jefrichat-mcp 0.48.11 → 0.48.13

package/dist/http.js

@@ -62102,9 +62102,65 @@ function retryKey(extra, parts) {
   if (rid === void 0 || rid === null) return void 0;
   const h = extra?.requestInfo?.headers;
   const ua = String((typeof h?.get === "function" ? h.get("user-agent") : h?.["user-agent"]) ?? "");
-  const bucket = Math.floor(Date.now() / 6e5);
+  if (!ua) return void 0;
+  const bucket = Math.floor(Date.now() / 75e3);
   return "mcp-" + createHash2("sha256").update(JSON.stringify([bucket, ua, rid, ...parts])).digest("hex").slice(0, 40);
 }
+function declKey(extra, parts) {
+  const rid = extra?.requestId;
+  if (rid === void 0 || rid === null) return void 0;
+  const h = extra?.requestInfo?.headers;
+  const ua = String((typeof h?.get === "function" ? h.get("user-agent") : h?.["user-agent"]) ?? "");
+  return "d-" + createHash2("sha256").update(JSON.stringify([ua, rid, ...parts])).digest("hex").slice(0, 40);
+}
+var crossBasename = (p) => String(p).split(/[\\/]/).pop() || "file";
+var shPathArg = (p) => p.startsWith("~/") ? `"$HOME"${shq(p.slice(1))}` : shq(p);
+var psq = (s) => `'${String(s).replace(/'/g, "''")}'`;
+var psPathArg = (p) => p.startsWith("~/") || p.startsWith("~\\") ? `($HOME + ${psq(p.slice(1))})` : psq(p);
+var DATAURL_INLINE_MAX = 256 * 1024;
+var dataUrlTooBig = (dataUrl) => dataUrl.length > DATAURL_INLINE_MAX * 1.4 ? `That dataUrl is ~${MB(dataUrl.length * 0.75)} MB decoded \u2014 far past the ${Math.round(DATAURL_INLINE_MAX / 1024)}KB inline limit. NEVER read a local file and base64 it through the model. Call this tool again with the file's PATH \u2014 you'll get a single-use upload command that sends it in seconds.` : null;
+async function remoteUploadCommand(c, ctx, target, path3, caption, where) {
+  const fname = crossBasename(path3);
+  const fmime = mimeOf(fname);
+  const hub = ctx.serverUrl.replace(/\/$/, "");
+  try {
+    const g = await fetch(`${hub}/api/files/grant`, {
+      method: "POST",
+      headers: { authorization: `Bearer ${c.token}`, "content-type": "application/json" },
+      body: JSON.stringify({ ...target.to ? { to: target.to } : { groupId: target.groupId }, fileName: fname, ...caption ? { caption } : {} })
+    });
+    if (g.ok) {
+      const { uploadUrl, expiresInMs } = await g.json();
+      const mins = Math.round((expiresInMs ?? 9e5) / 6e4);
+      return {
+        ok: `This cloud connector can't read your disk \u2014 but here is the fast path. Run this ONE command in the terminal (it uploads AND delivers the file to ${where}):
+
+curl -sS -X POST ${shq(uploadUrl)} -H ${shq(`Content-Type: ${fmime}`)} --data-binary @${shPathArg(path3)}
+
+Windows PowerShell instead:
+Invoke-RestMethod -Uri ${psq(uploadUrl)} -Method Post -ContentType ${psq(fmime)} -InFile ${psPathArg(path3)}
+
+The link is single-use and expires in ${mins} min; the file name and caption are already attached to it. Run it now, then confirm delivery from its JSON response ({"ok":true,...}). Do NOT read the file and base64 it through dataUrl \u2014 that is minutes of model output and fails over ~3MB.`
+      };
+    }
+  } catch {
+  }
+  const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
+  const dropLink = target.to ? `${web}/?to=${encodeURIComponent(target.to)}` : `${web}/?group=${encodeURIComponent(target.groupId)}`;
+  const q = (target.to ? `to=${encodeURIComponent(target.to)}` : `groupId=${encodeURIComponent(target.groupId)}`) + `&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
+  const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer $JEFRI_TOKEN" -H ${shq(`Content-Type: ${fmime}`)} --data-binary @${shPathArg(path3)}`;
+  return {
+    fail: `This is the cloud connector, so it can't read "${fname}" off your computer, and the upload-link service didn't answer. Options:
+
+\u2705 open the Jefri Chat web app and DRAG "${fname}" into the chat with ${where}:
+   ${dropLink}
+
+\u2014 or from a terminal (set JEFRI_TOKEN from the app's Connect dialog first):
+${cmd}
+
+Do NOT base64 the file through dataUrl \u2014 that streams megabytes through the model and fails over ~3MB.`
+  };
+}
 async function fetchHistory(c, convId) {
   if (isStateless(c)) return c.history(convId);
   const p = waitFor(c, "history", (e) => e.conversationId === convId, 4e3);
@@ -62564,10 +62620,17 @@ Use jefri_agent_apps with agent=<name> to see its live app + active state.`);
       }
     },
     async ({ to, text: text5 }, extra) => withClient(async (c) => {
-      const r = await confirmWrite(
-        c,
-        () => isStateless(c) ? c.message(to, text5, retryKey(extra, ["message", to, text5])) : c.message(to, text5)
-      );
+      if (isStateless(c)) {
+        try {
+          const res = await c.message(to, text5, retryKey(extra, ["message", to, text5]));
+          if (res?.deduplicated)
+            return ok3(`Already delivered to @${to} \u2014 this request matched a recent identical send and was suppressed as a retry. If you meant it as a NEW message, send it again (it will not be suppressed twice).`);
+          return ok3(`Sent to @${to}: "${text5}"`);
+        } catch (e) {
+          return fail(`Message rejected: ${e?.message ?? e}`);
+        }
+      }
+      const r = await confirmWrite(c, () => c.message(to, text5));
       if (r.error) return fail(`Message rejected: ${r.error}`);
       return ok3(`Sent to @${to}: "${text5}"`);
     })
@@ -62714,12 +62777,12 @@ ${fp}`);
     "jefri_send_file",
     {
       title: "Send a file, PDF, or image",
-      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`. If you only have a public URL for the file (e.g. an image you generated), pass it as `fileUrl` and the connector fetches the bytes and sends the real file.',
+      description: "Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. ALWAYS give the local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption` \u2014 even on the remote/cloud connector: there this tool answers with ONE ready-to-run terminal command (a single-use upload link) that sends the file in seconds. NEVER read the file yourself and base64 it into `dataUrl` \u2014 that streams megabytes through the model, takes minutes, and fails over ~3MB; `dataUrl` is ONLY for tiny content you already hold inline (small generated snippets). If you only have a public URL for the file, pass `fileUrl` and the connector fetches the bytes itself.",
       inputSchema: {
         to: external_exports.string().describe("recipient username"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption to send with it"),
-        dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
+        dataUrl: external_exports.string().optional().describe("ONLY for tiny inline content you already hold (max 256KB decoded). NEVER construct this by reading a local file \u2014 pass `path` instead."),
         fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from (e.g. a generated image)"),
         fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
@@ -62728,31 +62791,8 @@ ${fp}`);
       let name, mime, url;
       if (path3) {
         if (!ctx.local) {
-          const fname = np3.basename(path3);
-          const fmime = mimeOf(fname);
-          const hub = ctx.serverUrl.replace(/\/$/, "");
-          const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
-          const dropLink = `${web}/?to=${encodeURIComponent(to)}`;
-          const q = `to=${encodeURIComponent(to)}&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
-          const uploadUrl = `${hub}/api/files?${q}`;
-          const cmd = `curl -s -X POST ${shq(uploadUrl)} -H "Authorization: Bearer $JEFRI_TOKEN" -H "Content-Type: ${fmime}" --data-binary @${shq(path3)}`;
-          const psCmd = `Invoke-RestMethod -Uri "${uploadUrl}" -Method Post -Headers @{ Authorization = "Bearer $env:JEFRI_TOKEN" } -ContentType "${fmime}" -InFile "${path3}"`;
-          return fail(
-            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
-
-\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the chat with @${to}:
-   ${dropLink}
-
-(If instead this is an image you GENERATED and have a public URL for, just call this tool again with \`fileUrl\` instead of \`path\` \u2014 the image sends with no drag.)
-
-\u2014 Advanced (only if you prefer a terminal): run one of these to upload it directly \u2014
-\u2022 macOS / Linux:
-${cmd}
-\u2022 Windows (PowerShell):
-${psCmd}
-
-(These read your token from the JEFRI_TOKEN env var \u2014 set it first from the app's Connect dialog: export JEFRI_TOKEN=\u2026 (macOS/Linux) or $env:JEFRI_TOKEN="\u2026" (PowerShell). The token isn't printed here on purpose.)`
-          );
+          const r = await remoteUploadCommand(c, ctx, { to }, path3, caption, `@${to}`);
+          return "ok" in r ? ok3(r.ok) : fail(r.fail);
         }
         const abs = resolveLocalFile(path3);
         if (!abs) {
@@ -62763,6 +62803,8 @@ ${psCmd}
         mime = mimeOf(name);
         url = `data:${mime};base64,${buf.toString("base64")}`;
       } else if (dataUrl && fileName) {
+        const tooBig = dataUrlTooBig(dataUrl);
+        if (tooBig) return fail(tooBig);
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
@@ -62780,13 +62822,15 @@ ${psCmd}
         return fail(`${name} is ${MB(rawBytes.length)} MB, over the ${Math.round(MAX_UPLOAD_BYTES / 1024 / 1024)} MB limit.`);
       if (isStateless(c)) {
         try {
-          await c.sendFile(
+          const res = await c.sendFile(
             { to, caption },
             name,
             mime,
             rawBytes,
             retryKey(extra, ["file", to, name, createHash2("sha256").update(rawBytes).digest("hex")])
           );
+          if (res?.deduplicated)
+            return ok3(`Already delivered \u2014 ${name} matched a recent identical upload and was suppressed as a retry (round 28 #2: suppression is SAID, never a false "Sent"). If you meant a new copy, send it again.`);
         } catch (e2) {
           return fail(`Rejected: ${e2?.message ?? e2}`);
         }
@@ -62828,13 +62872,15 @@ ${psCmd}
         return fail(`That content is ${MB(contentBytes.length)} MB, over the ${Math.round(MAX_UPLOAD_BYTES / 1024 / 1024)} MB limit.`);
       if (isStateless(c)) {
         try {
-          await c.sendFile(
+          const res = await c.sendFile(
             { to, caption },
             fileName,
             mime,
             contentBytes,
             retryKey(extra, ["file", to, fileName, createHash2("sha256").update(contentBytes).digest("hex")])
           );
+          if (res?.deduplicated)
+            return ok3(`Already delivered \u2014 ${fileName} matched a recent identical upload and was suppressed as a retry. If you meant a new copy, send it again.`);
         } catch (e2) {
           return fail(`Rejected: ${e2?.message ?? e2}`);
         }
@@ -63244,25 +63290,7 @@ Or just upload ${fname} from the agent's page in the web app.`
         ctx.inbox.length = 0;
       }
       if (!msgs.length) return ok3("\u{1F4ED} No new messages.");
-      msgs.sort((a, b) => a.createdAt < b.createdAt ? -1 : 1);
-      if (ctx.stateless) {
-        const last = msgs[msgs.length - 1];
-        const ack = async () => {
-          try {
-            await fetch(`${ctx.serverUrl.replace(/\/$/, "")}/api/inbox/seen`, {
-              method: "POST",
-              headers: { authorization: `Bearer ${c.token}`, "content-type": "application/json" },
-              body: JSON.stringify({ until: last.createdAt, untilId: last.id })
-            });
-          } catch {
-          }
-        };
-        if (ctx.deferUntilDelivered) ctx.deferUntilDelivered(ack);
-        else await ack();
-      } else {
-        inboxWatermark.set(me, msgs[msgs.length - 1].createdAt);
-        saveWatermark();
-      }
+      msgs.sort((a, b) => a.createdAt < b.createdAt ? -1 : a.createdAt > b.createdAt ? 1 : a.id < b.id ? -1 : 1);
       const groupNames = /* @__PURE__ */ new Map();
       if (msgs.some((m) => m.groupId)) {
         try {
@@ -63290,8 +63318,27 @@ Or just upload ${fname} from the agent's page in the web app.`
         const body = m.kind === "file" ? `\u{1F4CE} sent a file: ${m.fileName} \u2014 to save it call jefri_download_file(from: "${m.senderUsername}"${m.fileName ? `, fileName: "${m.fileName}"` : ""})` : m.content;
         return `${at}@${m.senderUsername}${where(m)}: ${body}`;
       }));
-      return ok3(`\u{1F4E8} ${lines.length} message(s):
-` + lines.join("\n"));
+      const rendered = `\u{1F4E8} ${lines.length} message(s):
+` + lines.join("\n");
+      if (ctx.stateless) {
+        const renderedIds = msgs.map((m) => m.id);
+        const ack = async () => {
+          try {
+            await fetch(`${ctx.serverUrl.replace(/\/$/, "")}/api/inbox/seen`, {
+              method: "POST",
+              headers: { authorization: `Bearer ${c.token}`, "content-type": "application/json" },
+              body: JSON.stringify({ messageIds: renderedIds })
+            });
+          } catch {
+          }
+        };
+        if (ctx.deferUntilDelivered) ctx.deferUntilDelivered(ack);
+        else await ack();
+      } else {
+        inboxWatermark.set(me, msgs[msgs.length - 1].createdAt);
+        saveWatermark();
+      }
+      return ok3(rendered);
     })
   );
   server2.registerTool(
@@ -63321,10 +63368,17 @@ Or just upload ${fname} from the agent's page in the web app.`
       }
     },
     async ({ groupId, text: text5 }, extra) => withClient(async (c) => {
-      const r = await confirmWrite(
-        c,
-        () => isStateless(c) ? c.groupMessage(groupId, text5, retryKey(extra, ["group_message", groupId, text5])) : c.groupMessage(groupId, text5)
-      );
+      if (isStateless(c)) {
+        try {
+          const res = await c.groupMessage(groupId, text5, retryKey(extra, ["group_message", groupId, text5]));
+          if (res?.deduplicated)
+            return ok3(`Already posted \u2014 this request matched a recent identical post and was suppressed as a retry. If you meant it as a NEW message, send it again.`);
+          return ok3(`Posted to the group.`);
+        } catch (e) {
+          return fail(`Couldn't post to the group: ${e?.message ?? e}`);
+        }
+      }
+      const r = await confirmWrite(c, () => c.groupMessage(groupId, text5));
       if (r.error) return fail(`Couldn't post to the group: ${r.error}`);
       return ok3(`Posted to the group.`);
     })
@@ -63338,7 +63392,7 @@ Or just upload ${fname} from the agent's page in the web app.`
         groupId: external_exports.string().describe("the group's id (from jefri_groups or jefri_inbox)"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption"),
-        dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
+        dataUrl: external_exports.string().optional().describe("ONLY for tiny inline content you already hold (max 256KB decoded). NEVER construct this by reading a local file \u2014 pass `path` instead."),
         fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from"),
         fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
@@ -63347,23 +63401,8 @@ Or just upload ${fname} from the agent's page in the web app.`
       let name, mime, url;
       if (path3) {
         if (!ctx.local) {
-          const hub = ctx.serverUrl.replace(/\/$/, "");
-          const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
-          const dropLink = `${web}/?group=${encodeURIComponent(groupId)}`;
-          const fname = np3.basename(path3);
-          const fmime = mimeOf(fname);
-          const q = `groupId=${encodeURIComponent(groupId)}&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
-          const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer $JEFRI_TOKEN" -H "Content-Type: ${fmime}" --data-binary @${shq(path3)}`;
-          return fail(
-            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
-
-\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the group chat:
-   ${dropLink}
-
-(If this is an image you GENERATED and have a public URL for, call this tool again with \`fileUrl\` instead of \`path\`.)
-
-\u2014 Advanced (terminal): ${cmd}`
-          );
+          const r = await remoteUploadCommand(c, ctx, { groupId }, path3, caption, "the group");
+          return "ok" in r ? ok3(r.ok) : fail(r.fail);
         }
         const abs = resolveLocalFile(path3);
         if (!abs) return fail(`I can't find a file at ${path3} on this machine.`);
@@ -63372,6 +63411,8 @@ Or just upload ${fname} from the agent's page in the web app.`
         mime = mimeOf(name);
         url = `data:${mime};base64,${buf.toString("base64")}`;
       } else if (dataUrl && fileName) {
+        const tooBig = dataUrlTooBig(dataUrl);
+        if (tooBig) return fail(tooBig);
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
@@ -63389,13 +63430,15 @@ Or just upload ${fname} from the agent's page in the web app.`
         return fail(`${name} is ${MB(rawBytes.length)} MB, over the ${Math.round(MAX_UPLOAD_BYTES / 1024 / 1024)} MB limit.`);
       if (isStateless(c)) {
         try {
-          await c.sendFile(
+          const res = await c.sendFile(
             { groupId, caption },
             name,
             mime,
             rawBytes,
             retryKey(extra, ["file", groupId, name, createHash2("sha256").update(rawBytes).digest("hex")])
           );
+          if (res?.deduplicated)
+            return ok3(`Already delivered \u2014 ${name} matched a recent identical upload and was suppressed as a retry. If you meant a new copy, send it again.`);
         } catch (e2) {
           return fail(`Rejected: ${e2?.message ?? e2}`);
         }
@@ -63487,10 +63530,20 @@ Or just upload ${fname} from the agent's page in the web app.`
       }
     },
     async ({ status }, extra) => withClient(async (c) => {
-      const declId = isStateless(c) ? retryKey(extra, ["presence", status])?.replace(/^mcp-/, "d-") : void 0;
-      const r = await confirmWrite(c, () => isStateless(c) ? c.presence(status, declId) : c.presence(status));
+      if (isStateless(c)) {
+        const declId = declKey(extra, ["presence", status]);
+        try {
+          const res = await c.presence(status, declId);
+          ctx.onPresenceDeclared?.(res.status);
+          if (res.replayed && res.status !== status)
+            return ok3(`That request was an old retry \u2014 your status is "${res.status}" (a newer declaration stands).`);
+          return ok3(`Status set to ${res.status}.`);
+        } catch (e) {
+          return fail(`Couldn't set status: ${e?.message ?? e}`);
+        }
+      }
+      const r = await confirmWrite(c, () => c.presence(status));
       if (r.error) return fail(`Couldn't set status: ${r.error}`);
-      ctx.onPresenceDeclared?.(status);
       return ok3(`Status set to ${status}.`);
     })
   );

package/dist/index.js

@@ -40562,9 +40562,65 @@ function retryKey(extra, parts) {
   if (rid === void 0 || rid === null) return void 0;
   const h = extra?.requestInfo?.headers;
   const ua = String((typeof h?.get === "function" ? h.get("user-agent") : h?.["user-agent"]) ?? "");
-  const bucket = Math.floor(Date.now() / 6e5);
+  if (!ua) return void 0;
+  const bucket = Math.floor(Date.now() / 75e3);
   return "mcp-" + createHash("sha256").update(JSON.stringify([bucket, ua, rid, ...parts])).digest("hex").slice(0, 40);
 }
+function declKey(extra, parts) {
+  const rid = extra?.requestId;
+  if (rid === void 0 || rid === null) return void 0;
+  const h = extra?.requestInfo?.headers;
+  const ua = String((typeof h?.get === "function" ? h.get("user-agent") : h?.["user-agent"]) ?? "");
+  return "d-" + createHash("sha256").update(JSON.stringify([ua, rid, ...parts])).digest("hex").slice(0, 40);
+}
+var crossBasename = (p) => String(p).split(/[\\/]/).pop() || "file";
+var shPathArg = (p) => p.startsWith("~/") ? `"$HOME"${shq(p.slice(1))}` : shq(p);
+var psq = (s) => `'${String(s).replace(/'/g, "''")}'`;
+var psPathArg = (p) => p.startsWith("~/") || p.startsWith("~\\") ? `($HOME + ${psq(p.slice(1))})` : psq(p);
+var DATAURL_INLINE_MAX = 256 * 1024;
+var dataUrlTooBig = (dataUrl) => dataUrl.length > DATAURL_INLINE_MAX * 1.4 ? `That dataUrl is ~${MB(dataUrl.length * 0.75)} MB decoded \u2014 far past the ${Math.round(DATAURL_INLINE_MAX / 1024)}KB inline limit. NEVER read a local file and base64 it through the model. Call this tool again with the file's PATH \u2014 you'll get a single-use upload command that sends it in seconds.` : null;
+async function remoteUploadCommand(c2, ctx, target, path4, caption, where) {
+  const fname = crossBasename(path4);
+  const fmime = mimeOf(fname);
+  const hub = ctx.serverUrl.replace(/\/$/, "");
+  try {
+    const g = await fetch(`${hub}/api/files/grant`, {
+      method: "POST",
+      headers: { authorization: `Bearer ${c2.token}`, "content-type": "application/json" },
+      body: JSON.stringify({ ...target.to ? { to: target.to } : { groupId: target.groupId }, fileName: fname, ...caption ? { caption } : {} })
+    });
+    if (g.ok) {
+      const { uploadUrl, expiresInMs } = await g.json();
+      const mins = Math.round((expiresInMs ?? 9e5) / 6e4);
+      return {
+        ok: `This cloud connector can't read your disk \u2014 but here is the fast path. Run this ONE command in the terminal (it uploads AND delivers the file to ${where}):
+
+curl -sS -X POST ${shq(uploadUrl)} -H ${shq(`Content-Type: ${fmime}`)} --data-binary @${shPathArg(path4)}
+
+Windows PowerShell instead:
+Invoke-RestMethod -Uri ${psq(uploadUrl)} -Method Post -ContentType ${psq(fmime)} -InFile ${psPathArg(path4)}
+
+The link is single-use and expires in ${mins} min; the file name and caption are already attached to it. Run it now, then confirm delivery from its JSON response ({"ok":true,...}). Do NOT read the file and base64 it through dataUrl \u2014 that is minutes of model output and fails over ~3MB.`
+      };
+    }
+  } catch {
+  }
+  const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
+  const dropLink = target.to ? `${web}/?to=${encodeURIComponent(target.to)}` : `${web}/?group=${encodeURIComponent(target.groupId)}`;
+  const q = (target.to ? `to=${encodeURIComponent(target.to)}` : `groupId=${encodeURIComponent(target.groupId)}`) + `&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
+  const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer $JEFRI_TOKEN" -H ${shq(`Content-Type: ${fmime}`)} --data-binary @${shPathArg(path4)}`;
+  return {
+    fail: `This is the cloud connector, so it can't read "${fname}" off your computer, and the upload-link service didn't answer. Options:
+
+\u2705 open the Jefri Chat web app and DRAG "${fname}" into the chat with ${where}:
+   ${dropLink}
+
+\u2014 or from a terminal (set JEFRI_TOKEN from the app's Connect dialog first):
+${cmd}
+
+Do NOT base64 the file through dataUrl \u2014 that streams megabytes through the model and fails over ~3MB.`
+  };
+}
 async function fetchHistory2(c2, convId) {
   if (isStateless(c2)) return c2.history(convId);
   const p = waitFor(c2, "history", (e) => e.conversationId === convId, 4e3);
@@ -41027,10 +41083,17 @@ Use jefri_agent_apps with agent=<name> to see its live app + active state.`);
       }
     },
     async ({ to, text: text5 }, extra) => withClient(async (c2) => {
-      const r = await confirmWrite(
-        c2,
-        () => isStateless(c2) ? c2.message(to, text5, retryKey(extra, ["message", to, text5])) : c2.message(to, text5)
-      );
+      if (isStateless(c2)) {
+        try {
+          const res = await c2.message(to, text5, retryKey(extra, ["message", to, text5]));
+          if (res?.deduplicated)
+            return ok3(`Already delivered to @${to} \u2014 this request matched a recent identical send and was suppressed as a retry. If you meant it as a NEW message, send it again (it will not be suppressed twice).`);
+          return ok3(`Sent to @${to}: "${text5}"`);
+        } catch (e) {
+          return fail(`Message rejected: ${e?.message ?? e}`);
+        }
+      }
+      const r = await confirmWrite(c2, () => c2.message(to, text5));
       if (r.error) return fail(`Message rejected: ${r.error}`);
       return ok3(`Sent to @${to}: "${text5}"`);
     })
@@ -41177,12 +41240,12 @@ ${fp}`);
     "jefri_send_file",
     {
       title: "Send a file, PDF, or image",
-      description: 'Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. Give a local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption`.\n\nHOW IT WORKS: this reads the file where the connector runs. If you are connected via the LOCAL (stdio) connector, a `path` is read straight off this machine. If you are connected via the REMOTE/cloud connector (URL), this process runs in the cloud and CANNOT see your local disk \u2014 so for a local file, run the helper in your terminal instead (it reads + uploads the file locally):\n  pnpm send-file --to <username> --path <absolute file path> [--caption "..."]\n(run from the acp repo; token + hub are auto-detected from your Claude config). Tiny inline content can be sent directly via `dataUrl` + `fileName`. If you only have a public URL for the file (e.g. an image you generated), pass it as `fileUrl` and the connector fetches the bytes and sends the real file.',
+      description: "Send a file to another Jefri Chat user/agent \u2014 PDF, image (jpg/png/gif/webp), video (mp4/mov), or any document. ALWAYS give the local file `path` (e.g. ~/Downloads/report.pdf) and an optional `caption` \u2014 even on the remote/cloud connector: there this tool answers with ONE ready-to-run terminal command (a single-use upload link) that sends the file in seconds. NEVER read the file yourself and base64 it into `dataUrl` \u2014 that streams megabytes through the model, takes minutes, and fails over ~3MB; `dataUrl` is ONLY for tiny content you already hold inline (small generated snippets). If you only have a public URL for the file, pass `fileUrl` and the connector fetches the bytes itself.",
       inputSchema: {
         to: external_exports.string().describe("recipient username"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption to send with it"),
-        dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
+        dataUrl: external_exports.string().optional().describe("ONLY for tiny inline content you already hold (max 256KB decoded). NEVER construct this by reading a local file \u2014 pass `path` instead."),
         fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from (e.g. a generated image)"),
         fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
@@ -41191,31 +41254,8 @@ ${fp}`);
       let name, mime, url;
       if (path4) {
         if (!ctx.local) {
-          const fname = np4.basename(path4);
-          const fmime = mimeOf(fname);
-          const hub = ctx.serverUrl.replace(/\/$/, "");
-          const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
-          const dropLink = `${web}/?to=${encodeURIComponent(to)}`;
-          const q = `to=${encodeURIComponent(to)}&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
-          const uploadUrl = `${hub}/api/files?${q}`;
-          const cmd = `curl -s -X POST ${shq(uploadUrl)} -H "Authorization: Bearer $JEFRI_TOKEN" -H "Content-Type: ${fmime}" --data-binary @${shq(path4)}`;
-          const psCmd = `Invoke-RestMethod -Uri "${uploadUrl}" -Method Post -Headers @{ Authorization = "Bearer $env:JEFRI_TOKEN" } -ContentType "${fmime}" -InFile "${path4}"`;
-          return fail(
-            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
-
-\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the chat with @${to}:
-   ${dropLink}
-
-(If instead this is an image you GENERATED and have a public URL for, just call this tool again with \`fileUrl\` instead of \`path\` \u2014 the image sends with no drag.)
-
-\u2014 Advanced (only if you prefer a terminal): run one of these to upload it directly \u2014
-\u2022 macOS / Linux:
-${cmd}
-\u2022 Windows (PowerShell):
-${psCmd}
-
-(These read your token from the JEFRI_TOKEN env var \u2014 set it first from the app's Connect dialog: export JEFRI_TOKEN=\u2026 (macOS/Linux) or $env:JEFRI_TOKEN="\u2026" (PowerShell). The token isn't printed here on purpose.)`
-          );
+          const r = await remoteUploadCommand(c2, ctx, { to }, path4, caption, `@${to}`);
+          return "ok" in r ? ok3(r.ok) : fail(r.fail);
         }
         const abs = resolveLocalFile(path4);
         if (!abs) {
@@ -41226,6 +41266,8 @@ ${psCmd}
         mime = mimeOf(name);
         url = `data:${mime};base64,${buf.toString("base64")}`;
       } else if (dataUrl && fileName) {
+        const tooBig = dataUrlTooBig(dataUrl);
+        if (tooBig) return fail(tooBig);
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
@@ -41243,13 +41285,15 @@ ${psCmd}
         return fail(`${name} is ${MB(rawBytes.length)} MB, over the ${Math.round(MAX_UPLOAD_BYTES / 1024 / 1024)} MB limit.`);
       if (isStateless(c2)) {
         try {
-          await c2.sendFile(
+          const res = await c2.sendFile(
             { to, caption },
             name,
             mime,
             rawBytes,
             retryKey(extra, ["file", to, name, createHash("sha256").update(rawBytes).digest("hex")])
           );
+          if (res?.deduplicated)
+            return ok3(`Already delivered \u2014 ${name} matched a recent identical upload and was suppressed as a retry (round 28 #2: suppression is SAID, never a false "Sent"). If you meant a new copy, send it again.`);
         } catch (e2) {
           return fail(`Rejected: ${e2?.message ?? e2}`);
         }
@@ -41291,13 +41335,15 @@ ${psCmd}
         return fail(`That content is ${MB(contentBytes.length)} MB, over the ${Math.round(MAX_UPLOAD_BYTES / 1024 / 1024)} MB limit.`);
       if (isStateless(c2)) {
         try {
-          await c2.sendFile(
+          const res = await c2.sendFile(
             { to, caption },
             fileName,
             mime,
             contentBytes,
             retryKey(extra, ["file", to, fileName, createHash("sha256").update(contentBytes).digest("hex")])
           );
+          if (res?.deduplicated)
+            return ok3(`Already delivered \u2014 ${fileName} matched a recent identical upload and was suppressed as a retry. If you meant a new copy, send it again.`);
         } catch (e2) {
           return fail(`Rejected: ${e2?.message ?? e2}`);
         }
@@ -41707,25 +41753,7 @@ Or just upload ${fname} from the agent's page in the web app.`
         ctx.inbox.length = 0;
       }
       if (!msgs.length) return ok3("\u{1F4ED} No new messages.");
-      msgs.sort((a, b) => a.createdAt < b.createdAt ? -1 : 1);
-      if (ctx.stateless) {
-        const last = msgs[msgs.length - 1];
-        const ack = async () => {
-          try {
-            await fetch(`${ctx.serverUrl.replace(/\/$/, "")}/api/inbox/seen`, {
-              method: "POST",
-              headers: { authorization: `Bearer ${c2.token}`, "content-type": "application/json" },
-              body: JSON.stringify({ until: last.createdAt, untilId: last.id })
-            });
-          } catch {
-          }
-        };
-        if (ctx.deferUntilDelivered) ctx.deferUntilDelivered(ack);
-        else await ack();
-      } else {
-        inboxWatermark.set(me, msgs[msgs.length - 1].createdAt);
-        saveWatermark();
-      }
+      msgs.sort((a, b) => a.createdAt < b.createdAt ? -1 : a.createdAt > b.createdAt ? 1 : a.id < b.id ? -1 : 1);
       const groupNames = /* @__PURE__ */ new Map();
       if (msgs.some((m) => m.groupId)) {
         try {
@@ -41753,8 +41781,27 @@ Or just upload ${fname} from the agent's page in the web app.`
         const body = m.kind === "file" ? `\u{1F4CE} sent a file: ${m.fileName} \u2014 to save it call jefri_download_file(from: "${m.senderUsername}"${m.fileName ? `, fileName: "${m.fileName}"` : ""})` : m.content;
         return `${at}@${m.senderUsername}${where(m)}: ${body}`;
       }));
-      return ok3(`\u{1F4E8} ${lines.length} message(s):
-` + lines.join("\n"));
+      const rendered = `\u{1F4E8} ${lines.length} message(s):
+` + lines.join("\n");
+      if (ctx.stateless) {
+        const renderedIds = msgs.map((m) => m.id);
+        const ack = async () => {
+          try {
+            await fetch(`${ctx.serverUrl.replace(/\/$/, "")}/api/inbox/seen`, {
+              method: "POST",
+              headers: { authorization: `Bearer ${c2.token}`, "content-type": "application/json" },
+              body: JSON.stringify({ messageIds: renderedIds })
+            });
+          } catch {
+          }
+        };
+        if (ctx.deferUntilDelivered) ctx.deferUntilDelivered(ack);
+        else await ack();
+      } else {
+        inboxWatermark.set(me, msgs[msgs.length - 1].createdAt);
+        saveWatermark();
+      }
+      return ok3(rendered);
     })
   );
   server2.registerTool(
@@ -41784,10 +41831,17 @@ Or just upload ${fname} from the agent's page in the web app.`
       }
     },
     async ({ groupId, text: text5 }, extra) => withClient(async (c2) => {
-      const r = await confirmWrite(
-        c2,
-        () => isStateless(c2) ? c2.groupMessage(groupId, text5, retryKey(extra, ["group_message", groupId, text5])) : c2.groupMessage(groupId, text5)
-      );
+      if (isStateless(c2)) {
+        try {
+          const res = await c2.groupMessage(groupId, text5, retryKey(extra, ["group_message", groupId, text5]));
+          if (res?.deduplicated)
+            return ok3(`Already posted \u2014 this request matched a recent identical post and was suppressed as a retry. If you meant it as a NEW message, send it again.`);
+          return ok3(`Posted to the group.`);
+        } catch (e) {
+          return fail(`Couldn't post to the group: ${e?.message ?? e}`);
+        }
+      }
+      const r = await confirmWrite(c2, () => c2.groupMessage(groupId, text5));
       if (r.error) return fail(`Couldn't post to the group: ${r.error}`);
       return ok3(`Posted to the group.`);
     })
@@ -41801,7 +41855,7 @@ Or just upload ${fname} from the agent's page in the web app.`
         groupId: external_exports.string().describe("the group's id (from jefri_groups or jefri_inbox)"),
         path: external_exports.string().optional().describe("local file path, e.g. ~/Downloads/report.pdf"),
         caption: external_exports.string().optional().describe("optional text caption"),
-        dataUrl: external_exports.string().optional().describe("alternatively, a data: URL of the file (small files only)"),
+        dataUrl: external_exports.string().optional().describe("ONLY for tiny inline content you already hold (max 256KB decoded). NEVER construct this by reading a local file \u2014 pass `path` instead."),
         fileUrl: external_exports.string().optional().describe("alternatively, a public http(s) URL to fetch the file from"),
         fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
@@ -41810,23 +41864,8 @@ Or just upload ${fname} from the agent's page in the web app.`
       let name, mime, url;
       if (path4) {
         if (!ctx.local) {
-          const hub = ctx.serverUrl.replace(/\/$/, "");
-          const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
-          const dropLink = `${web}/?group=${encodeURIComponent(groupId)}`;
-          const fname = np4.basename(path4);
-          const fmime = mimeOf(fname);
-          const q = `groupId=${encodeURIComponent(groupId)}&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
-          const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer $JEFRI_TOKEN" -H "Content-Type: ${fmime}" --data-binary @${shq(path4)}`;
-          return fail(
-            `This is the cloud connector, so it can't read "${fname}" off your computer. Easiest fix:
-
-\u2705 SIMPLE \u2014 open the Jefri Chat web app and DRAG "${fname}" into the group chat:
-   ${dropLink}
-
-(If this is an image you GENERATED and have a public URL for, call this tool again with \`fileUrl\` instead of \`path\`.)
-
-\u2014 Advanced (terminal): ${cmd}`
-          );
+          const r = await remoteUploadCommand(c2, ctx, { groupId }, path4, caption, "the group");
+          return "ok" in r ? ok3(r.ok) : fail(r.fail);
         }
         const abs = resolveLocalFile(path4);
         if (!abs) return fail(`I can't find a file at ${path4} on this machine.`);
@@ -41835,6 +41874,8 @@ Or just upload ${fname} from the agent's page in the web app.`
         mime = mimeOf(name);
         url = `data:${mime};base64,${buf.toString("base64")}`;
       } else if (dataUrl && fileName) {
+        const tooBig = dataUrlTooBig(dataUrl);
+        if (tooBig) return fail(tooBig);
         name = fileName;
         mime = dataUrl.match(/^data:([^;]+)/)?.[1] ?? mimeOf(fileName);
         url = dataUrl;
@@ -41852,13 +41893,15 @@ Or just upload ${fname} from the agent's page in the web app.`
         return fail(`${name} is ${MB(rawBytes.length)} MB, over the ${Math.round(MAX_UPLOAD_BYTES / 1024 / 1024)} MB limit.`);
       if (isStateless(c2)) {
         try {
-          await c2.sendFile(
+          const res = await c2.sendFile(
             { groupId, caption },
             name,
             mime,
             rawBytes,
             retryKey(extra, ["file", groupId, name, createHash("sha256").update(rawBytes).digest("hex")])
           );
+          if (res?.deduplicated)
+            return ok3(`Already delivered \u2014 ${name} matched a recent identical upload and was suppressed as a retry. If you meant a new copy, send it again.`);
         } catch (e2) {
           return fail(`Rejected: ${e2?.message ?? e2}`);
         }
@@ -41950,10 +41993,20 @@ Or just upload ${fname} from the agent's page in the web app.`
       }
     },
     async ({ status }, extra) => withClient(async (c2) => {
-      const declId = isStateless(c2) ? retryKey(extra, ["presence", status])?.replace(/^mcp-/, "d-") : void 0;
-      const r = await confirmWrite(c2, () => isStateless(c2) ? c2.presence(status, declId) : c2.presence(status));
+      if (isStateless(c2)) {
+        const declId = declKey(extra, ["presence", status]);
+        try {
+          const res = await c2.presence(status, declId);
+          ctx.onPresenceDeclared?.(res.status);
+          if (res.replayed && res.status !== status)
+            return ok3(`That request was an old retry \u2014 your status is "${res.status}" (a newer declaration stands).`);
+          return ok3(`Status set to ${res.status}.`);
+        } catch (e) {
+          return fail(`Couldn't set status: ${e?.message ?? e}`);
+        }
+      }
+      const r = await confirmWrite(c2, () => c2.presence(status));
       if (r.error) return fail(`Couldn't set status: ${r.error}`);
-      ctx.onPresenceDeclared?.(status);
       return ok3(`Status set to ${status}.`);
     })
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jefrichat-mcp",
-  "version": "0.48.11",
+  "version": "0.48.13",
   "description": "Jefri Chat connector — join the Jefri Chat network (WhatsApp for AI agents) from any MCP client (Claude, Codex, Cursor, …).",
   "type": "module",
   "bin": {