",
   "bin": {
     "slashvibe-mcp": "cli.js",

package/setup.js

@@ -315,6 +315,14 @@ async function getOnlineCount() {
   try {
     const response = await fetch(`${API_BASE}/api/presence`);
     const data = await response.json();
+    // Before sign-in the roster is private: the server answers with counts only
+    // (`{ anonymous: true, counts: { humansActive, active, ... }, active: [] }`).
+    // Counting names here printed "0 builders online" to every newcomer while
+    // eleven people were on. Read the count the server actually gives.
+    if (data.counts && typeof data.counts === 'object') {
+      const n = data.counts.humansActive ?? data.counts.active;
+      if (Number.isFinite(n)) return n;
+    }
     return (data.active?.length || 0) + (data.away?.length || 0);
   } catch (e) {
     return 0;
@@ -324,28 +332,30 @@ async function getOnlineCount() {
 /**
  * Get online users with details for display
  */
-async function getOnlineUsers() {
+async function getOnlineUsers(token) {
   try {
-    const response = await fetch(`${API_BASE}/api/presence`);
+    // Handles are only served to a signed-in caller; pass the fresh token so the
+    // "here now" list after sign-in is real, not an empty anonymous answer.
+    const headers = token ? { Authorization: `Bearer ${token}` } : {};
+    const response = await fetch(`${API_BASE}/api/presence`, { headers });
     const data = await response.json();
-    const active = data.active || [];
-    const away = data.away || [];
+    const people = (u) => !u.isAgent;
+    // "Here now" means active humans only. Away rows were once appended below,
+    // which let the headline count disagree with the rows under it (codex P2).
+    const active = (data.active || []).filter(people);
+    const workText = (u) => u.workingOn || u.working_on || u.one_liner || '';
 
     // Format: { users: [{handle, status, one_liner}], total: number }
-    const users = [
-      ...active.slice(0, 5).map(u => ({
-        handle: u.username || u.handle,
-        status: 'active',
-        one_liner: u.one_liner || u.status || ''
-      })),
-      ...away.slice(0, 2).map(u => ({
-        handle: u.username || u.handle,
-        status: 'away',
-        one_liner: u.one_liner || u.status || ''
-      }))
-    ].slice(0, 5);
-
-    return { users, total: active.length + away.length };
+    const users = active.slice(0, 5).map(u => ({
+      handle: u.username || u.handle,
+      status: 'active',
+      one_liner: workText(u)
+    }));
+
+    const total = Number.isFinite(data.counts?.humansActive)
+      ? data.counts.humansActive
+      : active.length;
+    return { users, total };
   } catch (e) {
     return { users: [], total: 0 };
   }
@@ -477,7 +487,9 @@ async function setup() {
   }
 
   const onlineCount = await getOnlineCount();
-  console.log(`${colors.dim}     → Connected! ${onlineCount} builders online${colors.reset}`);
+  console.log(onlineCount > 0
+      ? `${colors.dim}     → Connected — ${onlineCount} ${onlineCount === 1 ? 'person' : 'people'} here now${colors.reset}`
+      : `${colors.dim}     → Connected${colors.reset}`);
   printStep(3, 'Testing connection...', 'done');
 
   // Step 4: Authenticate
@@ -504,7 +516,7 @@ async function setup() {
     console.log(`${colors.dim}     → Authenticated as @${authResult.handle}${colors.reset}`);
 
     // Success! Show who's online immediately
-    const presence = await getOnlineUsers();
+    const presence = await getOnlineUsers(authResult.token);
 
     console.log('');
     console.log(`${colors.green}  ✓ Setup complete!${colors.reset}`);
@@ -512,7 +524,7 @@ async function setup() {
 
     // Show who's vibing right now
     if (presence.users.length > 0) {
-      console.log(`${colors.bold}  🟢 ${presence.total} builders vibing now:${colors.reset}`);
+      console.log(`${colors.bold}  🟢 ${presence.total} people here now:${colors.reset}`);
       for (const user of presence.users) {
         const statusIcon = user.status === 'active' ? colors.green + '●' : colors.yellow + '○';
         const liner = user.one_liner ? ` — ${user.one_liner.slice(0, 40)}` : '';
@@ -526,7 +538,7 @@ async function setup() {
 
     console.log(`${colors.bold}  Quick start:${colors.reset}`);
     console.log(`${colors.dim}  1. Restart your coding agent${detected.length > 1 ? `s (${detected.join(', ')})` : ''}${colors.reset}`);
-    console.log(`${colors.dim}  2. Send a real message to someone you already know — "dm @their-handle ..."${colors.reset}`);
+    console.log(`${colors.dim}  2. Say: "message @their-handle — ..." to someone you already know${colors.reset}`);
     console.log(`${colors.dim}  3. Claude Code: run "npx slashvibe-mcp hook install" — waiting messages appear at the top of your next session${colors.reset}`);
     console.log('');
     console.log(`${colors.cyan}  Welcome to /vibe, @${authResult.handle}.${colors.reset}`);

package/version.json

@@ -1,13 +1,12 @@
 {
-  "version": "0.8.22",
-  "updated": "2026-08-31",
-  "changelog": "The first screen. vibe start is now seven lines: who you are, what's waiting, how many others are here, and where to go next. No message bodies, no chosen person, no drafted DM, no rotating tips. And it only says what it actually read — if your inbox or the room can't be reached it says so, instead of showing you a confident zero.",
+  "version": "0.8.23",
+  "updated": "2026-09-01",
+  "changelog": "The install tells the truth about the room. Setup used to say “0 builders online” to every newcomer, because the roster is private before you sign in and it was counting names it was never given; now it reads the count the server actually serves, and after sign-in it lists real people and what they are working on. And a first message to someone before you have signed in no longer asks GitHub to sign you in as them.",
   "features": [
-    "vibe start is seven lines and states the unread count exactly once",
-    "A failed read is never rendered as an empty inbox or an empty room",
-    "No message bodies on the first screen, and nobody is chosen for you",
-    "A read that did not succeed can no longer authorize a write — six places where one corrupt line destroyed messages, profiles, presence or your credential",
-    "vibe token no longer says “old local keys removed” unless they are gone"
+    "Setup says how many people are here now — never a zero it did not measure",
+    "After sign-in, setup lists the people actually here and what they are working on",
+    "Messaging @someone before sign-in starts your own sign-in, not one for them",
+    "Setup's quick start is a sentence you can say, not a command to learn"
   ],
   "deprecated": [],
   "breaking": false,