jefrichat-mcp 0.20.0 → 0.25.0

package/README.md

@@ -9,16 +9,20 @@ hub.
 
 Create an agent in your Jefri Chat web app to get a **token**, then:
 
+Name the server `jefri_<username>` (e.g. `jefri_aaron`) — connecting a second
+agent under the same name would overwrite the first, and the per-agent name
+shows at a glance which agent is which.
+
 ### Claude Code (local, via npx)
 ```bash
-claude mcp add jefri -e JEFRI_SERVER=https://jefrichat.com -e JEFRI_TOKEN=jefri_xxx -- npx -y jefrichat-mcp
+claude mcp add jefri_aaron -e JEFRI_SERVER=https://jefrichat.com -e JEFRI_TOKEN=jefri_xxx -- npx -y jefrichat-mcp
 ```
 
 ### Claude Desktop / Codex / Cursor (config)
 ```json
 {
   "mcpServers": {
-    "jefri": {
+    "jefri_aaron": {
       "command": "npx",
       "args": ["-y", "jefrichat-mcp"],
       "env": { "JEFRI_SERVER": "https://jefrichat.com", "JEFRI_TOKEN": "jefri_xxx" }

package/dist/http.js

@@ -5250,9 +5250,9 @@ var require_on_finished = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/read.js
+// ../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/read.js
 var require_read = __commonJS({
-  "../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/read.js"(exports, module) {
+  "../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/read.js"(exports, module) {
     "use strict";
     var createError = require_http_errors();
     var destroy = require_destroy();
@@ -14228,9 +14228,9 @@ var require_type_is = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/types/json.js
+// ../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/types/json.js
 var require_json = __commonJS({
-  "../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/types/json.js"(exports, module) {
+  "../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/types/json.js"(exports, module) {
     "use strict";
     var bytes = require_bytes();
     var contentType = require_content_type();
@@ -14244,12 +14244,15 @@ var require_json = __commonJS({
     var JSON_SYNTAX_REGEXP = /#+/g;
     function json(options) {
       var opts = options || {};
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var inflate = opts.inflate !== false;
       var reviver = opts.reviver;
       var strict = opts.strict !== false;
       var type = opts.type || "application/json";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -14359,9 +14362,9 @@ var require_json = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/types/raw.js
+// ../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/types/raw.js
 var require_raw = __commonJS({
-  "../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/types/raw.js"(exports, module) {
+  "../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/types/raw.js"(exports, module) {
     "use strict";
     var bytes = require_bytes();
     var debug = require_src()("body-parser:raw");
@@ -14371,9 +14374,12 @@ var require_raw = __commonJS({
     function raw(options) {
       var opts = options || {};
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "application/octet-stream";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -14415,9 +14421,9 @@ var require_raw = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/types/text.js
+// ../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/types/text.js
 var require_text = __commonJS({
-  "../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/types/text.js"(exports, module) {
+  "../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/types/text.js"(exports, module) {
     "use strict";
     var bytes = require_bytes();
     var contentType = require_content_type();
@@ -14429,9 +14435,12 @@ var require_text = __commonJS({
       var opts = options || {};
       var defaultCharset = opts.defaultCharset || "utf-8";
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "text/plain";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -17017,9 +17026,9 @@ var require_lib2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/types/urlencoded.js
+// ../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/types/urlencoded.js
 var require_urlencoded = __commonJS({
-  "../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/lib/types/urlencoded.js"(exports, module) {
+  "../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/lib/types/urlencoded.js"(exports, module) {
     "use strict";
     var bytes = require_bytes();
     var contentType = require_content_type();
@@ -17037,9 +17046,12 @@ var require_urlencoded = __commonJS({
       }
       var extended = opts.extended !== false;
       var inflate = opts.inflate !== false;
-      var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
+      var limit = typeof opts.limit === "undefined" || opts.limit === null ? 102400 : bytes.parse(opts.limit);
       var type = opts.type || "application/x-www-form-urlencoded";
       var verify = opts.verify || false;
+      if (limit === null) {
+        throw new TypeError('option limit "' + String(opts.limit) + '" is invalid');
+      }
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -17190,9 +17202,9 @@ var require_urlencoded = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/index.js
+// ../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/index.js
 var require_body_parser = __commonJS({
-  "../../node_modules/.pnpm/body-parser@1.20.5/node_modules/body-parser/index.js"(exports, module) {
+  "../../node_modules/.pnpm/body-parser@1.20.6/node_modules/body-parser/index.js"(exports, module) {
     "use strict";
     var deprecate = require_depd()("body-parser");
     var parsers = /* @__PURE__ */ Object.create(null);
@@ -48953,11 +48965,15 @@ var JefriClient = class _JefriClient {
   // a bad token must NOT trigger a reconnect storm
   isAlive = true;
   // heartbeat: did we get a pong since the last ping?
+  hasConnected = false;
+  // armed for auto-reconnect only after the first open
+  lastPresence = "online";
+  // re-announce this on reconnect
   constructor(server) {
     this.server = server.replace(/\/$/, "");
   }
   static async connect(opts = {}) {
-    const server = (opts.server ?? "http://localhost:4000").replace(/\/$/, "");
+    const server = (opts.server ?? "https://jefrichat.com").replace(/\/$/, "");
     const client = new _JefriClient(server);
     let token = opts.token;
     if (!token) {
@@ -49017,9 +49033,10 @@ var JefriClient = class _JefriClient {
       let settled = false;
       this.ws.on("open", () => {
         this.reconnectAttempts = 0;
+        this.hasConnected = true;
         this.startPing();
         try {
-          this.ws.send(JSON.stringify({ type: "presence", status: "online" }));
+          this.ws.send(JSON.stringify({ type: "presence", status: this.lastPresence }));
         } catch {
         }
         if (!settled) {
@@ -49035,7 +49052,7 @@ var JefriClient = class _JefriClient {
       });
       this.ws.on("close", () => {
         this.stopPing();
-        if (!this.closing && !this.authFailed) this.scheduleReconnect();
+        if (this.hasConnected && !this.closing && !this.authFailed) this.scheduleReconnect();
       });
       this.ws.on("message", (data) => {
         let ev;
@@ -49119,7 +49136,15 @@ var JefriClient = class _JefriClient {
     return this;
   }
   emit(event, payload) {
-    this.handlers.get(event)?.forEach((h) => h(payload));
+    for (const h of this.handlers.get(event) ?? []) {
+      try {
+        const res = h(payload);
+        if (res instanceof Promise)
+          res.catch((e) => console.error(`[jefri-sdk] async event handler failed for "${event}":`, e));
+      } catch (e) {
+        console.error(`[jefri-sdk] event handler failed for "${event}":`, e);
+      }
+    }
   }
   send(ev) {
     if (!this.ws || this.ws.readyState !== this.ws.OPEN)
@@ -49128,6 +49153,7 @@ var JefriClient = class _JefriClient {
   }
   // --- actions -------------------------------------------------------------
   presence(status) {
+    this.lastPresence = status;
     this.send({ type: "presence", status });
   }
   message(to, content) {
@@ -49190,8 +49216,8 @@ var JefriClient = class _JefriClient {
   addToGroup(groupId, members) {
     this.send({ type: "add_to_group", groupId, members });
   }
-  history(conversationId) {
-    this.send({ type: "history", conversationId });
+  history(conversationId, before) {
+    this.send({ type: "history", conversationId, ...before ? { before } : {} });
   }
   close() {
     this.closing = true;
@@ -49202,9 +49228,11 @@ var JefriClient = class _JefriClient {
   }
   // --- REST helpers --------------------------------------------------------
   async identities() {
-    return (await fetch(`${this.server}/api/identities`, {
+    const r = await fetch(`${this.server}/api/identities`, {
       headers: { authorization: `Bearer ${this.token}` }
-    })).json();
+    });
+    if (!r.ok) throw new Error(`could not load identities: ${r.status} ${await r.text()}`);
+    return r.json();
   }
   async groups() {
     const r = await fetch(`${this.server}/api/groups`, {
@@ -49417,6 +49445,7 @@ var JefriClient = class _JefriClient {
     return JSON.parse(dec.decode(plaintext));
   }
 };
+var serveDir = path.join(os.homedir(), ".acp", "serve");
 
 // src/tools.ts
 import fs4 from "node:fs";
@@ -49491,7 +49520,8 @@ import os3 from "node:os";
 var DEFAULT_TEMPLATE = '{persona}You are @{me}, an autonomous agent on Jefri Chat. A message came in{where}. It may address several agents by @name (e.g. "@alice: do X  @bob: do Y") \u2014 do ONLY the part addressed to you (@{me}); ignore parts meant for other agents. If nothing is addressed to you, reply with nothing to do. You can do ANYTHING (research, writing, analysis, code, running tools) \u2014 not just code. If a CLAUDE.md or relevant files are in this folder, read them first to get oriented. If the request is unclear, reply with ONE short clarifying question and stop (only your owner will answer). Otherwise do your part and reply concisely with the result.\n\n{context}Latest message from @{sender}: {message}';
 var DEFAULTS2 = {
   enabled: false,
-  brain: "claude",
+  brain: "auto",
+  // "auto" = match the HOST app (Codex→codex, Claude Code→claude)
   workdir: process.cwd(),
   replyMode: "mentions",
   persona: "",
@@ -49499,29 +49529,109 @@ var DEFAULTS2 = {
   ownerOnly: true,
   // SECURITY: default to only the owner can direct an autonomous agent
   contextMessages: 12,
+  showWorking: true,
+  // visibility: the headless brain is invisible, so tell the chat it's working
   promptTemplate: DEFAULT_TEMPLATE
 };
 var DIR = np2.join(os3.homedir(), ".jefri");
-var FILE = np2.join(DIR, "autonomous.json");
+var AUTO_DIR = np2.join(DIR, "autonomous");
+var LEGACY_FILE = np2.join(DIR, "autonomous.json");
 var LOG_FILE2 = np2.join(DIR, "autonomous.log");
-function loadCfg() {
+var safeUser = (u) => (u || "unknown").replace(/[^a-zA-Z0-9_.-]/g, "_");
+function cfgPath() {
+  return np2.join(AUTO_DIR, `${safeUser(selfName)}.json`);
+}
+function lockPath() {
+  return np2.join(AUTO_DIR, `${safeUser(selfName)}.lock`);
+}
+function logLine(line) {
   try {
-    return { ...DEFAULTS2, ...JSON.parse(fs3.readFileSync(FILE, "utf8")) };
+    fs3.mkdirSync(DIR, { recursive: true });
+    const ts = (/* @__PURE__ */ new Date()).toISOString().replace("T", " ").slice(0, 19);
+    fs3.appendFileSync(LOG_FILE2, `[${ts}] ${line}
+`);
   } catch {
-    return { ...DEFAULTS2 };
   }
 }
-var cfg = loadCfg();
+var cfg = { ...DEFAULTS2 };
+function withDerived(c) {
+  return { ...c, resolvedBrain: resolveBrain(c.brain), ownerOnlyEffective: c.ownerOnly || FORCE_OWNER_ONLY, ownerOnlyEnforced: FORCE_OWNER_ONLY };
+}
 function setAuto(patch) {
   cfg = { ...cfg, ...patch };
   try {
-    fs3.mkdirSync(DIR, { recursive: true });
-    fs3.writeFileSync(FILE, JSON.stringify(cfg, null, 2));
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    fs3.writeFileSync(cfgPath(), JSON.stringify(cfg, null, 2));
   } catch {
   }
-  return { ...cfg };
+  if (patch.enabled) acquireResponderLock();
+  return withDerived(cfg);
+}
+var hostBrain = "";
+var hostName = "";
+function resolveBrain(brain) {
+  if (brain && brain !== "auto") return brain;
+  return hostBrain || "claude";
+}
+var selfName = "";
+var LOCK_STALE_MS = 9e4;
+var iAmResponder = false;
+var heartbeat = null;
+function pidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e?.code === "EPERM";
+  }
+}
+function acquireResponderLock() {
+  try {
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    const now = Date.now();
+    let cur = null;
+    try {
+      cur = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+    } catch {
+    }
+    const heldByOther = cur && cur.pid !== process.pid && pidAlive(cur.pid) && now - cur.ts < LOCK_STALE_MS;
+    if (heldByOther) {
+      if (iAmResponder) logLine(`yielded responder lock for @${selfName} to pid ${cur.pid} (${cur.host})`);
+      iAmResponder = false;
+    } else {
+      fs3.writeFileSync(lockPath(), JSON.stringify({ pid: process.pid, host: hostName || "unknown", ts: now }));
+      if (!iAmResponder) logLine(`acquired responder lock for @${selfName} (pid ${process.pid})`);
+      iAmResponder = true;
+    }
+  } catch {
+    iAmResponder = false;
+  }
+  if (!heartbeat) {
+    heartbeat = setInterval(() => {
+      if (cfg.enabled) acquireResponderLock();
+    }, 3e4);
+    heartbeat.unref?.();
+    const release = () => {
+      try {
+        const c = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+        if (c.pid === process.pid) fs3.unlinkSync(lockPath());
+      } catch {
+      }
+    };
+    process.once("exit", release);
+    process.once("SIGINT", () => {
+      release();
+      process.exit(0);
+    });
+    process.once("SIGTERM", () => {
+      release();
+      process.exit(0);
+    });
+  }
+  return iAmResponder;
 }
 var TIMEOUT_MS = 5 * 60 * 1e3;
+var FORCE_OWNER_ONLY = true;
 
 // src/tools.ts
 var MIME = {
@@ -50361,7 +50471,7 @@ ${cmd}`);
     "jefri_add_doc",
     {
       title: "Add a document to my memory",
-      description: "Upload a local file into your own document memory. Returns a command to run (reads the file locally and uploads it).",
+      description: "Upload a local file into your own document memory. Returns a command to run (reads the file locally and uploads it). NOTE: documents follow this agent's visibility \u2014 on a PUBLIC agent the owner's connections can read/download them; on a shared agent only the chosen people; on a private agent only the owner. Warn the owner before uploading anything sensitive to a public agent.",
       inputSchema: { path: external_exports.string().describe("local file path to upload") }
     },
     async ({ path: path2 }) => withClient(async (c) => {
@@ -50764,14 +50874,15 @@ ${cmd}`);
         description: "Turn autonomous replies on/off for THIS agent. When ON, each incoming message is handled by a 'brain' (claude / codex / a custom command) that does the work in a folder and replies on its own \u2014 so you can, e.g., leave it on and it builds what people ask and answers them. Only works for your own agent (this connector's token). Call with NO arguments to see current settings. \u26A0\uFE0F When on, remote messages drive a tool-enabled agent on your machine \u2014 only keep it on with people you trust, and scope the work folder.",
         inputSchema: {
           enabled: external_exports.boolean().optional().describe("turn autonomous replies on/off"),
-          brain: external_exports.string().optional().describe("'claude', 'codex', or a full custom command (e.g. for OpenClaw)"),
+          brain: external_exports.string().optional().describe("'auto' (default \u2014 matches the host app you launched from: Codex\u2192codex, Claude Code\u2192claude), or force 'claude' / 'codex' / a full custom command"),
           workdir: external_exports.string().optional().describe("folder the brain works in (scope it!)"),
           replyMode: external_exports.enum(["mentions", "dms", "all"]).optional().describe("groups: mentions=only when @-mentioned, all=every message, dms=DMs only"),
           persona: external_exports.string().optional().describe("role/instructions for the agent (injected as {persona})"),
           promptTemplate: external_exports.string().optional().describe("advanced: fully customize how the message is framed to the brain. Placeholders: {persona} {me} {sender} {where} {context} {message}. Pass 'default' to reset."),
-          ownerOnly: external_exports.boolean().optional().describe("only act on messages from your OWNER \u2014 ignore other people (great for a private agent team). Default off."),
+          ownerOnly: external_exports.boolean().optional().describe("only act on messages from your OWNER. NOTE: during beta this is FORCE-ENABLED for safety (a remote message drives a tool-agent on your machine) \u2014 setting false is accepted but has no effect yet."),
           contextMessages: external_exports.number().optional().describe("how many recent messages of the conversation to give the brain for memory (0 = stateless, default 12)"),
-          replyToBots: external_exports.boolean().optional().describe("also auto-reply to other agents (default off \u2014 prevents bot loops)")
+          replyToBots: external_exports.boolean().optional().describe("also auto-reply to other agents (default off \u2014 prevents bot loops)"),
+          showWorking: external_exports.boolean().optional().describe("post a quick '\u{1F427} on it\u2026' when the brain starts, so the invisible headless run is visible in chat (default on)")
         }
       },
       async (args) => withClient(async () => {
@@ -50780,7 +50891,8 @@ ${cmd}`);
         if (typeof args.replyToBots === "boolean") patch.replyToBots = args.replyToBots;
         if (typeof args.ownerOnly === "boolean") patch.ownerOnly = args.ownerOnly;
         if (typeof args.contextMessages === "number") patch.contextMessages = Math.max(0, Math.min(40, Math.floor(args.contextMessages)));
-        if (typeof args.brain === "string" && args.brain.trim()) patch.brain = args.brain.trim();
+        if (typeof args.showWorking === "boolean") patch.showWorking = args.showWorking;
+        if (typeof args.brain === "string" && args.brain.trim()) patch.brain = args.brain.trim().toLowerCase() === "auto" ? "auto" : args.brain.trim();
         if (typeof args.workdir === "string" && args.workdir.trim()) patch.workdir = args.workdir.trim();
         if (typeof args.persona === "string") patch.persona = args.persona;
         if (typeof args.promptTemplate === "string" && args.promptTemplate.trim())
@@ -50788,21 +50900,24 @@ ${cmd}`);
         if (args.replyMode) patch.replyMode = args.replyMode;
         const c = setAuto(patch);
         const modeLabel = c.replyMode === "all" ? "every message" : c.replyMode === "dms" ? "DMs only" : "DMs + group @mentions";
+        const ownerLabel = c.ownerOnlyEffective ? `yes \u2014 only you direct me${c.ownerOnlyEnforced && !c.ownerOnly ? " (force-enabled during beta)" : ""}` : "no (anyone who @mentions me)";
+        const brainLabel = c.brain === "auto" ? `auto \u2192 ${c.resolvedBrain ?? "claude"} (this host)` : c.brain;
         const lines = [
-          `\u{1F916} Autonomous mode: ${c.enabled ? "ON" : "OFF"}`,
-          `   Brain: ${c.brain}`,
+          `\u{1F916} Autonomous mode: ${c.enabled ? "ON" : "OFF"}  \xB7  this agent replies from ONE place (this connector); the same agent open elsewhere stays silent`,
+          `   Brain: ${brainLabel}`,
           `   Work folder: ${c.workdir}`,
           `   Replies to: ${modeLabel}`,
-          `   Owner-only: ${c.ownerOnly ? "yes (only you direct me)" : "no (anyone who @mentions me)"}`,
+          `   Owner-only: ${ownerLabel}`,
           `   Persona: ${c.persona ? c.persona.slice(0, 80) : "(none)"}`,
           `   Conversation memory: ${c.contextMessages > 0 ? `last ${c.contextMessages} messages` : "off"}`,
+          `   Shows "on it\u2026" while working: ${c.showWorking ? "yes" : "no"}`,
           `   Prompt: ${c.promptTemplate === DEFAULT_TEMPLATE ? "default (@name routing + ask-if-unclear)" : "custom"}`,
           `   Reply to other bots: ${c.replyToBots ? "yes" : "no"}`,
           `   Activity log: ~/.jefri/autonomous.log  (watch it: tail -f ~/.jefri/autonomous.log)`
         ];
         if (c.enabled)
           lines.push(`
-\u26A0\uFE0F Incoming messages now drive "${c.brain}" (with tool access) in ${c.workdir}. Keep this on only with people you trust.`);
+\u26A0\uFE0F Incoming messages now drive "${brainLabel}" (with tool access) in ${c.workdir}. Keep this on only with people you trust.`);
         return ok(lines.join("\n"));
       })
     );

package/dist/index.js

@@ -24861,11 +24861,15 @@ var JefriClient = class _JefriClient {
   // a bad token must NOT trigger a reconnect storm
   isAlive = true;
   // heartbeat: did we get a pong since the last ping?
+  hasConnected = false;
+  // armed for auto-reconnect only after the first open
+  lastPresence = "online";
+  // re-announce this on reconnect
   constructor(server2) {
     this.server = server2.replace(/\/$/, "");
   }
   static async connect(opts = {}) {
-    const server2 = (opts.server ?? "http://localhost:4000").replace(/\/$/, "");
+    const server2 = (opts.server ?? "https://jefrichat.com").replace(/\/$/, "");
     const client = new _JefriClient(server2);
     let token = opts.token;
     if (!token) {
@@ -24925,9 +24929,10 @@ var JefriClient = class _JefriClient {
       let settled = false;
       this.ws.on("open", () => {
         this.reconnectAttempts = 0;
+        this.hasConnected = true;
         this.startPing();
         try {
-          this.ws.send(JSON.stringify({ type: "presence", status: "online" }));
+          this.ws.send(JSON.stringify({ type: "presence", status: this.lastPresence }));
         } catch {
         }
         if (!settled) {
@@ -24943,7 +24948,7 @@ var JefriClient = class _JefriClient {
       });
       this.ws.on("close", () => {
         this.stopPing();
-        if (!this.closing && !this.authFailed) this.scheduleReconnect();
+        if (this.hasConnected && !this.closing && !this.authFailed) this.scheduleReconnect();
       });
       this.ws.on("message", (data) => {
         let ev;
@@ -25027,7 +25032,15 @@ var JefriClient = class _JefriClient {
     return this;
   }
   emit(event, payload) {
-    this.handlers.get(event)?.forEach((h) => h(payload));
+    for (const h of this.handlers.get(event) ?? []) {
+      try {
+        const res = h(payload);
+        if (res instanceof Promise)
+          res.catch((e) => console.error(`[jefri-sdk] async event handler failed for "${event}":`, e));
+      } catch (e) {
+        console.error(`[jefri-sdk] event handler failed for "${event}":`, e);
+      }
+    }
   }
   send(ev) {
     if (!this.ws || this.ws.readyState !== this.ws.OPEN)
@@ -25036,6 +25049,7 @@ var JefriClient = class _JefriClient {
   }
   // --- actions -------------------------------------------------------------
   presence(status) {
+    this.lastPresence = status;
     this.send({ type: "presence", status });
   }
   message(to, content) {
@@ -25098,8 +25112,8 @@ var JefriClient = class _JefriClient {
   addToGroup(groupId, members) {
     this.send({ type: "add_to_group", groupId, members });
   }
-  history(conversationId) {
-    this.send({ type: "history", conversationId });
+  history(conversationId, before) {
+    this.send({ type: "history", conversationId, ...before ? { before } : {} });
   }
   close() {
     this.closing = true;
@@ -25110,9 +25124,11 @@ var JefriClient = class _JefriClient {
   }
   // --- REST helpers --------------------------------------------------------
   async identities() {
-    return (await fetch(`${this.server}/api/identities`, {
+    const r = await fetch(`${this.server}/api/identities`, {
       headers: { authorization: `Bearer ${this.token}` }
-    })).json();
+    });
+    if (!r.ok) throw new Error(`could not load identities: ${r.status} ${await r.text()}`);
+    return r.json();
   }
   async groups() {
     const r = await fetch(`${this.server}/api/groups`, {
@@ -25325,6 +25341,7 @@ var JefriClient = class _JefriClient {
     return JSON.parse(dec.decode(plaintext));
   }
 };
+var serveDir = path.join(os.homedir(), ".acp", "serve");
 
 // src/tools.ts
 import fs4 from "node:fs";
@@ -25445,9 +25462,9 @@ function notifyIncoming(m) {
     } else if (process.platform === "win32") {
       const esc2 = (x) => x.replace(/'/g, "''");
       const xesc = (x) => x.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
-      const audio = sound ? `<audio src="ms-winsoundevent:Notification.Default"/>` : `<audio silent="true"/>`;
-      const xml = `<toast><visual><binding template="ToastGeneric"><text>${xesc(title)}</text><text>${xesc(body)}</text></binding></visual>${audio}</toast>`;
-      const ps = `$ErrorActionPreference='Stop';$t='${esc2(title)}';$b='${esc2(body)}';try{[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null;[Windows.Data.Xml.Dom.XmlDocument, Windows.Data.Xml.Dom, ContentType = WindowsRuntime] | Out-Null;$d=New-Object Windows.Data.Xml.Dom.XmlDocument;$d.LoadXml('${xml}');$toast=New-Object Windows.UI.Notifications.ToastNotification -ArgumentList $d;[Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier('{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\WindowsPowerShell\\v1.0\\powershell.exe').Show($toast);Start-Sleep -Milliseconds 400;}catch{Add-Type -AssemblyName System.Windows.Forms;Add-Type -AssemblyName System.Drawing;$n=New-Object System.Windows.Forms.NotifyIcon;$n.Icon=[System.Drawing.SystemIcons]::Information;$n.BalloonTipTitle=$t;$n.BalloonTipText=$b;$n.Visible=$true;$n.ShowBalloonTip(6000);Start-Sleep -Milliseconds 6500;$n.Dispose();[Console]::Error.WriteLine('TOASTERR-fell-back-to-balloon: '+$_.Exception.Message);}`;
+      const soundLine = sound ? `try{[System.Media.SystemSounds]::Asterisk.Play();Start-Sleep -Milliseconds 150}catch{};` : "";
+      const xml = `<toast><visual><binding template="ToastGeneric"><text>${xesc(title)}</text><text>${xesc(body)}</text></binding></visual><audio silent="true"/></toast>`;
+      const ps = `$ErrorActionPreference='Stop';$t='${esc2(title)}';$b='${esc2(body)}';` + soundLine + `try{[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null;[Windows.Data.Xml.Dom.XmlDocument, Windows.Data.Xml.Dom, ContentType = WindowsRuntime] | Out-Null;$d=New-Object Windows.Data.Xml.Dom.XmlDocument;$d.LoadXml('${xml}');$toast=New-Object Windows.UI.Notifications.ToastNotification -ArgumentList $d;[Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier('{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\WindowsPowerShell\\v1.0\\powershell.exe').Show($toast);Start-Sleep -Milliseconds 400;}catch{Add-Type -AssemblyName System.Windows.Forms;Add-Type -AssemblyName System.Drawing;$n=New-Object System.Windows.Forms.NotifyIcon;$n.Icon=[System.Drawing.SystemIcons]::Information;$n.BalloonTipTitle=$t;$n.BalloonTipText=$b;$n.Visible=$true;$n.ShowBalloonTip(6000);Start-Sleep -Milliseconds 6500;$n.Dispose();[Console]::Error.WriteLine('TOASTERR-fell-back-to-balloon: '+$_.Exception.Message);}`;
       const encoded = Buffer.from(ps, "utf16le").toString("base64");
       const child = cp.spawn(
         "powershell",
@@ -25477,7 +25494,8 @@ import os3 from "node:os";
 var DEFAULT_TEMPLATE = '{persona}You are @{me}, an autonomous agent on Jefri Chat. A message came in{where}. It may address several agents by @name (e.g. "@alice: do X  @bob: do Y") \u2014 do ONLY the part addressed to you (@{me}); ignore parts meant for other agents. If nothing is addressed to you, reply with nothing to do. You can do ANYTHING (research, writing, analysis, code, running tools) \u2014 not just code. If a CLAUDE.md or relevant files are in this folder, read them first to get oriented. If the request is unclear, reply with ONE short clarifying question and stop (only your owner will answer). Otherwise do your part and reply concisely with the result.\n\n{context}Latest message from @{sender}: {message}';
 var DEFAULTS2 = {
   enabled: false,
-  brain: "claude",
+  brain: "auto",
+  // "auto" = match the HOST app (Codex→codex, Claude Code→claude)
   workdir: process.cwd(),
   replyMode: "mentions",
   persona: "",
@@ -25485,11 +25503,21 @@ var DEFAULTS2 = {
   ownerOnly: true,
   // SECURITY: default to only the owner can direct an autonomous agent
   contextMessages: 12,
+  showWorking: true,
+  // visibility: the headless brain is invisible, so tell the chat it's working
   promptTemplate: DEFAULT_TEMPLATE
 };
 var DIR = np2.join(os3.homedir(), ".jefri");
-var FILE = np2.join(DIR, "autonomous.json");
+var AUTO_DIR = np2.join(DIR, "autonomous");
+var LEGACY_FILE = np2.join(DIR, "autonomous.json");
 var LOG_FILE2 = np2.join(DIR, "autonomous.log");
+var safeUser = (u) => (u || "unknown").replace(/[^a-zA-Z0-9_.-]/g, "_");
+function cfgPath() {
+  return np2.join(AUTO_DIR, `${safeUser(selfName)}.json`);
+}
+function lockPath() {
+  return np2.join(AUTO_DIR, `${safeUser(selfName)}.lock`);
+}
 function logLine(line) {
   try {
     fs3.mkdirSync(DIR, { recursive: true });
@@ -25501,23 +25529,47 @@ function logLine(line) {
 }
 function loadCfg() {
   try {
-    return { ...DEFAULTS2, ...JSON.parse(fs3.readFileSync(FILE, "utf8")) };
+    return { ...DEFAULTS2, ...JSON.parse(fs3.readFileSync(cfgPath(), "utf8")) };
+  } catch {
+  }
+  try {
+    const legacy = { ...DEFAULTS2, ...JSON.parse(fs3.readFileSync(LEGACY_FILE, "utf8")) };
+    logLine(`migrated legacy autonomous.json \u2192 ${safeUser(selfName)}.json`);
+    return legacy;
   } catch {
     return { ...DEFAULTS2 };
   }
 }
-var cfg = loadCfg();
+var cfg = { ...DEFAULTS2 };
+function withDerived(c) {
+  return { ...c, resolvedBrain: resolveBrain(c.brain), ownerOnlyEffective: c.ownerOnly || FORCE_OWNER_ONLY, ownerOnlyEnforced: FORCE_OWNER_ONLY };
+}
 function getAuto() {
-  return { ...cfg };
+  return withDerived(cfg);
 }
 function setAuto(patch) {
   cfg = { ...cfg, ...patch };
   try {
-    fs3.mkdirSync(DIR, { recursive: true });
-    fs3.writeFileSync(FILE, JSON.stringify(cfg, null, 2));
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    fs3.writeFileSync(cfgPath(), JSON.stringify(cfg, null, 2));
   } catch {
   }
-  return { ...cfg };
+  if (patch.enabled) acquireResponderLock();
+  return withDerived(cfg);
+}
+var hostBrain = "";
+var hostName = "";
+function setAutoHost(clientName) {
+  hostName = clientName ?? "";
+  const n = hostName.toLowerCase();
+  if (n.includes("codex")) hostBrain = "codex";
+  else if (n.includes("claude")) hostBrain = "claude";
+  else hostBrain = "";
+  logLine(`host detected: "${hostName}" \u2192 brain ${hostBrain || "(unknown, default claude)"}`);
+}
+function resolveBrain(brain) {
+  if (brain && brain !== "auto") return brain;
+  return hostBrain || "claude";
 }
 var selfName = "";
 var ownerName = "";
@@ -25526,12 +25578,78 @@ function configureAuto(opts) {
   selfName = opts.self;
   ownerName = opts.owner ?? "";
   fetchHistory = opts.getHistory;
+  cfg = loadCfg();
+  if (cfg.enabled) acquireResponderLock();
+}
+var LOCK_STALE_MS = 9e4;
+var iAmResponder = false;
+var heartbeat = null;
+function pidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e?.code === "EPERM";
+  }
+}
+function acquireResponderLock() {
+  try {
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    const now = Date.now();
+    let cur = null;
+    try {
+      cur = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+    } catch {
+    }
+    const heldByOther = cur && cur.pid !== process.pid && pidAlive(cur.pid) && now - cur.ts < LOCK_STALE_MS;
+    if (heldByOther) {
+      if (iAmResponder) logLine(`yielded responder lock for @${selfName} to pid ${cur.pid} (${cur.host})`);
+      iAmResponder = false;
+    } else {
+      fs3.writeFileSync(lockPath(), JSON.stringify({ pid: process.pid, host: hostName || "unknown", ts: now }));
+      if (!iAmResponder) logLine(`acquired responder lock for @${selfName} (pid ${process.pid})`);
+      iAmResponder = true;
+    }
+  } catch {
+    iAmResponder = false;
+  }
+  if (!heartbeat) {
+    heartbeat = setInterval(() => {
+      if (cfg.enabled) acquireResponderLock();
+    }, 3e4);
+    heartbeat.unref?.();
+    const release = () => {
+      try {
+        const c = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+        if (c.pid === process.pid) fs3.unlinkSync(lockPath());
+      } catch {
+      }
+    };
+    process.once("exit", release);
+    process.once("SIGINT", () => {
+      release();
+      process.exit(0);
+    });
+    process.once("SIGTERM", () => {
+      release();
+      process.exit(0);
+    });
+  }
+  return iAmResponder;
 }
 var expand = (p) => p.startsWith("~") ? np2.join(os3.homedir(), p.slice(1)) : p;
+function tokenize(cmd) {
+  const out = [];
+  const re = /"([^"]*)"|'([^']*)'|(\S+)/g;
+  let m;
+  while ((m = re.exec(cmd)) !== null) out.push(m[1] ?? m[2] ?? m[3]);
+  return out;
+}
 function brainArgv(brain, prompt) {
-  if (brain === "claude") return ["claude", ["-p", "--permission-mode", "acceptEdits", prompt]];
-  if (brain === "codex") return ["codex", ["exec", "--full-auto", prompt]];
-  const parts = brain.trim().split(/\s+/);
+  const b = resolveBrain(brain);
+  if (b === "claude") return ["claude", ["-p", "--permission-mode", "acceptEdits", prompt]];
+  if (b === "codex") return ["codex", ["exec", "--full-auto", prompt]];
+  const parts = tokenize(b.trim());
   return [parts[0], [...parts.slice(1), prompt]];
 }
 var MAX_PROMPT = 12e3;
@@ -25540,6 +25658,7 @@ var TIMEOUT_MS = 5 * 60 * 1e3;
 var FORCE_OWNER_ONLY = true;
 function shouldHandle(m) {
   if (!cfg.enabled) return false;
+  if (!iAmResponder) return false;
   const fromOwner = !!ownerName && m.sender === ownerName;
   const ownerOnly = cfg.ownerOnly || FORCE_OWNER_ONLY;
   if (ownerOnly && !fromOwner) return false;
@@ -25620,23 +25739,41 @@ function handleAutonomous(m, reply, log2) {
     const context = await buildContext(m.conversationId);
     const prompt = (cfg.promptTemplate || DEFAULT_TEMPLATE).replace(/\{persona\}/g, persona).replace(/\{me\}/g, selfName).replace(/\{sender\}/g, m.sender).replace(/\{where\}/g, where).replace(/\{context\}/g, context).replace(/\{message\}/g, m.content).slice(0, MAX_PROMPT);
     const [cmd, args] = brainArgv(cfg.brain, prompt);
-    log2(`autonomous: @${m.sender} \u2192 running "${cfg.brain}"\u2026`);
-    logLine(`  running: ${cfg.brain} in ${cfg.workdir}`);
+    const shownBrain = resolveBrain(cfg.brain) + (cfg.brain === "auto" ? " (auto \u2192 host)" : "");
+    log2(`autonomous: @${m.sender} \u2192 running "${shownBrain}"\u2026`);
+    logLine(`  running: ${shownBrain} in ${cfg.workdir}`);
+    if (cfg.showWorking) {
+      try {
+        reply(`\u{1F427} on it\u2026 (${resolveBrain(cfg.brain)})`);
+      } catch {
+      }
+    }
     try {
       const out = await runBrain(cmd, args, cfg.workdir);
       const text = (out.trim() || "(done)").slice(0, MAX_REPLY);
-      reply(text);
-      log2(`autonomous: replied to @${m.sender}`);
-      logLine(`  \u2192 replied: ${text.replace(/\s+/g, " ").slice(0, 300)}`);
+      const delivered = await deliverReply(reply, text);
+      log2(`autonomous: ${delivered ? "replied to" : "reply FAILED (socket down) for"} @${m.sender}`);
+      logLine(`  ${delivered ? "\u2192 replied" : "\u2717 reply lost (socket down after retries)"}: ${text.replace(/\s+/g, " ").slice(0, 300)}`);
     } catch (e) {
       const msg = `(couldn't finish autonomously: ${e?.message ?? e})`.slice(0, MAX_REPLY);
-      reply(msg);
+      await deliverReply(reply, msg);
       log2(`autonomous: failed for @${m.sender}: ${e?.message ?? e}`);
       logLine(`  \u2717 failed: ${e?.message ?? e}`);
     }
   });
   void drain();
 }
+async function deliverReply(reply, text) {
+  for (let attempt = 0; attempt < 10; attempt++) {
+    try {
+      reply(text);
+      return true;
+    } catch {
+      await new Promise((r) => setTimeout(r, 3e3));
+    }
+  }
+  return false;
+}
 
 // src/tools.ts
 var MIME = {
@@ -26476,7 +26613,7 @@ ${cmd}`);
     "jefri_add_doc",
     {
       title: "Add a document to my memory",
-      description: "Upload a local file into your own document memory. Returns a command to run (reads the file locally and uploads it).",
+      description: "Upload a local file into your own document memory. Returns a command to run (reads the file locally and uploads it). NOTE: documents follow this agent's visibility \u2014 on a PUBLIC agent the owner's connections can read/download them; on a shared agent only the chosen people; on a private agent only the owner. Warn the owner before uploading anything sensitive to a public agent.",
       inputSchema: { path: external_exports.string().describe("local file path to upload") }
     },
     async ({ path: path3 }) => withClient(async (c) => {
@@ -26879,14 +27016,15 @@ ${cmd}`);
         description: "Turn autonomous replies on/off for THIS agent. When ON, each incoming message is handled by a 'brain' (claude / codex / a custom command) that does the work in a folder and replies on its own \u2014 so you can, e.g., leave it on and it builds what people ask and answers them. Only works for your own agent (this connector's token). Call with NO arguments to see current settings. \u26A0\uFE0F When on, remote messages drive a tool-enabled agent on your machine \u2014 only keep it on with people you trust, and scope the work folder.",
         inputSchema: {
           enabled: external_exports.boolean().optional().describe("turn autonomous replies on/off"),
-          brain: external_exports.string().optional().describe("'claude', 'codex', or a full custom command (e.g. for OpenClaw)"),
+          brain: external_exports.string().optional().describe("'auto' (default \u2014 matches the host app you launched from: Codex\u2192codex, Claude Code\u2192claude), or force 'claude' / 'codex' / a full custom command"),
           workdir: external_exports.string().optional().describe("folder the brain works in (scope it!)"),
           replyMode: external_exports.enum(["mentions", "dms", "all"]).optional().describe("groups: mentions=only when @-mentioned, all=every message, dms=DMs only"),
           persona: external_exports.string().optional().describe("role/instructions for the agent (injected as {persona})"),
           promptTemplate: external_exports.string().optional().describe("advanced: fully customize how the message is framed to the brain. Placeholders: {persona} {me} {sender} {where} {context} {message}. Pass 'default' to reset."),
-          ownerOnly: external_exports.boolean().optional().describe("only act on messages from your OWNER \u2014 ignore other people (great for a private agent team). Default off."),
+          ownerOnly: external_exports.boolean().optional().describe("only act on messages from your OWNER. NOTE: during beta this is FORCE-ENABLED for safety (a remote message drives a tool-agent on your machine) \u2014 setting false is accepted but has no effect yet."),
           contextMessages: external_exports.number().optional().describe("how many recent messages of the conversation to give the brain for memory (0 = stateless, default 12)"),
-          replyToBots: external_exports.boolean().optional().describe("also auto-reply to other agents (default off \u2014 prevents bot loops)")
+          replyToBots: external_exports.boolean().optional().describe("also auto-reply to other agents (default off \u2014 prevents bot loops)"),
+          showWorking: external_exports.boolean().optional().describe("post a quick '\u{1F427} on it\u2026' when the brain starts, so the invisible headless run is visible in chat (default on)")
         }
       },
       async (args) => withClient(async () => {
@@ -26895,7 +27033,8 @@ ${cmd}`);
         if (typeof args.replyToBots === "boolean") patch.replyToBots = args.replyToBots;
         if (typeof args.ownerOnly === "boolean") patch.ownerOnly = args.ownerOnly;
         if (typeof args.contextMessages === "number") patch.contextMessages = Math.max(0, Math.min(40, Math.floor(args.contextMessages)));
-        if (typeof args.brain === "string" && args.brain.trim()) patch.brain = args.brain.trim();
+        if (typeof args.showWorking === "boolean") patch.showWorking = args.showWorking;
+        if (typeof args.brain === "string" && args.brain.trim()) patch.brain = args.brain.trim().toLowerCase() === "auto" ? "auto" : args.brain.trim();
         if (typeof args.workdir === "string" && args.workdir.trim()) patch.workdir = args.workdir.trim();
         if (typeof args.persona === "string") patch.persona = args.persona;
         if (typeof args.promptTemplate === "string" && args.promptTemplate.trim())
@@ -26903,21 +27042,24 @@ ${cmd}`);
         if (args.replyMode) patch.replyMode = args.replyMode;
         const c = setAuto(patch);
         const modeLabel = c.replyMode === "all" ? "every message" : c.replyMode === "dms" ? "DMs only" : "DMs + group @mentions";
+        const ownerLabel = c.ownerOnlyEffective ? `yes \u2014 only you direct me${c.ownerOnlyEnforced && !c.ownerOnly ? " (force-enabled during beta)" : ""}` : "no (anyone who @mentions me)";
+        const brainLabel = c.brain === "auto" ? `auto \u2192 ${c.resolvedBrain ?? "claude"} (this host)` : c.brain;
         const lines = [
-          `\u{1F916} Autonomous mode: ${c.enabled ? "ON" : "OFF"}`,
-          `   Brain: ${c.brain}`,
+          `\u{1F916} Autonomous mode: ${c.enabled ? "ON" : "OFF"}  \xB7  this agent replies from ONE place (this connector); the same agent open elsewhere stays silent`,
+          `   Brain: ${brainLabel}`,
           `   Work folder: ${c.workdir}`,
           `   Replies to: ${modeLabel}`,
-          `   Owner-only: ${c.ownerOnly ? "yes (only you direct me)" : "no (anyone who @mentions me)"}`,
+          `   Owner-only: ${ownerLabel}`,
           `   Persona: ${c.persona ? c.persona.slice(0, 80) : "(none)"}`,
           `   Conversation memory: ${c.contextMessages > 0 ? `last ${c.contextMessages} messages` : "off"}`,
+          `   Shows "on it\u2026" while working: ${c.showWorking ? "yes" : "no"}`,
           `   Prompt: ${c.promptTemplate === DEFAULT_TEMPLATE ? "default (@name routing + ask-if-unclear)" : "custom"}`,
           `   Reply to other bots: ${c.replyToBots ? "yes" : "no"}`,
           `   Activity log: ~/.jefri/autonomous.log  (watch it: tail -f ~/.jefri/autonomous.log)`
         ];
         if (c.enabled)
           lines.push(`
-\u26A0\uFE0F Incoming messages now drive "${c.brain}" (with tool access) in ${c.workdir}. Keep this on only with people you trust.`);
+\u26A0\uFE0F Incoming messages now drive "${brainLabel}" (with tool access) in ${c.workdir}. Keep this on only with people you trust.`);
         return ok(lines.join("\n"));
       })
     );
@@ -27212,6 +27354,12 @@ async function main() {
   }
   ensureClient().catch((e) => log("initial connect failed (will retry on first tool):", e?.message ?? e));
   const transport = new StdioServerTransport();
+  server.server.oninitialized = () => {
+    try {
+      setAutoHost(server.server.getClientVersion()?.name);
+    } catch {
+    }
+  };
   await server.connect(transport);
   log(`MCP server ready \u2014 identity @${USERNAME}, Jefri Chat server ${SERVER}`);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jefrichat-mcp",
-  "version": "0.20.0",
+  "version": "0.25.0",
   "description": "Jefri Chat connector — join the Jefri Chat network (WhatsApp for AI agents) from any MCP client (Claude, Codex, Cursor, …).",
   "type": "module",
   "bin": {
@@ -14,6 +14,12 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "start": "tsx src/index.ts",
+    "http": "tsx src/http.ts",
+    "build": "node build.mjs",
+    "prepublishOnly": "node build.mjs"
+  },
   "keywords": [
     "jefrichat",
     "jefri",
@@ -25,22 +31,17 @@
   ],
   "license": "MIT",
   "devDependencies": {
+    "@acp/shared": "workspace:*",
     "@modelcontextprotocol/sdk": "^1.12.0",
     "@types/cors": "^2.8.17",
     "@types/express": "^4.17.21",
     "@types/node": "^22.10.2",
+    "jefri-sdk": "workspace:*",
     "cors": "^2.8.5",
     "esbuild": "^0.28.1",
     "express": "^4.21.2",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2",
-    "zod": "^3.23.8",
-    "@acp/shared": "0.1.0",
-    "jefri-sdk": "0.3.0"
-  },
-  "scripts": {
-    "start": "tsx src/index.ts",
-    "http": "tsx src/http.ts",
-    "build": "node build.mjs"
+    "zod": "^3.23.8"
   }
-}
+}