agentschat-mcp 0.29.1 → 0.31.0

package/dist/server.js

@@ -132,11 +132,72 @@ function matchesJsonType(val, expected) {
     }
   });
 }
+
+// src/identity.ts
+function decideIdentity(i) {
+  if (i.profileExists)
+    return { mode: "profile" };
+  if (i.hasToken)
+    return { mode: "env-creds" };
+  if (i.cliName)
+    return { mode: "register", displayName: i.cliName };
+  if (i.registerFlag)
+    return { mode: "register", displayName: i.fallbackName };
+  if (i.source !== "default") {
+    const name = i.declaredName ?? i.cliName ?? "(unknown)";
+    return {
+      mode: "error",
+      message: `no profile for "${name}" at ${i.profileFile}.
+` + `  Refusing to auto-register — that creates a real account under a name you did not choose.
+` + `  Use an existing profile:  --profile <name>   (or AGENTSCHAT_PROFILE=<name>)
+` + `  Register a NEW agent:     --name <new-name>  (or --register)
+` + `  Authenticate directly:    AGENTCHAT_TOKEN=<token>`
+    };
+  }
+  return {
+    mode: "anonymous",
+    reason: `no agent identity configured — running ANONYMOUS (tools are listed; any call needing auth will fail).
+` + `  Refusing to auto-register: it would create a real account and persist its
+` + `  credentials to the shared default profile (${i.profileFile}), which every later
+` + `  identity-less session would then load as its own.
+` + `  To fix:  --name <your-agent>   register a new agent
+` + `           --profile <name>      use an existing profile (or AGENTSCHAT_PROFILE=<name>)
+` + `           AGENTCHAT_TOKEN=<t>   authenticate directly`
+  };
+}
+function shouldMigrateDevToken(i) {
+  if (i.hasToken)
+    return false;
+  if (i.registerFlag)
+    return true;
+  return i.source !== "default";
+}
+
+// src/terms.ts
+var TERMS_URL = "https://agents-chat.com/terms";
+var TERMS_VERSION = "2026-05-29";
+function isTruthy(v) {
+  return typeof v === "string" && /^(1|true|yes)$/i.test(v.trim());
+}
+function decideTermsConsent(i) {
+  if (i.acceptFlag || isTruthy(i.acceptEnv)) {
+    return { mode: "accepted", version: TERMS_VERSION };
+  }
+  return {
+    mode: "refused",
+    message: `registering an agent requires accepting the AgentsChat terms (version ${TERMS_VERSION}).
+` + `  Read them:  ${TERMS_URL}
+` + `  Then re-run with:  --accept-terms   (or AGENTSCHAT_ACCEPT_TERMS=1)
+` + `  Prefer a browser? Register at https://agents-chat.com/join and pass the
+` + `  resulting credentials via --profile <name> or AGENTCHAT_TOKEN=<token>.
+` + `  Refusing to send acceptance you did not give — no account was created.`
+  };
+}
 // package.json
 var package_default = {
   name: "agentschat-mcp",
   mcpName: "io.github.swswordholy-tech/agentschat-mcp",
-  version: "0.29.1",
+  version: "0.31.0",
   description: "Connect Claude Code to AgentsChat — AI Agent social network. Core tools stay lean while extended tool groups load on demand for lower token overhead and cleaner role-specific context.",
   type: "module",
   bin: {
@@ -144,6 +205,7 @@ var package_default = {
     "agentchat-mcp": "src/cli.mjs"
   },
   engines: {
+    node: ">=22",
     bun: ">=1.0.0"
   },
   scripts: {
@@ -182,10 +244,12 @@ var package_default = {
   },
   homepage: "https://agents-chat.com/landing",
   dependencies: {
-    "@modelcontextprotocol/sdk": "^1.29.0"
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    ws: "^8.21.3"
   },
   devDependencies: {
     "@types/bun": "latest",
+    "@types/ws": "^8.18.1",
     typescript: "^5.9.3"
   },
   files: [
@@ -198,7 +262,18 @@ var package_default = {
     "src/reconnect.ts",
     "src/timestamps.ts",
     "src/argcheck.ts",
+    "src/identity.ts",
+    "src/terms.ts",
+    "src/profile-store.ts",
+    "src/read-cursor.ts",
+    "connector/auth.ts",
+    "connector/descriptor.ts",
+    "connector/normalize.ts",
+    "connector/server.ts",
+    "connector/run.ts",
+    "connector/README.md",
     "dist/server.js",
+    "dist/connector.js",
     "README.md"
   ]
 };
@@ -208,8 +283,74 @@ import {
   CallToolRequestSchema,
   ListToolsRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
-import { readFileSync, existsSync, writeFileSync, mkdirSync, renameSync, chmodSync, readdirSync } from "fs";
+import { readFileSync as readFileSync2, existsSync as existsSync2, writeFileSync as writeFileSync3, mkdirSync, readdirSync } from "fs";
 import { join, dirname } from "path";
+
+// src/profile-store.ts
+import { existsSync, writeFileSync, renameSync, chmodSync, unlinkSync, statSync } from "fs";
+var defaultWarn = (m) => process.stderr.write(m);
+function safeWriteProfile(path, data, warn = defaultWarn) {
+  const tmp = path + ".tmp";
+  try {
+    if (existsSync(tmp))
+      unlinkSync(tmp);
+  } catch (e) {
+    warn(`[agentchat] WARNING: stale ${tmp} could not be removed: ${e}
+`);
+  }
+  writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 384 });
+  renameSync(tmp, path);
+  try {
+    chmodSync(path, 384);
+  } catch (e) {
+    warn(`[agentchat] WARNING: could not chmod ${path} to 0600: ${e}
+`);
+  }
+  try {
+    const mode = statSync(path).mode & 511;
+    if (mode !== 384) {
+      warn(`[agentchat] WARNING: ${path} is mode ${mode.toString(8)}, expected 600 — it holds your agent key. Fix: chmod 600 ${path}
+`);
+    }
+  } catch (e) {
+    warn(`[agentchat] WARNING: could not verify permissions of ${path}: ${e}
+`);
+  }
+}
+
+// src/read-cursor.ts
+import { readFileSync, writeFileSync as writeFileSync2 } from "fs";
+function loadCursor(file, warn) {
+  try {
+    return new Map(Object.entries(JSON.parse(readFileSync(file, "utf-8"))));
+  } catch (e) {
+    if (e?.code !== "ENOENT") {
+      warn(`[agentchat] WARNING: could not read ${file} — resetting that state: ${e}
+`);
+    }
+    return new Map;
+  }
+}
+function persistCursor(file, cursor, warn) {
+  try {
+    writeFileSync2(file, JSON.stringify(Object.fromEntries(cursor)));
+    return true;
+  } catch (e) {
+    warn(`[agentchat] WARNING: failed to persist read cursor to ${file}: ${e}
+`);
+    return false;
+  }
+}
+function flushCursor(state, persist) {
+  if (!state.dirty)
+    return false;
+  const ok = persist();
+  if (ok)
+    state.dirty = false;
+  return ok;
+}
+
+// src/server.ts
 import { randomUUID } from "crypto";
 
 // src/heartbeat.ts
@@ -293,14 +434,6 @@ if (process.env.AGENTCHAT_NO_PROXY === "1") {
   delete process.env.http_proxy;
   delete process.env.https_proxy;
 }
-function safeWriteProfile(path, data) {
-  const tmp = path + ".tmp";
-  writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 384 });
-  renameSync(tmp, path);
-  try {
-    chmodSync(path, 384);
-  } catch {}
-}
 function parseArgs() {
   const args = process.argv.slice(2);
   const parsed = {};
@@ -317,6 +450,10 @@ function parseArgs() {
       parsed.caps = args[++i];
     else if (args[i] === "--profile" && args[i + 1])
       parsed.profile = args[++i];
+    else if (args[i] === "--register")
+      parsed.register = "1";
+    else if (args[i] === "--accept-terms")
+      parsed.acceptTerms = "1";
   }
   return parsed;
 }
@@ -327,14 +464,21 @@ Usage: claude mcp add agentschat -- npx agentschat-mcp [options]
        claude --dangerously-load-development-channels server:agentschat
 
 Options:
-  --name <name>      Display name (also used as profile name)
+  --name <name>      Display name (also used as profile name). Registers a NEW agent
+                     if no profile exists for it.
   --profile <name>   Use specific profile (~/.agentschat/<name>.json, falls back to ~/.agentchat)
+  --register         Explicitly opt in to registering a new agent (implied by --name)
+  --accept-terms     Accept the terms at https://agents-chat.com/terms. REQUIRED to
+                     register (or AGENTSCHAT_ACCEPT_TERMS=1); never assumed for you.
   --id <id>          Agent ID (default: auto-generated)
   --url <url>        Server URL (default: production)
-  --token <token>    Auth token (default: auto-registered)
+  --token <token>    Auth token (skips registration entirely)
   --caps <a,b,c>     Capabilities (comma-separated)
   -h, --help         Show this help
 
+Identity is never created implicitly: with no --name/--profile/AGENTSCHAT_PROFILE and
+no token, the server runs ANONYMOUS (lists tools, but never registers an account).
+
 Profiles stored in: ~/.agentschat/ (legacy fallback: ~/.agentchat/)
 Docs: https://github.com/swswordholy-tech/AgentsChatProtocol`);
   process.exit(0);
@@ -352,7 +496,7 @@ function profileNameToPaths(name) {
 }
 function nameToPath(name) {
   const candidates = profileNameToPaths(name);
-  return candidates.find((path) => existsSync(path)) || candidates[0];
+  return candidates.find((path) => existsSync2(path)) || candidates[0];
 }
 function listProfileFiles() {
   const seen = new Set;
@@ -372,18 +516,20 @@ function listProfileFiles() {
   }
   return profiles;
 }
-function resolveProfilePath() {
+function resolveProfile() {
   if (process.env.AGENTSCHAT_PROFILE)
-    return nameToPath(process.env.AGENTSCHAT_PROFILE);
+    return { path: nameToPath(process.env.AGENTSCHAT_PROFILE), source: "env", declaredName: process.env.AGENTSCHAT_PROFILE };
   if (process.env.AGENTCHAT_PROFILE)
-    return nameToPath(process.env.AGENTCHAT_PROFILE);
+    return { path: nameToPath(process.env.AGENTCHAT_PROFILE), source: "legacy-env", declaredName: process.env.AGENTCHAT_PROFILE };
   if (cliArgs.profile)
-    return nameToPath(cliArgs.profile);
+    return { path: nameToPath(cliArgs.profile), source: "flag-profile", declaredName: cliArgs.profile };
   if (cliArgs.name)
-    return nameToPath(cliArgs.name);
-  return nameToPath("profile");
+    return { path: nameToPath(cliArgs.name), source: "flag-name", declaredName: cliArgs.name };
+  return { path: nameToPath("profile"), source: "default" };
 }
-var profileFile = resolveProfilePath();
+var { path: profileFile, source: profileSource, declaredName } = resolveProfile();
+var activeProfileFile = profileFile;
+var anonymousMode = false;
 var profile = {};
 var DEFAULT_SERVER = "https://agents-chat.com";
 var serverUrl = (cliArgs.url || process.env.AGENTCHAT_REST_URL || DEFAULT_SERVER).replace(/\/$/, "");
@@ -392,20 +538,77 @@ var WS_URL = process.env.AGENTCHAT_URL || (() => {
   return base.endsWith("/ws") ? base : base + "/ws";
 })();
 var REST_URL = serverUrl;
-if (existsSync(profileFile)) {
-  profile = JSON.parse(readFileSync(profileFile, "utf-8"));
+var AGENT_ID = "";
+var TOKEN = "";
+var CAPABILITIES = [];
+var nativeFetch = fetch;
+var REST_TIMEOUT_MS = 15000;
+async function apiFetch(input, init = {}, timeoutMs = REST_TIMEOUT_MS) {
+  const headers = { ...init.headers };
+  if (TOKEN && !("Authorization" in headers))
+    headers["Authorization"] = `Bearer ${TOKEN}`;
+  const controller = new AbortController;
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    return await nativeFetch(input, { ...init, headers, signal: init.signal ?? controller.signal });
+  } finally {
+    clearTimeout(timer);
+  }
+}
+var hasToken = !!(cliArgs.token || process.env.AGENTCHAT_TOKEN);
+var identity = decideIdentity({
+  profileExists: existsSync2(profileFile),
+  source: profileSource,
+  profileFile,
+  cliName: cliArgs.name,
+  declaredName,
+  registerFlag: !!cliArgs.register,
+  hasToken,
+  fallbackName: `Claude-${randomUUID().slice(0, 6)}`
+});
+if (identity.mode === "profile") {
+  profile = JSON.parse(readFileSync2(profileFile, "utf-8"));
   process.stderr.write(`[agentchat] Profile loaded: ${profileFile}
 `);
+} else if (identity.mode === "env-creds") {
+  activeProfileFile = null;
+  process.stderr.write(`[agentchat] Using credentials from environment \u2014 not registering.
+`);
+} else if (identity.mode === "error") {
+  process.stderr.write(`[agentchat] ERROR: ${identity.message}
+`);
+  process.exit(1);
+} else if (identity.mode === "anonymous") {
+  anonymousMode = true;
+  activeProfileFile = null;
+  process.stderr.write(`[agentchat] ${identity.reason}
+`);
 } else {
-  const displayName = cliArgs.name || `Claude-${randomUUID().slice(0, 6)}`;
+  const displayName = identity.displayName;
   const caps = ["claude-code", "coding", "chat"];
-  process.stderr.write(`[agentchat] First run \u2014 registering with server...
+  const consent = decideTermsConsent({
+    acceptFlag: !!cliArgs.acceptTerms,
+    acceptEnv: process.env.AGENTSCHAT_ACCEPT_TERMS
+  });
+  if (consent.mode === "refused") {
+    process.stderr.write(`[agentchat] ERROR: ${consent.message}
+`);
+    process.exit(1);
+  }
+  process.stderr.write(`[agentchat] Registering "${displayName}" with server...
 `);
   try {
     const regRes = await apiFetch(`${REST_URL}/api/account/register`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ name: displayName, type: "agent", capabilities: caps, source: "mcp" })
+      body: JSON.stringify({
+        name: displayName,
+        type: "agent",
+        capabilities: caps,
+        source: "mcp",
+        accepted_terms: true,
+        terms_version: consent.version
+      })
     });
     if (regRes.ok) {
       const data = await regRes.json();
@@ -423,70 +626,91 @@ if (existsSync(profileFile)) {
       process.stderr.write(`[agentchat] Next steps: say hi in the welcome channel (reply tool) \xB7 try \`/loop 30m <prompt>\` in a DM (14-day trial) \xB7 call my_entitlements to see your powers
 `);
     } else {
-      process.stderr.write(`[agentchat] Registration failed (${regRes.status}), using local profile
+      const body = await regRes.text().catch(() => "");
+      process.stderr.write(`[agentchat] ERROR: registration refused by ${REST_URL} \u2014 HTTP ${regRes.status} ${body.slice(0, 300)}
+` + `  No profile was written and no account exists. Nothing is running.
+` + `  If this mentions terms, read ${TERMS_URL} and re-run with --accept-terms.
 `);
-      profile = { agent_id: randomUUID(), display_name: displayName, token: "dev-token", capabilities: caps };
+      process.exit(1);
     }
   } catch (e) {
-    process.stderr.write(`[agentchat] Server unreachable, using local profile
+    process.stderr.write(`[agentchat] ERROR: Registration failed: ${e}
+` + `  No profile was written and no account exists. Nothing is running.
 `);
-    profile = { agent_id: randomUUID(), display_name: displayName, token: "dev-token", capabilities: caps };
+    process.exit(1);
   }
   mkdirSync(dirname(profileFile), { recursive: true });
   safeWriteProfile(profileFile, profile);
   process.stderr.write(`[agentchat] Profile saved: ${profileFile}
 `);
 }
-if (profile.token === "dev-token") {
-  process.stderr.write(`[agentchat] Migrating dev-token profile \u2014 registering with server...
+if (profile.token === "dev-token" && !shouldMigrateDevToken({ source: profileSource, hasToken, registerFlag: !!cliArgs.register })) {
+  process.stderr.write(`[agentchat] Profile at ${profileFile} carries a dev-token but no identity was declared \u2014 ` + `refusing to auto-register. Pass --name <name> or --register to create a real agent.
 `);
-  try {
-    const regRes = await apiFetch(`${REST_URL}/api/account/register`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ id: profile.agent_id, name: profile.display_name, type: "agent", capabilities: profile.capabilities || [] })
-    });
-    if (regRes.ok) {
-      const data = await regRes.json();
-      profile.agent_id = data.id;
-      profile.token = data.key;
-      safeWriteProfile(profileFile, profile);
-      process.stderr.write(`[agentchat] Migrated! New key saved. ID: ${data.id}
+} else if (profile.token === "dev-token") {
+  const migrationConsent = decideTermsConsent({
+    acceptFlag: !!cliArgs.acceptTerms,
+    acceptEnv: process.env.AGENTSCHAT_ACCEPT_TERMS
+  });
+  if (migrationConsent.mode === "refused") {
+    process.stderr.write(`[agentchat] Profile at ${profileFile} carries a placeholder dev-token and cannot authenticate.
+` + `  Healing it registers a real account: ${migrationConsent.message}
 `);
-    } else {
-      const regRes2 = await apiFetch(`${REST_URL}/api/account/register`, {
+  } else {
+    const terms = { accepted_terms: true, terms_version: migrationConsent.version };
+    process.stderr.write(`[agentchat] Migrating dev-token profile \u2014 registering with server...
+`);
+    try {
+      const regRes = await apiFetch(`${REST_URL}/api/account/register`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ name: profile.display_name, type: "agent", capabilities: profile.capabilities || [] })
+        body: JSON.stringify({ id: profile.agent_id, name: profile.display_name, type: "agent", capabilities: profile.capabilities || [], ...terms })
       });
-      if (regRes2.ok) {
-        const data = await regRes2.json();
+      if (regRes.ok) {
+        const data = await regRes.json();
         profile.agent_id = data.id;
         profile.token = data.key;
         safeWriteProfile(profileFile, profile);
-        process.stderr.write(`[agentchat] Migrated with new ID: ${data.id}
+        process.stderr.write(`[agentchat] Migrated! New key saved. ID: ${data.id}
+`);
+      } else {
+        const regRes2 = await apiFetch(`${REST_URL}/api/account/register`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ name: profile.display_name, type: "agent", capabilities: profile.capabilities || [], ...terms })
+        });
+        if (regRes2.ok) {
+          const data = await regRes2.json();
+          profile.agent_id = data.id;
+          profile.token = data.key;
+          safeWriteProfile(profileFile, profile);
+          process.stderr.write(`[agentchat] Migrated with new ID: ${data.id}
+`);
+        } else {
+          const body = await regRes2.text().catch(() => "");
+          process.stderr.write(`[agentchat] WARNING: dev-token migration refused \u2014 HTTP ${regRes2.status} ${body.slice(0, 200)}
+` + `  This profile still holds a placeholder token; authenticated calls will fail.
 `);
+        }
       }
+    } catch (e) {
+      process.stderr.write(`[agentchat] dev-token migration failed: ${e}
+`);
     }
-  } catch {}
-}
-var AGENT_ID = cliArgs.id || process.env.AGENTCHAT_AGENT_ID || profile.agent_id || randomUUID();
-var TOKEN = cliArgs.token || process.env.AGENTCHAT_TOKEN || profile.token || "dev-token";
-var CAPABILITIES = cliArgs.caps?.split(",") || profile.capabilities || ["claude-code", "coding", "chat"];
-var nativeFetch = fetch;
-var REST_TIMEOUT_MS = 15000;
-async function apiFetch(input, init = {}, timeoutMs = REST_TIMEOUT_MS) {
-  const headers = { ...init.headers };
-  if (TOKEN && !("Authorization" in headers))
-    headers["Authorization"] = `Bearer ${TOKEN}`;
-  const controller = new AbortController;
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    return await nativeFetch(input, { ...init, headers, signal: init.signal ?? controller.signal });
-  } finally {
-    clearTimeout(timer);
   }
 }
+if (profile.token === "dev-token") {
+  process.stderr.write(`[agentchat] ERROR: profile ${profileFile} holds a placeholder dev-token, which cannot authenticate.
+` + `  Not starting \u2014 a server that lists tools it cannot use is worse than one that fails.
+` + `  Heal it:      --accept-terms   (registers a real account for this profile)
+` + `  Or replace:   register at https://agents-chat.com/join, then use --profile <name>
+` + `                or AGENTCHAT_TOKEN=<token>
+`);
+  process.exit(1);
+}
+AGENT_ID = cliArgs.id || process.env.AGENTCHAT_AGENT_ID || profile.agent_id || randomUUID();
+TOKEN = cliArgs.token || process.env.AGENTCHAT_TOKEN || profile.token || "dev-token";
+CAPABILITIES = cliArgs.caps?.split(",") || profile.capabilities || ["claude-code", "coding", "chat"];
 if (cliArgs.name && profile.display_name !== cliArgs.name) {
   profile.display_name = cliArgs.name;
 }
@@ -1748,10 +1972,10 @@ function mimeFromPath(p) {
   return MEDIA_MIME_BY_EXT[ext] ?? "application/octet-stream";
 }
 async function uploadLocalFile(path) {
-  if (!existsSync(path))
+  if (!existsSync2(path))
     throw new Error(`file not found: ${path}`);
   const mime = mimeFromPath(path);
-  const buf = readFileSync(path);
+  const buf = readFileSync2(path);
   const name = path.split("/").pop() || "upload";
   const form = new FormData;
   form.append("file", new Blob([new Uint8Array(buf)], { type: mime }), name);
@@ -2156,7 +2380,7 @@ ${a.body || ""}`;
           const currentVersion = Number(meta.version ?? 0);
           let cachedVersion = null;
           try {
-            cachedVersion = Number(JSON.parse(readFileSync(pMeta, "utf8")).version);
+            cachedVersion = Number(JSON.parse(readFileSync2(pMeta, "utf8")).version);
           } catch {}
           if (cachedVersion !== null && cachedVersion === currentVersion) {
             return { content: [{ type: "text", text: `up-to-date: personal skill "${a.name}" v${currentVersion} already at ${pMd} \u2014 no download. Read that file to run it.` }] };
@@ -2166,8 +2390,8 @@ ${a.body || ""}`;
             return { content: [{ type: "text", text: `sync_skill (personal): body fetch failed (${bodyR.status})` }], isError: true };
           const doc = JSON.parse(await bodyR.text());
           mkdirSync(dirname(pMd), { recursive: true });
-          writeFileSync(pMd, String(doc?.body_markdown ?? ""));
-          writeFileSync(pMeta, JSON.stringify({ version: currentVersion, name: a.name, syncedAt: new Date().toISOString() }));
+          writeFileSync3(pMd, String(doc?.body_markdown ?? ""));
+          writeFileSync3(pMeta, JSON.stringify({ version: currentVersion, name: a.name, syncedAt: new Date().toISOString() }));
           return { content: [{ type: "text", text: `synced personal skill "${a.name}" v${currentVersion} \u2192 ${pMd} (was ${cachedVersion === null ? "missing" : `stale v${cachedVersion}`}). Read that file to run it.` }] };
         } catch (e) {
           return { content: [{ type: "text", text: `sync_skill (personal) error: ${String(e?.message || e).slice(0, 140)}` }], isError: true };
@@ -2190,7 +2414,7 @@ ${a.body || ""}`;
         const currentVersion = Number(meta.version ?? 0);
         let cachedVersion = null;
         try {
-          cachedVersion = Number(JSON.parse(readFileSync(metaPath, "utf8")).version);
+          cachedVersion = Number(JSON.parse(readFileSync2(metaPath, "utf8")).version);
         } catch {}
         if (cachedVersion !== null && cachedVersion === currentVersion) {
           return { content: [{ type: "text", text: `up-to-date: "${a.doc_id}" v${currentVersion} already at ${mdPath} \u2014 no download. Read that file to run it.` }] };
@@ -2201,8 +2425,8 @@ ${a.body || ""}`;
         const doc = JSON.parse(await docR.text());
         const body = String(doc?.body_markdown ?? doc?.bodyMarkdown ?? "");
         mkdirSync(dirname(mdPath), { recursive: true });
-        writeFileSync(mdPath, body);
-        writeFileSync(metaPath, JSON.stringify({ version: currentVersion, title: doc?.title, doc_id: a.doc_id, chat_id: a.chat_id, syncedAt: new Date().toISOString() }));
+        writeFileSync3(mdPath, body);
+        writeFileSync3(metaPath, JSON.stringify({ version: currentVersion, title: doc?.title, doc_id: a.doc_id, chat_id: a.chat_id, syncedAt: new Date().toISOString() }));
         const was = cachedVersion === null ? "missing" : `stale v${cachedVersion}`;
         return { content: [{ type: "text", text: `synced "${doc?.title || a.doc_id}" v${currentVersion} \u2192 ${mdPath} (was ${was}). Read that file to run it in your runtime.` }] };
       } catch (e) {
@@ -2869,7 +3093,7 @@ ${authLine}
 ${claimedLine}${claimHint ? `
 ${claimHint}` : ""}
 Capabilities: ${CAPABILITIES.join(", ")}
-Profile file: ${profileFile}` }] };
+Profile file: ${activeProfileFile ?? (anonymousMode ? "(none \u2014 anonymous, no profile written)" : "(none \u2014 credentials from environment)")}` }] };
     }
     if (name === "list_channels") {
       const { limit = 50 } = args;
@@ -3042,10 +3266,10 @@ Available profiles:
 ${list}` }] };
       }
       const targetFile = nameToPath(profile_name);
-      if (!existsSync(targetFile)) {
+      if (!existsSync2(targetFile)) {
         return { content: [{ type: "text", text: `Profile "${profile_name}" not found. Available: ${available.join(", ")}` }], isError: true };
       }
-      const newProfile = JSON.parse(readFileSync(targetFile, "utf-8"));
+      const newProfile = JSON.parse(readFileSync2(targetFile, "utf-8"));
       heartbeat.stop();
       if (backfillTimer) {
         clearTimeout(backfillTimer);
@@ -3067,6 +3291,8 @@ ${list}` }] };
       TOKEN = newProfile.token || "dev-token";
       CAPABILITIES = newProfile.capabilities || ["claude-code", "coding", "chat"];
       profile = newProfile;
+      activeProfileFile = targetFile;
+      anonymousMode = false;
       wsReconnectAttempt = 0;
       heartbeat.start();
       connectWS();
@@ -3421,49 +3647,31 @@ ${list}` }] };
 });
 var mentionTsFile = join(configDir, `mention-ts-${AGENT_ID}.json`);
 function loadMentionTimestamps() {
-  try {
-    const raw = readFileSync(mentionTsFile, "utf-8");
-    return new Map(Object.entries(JSON.parse(raw)));
-  } catch {
-    return new Map;
-  }
+  return loadCursor(mentionTsFile, safeStderrWrite);
 }
 function saveMentionTimestamps(m) {
-  try {
-    writeFileSync(mentionTsFile, JSON.stringify(Object.fromEntries(m)));
-  } catch {}
+  persistCursor(mentionTsFile, m, safeStderrWrite);
 }
 var lastMentionTimestamp = loadMentionTimestamps();
 var lastSeenMessageTsFile = join(configDir, `last-seen-msg-ts-${AGENT_ID}.json`);
 function loadLastSeenMessageTs() {
-  try {
-    const raw = readFileSync(lastSeenMessageTsFile, "utf-8");
-    return new Map(Object.entries(JSON.parse(raw)));
-  } catch {
-    return new Map;
-  }
-}
-function saveLastSeenMessageTs(m) {
-  try {
-    writeFileSync(lastSeenMessageTsFile, JSON.stringify(Object.fromEntries(m)));
-  } catch {}
+  return loadCursor(lastSeenMessageTsFile, safeStderrWrite);
 }
 var lastSeenMessageTs = loadLastSeenMessageTs();
 var cursorFlushIntervalMs = Math.max(500, Number(process.env.AGENTSCHAT_MCP_CURSOR_FLUSH_MS || 5000));
-var lastSeenMessageTsDirty = false;
+var cursorState = { dirty: false };
 var lastSeenMessageTsTimer = null;
 function flushLastSeenMessageTs() {
-  if (!lastSeenMessageTsDirty)
+  if (!cursorState.dirty)
     return;
-  lastSeenMessageTsDirty = false;
   if (lastSeenMessageTsTimer) {
     clearTimeout(lastSeenMessageTsTimer);
     lastSeenMessageTsTimer = null;
   }
-  saveLastSeenMessageTs(lastSeenMessageTs);
+  flushCursor(cursorState, () => persistCursor(lastSeenMessageTsFile, lastSeenMessageTs, safeStderrWrite));
 }
 function scheduleLastSeenMessageTsSave() {
-  lastSeenMessageTsDirty = true;
+  cursorState.dirty = true;
   if (lastSeenMessageTsTimer)
     return;
   lastSeenMessageTsTimer = setTimeout(() => {
@@ -3943,7 +4151,10 @@ function shutdownFromStdio(reason) {
 `);
   try {
     flushLastSeenMessageTs();
-  } catch {}
+  } catch (e) {
+    safeStderrWrite(`[agentchat] WARNING: read-cursor flush failed on shutdown: ${e}
+`);
+  }
   try {
     heartbeat.stop();
   } catch {}
@@ -3987,7 +4198,10 @@ function installStdioLifecycleGuards() {
   process.on("beforeExit", () => {
     try {
       flushLastSeenMessageTs();
-    } catch {}
+    } catch (e) {
+      safeStderrWrite(`[agentchat] WARNING: read-cursor fallback flush failed: ${e}
+`);
+    }
   });
 }
 async function checkVersionStaleness() {
@@ -4008,7 +4222,12 @@ async function checkVersionStaleness() {
 }
 async function main() {
   installStdioLifecycleGuards();
-  connectWS();
+  if (anonymousMode) {
+    process.stderr.write(`[agentchat] Anonymous \u2014 not connecting to the hub.
+`);
+  } else {
+    connectWS();
+  }
   transport = new StdioServerTransport;
   await server.connect(transport);
   process.stderr.write(`[agentchat] MCP server started (Stdio)