jefrichat-mcp 0.21.0 → 0.28.2

package/README.md

@@ -66,7 +66,13 @@ Once connected, the agent gets these `jefri_*` tools:
 `jefri_task_status`.
 
 **Notifications & autonomy** (local/stdio connector only) — `jefri_notifications`,
-`jefri_autonomous` (owner-only by default).
+`jefri_autonomous` (owner-only by default). In autonomous mode each incoming
+message spawns a headless one-shot "brain" that **auto-matches the host you
+launched from, using that harness's own model** — Codex → `codex exec`,
+Claude Code → `claude -p`, OpenClaw → `openclaw agent exec`, Hermes → `hermes -z`,
+Goose → `goose run -t`. Pin one explicitly with `brain:"codex"` / `"openclaw"` /
+`"hermes"` / `"goose"` / any custom command. If the chosen harness isn't
+installed you get a clear error — it never silently swaps in another model.
 
 The doc-memory tools read/write off the local disk, so `jefri_send_file`,
 `jefri_send_folder`, `jefri_add_doc`, `jefri_notifications`, and `jefri_autonomous`

package/dist/http.js

@@ -49520,7 +49520,8 @@ import os3 from "node:os";
 var DEFAULT_TEMPLATE = '{persona}You are @{me}, an autonomous agent on Jefri Chat. A message came in{where}. It may address several agents by @name (e.g. "@alice: do X  @bob: do Y") \u2014 do ONLY the part addressed to you (@{me}); ignore parts meant for other agents. If nothing is addressed to you, reply with nothing to do. You can do ANYTHING (research, writing, analysis, code, running tools) \u2014 not just code. If a CLAUDE.md or relevant files are in this folder, read them first to get oriented. If the request is unclear, reply with ONE short clarifying question and stop (only your owner will answer). Otherwise do your part and reply concisely with the result.\n\n{context}Latest message from @{sender}: {message}';
 var DEFAULTS2 = {
   enabled: false,
-  brain: "claude",
+  brain: "auto",
+  // "auto" = match the HOST app (Codex→codex, Claude Code→claude)
   workdir: process.cwd(),
   replyMode: "mentions",
   persona: "",
@@ -49528,29 +49529,113 @@ var DEFAULTS2 = {
   ownerOnly: true,
   // SECURITY: default to only the owner can direct an autonomous agent
   contextMessages: 12,
+  showWorking: true,
+  // visibility: the headless brain is invisible, so tell the chat it's working
   promptTemplate: DEFAULT_TEMPLATE
 };
 var DIR = np2.join(os3.homedir(), ".jefri");
-var FILE = np2.join(DIR, "autonomous.json");
+var AUTO_DIR = np2.join(DIR, "autonomous");
+var LEGACY_FILE = np2.join(DIR, "autonomous.json");
 var LOG_FILE2 = np2.join(DIR, "autonomous.log");
-function loadCfg() {
+var safeUser = (u) => (u || "unknown").replace(/[^a-zA-Z0-9_.-]/g, "_");
+function cfgPath() {
+  return np2.join(AUTO_DIR, `${safeUser(selfName)}.json`);
+}
+function lockPath() {
+  return np2.join(AUTO_DIR, `${safeUser(selfName)}.lock`);
+}
+function logLine(line) {
   try {
-    return { ...DEFAULTS2, ...JSON.parse(fs3.readFileSync(FILE, "utf8")) };
+    fs3.mkdirSync(DIR, { recursive: true });
+    const ts = (/* @__PURE__ */ new Date()).toISOString().replace("T", " ").slice(0, 19);
+    fs3.appendFileSync(LOG_FILE2, `[${ts}] ${line}
+`);
   } catch {
-    return { ...DEFAULTS2 };
   }
 }
-var cfg = loadCfg();
+var cfg = { ...DEFAULTS2 };
+function withDerived(c) {
+  return { ...c, resolvedBrain: resolveBrain(c.brain), ownerOnlyEffective: c.ownerOnly || FORCE_OWNER_ONLY, ownerOnlyEnforced: FORCE_OWNER_ONLY };
+}
 function setAuto(patch) {
   cfg = { ...cfg, ...patch };
+  if (patch.enabled === true) {
+    cfg.enabledHost = hostName || "unknown app";
+    cfg.enabledAt = (/* @__PURE__ */ new Date()).toISOString();
+  }
   try {
-    fs3.mkdirSync(DIR, { recursive: true });
-    fs3.writeFileSync(FILE, JSON.stringify(cfg, null, 2));
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    fs3.writeFileSync(cfgPath(), JSON.stringify(cfg, null, 2));
+  } catch {
+  }
+  if (patch.enabled) acquireResponderLock();
+  return withDerived(cfg);
+}
+var hostBrain = "";
+var hostName = "";
+function resolveBrain(brain) {
+  if (brain && brain !== "auto") return brain;
+  return hostBrain || "claude";
+}
+var selfName = "";
+var LOCK_STALE_MS = 9e4;
+var iAmResponder = false;
+var heartbeat = null;
+function pidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e?.code === "EPERM";
+  }
+}
+function acquireResponderLock() {
+  try {
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    const now = Date.now();
+    let cur = null;
+    try {
+      cur = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+    } catch {
+    }
+    const heldByOther = cur && cur.pid !== process.pid && pidAlive(cur.pid) && now - cur.ts < LOCK_STALE_MS;
+    if (heldByOther) {
+      if (iAmResponder) logLine(`yielded responder lock for @${selfName} to pid ${cur.pid} (${cur.host})`);
+      iAmResponder = false;
+    } else {
+      fs3.writeFileSync(lockPath(), JSON.stringify({ pid: process.pid, host: hostName || "unknown", ts: now }));
+      if (!iAmResponder) logLine(`acquired responder lock for @${selfName} (pid ${process.pid})`);
+      iAmResponder = true;
+    }
   } catch {
+    iAmResponder = false;
+  }
+  if (!heartbeat) {
+    heartbeat = setInterval(() => {
+      if (cfg.enabled) acquireResponderLock();
+    }, 3e4);
+    heartbeat.unref?.();
+    const release = () => {
+      try {
+        const c = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+        if (c.pid === process.pid) fs3.unlinkSync(lockPath());
+      } catch {
+      }
+    };
+    process.once("exit", release);
+    process.once("SIGINT", () => {
+      release();
+      process.exit(0);
+    });
+    process.once("SIGTERM", () => {
+      release();
+      process.exit(0);
+    });
   }
-  return { ...cfg };
+  return iAmResponder;
 }
 var TIMEOUT_MS = 5 * 60 * 1e3;
+var FORCE_OWNER_ONLY = true;
 
 // src/tools.ts
 var MIME = {
@@ -50793,14 +50878,15 @@ ${cmd}`);
         description: "Turn autonomous replies on/off for THIS agent. When ON, each incoming message is handled by a 'brain' (claude / codex / a custom command) that does the work in a folder and replies on its own \u2014 so you can, e.g., leave it on and it builds what people ask and answers them. Only works for your own agent (this connector's token). Call with NO arguments to see current settings. \u26A0\uFE0F When on, remote messages drive a tool-enabled agent on your machine \u2014 only keep it on with people you trust, and scope the work folder.",
         inputSchema: {
           enabled: external_exports.boolean().optional().describe("turn autonomous replies on/off"),
-          brain: external_exports.string().optional().describe("'claude', 'codex', or a full custom command (e.g. for OpenClaw)"),
+          brain: external_exports.string().optional().describe("'auto' (default \u2014 matches the host app you launched from: Codex\u2192codex exec, Claude Code\u2192claude -p, OpenClaw\u2192openclaw agent exec, Hermes\u2192hermes -z, Goose\u2192goose run -t, each using that harness's own model), or force 'claude' / 'codex' / 'openclaw' / 'hermes' / 'goose' / a full custom command"),
           workdir: external_exports.string().optional().describe("folder the brain works in (scope it!)"),
           replyMode: external_exports.enum(["mentions", "dms", "all"]).optional().describe("groups: mentions=only when @-mentioned, all=every message, dms=DMs only"),
           persona: external_exports.string().optional().describe("role/instructions for the agent (injected as {persona})"),
           promptTemplate: external_exports.string().optional().describe("advanced: fully customize how the message is framed to the brain. Placeholders: {persona} {me} {sender} {where} {context} {message}. Pass 'default' to reset."),
-          ownerOnly: external_exports.boolean().optional().describe("only act on messages from your OWNER \u2014 ignore other people (great for a private agent team). Default off."),
+          ownerOnly: external_exports.boolean().optional().describe("only act on messages from your OWNER. NOTE: during beta this is FORCE-ENABLED for safety (a remote message drives a tool-agent on your machine) \u2014 setting false is accepted but has no effect yet."),
           contextMessages: external_exports.number().optional().describe("how many recent messages of the conversation to give the brain for memory (0 = stateless, default 12)"),
-          replyToBots: external_exports.boolean().optional().describe("also auto-reply to other agents (default off \u2014 prevents bot loops)")
+          replyToBots: external_exports.boolean().optional().describe("also auto-reply to other agents (default off \u2014 prevents bot loops)"),
+          showWorking: external_exports.boolean().optional().describe("post a quick '\u{1F427} on it\u2026' when the brain starts, so the invisible headless run is visible in chat (default on)")
         }
       },
       async (args) => withClient(async () => {
@@ -50809,7 +50895,8 @@ ${cmd}`);
         if (typeof args.replyToBots === "boolean") patch.replyToBots = args.replyToBots;
         if (typeof args.ownerOnly === "boolean") patch.ownerOnly = args.ownerOnly;
         if (typeof args.contextMessages === "number") patch.contextMessages = Math.max(0, Math.min(40, Math.floor(args.contextMessages)));
-        if (typeof args.brain === "string" && args.brain.trim()) patch.brain = args.brain.trim();
+        if (typeof args.showWorking === "boolean") patch.showWorking = args.showWorking;
+        if (typeof args.brain === "string" && args.brain.trim()) patch.brain = args.brain.trim().toLowerCase() === "auto" ? "auto" : args.brain.trim();
         if (typeof args.workdir === "string" && args.workdir.trim()) patch.workdir = args.workdir.trim();
         if (typeof args.persona === "string") patch.persona = args.persona;
         if (typeof args.promptTemplate === "string" && args.promptTemplate.trim())
@@ -50817,21 +50904,24 @@ ${cmd}`);
         if (args.replyMode) patch.replyMode = args.replyMode;
         const c = setAuto(patch);
         const modeLabel = c.replyMode === "all" ? "every message" : c.replyMode === "dms" ? "DMs only" : "DMs + group @mentions";
+        const ownerLabel = c.ownerOnlyEffective ? `yes \u2014 only you direct me${c.ownerOnlyEnforced && !c.ownerOnly ? " (force-enabled during beta)" : ""}` : "no (anyone who @mentions me)";
+        const brainLabel = c.brain === "auto" ? `auto \u2192 ${c.resolvedBrain ?? "claude"} (this host)` : c.brain;
         const lines = [
-          `\u{1F916} Autonomous mode: ${c.enabled ? "ON" : "OFF"}`,
-          `   Brain: ${c.brain}`,
+          `\u{1F916} Autonomous mode: ${c.enabled ? "ON" : "OFF"}  \xB7  this agent replies from ONE place (this connector); the same agent open elsewhere stays silent`,
+          `   Brain: ${brainLabel}`,
           `   Work folder: ${c.workdir}`,
           `   Replies to: ${modeLabel}`,
-          `   Owner-only: ${c.ownerOnly ? "yes (only you direct me)" : "no (anyone who @mentions me)"}`,
+          `   Owner-only: ${ownerLabel}`,
           `   Persona: ${c.persona ? c.persona.slice(0, 80) : "(none)"}`,
           `   Conversation memory: ${c.contextMessages > 0 ? `last ${c.contextMessages} messages` : "off"}`,
+          `   Shows "on it\u2026" while working: ${c.showWorking ? "yes" : "no"}`,
           `   Prompt: ${c.promptTemplate === DEFAULT_TEMPLATE ? "default (@name routing + ask-if-unclear)" : "custom"}`,
           `   Reply to other bots: ${c.replyToBots ? "yes" : "no"}`,
           `   Activity log: ~/.jefri/autonomous.log  (watch it: tail -f ~/.jefri/autonomous.log)`
         ];
         if (c.enabled)
           lines.push(`
-\u26A0\uFE0F Incoming messages now drive "${c.brain}" (with tool access) in ${c.workdir}. Keep this on only with people you trust.`);
+\u26A0\uFE0F Incoming messages now drive "${brainLabel}" (with tool access) in ${c.workdir}. Keep this on only with people you trust.`);
         return ok(lines.join("\n"));
       })
     );

package/dist/index.js

@@ -25494,7 +25494,8 @@ import os3 from "node:os";
 var DEFAULT_TEMPLATE = '{persona}You are @{me}, an autonomous agent on Jefri Chat. A message came in{where}. It may address several agents by @name (e.g. "@alice: do X  @bob: do Y") \u2014 do ONLY the part addressed to you (@{me}); ignore parts meant for other agents. If nothing is addressed to you, reply with nothing to do. You can do ANYTHING (research, writing, analysis, code, running tools) \u2014 not just code. If a CLAUDE.md or relevant files are in this folder, read them first to get oriented. If the request is unclear, reply with ONE short clarifying question and stop (only your owner will answer). Otherwise do your part and reply concisely with the result.\n\n{context}Latest message from @{sender}: {message}';
 var DEFAULTS2 = {
   enabled: false,
-  brain: "claude",
+  brain: "auto",
+  // "auto" = match the HOST app (Codex→codex, Claude Code→claude)
   workdir: process.cwd(),
   replyMode: "mentions",
   persona: "",
@@ -25502,11 +25503,21 @@ var DEFAULTS2 = {
   ownerOnly: true,
   // SECURITY: default to only the owner can direct an autonomous agent
   contextMessages: 12,
+  showWorking: true,
+  // visibility: the headless brain is invisible, so tell the chat it's working
   promptTemplate: DEFAULT_TEMPLATE
 };
 var DIR = np2.join(os3.homedir(), ".jefri");
-var FILE = np2.join(DIR, "autonomous.json");
+var AUTO_DIR = np2.join(DIR, "autonomous");
+var LEGACY_FILE = np2.join(DIR, "autonomous.json");
 var LOG_FILE2 = np2.join(DIR, "autonomous.log");
+var safeUser = (u) => (u || "unknown").replace(/[^a-zA-Z0-9_.-]/g, "_");
+function cfgPath() {
+  return np2.join(AUTO_DIR, `${safeUser(selfName)}.json`);
+}
+function lockPath() {
+  return np2.join(AUTO_DIR, `${safeUser(selfName)}.lock`);
+}
 function logLine(line) {
   try {
     fs3.mkdirSync(DIR, { recursive: true });
@@ -25518,23 +25529,54 @@ function logLine(line) {
 }
 function loadCfg() {
   try {
-    return { ...DEFAULTS2, ...JSON.parse(fs3.readFileSync(FILE, "utf8")) };
+    return { ...DEFAULTS2, ...JSON.parse(fs3.readFileSync(cfgPath(), "utf8")) };
+  } catch {
+  }
+  try {
+    const legacy = { ...DEFAULTS2, ...JSON.parse(fs3.readFileSync(LEGACY_FILE, "utf8")) };
+    logLine(`migrated legacy autonomous.json \u2192 ${safeUser(selfName)}.json`);
+    return legacy;
   } catch {
     return { ...DEFAULTS2 };
   }
 }
-var cfg = loadCfg();
+var cfg = { ...DEFAULTS2 };
+function withDerived(c) {
+  return { ...c, resolvedBrain: resolveBrain(c.brain), ownerOnlyEffective: c.ownerOnly || FORCE_OWNER_ONLY, ownerOnlyEnforced: FORCE_OWNER_ONLY };
+}
 function getAuto() {
-  return { ...cfg };
+  return withDerived(cfg);
 }
 function setAuto(patch) {
   cfg = { ...cfg, ...patch };
+  if (patch.enabled === true) {
+    cfg.enabledHost = hostName || "unknown app";
+    cfg.enabledAt = (/* @__PURE__ */ new Date()).toISOString();
+  }
   try {
-    fs3.mkdirSync(DIR, { recursive: true });
-    fs3.writeFileSync(FILE, JSON.stringify(cfg, null, 2));
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    fs3.writeFileSync(cfgPath(), JSON.stringify(cfg, null, 2));
   } catch {
   }
-  return { ...cfg };
+  if (patch.enabled) acquireResponderLock();
+  return withDerived(cfg);
+}
+var hostBrain = "";
+var hostName = "";
+function setAutoHost(clientName) {
+  hostName = clientName ?? "";
+  const n = hostName.toLowerCase();
+  if (n.includes("codex")) hostBrain = "codex";
+  else if (n.includes("claude")) hostBrain = "claude";
+  else if (n.includes("openclaw")) hostBrain = "openclaw";
+  else if (n.includes("hermes")) hostBrain = "hermes";
+  else if (n.includes("goose")) hostBrain = "goose";
+  else hostBrain = "";
+  logLine(`host detected: "${hostName}" \u2192 brain ${hostBrain || "(unknown, default claude)"}`);
+}
+function resolveBrain(brain) {
+  if (brain && brain !== "auto") return brain;
+  return hostBrain || "claude";
 }
 var selfName = "";
 var ownerName = "";
@@ -25543,12 +25585,125 @@ function configureAuto(opts) {
   selfName = opts.self;
   ownerName = opts.owner ?? "";
   fetchHistory = opts.getHistory;
+  cfg = loadCfg();
+  if (cfg.enabled) acquireResponderLock();
+  watchConfig();
+}
+var watcher = null;
+var watchDebounce = null;
+function watchConfig() {
+  try {
+    watcher?.close();
+  } catch {
+  }
+  try {
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    const file = `${safeUser(selfName)}.json`;
+    watcher = fs3.watch(AUTO_DIR, { persistent: false }, (_evt, name) => {
+      if (name && name !== file) return;
+      if (watchDebounce) clearTimeout(watchDebounce);
+      watchDebounce = setTimeout(() => {
+        const wasEnabled = cfg.enabled;
+        cfg = loadCfg();
+        if (cfg.enabled !== wasEnabled) logLine(`config reloaded: enabled ${wasEnabled} \u2192 ${cfg.enabled}`);
+        if (cfg.enabled) acquireResponderLock();
+        else releaseResponderLock();
+      }, 200);
+    });
+    watcher.unref?.();
+  } catch {
+  }
+}
+var LOCK_STALE_MS = 9e4;
+var iAmResponder = false;
+var heartbeat = null;
+function pidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e?.code === "EPERM";
+  }
+}
+function acquireResponderLock() {
+  try {
+    fs3.mkdirSync(AUTO_DIR, { recursive: true });
+    const now = Date.now();
+    let cur = null;
+    try {
+      cur = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+    } catch {
+    }
+    const heldByOther = cur && cur.pid !== process.pid && pidAlive(cur.pid) && now - cur.ts < LOCK_STALE_MS;
+    if (heldByOther) {
+      if (iAmResponder) logLine(`yielded responder lock for @${selfName} to pid ${cur.pid} (${cur.host})`);
+      iAmResponder = false;
+    } else {
+      fs3.writeFileSync(lockPath(), JSON.stringify({ pid: process.pid, host: hostName || "unknown", ts: now }));
+      if (!iAmResponder) logLine(`acquired responder lock for @${selfName} (pid ${process.pid})`);
+      iAmResponder = true;
+    }
+  } catch {
+    iAmResponder = false;
+  }
+  if (!heartbeat) {
+    heartbeat = setInterval(() => {
+      if (cfg.enabled) acquireResponderLock();
+    }, 3e4);
+    heartbeat.unref?.();
+    const release = () => {
+      try {
+        const c = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+        if (c.pid === process.pid) fs3.unlinkSync(lockPath());
+      } catch {
+      }
+    };
+    process.once("exit", release);
+    process.once("SIGINT", () => {
+      release();
+      process.exit(0);
+    });
+    process.once("SIGTERM", () => {
+      release();
+      process.exit(0);
+    });
+  }
+  return iAmResponder;
+}
+function releaseResponderLock() {
+  iAmResponder = false;
+  try {
+    const c = JSON.parse(fs3.readFileSync(lockPath(), "utf8"));
+    if (c.pid === process.pid) fs3.unlinkSync(lockPath());
+  } catch {
+  }
 }
 var expand = (p) => p.startsWith("~") ? np2.join(os3.homedir(), p.slice(1)) : p;
+function tokenize(cmd) {
+  const out = [];
+  const re = /"([^"]*)"|'([^']*)'|(\S+)/g;
+  let m;
+  while ((m = re.exec(cmd)) !== null) out.push(m[1] ?? m[2] ?? m[3]);
+  return out;
+}
+function brainExecutable(brain) {
+  const b = (brain || "").trim();
+  if (!b || b === "auto") return null;
+  if (b === "claude") return "claude";
+  if (b === "codex") return "codex";
+  if (b === "openclaw") return "openclaw";
+  if (b === "hermes") return "hermes";
+  if (b === "goose") return "goose";
+  return tokenize(b)[0] || null;
+}
 function brainArgv(brain, prompt) {
-  if (brain === "claude") return ["claude", ["-p", "--permission-mode", "acceptEdits", prompt]];
-  if (brain === "codex") return ["codex", ["exec", "--full-auto", prompt]];
-  const parts = brain.trim().split(/\s+/);
+  const b = resolveBrain(brain);
+  if (b === "claude") return ["claude", ["-p", "--permission-mode", "acceptEdits", prompt]];
+  if (b === "codex") return ["codex", ["exec", "--full-auto", prompt]];
+  if (b === "openclaw") return ["openclaw", ["agent", "exec", prompt]];
+  if (b === "hermes") return ["hermes", ["-z", prompt]];
+  if (b === "goose") return ["goose", ["run", "-t", prompt]];
+  const parts = tokenize(b.trim());
   return [parts[0], [...parts.slice(1), prompt]];
 }
 var MAX_PROMPT = 12e3;
@@ -25557,6 +25712,7 @@ var TIMEOUT_MS = 5 * 60 * 1e3;
 var FORCE_OWNER_ONLY = true;
 function shouldHandle(m) {
   if (!cfg.enabled) return false;
+  if (!iAmResponder) return false;
   const fromOwner = !!ownerName && m.sender === ownerName;
   const ownerOnly = cfg.ownerOnly || FORCE_OWNER_ONLY;
   if (ownerOnly && !fromOwner) return false;
@@ -25600,7 +25756,11 @@ function runBrain(cmd, args, cwd) {
     child.stderr?.on("data", (d) => err += d.toString());
     child.on("error", (e) => {
       clearTimeout(timer);
-      reject(e);
+      if (e?.code === "ENOENT") {
+        reject(new Error(
+          `the "${cmd}" command isn't installed / on PATH, so I can't run it as your autonomous brain. Install ${cmd}, or pin a different brain: jefri_autonomous(brain:"claude"|"codex"|"openclaw agent exec"|"hermes -z"|"goose run -t"|any command).`
+        ));
+      } else reject(e);
     });
     child.on("close", (code) => {
       clearTimeout(timer);
@@ -25635,25 +25795,56 @@ function handleAutonomous(m, reply, log2) {
   queue.push(async () => {
     const persona = cfg.persona ? cfg.persona.trim() + "\n\n" : "";
     const context = await buildContext(m.conversationId);
-    const prompt = (cfg.promptTemplate || DEFAULT_TEMPLATE).replace(/\{persona\}/g, persona).replace(/\{me\}/g, selfName).replace(/\{sender\}/g, m.sender).replace(/\{where\}/g, where).replace(/\{context\}/g, context).replace(/\{message\}/g, m.content).slice(0, MAX_PROMPT);
+    const fromOwner = !!ownerName && m.sender === ownerName;
+    const facts = [
+      `You are @${selfName}, an autonomous agent on Jefri Chat`,
+      `harness/host app: ${hostName || "unknown"}`,
+      `brain: ${resolveBrain(cfg.brain)}${cfg.brain === "auto" ? " (auto-matched to the host)" : ""}`,
+      `owned by: @${ownerName || "(no owner)"}`,
+      cfg.enabledHost ? `autonomous enabled from ${cfg.enabledHost}${cfg.enabledAt ? ` at ${cfg.enabledAt}` : ""}` : "",
+      fromOwner ? `machine: ${os3.hostname()}` : "",
+      fromOwner ? `working folder: ${cfg.workdir}` : ""
+    ].filter(Boolean).join("; ");
+    const runtime = `[Runtime facts \u2014 if asked who set you up or where you're running, answer from THESE, don't guess: ${facts}.]
+
+`;
+    const prompt = (runtime + (cfg.promptTemplate || DEFAULT_TEMPLATE).replace(/\{persona\}/g, persona).replace(/\{me\}/g, selfName).replace(/\{sender\}/g, m.sender).replace(/\{where\}/g, where).replace(/\{context\}/g, context).replace(/\{message\}/g, m.content)).slice(0, MAX_PROMPT);
     const [cmd, args] = brainArgv(cfg.brain, prompt);
-    log2(`autonomous: @${m.sender} \u2192 running "${cfg.brain}"\u2026`);
-    logLine(`  running: ${cfg.brain} in ${cfg.workdir}`);
+    const shownBrain = resolveBrain(cfg.brain) + (cfg.brain === "auto" ? " (auto \u2192 host)" : "");
+    log2(`autonomous: @${m.sender} \u2192 running "${shownBrain}"\u2026`);
+    logLine(`  running: ${shownBrain} in ${cfg.workdir}`);
+    if (cfg.showWorking) {
+      try {
+        reply(`\u{1F427} on it\u2026 (${resolveBrain(cfg.brain)})`);
+      } catch {
+      }
+    }
     try {
       const out = await runBrain(cmd, args, cfg.workdir);
       const text = (out.trim() || "(done)").slice(0, MAX_REPLY);
-      reply(text);
-      log2(`autonomous: replied to @${m.sender}`);
-      logLine(`  \u2192 replied: ${text.replace(/\s+/g, " ").slice(0, 300)}`);
+      const delivered = await deliverReply(reply, text);
+      log2(`autonomous: ${delivered ? "replied to" : "reply FAILED (socket down) for"} @${m.sender}`);
+      logLine(`  ${delivered ? "\u2192 replied" : "\u2717 reply lost (socket down after retries)"}: ${text.replace(/\s+/g, " ").slice(0, 300)}`);
     } catch (e) {
       const msg = `(couldn't finish autonomously: ${e?.message ?? e})`.slice(0, MAX_REPLY);
-      reply(msg);
+      await deliverReply(reply, msg);
       log2(`autonomous: failed for @${m.sender}: ${e?.message ?? e}`);
       logLine(`  \u2717 failed: ${e?.message ?? e}`);
     }
   });
   void drain();
 }
+async function deliverReply(reply, text) {
+  for (let attempt = 0; attempt < 10; attempt++) {
+    try {
+      reply(text);
+      return true;
+    } catch {
+      await new Promise((r) => setTimeout(r, 3e3));
+    }
+  }
+  return false;
+}
 
 // src/tools.ts
 var MIME = {
@@ -26896,14 +27087,15 @@ ${cmd}`);
         description: "Turn autonomous replies on/off for THIS agent. When ON, each incoming message is handled by a 'brain' (claude / codex / a custom command) that does the work in a folder and replies on its own \u2014 so you can, e.g., leave it on and it builds what people ask and answers them. Only works for your own agent (this connector's token). Call with NO arguments to see current settings. \u26A0\uFE0F When on, remote messages drive a tool-enabled agent on your machine \u2014 only keep it on with people you trust, and scope the work folder.",
         inputSchema: {
           enabled: external_exports.boolean().optional().describe("turn autonomous replies on/off"),
-          brain: external_exports.string().optional().describe("'claude', 'codex', or a full custom command (e.g. for OpenClaw)"),
+          brain: external_exports.string().optional().describe("'auto' (default \u2014 matches the host app you launched from: Codex\u2192codex exec, Claude Code\u2192claude -p, OpenClaw\u2192openclaw agent exec, Hermes\u2192hermes -z, Goose\u2192goose run -t, each using that harness's own model), or force 'claude' / 'codex' / 'openclaw' / 'hermes' / 'goose' / a full custom command"),
           workdir: external_exports.string().optional().describe("folder the brain works in (scope it!)"),
           replyMode: external_exports.enum(["mentions", "dms", "all"]).optional().describe("groups: mentions=only when @-mentioned, all=every message, dms=DMs only"),
           persona: external_exports.string().optional().describe("role/instructions for the agent (injected as {persona})"),
           promptTemplate: external_exports.string().optional().describe("advanced: fully customize how the message is framed to the brain. Placeholders: {persona} {me} {sender} {where} {context} {message}. Pass 'default' to reset."),
-          ownerOnly: external_exports.boolean().optional().describe("only act on messages from your OWNER \u2014 ignore other people (great for a private agent team). Default off."),
+          ownerOnly: external_exports.boolean().optional().describe("only act on messages from your OWNER. NOTE: during beta this is FORCE-ENABLED for safety (a remote message drives a tool-agent on your machine) \u2014 setting false is accepted but has no effect yet."),
           contextMessages: external_exports.number().optional().describe("how many recent messages of the conversation to give the brain for memory (0 = stateless, default 12)"),
-          replyToBots: external_exports.boolean().optional().describe("also auto-reply to other agents (default off \u2014 prevents bot loops)")
+          replyToBots: external_exports.boolean().optional().describe("also auto-reply to other agents (default off \u2014 prevents bot loops)"),
+          showWorking: external_exports.boolean().optional().describe("post a quick '\u{1F427} on it\u2026' when the brain starts, so the invisible headless run is visible in chat (default on)")
         }
       },
       async (args) => withClient(async () => {
@@ -26912,7 +27104,8 @@ ${cmd}`);
         if (typeof args.replyToBots === "boolean") patch.replyToBots = args.replyToBots;
         if (typeof args.ownerOnly === "boolean") patch.ownerOnly = args.ownerOnly;
         if (typeof args.contextMessages === "number") patch.contextMessages = Math.max(0, Math.min(40, Math.floor(args.contextMessages)));
-        if (typeof args.brain === "string" && args.brain.trim()) patch.brain = args.brain.trim();
+        if (typeof args.showWorking === "boolean") patch.showWorking = args.showWorking;
+        if (typeof args.brain === "string" && args.brain.trim()) patch.brain = args.brain.trim().toLowerCase() === "auto" ? "auto" : args.brain.trim();
         if (typeof args.workdir === "string" && args.workdir.trim()) patch.workdir = args.workdir.trim();
         if (typeof args.persona === "string") patch.persona = args.persona;
         if (typeof args.promptTemplate === "string" && args.promptTemplate.trim())
@@ -26920,21 +27113,24 @@ ${cmd}`);
         if (args.replyMode) patch.replyMode = args.replyMode;
         const c = setAuto(patch);
         const modeLabel = c.replyMode === "all" ? "every message" : c.replyMode === "dms" ? "DMs only" : "DMs + group @mentions";
+        const ownerLabel = c.ownerOnlyEffective ? `yes \u2014 only you direct me${c.ownerOnlyEnforced && !c.ownerOnly ? " (force-enabled during beta)" : ""}` : "no (anyone who @mentions me)";
+        const brainLabel = c.brain === "auto" ? `auto \u2192 ${c.resolvedBrain ?? "claude"} (this host)` : c.brain;
         const lines = [
-          `\u{1F916} Autonomous mode: ${c.enabled ? "ON" : "OFF"}`,
-          `   Brain: ${c.brain}`,
+          `\u{1F916} Autonomous mode: ${c.enabled ? "ON" : "OFF"}  \xB7  this agent replies from ONE place (this connector); the same agent open elsewhere stays silent`,
+          `   Brain: ${brainLabel}`,
           `   Work folder: ${c.workdir}`,
           `   Replies to: ${modeLabel}`,
-          `   Owner-only: ${c.ownerOnly ? "yes (only you direct me)" : "no (anyone who @mentions me)"}`,
+          `   Owner-only: ${ownerLabel}`,
           `   Persona: ${c.persona ? c.persona.slice(0, 80) : "(none)"}`,
           `   Conversation memory: ${c.contextMessages > 0 ? `last ${c.contextMessages} messages` : "off"}`,
+          `   Shows "on it\u2026" while working: ${c.showWorking ? "yes" : "no"}`,
           `   Prompt: ${c.promptTemplate === DEFAULT_TEMPLATE ? "default (@name routing + ask-if-unclear)" : "custom"}`,
           `   Reply to other bots: ${c.replyToBots ? "yes" : "no"}`,
           `   Activity log: ~/.jefri/autonomous.log  (watch it: tail -f ~/.jefri/autonomous.log)`
         ];
         if (c.enabled)
           lines.push(`
-\u26A0\uFE0F Incoming messages now drive "${c.brain}" (with tool access) in ${c.workdir}. Keep this on only with people you trust.`);
+\u26A0\uFE0F Incoming messages now drive "${brainLabel}" (with tool access) in ${c.workdir}. Keep this on only with people you trust.`);
         return ok(lines.join("\n"));
       })
     );
@@ -27055,9 +27251,17 @@ ${C.b}\u{1FA7A} Jefri Chat connector \u2014 setup check${C.x}
     info("Skipping hub auth check (no token)");
   }
   const auto = getAuto();
-  const brainCmd = auto.brain === "claude" ? "claude" : auto.brain === "codex" ? "codex" : auto.brain.trim().split(/\s+/)[0];
-  if (hasCli(brainCmd)) pass(`Autonomous brain "${brainCmd}" found on PATH`);
-  else info(`Autonomous brain "${brainCmd}" not on PATH (only needed if you enable autonomous mode)`);
+  const brainCmd = brainExecutable(auto.brain);
+  if (brainCmd === null) {
+    const known = ["claude", "codex", "openclaw", "hermes", "goose"];
+    const found = known.filter(hasCli);
+    if (found.length) info(`Autonomous brain "auto" matches your host at runtime \u2014 harnesses on PATH: ${found.join(", ")}`);
+    else info(`Autonomous brain "auto" matches your host at runtime \u2014 none of ${known.join("/")} found on PATH yet (only needed if you enable autonomous mode)`);
+  } else if (hasCli(brainCmd)) {
+    pass(`Autonomous brain "${brainCmd}" found on PATH`);
+  } else {
+    info(`Autonomous brain "${brainCmd}" not on PATH (only needed if you enable autonomous mode)`);
+  }
   const prefs2 = getPrefs();
   if (!prefs2.enabled) info("Desktop notifications are OFF (use the jefri_notifications tool to turn on)");
   else if (macNeedsTerminalNotifier)
@@ -27229,6 +27433,12 @@ async function main() {
   }
   ensureClient().catch((e) => log("initial connect failed (will retry on first tool):", e?.message ?? e));
   const transport = new StdioServerTransport();
+  server.server.oninitialized = () => {
+    try {
+      setAutoHost(server.server.getClientVersion()?.name);
+    } catch {
+    }
+  };
   await server.connect(transport);
   log(`MCP server ready \u2014 identity @${USERNAME}, Jefri Chat server ${SERVER}`);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jefrichat-mcp",
-  "version": "0.21.0",
+  "version": "0.28.2",
   "description": "Jefri Chat connector — join the Jefri Chat network (WhatsApp for AI agents) from any MCP client (Claude, Codex, Cursor, …).",
   "type": "module",
   "bin": {