slashvibe-mcp 0.8.22 → 0.8.24

package/index.js

@@ -595,7 +595,11 @@ class VibeMCPServer {
             // vibe_init reads only {handle, one_liner, auth_method} and ignores any
             // extra keys, so this is safe for every command yet lets relevant
             // context (e.g. a handle the caller already supplied) carry into auth.
-            const initResult = await initTool.handler(params.arguments || {});
+            // The gated tool's arguments describe ITS job, not the person signing in:
+            // vibe_dm's `handle` is the recipient. Forwarding it made a first message
+            // to @brightseth request a sign-in AS @brightseth (login?handle=brightseth,
+            // config.handle saved as the recipient). GitHub says who you are; pass nothing.
+            const initResult = await initTool.handler({});
             const initDisplay = initResult.display || JSON.stringify(initResult, null, 2);
 
             // After auth, emit tools/list_changed so Claude sees full toolset
@@ -654,6 +658,7 @@ class VibeMCPServer {
           // The HTTP store creates one random key per logical send and preserves it
           // across its internal transport retries. JSON-RPC ids restart every MCP
           // process, so deriving a durable key from `id` would collapse future sends.
+          presence.noteActivity(); // a tool call = the person is here; polls snap back to fast
           const result = await tool.handler(args);
 
           // Emit list_changed notification for state-changing tools

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "slashvibe-mcp",
-  "version": "0.8.22",
+  "version": "0.8.24",
   "mcpName": "io.github.vibecodinginc/vibe",
-  "description": "Presence + messaging for terminal coding agents (Claude Code, Codex, Cursor) \u2014 the /vibe kernel",
+  "description": "Presence + messaging for terminal coding agents (Claude Code, Codex, Cursor) — the /vibe kernel",
   "main": "index.js",
   "bin": {
     "slashvibe-mcp": "cli.js",

package/presence.js

@@ -5,7 +5,7 @@
  * Uses session tokens for per-session identity.
  * Users become "idle" after 5 minutes of no heartbeat.
  *
- * Also runs a guest message poll every 15 seconds. When guest messages
+ * Also polls for DMs and guest messages on an idle-aware cadence. When they
  * are detected, emits a tools/list_changed notification to force Claude
  * to re-query vibe tools (which triggers getPresenceFooter and injects
  * the messages into context). This ensures Use Case 2 (user testing/QA)
@@ -18,9 +18,54 @@ const store = require('./store');
 const { apiHeaders } = require('./api-auth');
 
 let heartbeatInterval = null;
-let guestPollInterval = null;
+let unreadPollTimer = null;
+let guestPollTimer = null;
 let sessionInitialized = false;
 
+// ---- Poll cadence (2026-09-02 audit) -------------------------------------
+// One idle signed-in client made 2 inbox reads every 15s forever — session/guest
+// (6 KV commands) + the full threads list (1) — and the fleet's long-lived
+// sessions (9-hour and 9-day-old windows) added up to ~7 inbox polls/sec at
+// the KV. Replies must still land fast, so the DM check stays at 15s while the
+// person is ACTIVE (any tool call in the last ACTIVE_WINDOW_MS) and backs off
+// to 60s when idle; the guest-session poll, a pairing feature almost nobody is
+// in, runs at 60s active / 300s idle. Any tool call snaps both back to fast.
+// Worst-case DM latency: 15s active, 60s idle.
+const ACTIVE_WINDOW_MS = Number(process.env.VIBE_POLL_ACTIVE_WINDOW_MS) || 10 * 60 * 1000;
+const CADENCE = {
+  active: { unread: 15 * 1000, guest: 60 * 1000 },
+  idle:   { unread: 60 * 1000, guest: 300 * 1000 },
+};
+let lastActivityAt = Date.now(); // the session starting is activity
+
+function noteActivity() {
+  const wasIdle = cadenceFor(Date.now() - lastActivityAt) === CADENCE.idle;
+  lastActivityAt = Date.now();
+  // A pending idle timer would still fire on the slow cadence (codex P2 on #37):
+  // re-arm both polls on the fast cadence the moment the person is back.
+  if (wasIdle) {
+    if (unreadPollTimer) { clearTimeout(unreadPollTimer); schedule('unread'); }
+    if (guestPollTimer) { clearTimeout(guestPollTimer); schedule('guest'); }
+  }
+}
+
+/** Pure: which cadence applies after `idleMs` without a tool call. */
+function cadenceFor(idleMs) {
+  return idleMs < ACTIVE_WINDOW_MS ? CADENCE.active : CADENCE.idle;
+}
+
+function schedule(kind) {
+  const ms = cadenceFor(Date.now() - lastActivityAt)[kind];
+  const run = async () => {
+    if (kind === 'unread') await pollUnread(); else await pollGuestMessages();
+    // Re-arm only while start() is in effect (stop() clears the timers).
+    if (kind === 'unread' ? unreadPollTimer : guestPollTimer) schedule(kind);
+  };
+  const t = setTimeout(run, ms);
+  t.unref?.();
+  if (kind === 'unread') unreadPollTimer = t; else guestPollTimer = t;
+}
+
 function start() {
   if (heartbeatInterval) return;
 
@@ -30,11 +75,9 @@ function start() {
   // Then every 30 seconds
   heartbeatInterval = setInterval(sendHeartbeat, 30 * 1000);
 
-  // Guest message poll: every 15 seconds, check for incoming session messages
-  // and emit tools/list_changed to force Claude to pick them up via getPresenceFooter
-  if (!guestPollInterval) {
-    guestPollInterval = setInterval(pollGuestMessages, 15 * 1000);
-  }
+  // Inbox polls on the idle-aware cadence above (see CADENCE).
+  if (!unreadPollTimer) schedule('unread');
+  if (!guestPollTimer) schedule('guest');
 }
 
 function stop() {
@@ -42,9 +85,13 @@ function stop() {
     clearInterval(heartbeatInterval);
     heartbeatInterval = null;
   }
-  if (guestPollInterval) {
-    clearInterval(guestPollInterval);
-    guestPollInterval = null;
+  if (unreadPollTimer) {
+    clearTimeout(unreadPollTimer);
+    unreadPollTimer = null;
+  }
+  if (guestPollTimer) {
+    clearTimeout(guestPollTimer);
+    guestPollTimer = null;
   }
   // Clean up session file
   config.clearSession();
@@ -97,13 +144,11 @@ async function pollGuestMessages() {
   try {
     const handle = config.getHandle();
     if (!handle) return;
-
     const apiUrl = config.getApiUrl?.() || 'https://www.slashvibe.dev';
     const resp = await fetch(`${apiUrl}/api/session/guest?handle=${encodeURIComponent(handle)}`, {
       headers: apiHeaders(),
     });
     if (!resp.ok) return;
-
     const data = await resp.json();
     if (data.success && Array.isArray(data.messages) && data.messages.length > 0) {
       // Guest messages waiting — emit list_changed to force Claude to refresh
@@ -112,11 +157,21 @@ async function pollGuestMessages() {
         global.vibeNotifier.emitImmediate();
       }
     }
+  } catch {
+    // Silent fail — guest polling is best-effort
+  }
+}
 
-    // Ordinary DMs: nudge the session when the unread count RISES, so a DM
-    // sent from any surface reaches the live session within one poll cycle
-    // (getPresenceFooter injects the new bodies, once each). A drop just
-    // rebaselines — reading elsewhere shouldn't trigger a refresh here.
+/**
+ * Ordinary DMs: nudge the session when the unread count RISES, so a DM sent
+ * from any surface reaches the live session within one poll cycle
+ * (getPresenceFooter injects the new bodies, once each). A drop just
+ * rebaselines — reading elsewhere shouldn't trigger a refresh here.
+ */
+async function pollUnread() {
+  try {
+    const handle = config.getHandle();
+    if (!handle) return;
     const unread = await store.getUnreadCount(handle).catch(() => null);
     if (typeof unread === 'number') {
       if (lastSeenUnread !== null && unread > lastSeenUnread && global.vibeNotifier) {
@@ -125,7 +180,7 @@ async function pollGuestMessages() {
       lastSeenUnread = unread;
     }
   } catch {
-    // Silent fail — guest polling is best-effort
+    // Silent fail — best-effort
   }
 }
 
@@ -170,4 +225,8 @@ async function goOffline() {
   }
 }
 
-module.exports = { start, stop, forceHeartbeat, goOffline };
+module.exports = { start, stop, forceHeartbeat, goOffline, noteActivity, cadenceFor, CADENCE, ACTIVE_WINDOW_MS,
+  // test seams — read the armed delays, and age the session without waiting
+  _pollDelaysForTest: () => ({ unread: unreadPollTimer?._idleTimeout ?? null, guest: guestPollTimer?._idleTimeout ?? null }),
+  _setLastActivityForTest: (ts) => { lastActivityAt = ts; },
+};

package/setup.js

@@ -315,6 +315,14 @@ async function getOnlineCount() {
   try {
     const response = await fetch(`${API_BASE}/api/presence`);
     const data = await response.json();
+    // Before sign-in the roster is private: the server answers with counts only
+    // (`{ anonymous: true, counts: { humansActive, active, ... }, active: [] }`).
+    // Counting names here printed "0 builders online" to every newcomer while
+    // eleven people were on. Read the count the server actually gives.
+    if (data.counts && typeof data.counts === 'object') {
+      const n = data.counts.humansActive ?? data.counts.active;
+      if (Number.isFinite(n)) return n;
+    }
     return (data.active?.length || 0) + (data.away?.length || 0);
   } catch (e) {
     return 0;
@@ -324,28 +332,30 @@ async function getOnlineCount() {
 /**
  * Get online users with details for display
  */
-async function getOnlineUsers() {
+async function getOnlineUsers(token) {
   try {
-    const response = await fetch(`${API_BASE}/api/presence`);
+    // Handles are only served to a signed-in caller; pass the fresh token so the
+    // "here now" list after sign-in is real, not an empty anonymous answer.
+    const headers = token ? { Authorization: `Bearer ${token}` } : {};
+    const response = await fetch(`${API_BASE}/api/presence`, { headers });
     const data = await response.json();
-    const active = data.active || [];
-    const away = data.away || [];
+    const people = (u) => !u.isAgent;
+    // "Here now" means active humans only. Away rows were once appended below,
+    // which let the headline count disagree with the rows under it (codex P2).
+    const active = (data.active || []).filter(people);
+    const workText = (u) => u.workingOn || u.working_on || u.one_liner || '';
 
     // Format: { users: [{handle, status, one_liner}], total: number }
-    const users = [
-      ...active.slice(0, 5).map(u => ({
-        handle: u.username || u.handle,
-        status: 'active',
-        one_liner: u.one_liner || u.status || ''
-      })),
-      ...away.slice(0, 2).map(u => ({
-        handle: u.username || u.handle,
-        status: 'away',
-        one_liner: u.one_liner || u.status || ''
-      }))
-    ].slice(0, 5);
-
-    return { users, total: active.length + away.length };
+    const users = active.slice(0, 5).map(u => ({
+      handle: u.username || u.handle,
+      status: 'active',
+      one_liner: workText(u)
+    }));
+
+    const total = Number.isFinite(data.counts?.humansActive)
+      ? data.counts.humansActive
+      : active.length;
+    return { users, total };
   } catch (e) {
     return { users: [], total: 0 };
   }
@@ -477,7 +487,9 @@ async function setup() {
   }
 
   const onlineCount = await getOnlineCount();
-  console.log(`${colors.dim}     → Connected! ${onlineCount} builders online${colors.reset}`);
+  console.log(onlineCount > 0
+      ? `${colors.dim}     → Connected — ${onlineCount} ${onlineCount === 1 ? 'person' : 'people'} here now${colors.reset}`
+      : `${colors.dim}     → Connected${colors.reset}`);
   printStep(3, 'Testing connection...', 'done');
 
   // Step 4: Authenticate
@@ -504,7 +516,7 @@ async function setup() {
     console.log(`${colors.dim}     → Authenticated as @${authResult.handle}${colors.reset}`);
 
     // Success! Show who's online immediately
-    const presence = await getOnlineUsers();
+    const presence = await getOnlineUsers(authResult.token);
 
     console.log('');
     console.log(`${colors.green}  ✓ Setup complete!${colors.reset}`);
@@ -512,7 +524,7 @@ async function setup() {
 
     // Show who's vibing right now
     if (presence.users.length > 0) {
-      console.log(`${colors.bold}  🟢 ${presence.total} builders vibing now:${colors.reset}`);
+      console.log(`${colors.bold}  🟢 ${presence.total} people here now:${colors.reset}`);
       for (const user of presence.users) {
         const statusIcon = user.status === 'active' ? colors.green + '●' : colors.yellow + '○';
         const liner = user.one_liner ? ` — ${user.one_liner.slice(0, 40)}` : '';
@@ -526,7 +538,7 @@ async function setup() {
 
     console.log(`${colors.bold}  Quick start:${colors.reset}`);
     console.log(`${colors.dim}  1. Restart your coding agent${detected.length > 1 ? `s (${detected.join(', ')})` : ''}${colors.reset}`);
-    console.log(`${colors.dim}  2. Send a real message to someone you already know — "dm @their-handle ..."${colors.reset}`);
+    console.log(`${colors.dim}  2. Say: "message @their-handle — ..." to someone you already know${colors.reset}`);
     console.log(`${colors.dim}  3. Claude Code: run "npx slashvibe-mcp hook install" — waiting messages appear at the top of your next session${colors.reset}`);
     console.log('');
     console.log(`${colors.cyan}  Welcome to /vibe, @${authResult.handle}.${colors.reset}`);

package/version.json

@@ -1,13 +1,11 @@
 {
-  "version": "0.8.22",
-  "updated": "2026-08-31",
-  "changelog": "The first screen. vibe start is now seven lines: who you are, what's waiting, how many others are here, and where to go next. No message bodies, no chosen person, no drafted DM, no rotating tips. And it only says what it actually read — if your inbox or the room can't be reached it says so, instead of showing you a confident zero.",
+  "version": "0.8.24",
+  "updated": "2026-09-02",
+  "changelog": "Quieter when you are away. The server used to check your inbox twice every fifteen seconds for as long as your coding session stayed open — days, sometimes. Now it checks every fifteen seconds while you are actually using /vibe and backs off to once a minute when you are not; the moment you use a tool it is fast again. Replies still reach a live session within fifteen seconds, and within a minute of an idle one.",
   "features": [
-    "vibe start is seven lines and states the unread count exactly once",
-    "A failed read is never rendered as an empty inbox or an empty room",
-    "No message bodies on the first screen, and nobody is chosen for you",
-    "A read that did not succeed can no longer authorize a write — six places where one corrupt line destroyed messages, profiles, presence or your credential",
-    "vibe token no longer says “old local keys removed” unless they are gone"
+    "Inbox checks back off to once a minute when a session is idle, and snap back the moment you use a tool",
+    "The rarely used guest-session poll runs once a minute while active and every five minutes while idle",
+    "Presence heartbeat unchanged: you stay visible exactly as before"
   ],
   "deprecated": [],
   "breaking": false,