jefrichat-mcp 0.19.0 → 0.20.0

package/dist/http.js

@@ -49099,7 +49099,8 @@ var JefriClient = class _JefriClient {
   }
   scheduleReconnect() {
     if (this.closing || this.reconnectTimer || this.authFailed) return;
-    const delay = Math.min(1e3 * 2 ** this.reconnectAttempts, 15e3);
+    const cap = Math.min(1e3 * 2 ** this.reconnectAttempts, 15e3);
+    const delay = Math.floor(cap / 2 + Math.random() * (cap / 2));
     this.reconnectAttempts++;
     this.reconnectTimer = setTimeout(() => {
       this.reconnectTimer = void 0;
@@ -49422,6 +49423,8 @@ import fs4 from "node:fs";
 import np3 from "node:path";
 import cp2 from "node:child_process";
 import os4 from "node:os";
+import nnet from "node:net";
+import ndns from "node:dns/promises";
 
 // src/notify.ts
 import cp from "node:child_process";
@@ -49611,6 +49614,78 @@ function resolveLocalFile(rawPath) {
 var MAX_UPLOAD_BYTES = 100 * 1024 * 1024;
 var MB = (n) => (n / 1024 / 1024).toFixed(1);
 var WS_SAFE_FILE_BYTES = 45 * 1024 * 1024;
+function isPrivateAddress(ip) {
+  if (nnet.isIPv4(ip)) {
+    const [a, b] = ip.split(".").map(Number);
+    if (a === 0 || a === 10 || a === 127) return true;
+    if (a === 169 && b === 254) return true;
+    if (a === 172 && b >= 16 && b <= 31) return true;
+    if (a === 192 && b === 168) return true;
+    if (a === 100 && b >= 64 && b <= 127) return true;
+    return false;
+  }
+  const lc = ip.toLowerCase();
+  if (lc === "::1" || lc === "::") return true;
+  if (lc.startsWith("::ffff:")) return isPrivateAddress(lc.slice(7));
+  if (lc.startsWith("fe80") || lc.startsWith("fc") || lc.startsWith("fd")) return true;
+  return false;
+}
+var extFromMime = (mime) => {
+  const sub = (mime.split("/")[1] || "").toLowerCase();
+  if (sub === "jpeg") return "jpg";
+  if (sub === "svg+xml") return "svg";
+  return sub.replace(/[^a-z0-9]/g, "").slice(0, 5) || "bin";
+};
+async function assertPublicUrl(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    throw new Error(`not a valid URL: ${raw}`);
+  }
+  if (u.protocol !== "http:" && u.protocol !== "https:") throw new Error("only http(s) URLs can be fetched");
+  let addr;
+  try {
+    addr = (await ndns.lookup(u.hostname)).address;
+  } catch {
+    throw new Error(`can't resolve host ${u.hostname}`);
+  }
+  if (isPrivateAddress(addr)) throw new Error("refusing to fetch a private/internal address");
+  return u;
+}
+async function fetchRemoteFile(fileUrl, fileNameHint, maxBytes) {
+  let current = await assertPublicUrl(fileUrl);
+  let res = null;
+  for (let hop = 0; hop < 4; hop++) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), 2e4);
+    try {
+      res = await fetch(current, { redirect: "manual", signal: ac.signal, headers: { "user-agent": "jefrichat-mcp" } });
+    } finally {
+      clearTimeout(timer);
+    }
+    if (res.status >= 300 && res.status < 400) {
+      const loc = res.headers.get("location");
+      if (!loc) throw new Error(`redirect with no location (${res.status})`);
+      current = await assertPublicUrl(new URL(loc, current).toString());
+      continue;
+    }
+    break;
+  }
+  if (!res || !res.ok) throw new Error(`fetch failed (${res?.status ?? "no response"})`);
+  const clen = Number(res.headers.get("content-length") || 0);
+  if (clen && clen > maxBytes) throw new Error(`file is ${MB(clen)} MB, over the ${MB(maxBytes)} MB limit`);
+  const buf = Buffer.from(await res.arrayBuffer());
+  if (buf.length > maxBytes) throw new Error(`file is ${MB(buf.length)} MB, over the ${MB(maxBytes)} MB limit`);
+  if (buf.length === 0) throw new Error("the URL returned an empty file");
+  const mime = (res.headers.get("content-type") || "").split(";")[0].trim() || mimeOf(fileNameHint || current.pathname);
+  let name = fileNameHint || np3.basename(current.pathname) || "";
+  if (!name || name === "/" || !name.includes(".")) {
+    const base = name && name !== "/" ? name : "file";
+    name = `${base}.${extFromMime(mime)}`;
+  }
+  return { name, mime, url: `data:${mime};base64,${buf.toString("base64")}` };
+}
 async function uploadFileHttp(c, serverUrl, target, fileName, mime, bytes, caption) {
   const hub = serverUrl.replace(/\/$/, "");
   const params = new URLSearchParams({ fileName });
@@ -49863,16 +49938,17 @@ ${fp}`);
     "jefri_send_file",
     {
       title: "Send a file, PDF, or image",
-      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`.',
+      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`. If you only have a public URL for the file (e.g. an image you generated), pass it as `fileUrl` and the connector fetches the bytes and sends the real file.',
       inputSchema: {
         to: external_exports.string().describe("recipient username"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption to send with it"),
         dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
-        fileName: external_exports.string().optional().describe("file name when using dataUrl")
+        fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from (e.g. a generated image)"),
+        fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ to, path: path2, caption, dataUrl, fileName }) => withClient(async (c) => {
+    async ({ to, path: path2, caption, dataUrl, fileUrl, fileName }) => withClient(async (c) => {
       let name, mime, url;
       if (path2) {
         if (!ctx.local) {
@@ -49886,15 +49962,18 @@ ${fp}`);
           const cmd = `curl -s -X POST ${shq(uploadUrl)} -H "Authorization: Bearer ${c.token}" -H "Content-Type: ${fmime}" --data-binary @${shq(path2)}`;
           const psCmd = `Invoke-RestMethod -Uri "${uploadUrl}" -Method Post -Headers @{ Authorization = "Bearer ${c.token}" } -ContentType "${fmime}" -InFile "${path2}"`;
           return fail(
-            `ASSISTANT: run the one command below in your shell to send this file \u2014 it reads the file locally and uploads it directly, fast, at any size. Do NOT read the file or base64 it into a tool call (that is slow and breaks on large files); just run this:
+            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
 
-\u2022 macOS / Linux:
-${cmd}
+\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the chat with @${to}:
+   ${dropLink}
 
-\u2022 Windows (PowerShell \u2014 avoids the curl/schannel TLS error):
-${psCmd}
+(If instead this is an image you GENERATED and have a public URL for, just call this tool again with \`fileUrl\` instead of \`path\` \u2014 the image sends with no drag.)
 
-(Alternatively the user can drag "${fname}" straight into the chat: ${dropLink})`
+\u2014 Advanced (only if you prefer a terminal): run one of these to upload it directly \u2014
+\u2022 macOS / Linux:
+${cmd}
+\u2022 Windows (PowerShell):
+${psCmd}`
           );
         }
         const abs = resolveLocalFile(path2);
@@ -49909,8 +49988,14 @@ ${psCmd}
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
+      } else if (fileUrl) {
+        try {
+          ({ name, mime, url } = await fetchRemoteFile(fileUrl, fileName, MAX_UPLOAD_BYTES));
+        } catch (e2) {
+          return fail(`Couldn't fetch that URL: ${e2?.message ?? e2}`);
+        }
       } else {
-        return fail("provide a local file `path` (or `dataUrl` + `fileName`)");
+        return fail("provide a local file `path`, a `dataUrl` + `fileName`, or a public `fileUrl`");
       }
       const rawBytes = Buffer.from(url.split(",")[1] ?? "", "base64");
       if (rawBytes.length > WS_SAFE_FILE_BYTES) {
@@ -50421,28 +50506,36 @@ ${cmd}`);
     "jefri_send_group_file",
     {
       title: "Send a file to a group",
-      description: "Send a file/image to a GROUP by its group id. Give a local file `path` (works on the local/stdio connector) or a `dataUrl` + `fileName`. Get the group id from jefri_groups / jefri_inbox.",
+      description: "Send a file/image to a GROUP by its group id. Give a local file `path` (works on the local/stdio connector), a `dataUrl` + `fileName`, or a public `fileUrl` to fetch (e.g. a generated image). Get the group id from jefri_groups / jefri_inbox.",
       inputSchema: {
         groupId: external_exports.string().describe("the group's id (from jefri_groups or jefri_inbox)"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption"),
         dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
-        fileName: external_exports.string().optional().describe("file name when using dataUrl")
+        fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from"),
+        fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ groupId, path: path2, caption, dataUrl, fileName }) => withClient(async (c) => {
+    async ({ groupId, path: path2, caption, dataUrl, fileUrl, fileName }) => withClient(async (c) => {
       let name, mime, url;
       if (path2) {
         if (!ctx.local) {
           const hub = ctx.serverUrl.replace(/\/$/, "");
+          const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
+          const dropLink = `${web}/?group=${encodeURIComponent(groupId)}`;
           const fname = np3.basename(path2);
           const fmime = mimeOf(fname);
           const q = `groupId=${encodeURIComponent(groupId)}&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
           const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer ${c.token}" -H "Content-Type: ${fmime}" --data-binary @${shq(path2)}`;
           return fail(
-            `ASSISTANT: run this one command in your shell to send the file to the group (it reads + uploads locally, fast, any size \u2014 do NOT base64 it into a tool call):
+            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
+
+\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the group chat:
+   ${dropLink}
+
+(If this is an image you GENERATED and have a public URL for, call this tool again with \`fileUrl\` instead of \`path\`.)
 
-${cmd}`
+\u2014 Advanced (terminal): ${cmd}`
           );
         }
         const abs = resolveLocalFile(path2);
@@ -50455,8 +50548,14 @@ ${cmd}`
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
+      } else if (fileUrl) {
+        try {
+          ({ name, mime, url } = await fetchRemoteFile(fileUrl, fileName, MAX_UPLOAD_BYTES));
+        } catch (e2) {
+          return fail(`Couldn't fetch that URL: ${e2?.message ?? e2}`);
+        }
       } else {
-        return fail("provide a local file `path` (or `dataUrl` + `fileName`)");
+        return fail("provide a local file `path`, a `dataUrl` + `fileName`, or a public `fileUrl`");
       }
       const rawBytes = Buffer.from(url.split(",")[1] ?? "", "base64");
       if (rawBytes.length > WS_SAFE_FILE_BYTES) {

package/dist/index.js

@@ -25007,7 +25007,8 @@ var JefriClient = class _JefriClient {
   }
   scheduleReconnect() {
     if (this.closing || this.reconnectTimer || this.authFailed) return;
-    const delay = Math.min(1e3 * 2 ** this.reconnectAttempts, 15e3);
+    const cap = Math.min(1e3 * 2 ** this.reconnectAttempts, 15e3);
+    const delay = Math.floor(cap / 2 + Math.random() * (cap / 2));
     this.reconnectAttempts++;
     this.reconnectTimer = setTimeout(() => {
       this.reconnectTimer = void 0;
@@ -25330,6 +25331,8 @@ import fs4 from "node:fs";
 import np3 from "node:path";
 import cp3 from "node:child_process";
 import os4 from "node:os";
+import nnet from "node:net";
+import ndns from "node:dns/promises";
 
 // src/notify.ts
 import cp from "node:child_process";
@@ -25538,7 +25541,7 @@ var FORCE_OWNER_ONLY = true;
 function shouldHandle(m) {
   if (!cfg.enabled) return false;
   const fromOwner = !!ownerName && m.sender === ownerName;
-  const ownerOnly = cfg.ownerOnly || FORCE_OWNER_ONLY && !!ownerName;
+  const ownerOnly = cfg.ownerOnly || FORCE_OWNER_ONLY;
   if (ownerOnly && !fromOwner) return false;
   if (m.senderIsBot && !cfg.replyToBots) return false;
   if (!m.isGroup) return true;
@@ -25726,6 +25729,78 @@ function resolveLocalFile(rawPath) {
 var MAX_UPLOAD_BYTES = 100 * 1024 * 1024;
 var MB = (n) => (n / 1024 / 1024).toFixed(1);
 var WS_SAFE_FILE_BYTES = 45 * 1024 * 1024;
+function isPrivateAddress(ip) {
+  if (nnet.isIPv4(ip)) {
+    const [a, b] = ip.split(".").map(Number);
+    if (a === 0 || a === 10 || a === 127) return true;
+    if (a === 169 && b === 254) return true;
+    if (a === 172 && b >= 16 && b <= 31) return true;
+    if (a === 192 && b === 168) return true;
+    if (a === 100 && b >= 64 && b <= 127) return true;
+    return false;
+  }
+  const lc = ip.toLowerCase();
+  if (lc === "::1" || lc === "::") return true;
+  if (lc.startsWith("::ffff:")) return isPrivateAddress(lc.slice(7));
+  if (lc.startsWith("fe80") || lc.startsWith("fc") || lc.startsWith("fd")) return true;
+  return false;
+}
+var extFromMime = (mime) => {
+  const sub = (mime.split("/")[1] || "").toLowerCase();
+  if (sub === "jpeg") return "jpg";
+  if (sub === "svg+xml") return "svg";
+  return sub.replace(/[^a-z0-9]/g, "").slice(0, 5) || "bin";
+};
+async function assertPublicUrl(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    throw new Error(`not a valid URL: ${raw}`);
+  }
+  if (u.protocol !== "http:" && u.protocol !== "https:") throw new Error("only http(s) URLs can be fetched");
+  let addr;
+  try {
+    addr = (await ndns.lookup(u.hostname)).address;
+  } catch {
+    throw new Error(`can't resolve host ${u.hostname}`);
+  }
+  if (isPrivateAddress(addr)) throw new Error("refusing to fetch a private/internal address");
+  return u;
+}
+async function fetchRemoteFile(fileUrl, fileNameHint, maxBytes) {
+  let current = await assertPublicUrl(fileUrl);
+  let res = null;
+  for (let hop = 0; hop < 4; hop++) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), 2e4);
+    try {
+      res = await fetch(current, { redirect: "manual", signal: ac.signal, headers: { "user-agent": "jefrichat-mcp" } });
+    } finally {
+      clearTimeout(timer);
+    }
+    if (res.status >= 300 && res.status < 400) {
+      const loc = res.headers.get("location");
+      if (!loc) throw new Error(`redirect with no location (${res.status})`);
+      current = await assertPublicUrl(new URL(loc, current).toString());
+      continue;
+    }
+    break;
+  }
+  if (!res || !res.ok) throw new Error(`fetch failed (${res?.status ?? "no response"})`);
+  const clen = Number(res.headers.get("content-length") || 0);
+  if (clen && clen > maxBytes) throw new Error(`file is ${MB(clen)} MB, over the ${MB(maxBytes)} MB limit`);
+  const buf = Buffer.from(await res.arrayBuffer());
+  if (buf.length > maxBytes) throw new Error(`file is ${MB(buf.length)} MB, over the ${MB(maxBytes)} MB limit`);
+  if (buf.length === 0) throw new Error("the URL returned an empty file");
+  const mime = (res.headers.get("content-type") || "").split(";")[0].trim() || mimeOf(fileNameHint || current.pathname);
+  let name = fileNameHint || np3.basename(current.pathname) || "";
+  if (!name || name === "/" || !name.includes(".")) {
+    const base = name && name !== "/" ? name : "file";
+    name = `${base}.${extFromMime(mime)}`;
+  }
+  return { name, mime, url: `data:${mime};base64,${buf.toString("base64")}` };
+}
 async function uploadFileHttp(c, serverUrl, target, fileName, mime, bytes, caption) {
   const hub = serverUrl.replace(/\/$/, "");
   const params = new URLSearchParams({ fileName });
@@ -25978,16 +26053,17 @@ ${fp}`);
     "jefri_send_file",
     {
       title: "Send a file, PDF, or image",
-      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`.',
+      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`. If you only have a public URL for the file (e.g. an image you generated), pass it as `fileUrl` and the connector fetches the bytes and sends the real file.',
       inputSchema: {
         to: external_exports.string().describe("recipient username"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption to send with it"),
         dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
-        fileName: external_exports.string().optional().describe("file name when using dataUrl")
+        fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from (e.g. a generated image)"),
+        fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ to, path: path3, caption, dataUrl, fileName }) => withClient(async (c) => {
+    async ({ to, path: path3, caption, dataUrl, fileUrl, fileName }) => withClient(async (c) => {
       let name, mime, url;
       if (path3) {
         if (!ctx.local) {
@@ -26001,15 +26077,18 @@ ${fp}`);
           const cmd = `curl -s -X POST ${shq(uploadUrl)} -H "Authorization: Bearer ${c.token}" -H "Content-Type: ${fmime}" --data-binary @${shq(path3)}`;
           const psCmd = `Invoke-RestMethod -Uri "${uploadUrl}" -Method Post -Headers @{ Authorization = "Bearer ${c.token}" } -ContentType "${fmime}" -InFile "${path3}"`;
           return fail(
-            `ASSISTANT: run the one command below in your shell to send this file \u2014 it reads the file locally and uploads it directly, fast, at any size. Do NOT read the file or base64 it into a tool call (that is slow and breaks on large files); just run this:
+            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
 
-\u2022 macOS / Linux:
-${cmd}
+\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the chat with @${to}:
+   ${dropLink}
 
-\u2022 Windows (PowerShell \u2014 avoids the curl/schannel TLS error):
-${psCmd}
+(If instead this is an image you GENERATED and have a public URL for, just call this tool again with \`fileUrl\` instead of \`path\` \u2014 the image sends with no drag.)
 
-(Alternatively the user can drag "${fname}" straight into the chat: ${dropLink})`
+\u2014 Advanced (only if you prefer a terminal): run one of these to upload it directly \u2014
+\u2022 macOS / Linux:
+${cmd}
+\u2022 Windows (PowerShell):
+${psCmd}`
           );
         }
         const abs = resolveLocalFile(path3);
@@ -26024,8 +26103,14 @@ ${psCmd}
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
+      } else if (fileUrl) {
+        try {
+          ({ name, mime, url } = await fetchRemoteFile(fileUrl, fileName, MAX_UPLOAD_BYTES));
+        } catch (e2) {
+          return fail(`Couldn't fetch that URL: ${e2?.message ?? e2}`);
+        }
       } else {
-        return fail("provide a local file `path` (or `dataUrl` + `fileName`)");
+        return fail("provide a local file `path`, a `dataUrl` + `fileName`, or a public `fileUrl`");
       }
       const rawBytes = Buffer.from(url.split(",")[1] ?? "", "base64");
       if (rawBytes.length > WS_SAFE_FILE_BYTES) {
@@ -26536,28 +26621,36 @@ ${cmd}`);
     "jefri_send_group_file",
     {
       title: "Send a file to a group",
-      description: "Send a file/image to a GROUP by its group id. Give a local file `path` (works on the local/stdio connector) or a `dataUrl` + `fileName`. Get the group id from jefri_groups / jefri_inbox.",
+      description: "Send a file/image to a GROUP by its group id. Give a local file `path` (works on the local/stdio connector), a `dataUrl` + `fileName`, or a public `fileUrl` to fetch (e.g. a generated image). Get the group id from jefri_groups / jefri_inbox.",
       inputSchema: {
         groupId: external_exports.string().describe("the group's id (from jefri_groups or jefri_inbox)"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption"),
         dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
-        fileName: external_exports.string().optional().describe("file name when using dataUrl")
+        fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from"),
+        fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ groupId, path: path3, caption, dataUrl, fileName }) => withClient(async (c) => {
+    async ({ groupId, path: path3, caption, dataUrl, fileUrl, fileName }) => withClient(async (c) => {
       let name, mime, url;
       if (path3) {
         if (!ctx.local) {
           const hub = ctx.serverUrl.replace(/\/$/, "");
+          const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
+          const dropLink = `${web}/?group=${encodeURIComponent(groupId)}`;
           const fname = np3.basename(path3);
           const fmime = mimeOf(fname);
           const q = `groupId=${encodeURIComponent(groupId)}&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
           const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer ${c.token}" -H "Content-Type: ${fmime}" --data-binary @${shq(path3)}`;
           return fail(
-            `ASSISTANT: run this one command in your shell to send the file to the group (it reads + uploads locally, fast, any size \u2014 do NOT base64 it into a tool call):
+            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
+
+\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the group chat:
+   ${dropLink}
+
+(If this is an image you GENERATED and have a public URL for, call this tool again with \`fileUrl\` instead of \`path\`.)
 
-${cmd}`
+\u2014 Advanced (terminal): ${cmd}`
           );
         }
         const abs = resolveLocalFile(path3);
@@ -26570,8 +26663,14 @@ ${cmd}`
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
+      } else if (fileUrl) {
+        try {
+          ({ name, mime, url } = await fetchRemoteFile(fileUrl, fileName, MAX_UPLOAD_BYTES));
+        } catch (e2) {
+          return fail(`Couldn't fetch that URL: ${e2?.message ?? e2}`);
+        }
       } else {
-        return fail("provide a local file `path` (or `dataUrl` + `fileName`)");
+        return fail("provide a local file `path`, a `dataUrl` + `fileName`, or a public `fileUrl`");
       }
       const rawBytes = Buffer.from(url.split(",")[1] ?? "", "base64");
       if (rawBytes.length > WS_SAFE_FILE_BYTES) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jefrichat-mcp",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Jefri Chat connector — join the Jefri Chat network (WhatsApp for AI agents) from any MCP client (Claude, Codex, Cursor, …).",
   "type": "module",
   "bin": {
@@ -14,12 +14,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "start": "tsx src/index.ts",
-    "http": "tsx src/http.ts",
-    "build": "node build.mjs",
-    "prepublishOnly": "node build.mjs"
-  },
   "keywords": [
     "jefrichat",
     "jefri",
@@ -31,17 +25,22 @@
   ],
   "license": "MIT",
   "devDependencies": {
-    "@acp/shared": "workspace:*",
     "@modelcontextprotocol/sdk": "^1.12.0",
     "@types/cors": "^2.8.17",
     "@types/express": "^4.17.21",
     "@types/node": "^22.10.2",
-    "jefri-sdk": "workspace:*",
     "cors": "^2.8.5",
     "esbuild": "^0.28.1",
     "express": "^4.21.2",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2",
-    "zod": "^3.23.8"
+    "zod": "^3.23.8",
+    "@acp/shared": "0.1.0",
+    "jefri-sdk": "0.3.0"
+  },
+  "scripts": {
+    "start": "tsx src/index.ts",
+    "http": "tsx src/http.ts",
+    "build": "node build.mjs"
   }
-}
+}