jefrichat-mcp 0.17.0 → 0.18.0

package/dist/http.js

@@ -49480,7 +49480,8 @@ var DEFAULTS2 = {
   replyMode: "mentions",
   persona: "",
   replyToBots: false,
-  ownerOnly: false,
+  ownerOnly: true,
+  // SECURITY: default to only the owner can direct an autonomous agent
   contextMessages: 12,
   promptTemplate: DEFAULT_TEMPLATE
 };
@@ -49629,7 +49630,23 @@ function waitFor(c, event, match, timeoutMs = 4e3) {
 }
 var ok = (text) => ({ content: [{ type: "text", text }] });
 var fail = (text) => ({ content: [{ type: "text", text }], isError: true });
-var inboxWatermark = /* @__PURE__ */ new Map();
+var WATERMARK_FILE = np3.join(os4.homedir(), ".jefri", "inbox.json");
+var inboxWatermark = new Map(
+  (() => {
+    try {
+      return Object.entries(JSON.parse(fs4.readFileSync(WATERMARK_FILE, "utf8")));
+    } catch {
+      return [];
+    }
+  })()
+);
+function saveWatermark() {
+  try {
+    fs4.mkdirSync(np3.dirname(WATERMARK_FILE), { recursive: true });
+    fs4.writeFileSync(WATERMARK_FILE, JSON.stringify(Object.fromEntries(inboxWatermark)));
+  } catch {
+  }
+}
 function registerAcpTools(server, ctx) {
   const ENABLE_E2E = process.env.ACP_ENABLE_E2E === "true";
   const e2eServer = ENABLE_E2E ? server : { registerTool: () => void 0 };
@@ -50300,8 +50317,8 @@ ${cmd}`);
   server.registerTool(
     "jefri_inbox",
     {
-      title: "Check inbox",
-      description: "Return messages people/agents have sent you (DMs + group messages) since you last checked. Reads from the hub, so it works even if your client doesn't keep a live connection.",
+      title: "Read unread messages",
+      description: "Read your UNREAD / new messages \u2014 everything people and agents have sent you (DMs + group messages) since the last time you checked. Use this when asked to 'read my messages', 'check new messages', or 'catch up'. Each line is timestamped. Reads from the hub, so it works even without a live connection, and it remembers what you've already seen (persisted across restarts).",
       inputSchema: {}
     },
     async () => withClient(async (c) => {
@@ -50321,6 +50338,7 @@ ${cmd}`);
       if (!msgs.length) return ok("\u{1F4ED} No new messages.");
       msgs.sort((a, b) => a.createdAt < b.createdAt ? -1 : 1);
       inboxWatermark.set(me, msgs[msgs.length - 1].createdAt);
+      saveWatermark();
       const groupNames = /* @__PURE__ */ new Map();
       if (msgs.some((m) => m.groupId)) {
         try {

package/dist/index.js

@@ -25466,7 +25466,8 @@ var DEFAULTS2 = {
   replyMode: "mentions",
   persona: "",
   replyToBots: false,
-  ownerOnly: false,
+  ownerOnly: true,
+  // SECURITY: default to only the owner can direct an autonomous agent
   contextMessages: 12,
   promptTemplate: DEFAULT_TEMPLATE
 };
@@ -25520,10 +25521,12 @@ function brainArgv(brain, prompt) {
 var MAX_PROMPT = 12e3;
 var MAX_REPLY = 7900;
 var TIMEOUT_MS = 5 * 60 * 1e3;
+var FORCE_OWNER_ONLY = true;
 function shouldHandle(m) {
   if (!cfg.enabled) return false;
   const fromOwner = !!ownerName && m.sender === ownerName;
-  if (cfg.ownerOnly && !fromOwner) return false;
+  const ownerOnly = cfg.ownerOnly || FORCE_OWNER_ONLY && !!ownerName;
+  if (ownerOnly && !fromOwner) return false;
   if (m.senderIsBot && !cfg.replyToBots) return false;
   if (!m.isGroup) return true;
   if (cfg.replyMode === "all") return true;
@@ -25742,7 +25745,23 @@ function waitFor(c, event, match, timeoutMs = 4e3) {
 }
 var ok = (text) => ({ content: [{ type: "text", text }] });
 var fail = (text) => ({ content: [{ type: "text", text }], isError: true });
-var inboxWatermark = /* @__PURE__ */ new Map();
+var WATERMARK_FILE = np3.join(os4.homedir(), ".jefri", "inbox.json");
+var inboxWatermark = new Map(
+  (() => {
+    try {
+      return Object.entries(JSON.parse(fs4.readFileSync(WATERMARK_FILE, "utf8")));
+    } catch {
+      return [];
+    }
+  })()
+);
+function saveWatermark() {
+  try {
+    fs4.mkdirSync(np3.dirname(WATERMARK_FILE), { recursive: true });
+    fs4.writeFileSync(WATERMARK_FILE, JSON.stringify(Object.fromEntries(inboxWatermark)));
+  } catch {
+  }
+}
 function registerAcpTools(server2, ctx) {
   const ENABLE_E2E = process.env.ACP_ENABLE_E2E === "true";
   const e2eServer = ENABLE_E2E ? server2 : { registerTool: () => void 0 };
@@ -26413,8 +26432,8 @@ ${cmd}`);
   server2.registerTool(
     "jefri_inbox",
     {
-      title: "Check inbox",
-      description: "Return messages people/agents have sent you (DMs + group messages) since you last checked. Reads from the hub, so it works even if your client doesn't keep a live connection.",
+      title: "Read unread messages",
+      description: "Read your UNREAD / new messages \u2014 everything people and agents have sent you (DMs + group messages) since the last time you checked. Use this when asked to 'read my messages', 'check new messages', or 'catch up'. Each line is timestamped. Reads from the hub, so it works even without a live connection, and it remembers what you've already seen (persisted across restarts).",
       inputSchema: {}
     },
     async () => withClient(async (c) => {
@@ -26434,6 +26453,7 @@ ${cmd}`);
       if (!msgs.length) return ok("\u{1F4ED} No new messages.");
       msgs.sort((a, b) => a.createdAt < b.createdAt ? -1 : 1);
       inboxWatermark.set(me, msgs[msgs.length - 1].createdAt);
+      saveWatermark();
       const groupNames = /* @__PURE__ */ new Map();
       if (msgs.some((m) => m.groupId)) {
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jefrichat-mcp",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Jefri Chat connector — join the Jefri Chat network (WhatsApp for AI agents) from any MCP client (Claude, Codex, Cursor, …).",
   "type": "module",
   "bin": {