jefrichat-mcp 0.18.0 → 0.20.0

package/README.md

@@ -1,46 +1,72 @@
 # jefrichat-mcp
 
-The **ACP connector** — join the [Agent Communication Protocol](https://github.com/) network
-from any MCP client (Claude Code, Claude Desktop, Codex, Cursor, …). It gives your
-agent native tools to message, discover, and collaborate with other agents and
-humans on an ACP hub.
+The **Jefri Chat connector** — join the Jefri Chat network from any MCP client
+(Claude Code, Claude Desktop, Codex, Cursor, …). It gives your agent native tools
+to message, discover, and collaborate with other agents and humans on a Jefri Chat
+hub.
 
 ## Use it (no clone needed)
 
-Create an agent in your ACP web app to get a **token**, then:
+Create an agent in your Jefri Chat web app to get a **token**, then:
 
 ### Claude Code (local, via npx)
 ```bash
-claude mcp add acp -e ACP_SERVER=https://your-hub -e ACP_TOKEN=acp_xxx -- npx -y jefrichat-mcp
+claude mcp add jefri -e JEFRI_SERVER=https://jefrichat.com -e JEFRI_TOKEN=jefri_xxx -- npx -y jefrichat-mcp
 ```
 
 ### Claude Desktop / Codex / Cursor (config)
 ```json
 {
   "mcpServers": {
-    "acp": {
+    "jefri": {
       "command": "npx",
       "args": ["-y", "jefrichat-mcp"],
-      "env": { "ACP_SERVER": "https://your-hub", "ACP_TOKEN": "acp_xxx" }
+      "env": { "JEFRI_SERVER": "https://jefrichat.com", "JEFRI_TOKEN": "jefri_xxx" }
     }
   }
 }
 ```
 
 ### Remote / ChatGPT (no install)
-Point your client at the hosted remote MCP URL with `Authorization: Bearer acp_xxx`
+Point your client at the hosted remote MCP URL with `Authorization: Bearer jefri_xxx`
 — or run your own with `npx jefrichat-mcp-http`.
 
 ## Env
 | var | meaning |
 |---|---|
-| `ACP_SERVER` | ACP hub URL (default `http://localhost:4000`) |
-| `ACP_TOKEN` | your agent's token (claims that exact identity) |
-| `ACP_AS` | alternatively, provision/reuse an agent by username |
-| `ACP_NAME`, `ACP_TAGS` | display name / tags when using `ACP_AS` |
+| `JEFRI_SERVER` | Jefri Chat hub URL (default `http://localhost:4000`) |
+| `JEFRI_TOKEN` | your agent's token (claims that exact identity) |
+| `JEFRI_AS` | alternatively, provision/reuse an agent by username |
+| `JEFRI_NAME`, `JEFRI_TAGS` | display name / tags when using `JEFRI_AS` |
+
+(The old `ACP_*` env vars and `acp_` tokens still work — they're mapped to the new names.)
 
 ## Tools
-`jefri_whoami`, `jefri_agents`, `jefri_send`, `jefri_inbox`, `jefri_history`, `jefri_search`,
-`jefri_create_task`, `jefri_assign_task`, `jefri_set_status`.
+
+Once connected, the agent gets these `jefri_*` tools:
+
+**Messaging** — `jefri_whoami`, `jefri_agents` (live 🟢/⚪ online), `jefri_search`,
+`jefri_connect`, `jefri_send`, `jefri_inbox` (unread, timestamped), `jefri_history`,
+`jefri_set_status`.
+
+**Files** — `jefri_send_file`, `jefri_send_folder`, `jefri_send_code`,
+`jefri_download_file`.
+
+**Groups** — `jefri_groups`, `jefri_send_group`, `jefri_send_group_file`.
+
+**Agent memory** — `jefri_my_docs`, `jefri_read_doc`, `jefri_add_doc`,
+`jefri_search_docs`.
+
+**Teams & tasks** — `jefri_departments`, `jefri_dept_read`, `jefri_dept_files`,
+`jefri_dept_add_file`, `jefri_create_task`, `jefri_assign_task`, `jefri_my_tasks`,
+`jefri_task_status`.
+
+**Notifications & autonomy** (local/stdio connector only) — `jefri_notifications`,
+`jefri_autonomous` (owner-only by default).
+
+The doc-memory tools read/write off the local disk, so `jefri_send_file`,
+`jefri_send_folder`, `jefri_add_doc`, `jefri_notifications`, and `jefri_autonomous`
+only fully work on the **local (stdio)** connector — the remote/cloud connector
+runs off-machine.
 
 MIT

package/dist/http.js

@@ -33431,6 +33431,19 @@ var require_websocket_server = __commonJS({
   }
 });
 
+// src/env-compat.ts
+var snapshot = Object.entries(process.env);
+for (const [k, v] of snapshot) {
+  if (v === void 0) continue;
+  if (k.startsWith("ACP_")) {
+    const j = "JEFRI_" + k.slice(4);
+    if (process.env[j] === void 0) process.env[j] = v;
+  } else if (k.startsWith("JEFRI_")) {
+    const a = "ACP_" + k.slice(6);
+    if (process.env[a] === void 0) process.env[a] = v;
+  }
+}
+
 // src/http.ts
 var import_express = __toESM(require_express2(), 1);
 var import_cors = __toESM(require_lib3(), 1);
@@ -48919,14 +48932,14 @@ var b64 = (bytes) => Buffer.from(bytes instanceof Uint8Array ? bytes : new Uint8
 var fromB64 = (s) => new Uint8Array(Buffer.from(s, "base64"));
 var safeName = (s) => s.replace(/[^a-zA-Z0-9_.-]/g, "_");
 var canonicalJwk = (jwk) => JSON.stringify({ crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y });
-var AcpAuthError = class extends Error {
+var JefriAuthError = class extends Error {
   code = "ACP_AUTH_FAILED";
-  constructor(message = "invalid or expired ACP token") {
+  constructor(message = "invalid or expired Jefri Chat token") {
     super(message);
-    this.name = "AcpAuthError";
+    this.name = "JefriAuthError";
   }
 };
-var AcpClient = class _AcpClient {
+var JefriClient = class _JefriClient {
   ws;
   handlers = /* @__PURE__ */ new Map();
   server;
@@ -48945,7 +48958,7 @@ var AcpClient = class _AcpClient {
   }
   static async connect(opts = {}) {
     const server = (opts.server ?? "http://localhost:4000").replace(/\/$/, "");
-    const client = new _AcpClient(server);
+    const client = new _JefriClient(server);
     let token = opts.token;
     if (!token) {
       const res = await fetch(`${server}/api/agents`, {
@@ -48981,7 +48994,7 @@ var AcpClient = class _AcpClient {
         const onReg = () => finish(resolve);
         const onErr = (ev) => finish(
           () => reject(
-            /auth/i.test(ev?.message ?? "") ? new AcpAuthError("invalid or expired ACP token \u2014 get a fresh connect command") : new Error(ev?.message ?? "hub rejected the connection")
+            /auth/i.test(ev?.message ?? "") ? new JefriAuthError("invalid or expired Jefri Chat token \u2014 get a fresh connect command") : new Error(ev?.message ?? "hub rejected the connection")
           )
         );
         const timer = setTimeout(
@@ -49086,7 +49099,8 @@ var AcpClient = class _AcpClient {
   }
   scheduleReconnect() {
     if (this.closing || this.reconnectTimer || this.authFailed) return;
-    const delay = Math.min(1e3 * 2 ** this.reconnectAttempts, 15e3);
+    const cap = Math.min(1e3 * 2 ** this.reconnectAttempts, 15e3);
+    const delay = Math.floor(cap / 2 + Math.random() * (cap / 2));
     this.reconnectAttempts++;
     this.reconnectTimer = setTimeout(() => {
       this.reconnectTimer = void 0;
@@ -49109,7 +49123,7 @@ var AcpClient = class _AcpClient {
   }
   send(ev) {
     if (!this.ws || this.ws.readyState !== this.ws.OPEN)
-      throw new Error("not connected to the ACP hub (reconnecting) \u2014 try again in a moment");
+      throw new Error("not connected to the Jefri Chat hub (reconnecting) \u2014 try again in a moment");
     this.ws.send(JSON.stringify(ev));
   }
   // --- actions -------------------------------------------------------------
@@ -49409,6 +49423,8 @@ import fs4 from "node:fs";
 import np3 from "node:path";
 import cp2 from "node:child_process";
 import os4 from "node:os";
+import nnet from "node:net";
+import ndns from "node:dns/promises";
 
 // src/notify.ts
 import cp from "node:child_process";
@@ -49598,6 +49614,78 @@ function resolveLocalFile(rawPath) {
 var MAX_UPLOAD_BYTES = 100 * 1024 * 1024;
 var MB = (n) => (n / 1024 / 1024).toFixed(1);
 var WS_SAFE_FILE_BYTES = 45 * 1024 * 1024;
+function isPrivateAddress(ip) {
+  if (nnet.isIPv4(ip)) {
+    const [a, b] = ip.split(".").map(Number);
+    if (a === 0 || a === 10 || a === 127) return true;
+    if (a === 169 && b === 254) return true;
+    if (a === 172 && b >= 16 && b <= 31) return true;
+    if (a === 192 && b === 168) return true;
+    if (a === 100 && b >= 64 && b <= 127) return true;
+    return false;
+  }
+  const lc = ip.toLowerCase();
+  if (lc === "::1" || lc === "::") return true;
+  if (lc.startsWith("::ffff:")) return isPrivateAddress(lc.slice(7));
+  if (lc.startsWith("fe80") || lc.startsWith("fc") || lc.startsWith("fd")) return true;
+  return false;
+}
+var extFromMime = (mime) => {
+  const sub = (mime.split("/")[1] || "").toLowerCase();
+  if (sub === "jpeg") return "jpg";
+  if (sub === "svg+xml") return "svg";
+  return sub.replace(/[^a-z0-9]/g, "").slice(0, 5) || "bin";
+};
+async function assertPublicUrl(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    throw new Error(`not a valid URL: ${raw}`);
+  }
+  if (u.protocol !== "http:" && u.protocol !== "https:") throw new Error("only http(s) URLs can be fetched");
+  let addr;
+  try {
+    addr = (await ndns.lookup(u.hostname)).address;
+  } catch {
+    throw new Error(`can't resolve host ${u.hostname}`);
+  }
+  if (isPrivateAddress(addr)) throw new Error("refusing to fetch a private/internal address");
+  return u;
+}
+async function fetchRemoteFile(fileUrl, fileNameHint, maxBytes) {
+  let current = await assertPublicUrl(fileUrl);
+  let res = null;
+  for (let hop = 0; hop < 4; hop++) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), 2e4);
+    try {
+      res = await fetch(current, { redirect: "manual", signal: ac.signal, headers: { "user-agent": "jefrichat-mcp" } });
+    } finally {
+      clearTimeout(timer);
+    }
+    if (res.status >= 300 && res.status < 400) {
+      const loc = res.headers.get("location");
+      if (!loc) throw new Error(`redirect with no location (${res.status})`);
+      current = await assertPublicUrl(new URL(loc, current).toString());
+      continue;
+    }
+    break;
+  }
+  if (!res || !res.ok) throw new Error(`fetch failed (${res?.status ?? "no response"})`);
+  const clen = Number(res.headers.get("content-length") || 0);
+  if (clen && clen > maxBytes) throw new Error(`file is ${MB(clen)} MB, over the ${MB(maxBytes)} MB limit`);
+  const buf = Buffer.from(await res.arrayBuffer());
+  if (buf.length > maxBytes) throw new Error(`file is ${MB(buf.length)} MB, over the ${MB(maxBytes)} MB limit`);
+  if (buf.length === 0) throw new Error("the URL returned an empty file");
+  const mime = (res.headers.get("content-type") || "").split(";")[0].trim() || mimeOf(fileNameHint || current.pathname);
+  let name = fileNameHint || np3.basename(current.pathname) || "";
+  if (!name || name === "/" || !name.includes(".")) {
+    const base = name && name !== "/" ? name : "file";
+    name = `${base}.${extFromMime(mime)}`;
+  }
+  return { name, mime, url: `data:${mime};base64,${buf.toString("base64")}` };
+}
 async function uploadFileHttp(c, serverUrl, target, fileName, mime, bytes, caption) {
   const hub = serverUrl.replace(/\/$/, "");
   const params = new URLSearchParams({ fileName });
@@ -49648,7 +49736,7 @@ function saveWatermark() {
   }
 }
 function registerAcpTools(server, ctx) {
-  const ENABLE_E2E = process.env.ACP_ENABLE_E2E === "true";
+  const ENABLE_E2E = process.env.JEFRI_ENABLE_E2E === "true";
   const e2eServer = ENABLE_E2E ? server : { registerTool: () => void 0 };
   const withClient = async (fn) => {
     try {
@@ -49850,16 +49938,17 @@ ${fp}`);
     "jefri_send_file",
     {
       title: "Send a file, PDF, or image",
-      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`.',
+      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`. If you only have a public URL for the file (e.g. an image you generated), pass it as `fileUrl` and the connector fetches the bytes and sends the real file.',
       inputSchema: {
         to: external_exports.string().describe("recipient username"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption to send with it"),
         dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
-        fileName: external_exports.string().optional().describe("file name when using dataUrl")
+        fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from (e.g. a generated image)"),
+        fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ to, path: path2, caption, dataUrl, fileName }) => withClient(async (c) => {
+    async ({ to, path: path2, caption, dataUrl, fileUrl, fileName }) => withClient(async (c) => {
       let name, mime, url;
       if (path2) {
         if (!ctx.local) {
@@ -49873,15 +49962,18 @@ ${fp}`);
           const cmd = `curl -s -X POST ${shq(uploadUrl)} -H "Authorization: Bearer ${c.token}" -H "Content-Type: ${fmime}" --data-binary @${shq(path2)}`;
           const psCmd = `Invoke-RestMethod -Uri "${uploadUrl}" -Method Post -Headers @{ Authorization = "Bearer ${c.token}" } -ContentType "${fmime}" -InFile "${path2}"`;
           return fail(
-            `ASSISTANT: run the one command below in your shell to send this file \u2014 it reads the file locally and uploads it directly, fast, at any size. Do NOT read the file or base64 it into a tool call (that is slow and breaks on large files); just run this:
+            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
 
-\u2022 macOS / Linux:
-${cmd}
+\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the chat with @${to}:
+   ${dropLink}
 
-\u2022 Windows (PowerShell \u2014 avoids the curl/schannel TLS error):
-${psCmd}
+(If instead this is an image you GENERATED and have a public URL for, just call this tool again with \`fileUrl\` instead of \`path\` \u2014 the image sends with no drag.)
 
-(Alternatively the user can drag "${fname}" straight into the chat: ${dropLink})`
+\u2014 Advanced (only if you prefer a terminal): run one of these to upload it directly \u2014
+\u2022 macOS / Linux:
+${cmd}
+\u2022 Windows (PowerShell):
+${psCmd}`
           );
         }
         const abs = resolveLocalFile(path2);
@@ -49896,8 +49988,14 @@ ${psCmd}
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
+      } else if (fileUrl) {
+        try {
+          ({ name, mime, url } = await fetchRemoteFile(fileUrl, fileName, MAX_UPLOAD_BYTES));
+        } catch (e2) {
+          return fail(`Couldn't fetch that URL: ${e2?.message ?? e2}`);
+        }
       } else {
-        return fail("provide a local file `path` (or `dataUrl` + `fileName`)");
+        return fail("provide a local file `path`, a `dataUrl` + `fileName`, or a public `fileUrl`");
       }
       const rawBytes = Buffer.from(url.split(",")[1] ?? "", "base64");
       if (rawBytes.length > WS_SAFE_FILE_BYTES) {
@@ -50408,28 +50506,36 @@ ${cmd}`);
     "jefri_send_group_file",
     {
       title: "Send a file to a group",
-      description: "Send a file/image to a GROUP by its group id. Give a local file `path` (works on the local/stdio connector) or a `dataUrl` + `fileName`. Get the group id from jefri_groups / jefri_inbox.",
+      description: "Send a file/image to a GROUP by its group id. Give a local file `path` (works on the local/stdio connector), a `dataUrl` + `fileName`, or a public `fileUrl` to fetch (e.g. a generated image). Get the group id from jefri_groups / jefri_inbox.",
       inputSchema: {
         groupId: external_exports.string().describe("the group's id (from jefri_groups or jefri_inbox)"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption"),
         dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
-        fileName: external_exports.string().optional().describe("file name when using dataUrl")
+        fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from"),
+        fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ groupId, path: path2, caption, dataUrl, fileName }) => withClient(async (c) => {
+    async ({ groupId, path: path2, caption, dataUrl, fileUrl, fileName }) => withClient(async (c) => {
       let name, mime, url;
       if (path2) {
         if (!ctx.local) {
           const hub = ctx.serverUrl.replace(/\/$/, "");
+          const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
+          const dropLink = `${web}/?group=${encodeURIComponent(groupId)}`;
           const fname = np3.basename(path2);
           const fmime = mimeOf(fname);
           const q = `groupId=${encodeURIComponent(groupId)}&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
           const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer ${c.token}" -H "Content-Type: ${fmime}" --data-binary @${shq(path2)}`;
           return fail(
-            `ASSISTANT: run this one command in your shell to send the file to the group (it reads + uploads locally, fast, any size \u2014 do NOT base64 it into a tool call):
+            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
+
+\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the group chat:
+   ${dropLink}
+
+(If this is an image you GENERATED and have a public URL for, call this tool again with \`fileUrl\` instead of \`path\`.)
 
-${cmd}`
+\u2014 Advanced (terminal): ${cmd}`
           );
         }
         const abs = resolveLocalFile(path2);
@@ -50442,8 +50548,14 @@ ${cmd}`
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
+      } else if (fileUrl) {
+        try {
+          ({ name, mime, url } = await fetchRemoteFile(fileUrl, fileName, MAX_UPLOAD_BYTES));
+        } catch (e2) {
+          return fail(`Couldn't fetch that URL: ${e2?.message ?? e2}`);
+        }
       } else {
-        return fail("provide a local file `path` (or `dataUrl` + `fileName`)");
+        return fail("provide a local file `path`, a `dataUrl` + `fileName`, or a public `fileUrl`");
       }
       const rawBytes = Buffer.from(url.split(",")[1] ?? "", "base64");
       if (rawBytes.length > WS_SAFE_FILE_BYTES) {
@@ -50712,7 +50824,7 @@ function attachInbox(c, inbox, self, onIncoming) {
 }
 
 // src/http.ts
-var HUB = process.env.ACP_SERVER ?? "http://localhost:4000";
+var HUB = process.env.JEFRI_SERVER ?? "http://localhost:4000";
 var PORT = Number(process.env.MCP_HTTP_PORT ?? 4001);
 var log = (...a) => console.error("[jefrichat-mcp-http]", ...a);
 var sessions = /* @__PURE__ */ new Map();
@@ -50751,8 +50863,8 @@ function bearer(req) {
   return null;
 }
 var app = (0, import_express.default)();
-var mcpProduction = process.env.NODE_ENV === "production" || process.env.ACP_PRODUCTION === "true";
-var configuredCorsOrigins = (process.env.MCP_CORS_ORIGINS ?? process.env.ACP_CORS_ORIGINS ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+var mcpProduction = process.env.NODE_ENV === "production" || process.env.JEFRI_PRODUCTION === "true";
+var configuredCorsOrigins = (process.env.MCP_CORS_ORIGINS ?? process.env.JEFRI_CORS_ORIGINS ?? "").split(",").map((s) => s.trim()).filter(Boolean);
 if (mcpProduction && configuredCorsOrigins.length === 0)
   throw new Error("Production Jefri Chat MCP must set MCP_CORS_ORIGINS or ACP_CORS_ORIGINS.");
 var allowedCorsOrigins = new Set(configuredCorsOrigins);
@@ -50771,7 +50883,7 @@ app.use((req, res, next) => {
     return res.status(403).json({ error: "origin not allowed" });
   next();
 });
-var mcpSecure = process.env.ACP_COOKIE_SECURE === "true" || process.env.NODE_ENV === "production";
+var mcpSecure = process.env.JEFRI_COOKIE_SECURE === "true" || process.env.NODE_ENV === "production";
 app.use((_req, res, next) => {
   res.setHeader("X-Content-Type-Options", "nosniff");
   res.setHeader("X-Frame-Options", "DENY");
@@ -50796,16 +50908,16 @@ app.post("/mcp", async (req, res) => {
     if (!token) {
       res.status(401).json({
         jsonrpc: "2.0",
-        error: { code: -32001, message: "Missing Jefri Chat token (Authorization: Bearer acp_\u2026)" },
+        error: { code: -32001, message: "Missing Jefri Chat token (Authorization: Bearer jefri_\u2026)" },
         id: null
       });
       return;
     }
     let acp;
     try {
-      acp = await AcpClient.connect({ server: HUB, token, status: "online" });
+      acp = await JefriClient.connect({ server: HUB, token, status: "online" });
     } catch (e) {
-      if (e instanceof AcpAuthError || e?.code === "ACP_AUTH_FAILED") {
+      if (e instanceof JefriAuthError || e?.code === "ACP_AUTH_FAILED") {
         res.status(401).json({
           jsonrpc: "2.0",
           error: {
@@ -50878,7 +50990,7 @@ http.createServer(app).listen(PORT, () => {
   console.error(`
   \u{1F310} Jefri Chat remote MCP (HTTP) on http://localhost:${PORT}/mcp`);
   console.error(`     hub: ${HUB}`);
-  console.error(`     auth: Authorization: Bearer <acp_token>
+  console.error(`     auth: Authorization: Bearer <jefri_token>
 `);
 });
 /*! Bundled license information:

package/dist/index.js

@@ -10575,6 +10575,19 @@ var require_websocket_server = __commonJS({
   }
 });
 
+// src/env-compat.ts
+var snapshot = Object.entries(process.env);
+for (const [k, v] of snapshot) {
+  if (v === void 0) continue;
+  if (k.startsWith("ACP_")) {
+    const j = "JEFRI_" + k.slice(4);
+    if (process.env[j] === void 0) process.env[j] = v;
+  } else if (k.startsWith("JEFRI_")) {
+    const a = "ACP_" + k.slice(6);
+    if (process.env[a] === void 0) process.env[a] = v;
+  }
+}
+
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
 __export(external_exports, {
@@ -24827,14 +24840,14 @@ var b64 = (bytes) => Buffer.from(bytes instanceof Uint8Array ? bytes : new Uint8
 var fromB64 = (s) => new Uint8Array(Buffer.from(s, "base64"));
 var safeName = (s) => s.replace(/[^a-zA-Z0-9_.-]/g, "_");
 var canonicalJwk = (jwk) => JSON.stringify({ crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y });
-var AcpAuthError = class extends Error {
+var JefriAuthError = class extends Error {
   code = "ACP_AUTH_FAILED";
-  constructor(message = "invalid or expired ACP token") {
+  constructor(message = "invalid or expired Jefri Chat token") {
     super(message);
-    this.name = "AcpAuthError";
+    this.name = "JefriAuthError";
   }
 };
-var AcpClient = class _AcpClient {
+var JefriClient = class _JefriClient {
   ws;
   handlers = /* @__PURE__ */ new Map();
   server;
@@ -24853,7 +24866,7 @@ var AcpClient = class _AcpClient {
   }
   static async connect(opts = {}) {
     const server2 = (opts.server ?? "http://localhost:4000").replace(/\/$/, "");
-    const client = new _AcpClient(server2);
+    const client = new _JefriClient(server2);
     let token = opts.token;
     if (!token) {
       const res = await fetch(`${server2}/api/agents`, {
@@ -24889,7 +24902,7 @@ var AcpClient = class _AcpClient {
         const onReg = () => finish(resolve);
         const onErr = (ev) => finish(
           () => reject(
-            /auth/i.test(ev?.message ?? "") ? new AcpAuthError("invalid or expired ACP token \u2014 get a fresh connect command") : new Error(ev?.message ?? "hub rejected the connection")
+            /auth/i.test(ev?.message ?? "") ? new JefriAuthError("invalid or expired Jefri Chat token \u2014 get a fresh connect command") : new Error(ev?.message ?? "hub rejected the connection")
           )
         );
         const timer = setTimeout(
@@ -24994,7 +25007,8 @@ var AcpClient = class _AcpClient {
   }
   scheduleReconnect() {
     if (this.closing || this.reconnectTimer || this.authFailed) return;
-    const delay = Math.min(1e3 * 2 ** this.reconnectAttempts, 15e3);
+    const cap = Math.min(1e3 * 2 ** this.reconnectAttempts, 15e3);
+    const delay = Math.floor(cap / 2 + Math.random() * (cap / 2));
     this.reconnectAttempts++;
     this.reconnectTimer = setTimeout(() => {
       this.reconnectTimer = void 0;
@@ -25017,7 +25031,7 @@ var AcpClient = class _AcpClient {
   }
   send(ev) {
     if (!this.ws || this.ws.readyState !== this.ws.OPEN)
-      throw new Error("not connected to the ACP hub (reconnecting) \u2014 try again in a moment");
+      throw new Error("not connected to the Jefri Chat hub (reconnecting) \u2014 try again in a moment");
     this.ws.send(JSON.stringify(ev));
   }
   // --- actions -------------------------------------------------------------
@@ -25317,6 +25331,8 @@ import fs4 from "node:fs";
 import np3 from "node:path";
 import cp3 from "node:child_process";
 import os4 from "node:os";
+import nnet from "node:net";
+import ndns from "node:dns/promises";
 
 // src/notify.ts
 import cp from "node:child_process";
@@ -25525,7 +25541,7 @@ var FORCE_OWNER_ONLY = true;
 function shouldHandle(m) {
   if (!cfg.enabled) return false;
   const fromOwner = !!ownerName && m.sender === ownerName;
-  const ownerOnly = cfg.ownerOnly || FORCE_OWNER_ONLY && !!ownerName;
+  const ownerOnly = cfg.ownerOnly || FORCE_OWNER_ONLY;
   if (ownerOnly && !fromOwner) return false;
   if (m.senderIsBot && !cfg.replyToBots) return false;
   if (!m.isGroup) return true;
@@ -25713,6 +25729,78 @@ function resolveLocalFile(rawPath) {
 var MAX_UPLOAD_BYTES = 100 * 1024 * 1024;
 var MB = (n) => (n / 1024 / 1024).toFixed(1);
 var WS_SAFE_FILE_BYTES = 45 * 1024 * 1024;
+function isPrivateAddress(ip) {
+  if (nnet.isIPv4(ip)) {
+    const [a, b] = ip.split(".").map(Number);
+    if (a === 0 || a === 10 || a === 127) return true;
+    if (a === 169 && b === 254) return true;
+    if (a === 172 && b >= 16 && b <= 31) return true;
+    if (a === 192 && b === 168) return true;
+    if (a === 100 && b >= 64 && b <= 127) return true;
+    return false;
+  }
+  const lc = ip.toLowerCase();
+  if (lc === "::1" || lc === "::") return true;
+  if (lc.startsWith("::ffff:")) return isPrivateAddress(lc.slice(7));
+  if (lc.startsWith("fe80") || lc.startsWith("fc") || lc.startsWith("fd")) return true;
+  return false;
+}
+var extFromMime = (mime) => {
+  const sub = (mime.split("/")[1] || "").toLowerCase();
+  if (sub === "jpeg") return "jpg";
+  if (sub === "svg+xml") return "svg";
+  return sub.replace(/[^a-z0-9]/g, "").slice(0, 5) || "bin";
+};
+async function assertPublicUrl(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    throw new Error(`not a valid URL: ${raw}`);
+  }
+  if (u.protocol !== "http:" && u.protocol !== "https:") throw new Error("only http(s) URLs can be fetched");
+  let addr;
+  try {
+    addr = (await ndns.lookup(u.hostname)).address;
+  } catch {
+    throw new Error(`can't resolve host ${u.hostname}`);
+  }
+  if (isPrivateAddress(addr)) throw new Error("refusing to fetch a private/internal address");
+  return u;
+}
+async function fetchRemoteFile(fileUrl, fileNameHint, maxBytes) {
+  let current = await assertPublicUrl(fileUrl);
+  let res = null;
+  for (let hop = 0; hop < 4; hop++) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), 2e4);
+    try {
+      res = await fetch(current, { redirect: "manual", signal: ac.signal, headers: { "user-agent": "jefrichat-mcp" } });
+    } finally {
+      clearTimeout(timer);
+    }
+    if (res.status >= 300 && res.status < 400) {
+      const loc = res.headers.get("location");
+      if (!loc) throw new Error(`redirect with no location (${res.status})`);
+      current = await assertPublicUrl(new URL(loc, current).toString());
+      continue;
+    }
+    break;
+  }
+  if (!res || !res.ok) throw new Error(`fetch failed (${res?.status ?? "no response"})`);
+  const clen = Number(res.headers.get("content-length") || 0);
+  if (clen && clen > maxBytes) throw new Error(`file is ${MB(clen)} MB, over the ${MB(maxBytes)} MB limit`);
+  const buf = Buffer.from(await res.arrayBuffer());
+  if (buf.length > maxBytes) throw new Error(`file is ${MB(buf.length)} MB, over the ${MB(maxBytes)} MB limit`);
+  if (buf.length === 0) throw new Error("the URL returned an empty file");
+  const mime = (res.headers.get("content-type") || "").split(";")[0].trim() || mimeOf(fileNameHint || current.pathname);
+  let name = fileNameHint || np3.basename(current.pathname) || "";
+  if (!name || name === "/" || !name.includes(".")) {
+    const base = name && name !== "/" ? name : "file";
+    name = `${base}.${extFromMime(mime)}`;
+  }
+  return { name, mime, url: `data:${mime};base64,${buf.toString("base64")}` };
+}
 async function uploadFileHttp(c, serverUrl, target, fileName, mime, bytes, caption) {
   const hub = serverUrl.replace(/\/$/, "");
   const params = new URLSearchParams({ fileName });
@@ -25763,7 +25851,7 @@ function saveWatermark() {
   }
 }
 function registerAcpTools(server2, ctx) {
-  const ENABLE_E2E = process.env.ACP_ENABLE_E2E === "true";
+  const ENABLE_E2E = process.env.JEFRI_ENABLE_E2E === "true";
   const e2eServer = ENABLE_E2E ? server2 : { registerTool: () => void 0 };
   const withClient = async (fn) => {
     try {
@@ -25965,16 +26053,17 @@ ${fp}`);
     "jefri_send_file",
     {
       title: "Send a file, PDF, or image",
-      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`.',
+      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`. If you only have a public URL for the file (e.g. an image you generated), pass it as `fileUrl` and the connector fetches the bytes and sends the real file.',
       inputSchema: {
         to: external_exports.string().describe("recipient username"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption to send with it"),
         dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
-        fileName: external_exports.string().optional().describe("file name when using dataUrl")
+        fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from (e.g. a generated image)"),
+        fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ to, path: path3, caption, dataUrl, fileName }) => withClient(async (c) => {
+    async ({ to, path: path3, caption, dataUrl, fileUrl, fileName }) => withClient(async (c) => {
       let name, mime, url;
       if (path3) {
         if (!ctx.local) {
@@ -25988,15 +26077,18 @@ ${fp}`);
           const cmd = `curl -s -X POST ${shq(uploadUrl)} -H "Authorization: Bearer ${c.token}" -H "Content-Type: ${fmime}" --data-binary @${shq(path3)}`;
           const psCmd = `Invoke-RestMethod -Uri "${uploadUrl}" -Method Post -Headers @{ Authorization = "Bearer ${c.token}" } -ContentType "${fmime}" -InFile "${path3}"`;
           return fail(
-            `ASSISTANT: run the one command below in your shell to send this file \u2014 it reads the file locally and uploads it directly, fast, at any size. Do NOT read the file or base64 it into a tool call (that is slow and breaks on large files); just run this:
+            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
 
-\u2022 macOS / Linux:
-${cmd}
+\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the chat with @${to}:
+   ${dropLink}
 
-\u2022 Windows (PowerShell \u2014 avoids the curl/schannel TLS error):
-${psCmd}
+(If instead this is an image you GENERATED and have a public URL for, just call this tool again with \`fileUrl\` instead of \`path\` \u2014 the image sends with no drag.)
 
-(Alternatively the user can drag "${fname}" straight into the chat: ${dropLink})`
+\u2014 Advanced (only if you prefer a terminal): run one of these to upload it directly \u2014
+\u2022 macOS / Linux:
+${cmd}
+\u2022 Windows (PowerShell):
+${psCmd}`
           );
         }
         const abs = resolveLocalFile(path3);
@@ -26011,8 +26103,14 @@ ${psCmd}
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
+      } else if (fileUrl) {
+        try {
+          ({ name, mime, url } = await fetchRemoteFile(fileUrl, fileName, MAX_UPLOAD_BYTES));
+        } catch (e2) {
+          return fail(`Couldn't fetch that URL: ${e2?.message ?? e2}`);
+        }
       } else {
-        return fail("provide a local file `path` (or `dataUrl` + `fileName`)");
+        return fail("provide a local file `path`, a `dataUrl` + `fileName`, or a public `fileUrl`");
       }
       const rawBytes = Buffer.from(url.split(",")[1] ?? "", "base64");
       if (rawBytes.length > WS_SAFE_FILE_BYTES) {
@@ -26523,28 +26621,36 @@ ${cmd}`);
     "jefri_send_group_file",
     {
       title: "Send a file to a group",
-      description: "Send a file/image to a GROUP by its group id. Give a local file `path` (works on the local/stdio connector) or a `dataUrl` + `fileName`. Get the group id from jefri_groups / jefri_inbox.",
+      description: "Send a file/image to a GROUP by its group id. Give a local file `path` (works on the local/stdio connector), a `dataUrl` + `fileName`, or a public `fileUrl` to fetch (e.g. a generated image). Get the group id from jefri_groups / jefri_inbox.",
       inputSchema: {
         groupId: external_exports.string().describe("the group's id (from jefri_groups or jefri_inbox)"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption"),
         dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
-        fileName: external_exports.string().optional().describe("file name when using dataUrl")
+        fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from"),
+        fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ groupId, path: path3, caption, dataUrl, fileName }) => withClient(async (c) => {
+    async ({ groupId, path: path3, caption, dataUrl, fileUrl, fileName }) => withClient(async (c) => {
       let name, mime, url;
       if (path3) {
         if (!ctx.local) {
           const hub = ctx.serverUrl.replace(/\/$/, "");
+          const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
+          const dropLink = `${web}/?group=${encodeURIComponent(groupId)}`;
           const fname = np3.basename(path3);
           const fmime = mimeOf(fname);
           const q = `groupId=${encodeURIComponent(groupId)}&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
           const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer ${c.token}" -H "Content-Type: ${fmime}" --data-binary @${shq(path3)}`;
           return fail(
-            `ASSISTANT: run this one command in your shell to send the file to the group (it reads + uploads locally, fast, any size \u2014 do NOT base64 it into a tool call):
+            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
 
-${cmd}`
+\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the group chat:
+   ${dropLink}
+
+(If this is an image you GENERATED and have a public URL for, call this tool again with \`fileUrl\` instead of \`path\`.)
+
+\u2014 Advanced (terminal): ${cmd}`
           );
         }
         const abs = resolveLocalFile(path3);
@@ -26557,8 +26663,14 @@ ${cmd}`
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
+      } else if (fileUrl) {
+        try {
+          ({ name, mime, url } = await fetchRemoteFile(fileUrl, fileName, MAX_UPLOAD_BYTES));
+        } catch (e2) {
+          return fail(`Couldn't fetch that URL: ${e2?.message ?? e2}`);
+        }
       } else {
-        return fail("provide a local file `path` (or `dataUrl` + `fileName`)");
+        return fail("provide a local file `path`, a `dataUrl` + `fileName`, or a public `fileUrl`");
       }
       const rawBytes = Buffer.from(url.split(",")[1] ?? "", "base64");
       if (rawBytes.length > WS_SAFE_FILE_BYTES) {
@@ -26889,8 +27001,8 @@ async function fetchWithTimeout(url, opts, ms) {
   }
 }
 async function runDoctor() {
-  const SERVER2 = process.env.ACP_SERVER ?? "http://localhost:4000";
-  const TOKEN2 = process.env.ACP_TOKEN ?? "";
+  const SERVER2 = process.env.JEFRI_SERVER ?? "http://localhost:4000";
+  const TOKEN2 = process.env.JEFRI_TOKEN ?? "";
   console.log(`
 ${C.b}\u{1FA7A} Jefri Chat connector \u2014 setup check${C.x}
 `);
@@ -26900,9 +27012,9 @@ ${C.b}\u{1FA7A} Jefri Chat connector \u2014 setup check${C.x}
   pass(`Connector jefrichat-mcp v${connectorVersion()}`, "npm i -g jefrichat-mcp@latest to update");
   pass(`Hub URL ${SERVER2}`);
   if (!TOKEN2)
-    fail2("No ACP_TOKEN set", "Get your token from jefrichat.com \u2192 Connect, then re-add the connector");
-  else if (!TOKEN2.startsWith("acp_"))
-    warn(`Token doesn't look right (${mask(TOKEN2)})`, "Tokens start with acp_ \u2014 check you copied the whole thing");
+    fail2("No JEFRI_TOKEN set", "Get your token from jefrichat.com \u2192 Connect, then re-add the connector");
+  else if (!TOKEN2.startsWith("jefri_") && !TOKEN2.startsWith("acp_"))
+    warn(`Token doesn't look right (${mask(TOKEN2)})`, "Tokens start with jefri_ \u2014 check you copied the whole thing");
   else pass(`Token present (${mask(TOKEN2)})`);
   if (TOKEN2) {
     try {
@@ -26955,20 +27067,25 @@ ${C.b}\u{1FA7A} Jefri Chat connector \u2014 setup check${C.x}
 }
 
 // src/index.ts
-var SERVER = process.env.ACP_SERVER ?? "http://localhost:4000";
-var TOKEN = process.env.ACP_TOKEN;
-var USERNAME = process.env.ACP_AS ?? "claude_agent";
-var NAME = process.env.ACP_NAME ?? USERNAME;
-var TAGS = (process.env.ACP_TAGS ?? "").split(",").map((s) => s.trim()).filter(Boolean);
-var CAPS = (process.env.ACP_CAPABILITIES ?? "coding").split(",").map((s) => s.trim()).filter(Boolean);
+var SERVER = process.env.JEFRI_SERVER ?? "http://localhost:4000";
+var TOKEN = process.env.JEFRI_TOKEN;
+var USERNAME = process.env.JEFRI_AS ?? "claude_agent";
+var NAME = process.env.JEFRI_NAME ?? USERNAME;
+var TAGS = (process.env.JEFRI_TAGS ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+var CAPS = (process.env.JEFRI_CAPABILITIES ?? "coding").split(",").map((s) => s.trim()).filter(Boolean);
 var log = (...a) => console.error("[jefrichat-mcp]", ...a);
-var TOKEN_CACHE = path2.join(os5.homedir(), ".acp", "tokens.json");
+var TOKEN_CACHE = path2.join(os5.homedir(), ".jefri", "tokens.json");
+var LEGACY_TOKEN_CACHE = path2.join(os5.homedir(), ".acp", "tokens.json");
 var cacheKey = `${SERVER}::${USERNAME}`;
 function readTokenCache() {
   try {
     return JSON.parse(fs6.readFileSync(TOKEN_CACHE, "utf8"));
   } catch {
-    return {};
+    try {
+      return JSON.parse(fs6.readFileSync(LEGACY_TOKEN_CACHE, "utf8"));
+    } catch {
+      return {};
+    }
   }
 }
 function cacheToken(tok) {
@@ -26983,21 +27100,21 @@ function ensureClient() {
   if (!clientPromise) {
     clientPromise = (async () => {
       const known = TOKEN ?? readTokenCache()[cacheKey];
-      const provision = () => AcpClient.connect({
+      const provision = () => JefriClient.connect({
         server: SERVER,
         username: USERNAME,
         name: NAME,
         tags: TAGS,
         capabilities: CAPS,
         status: "online",
-        ownerToken: process.env.ACP_OWNER_TOKEN
+        ownerToken: process.env.JEFRI_OWNER_TOKEN
         // owned by you → shows in your observability
       });
       let c;
       if (known) {
-        c = await AcpClient.connect({ server: SERVER, token: known, status: "online" });
+        c = await JefriClient.connect({ server: SERVER, token: known, status: "online" });
         if (!c.identity) {
-          if (TOKEN) throw new Error("ACP_TOKEN was rejected by the server");
+          if (TOKEN) throw new Error("JEFRI_TOKEN was rejected by the server");
           log("cached token rejected, re-provisioning by username");
           c = await provision();
           if (c.identity) cacheToken(c.token);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jefrichat-mcp",
-  "version": "0.18.0",
+  "version": "0.20.0",
   "description": "Jefri Chat connector — join the Jefri Chat network (WhatsApp for AI agents) from any MCP client (Claude, Codex, Cursor, …).",
   "type": "module",
   "bin": {
@@ -14,12 +14,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "start": "tsx src/index.ts",
-    "http": "tsx src/http.ts",
-    "build": "node build.mjs",
-    "prepublishOnly": "node build.mjs"
-  },
   "keywords": [
     "jefrichat",
     "jefri",
@@ -31,17 +25,22 @@
   ],
   "license": "MIT",
   "devDependencies": {
-    "@acp/shared": "workspace:*",
     "@modelcontextprotocol/sdk": "^1.12.0",
     "@types/cors": "^2.8.17",
     "@types/express": "^4.17.21",
     "@types/node": "^22.10.2",
-    "acp-sdk": "workspace:*",
     "cors": "^2.8.5",
     "esbuild": "^0.28.1",
     "express": "^4.21.2",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2",
-    "zod": "^3.23.8"
+    "zod": "^3.23.8",
+    "@acp/shared": "0.1.0",
+    "jefri-sdk": "0.3.0"
+  },
+  "scripts": {
+    "start": "tsx src/index.ts",
+    "http": "tsx src/http.ts",
+    "build": "node build.mjs"
   }
-}
+}