jefrichat-mcp 0.49.18 → 0.49.21

package/dist/index.js

@@ -480,8 +480,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path15, errorMaps, issueData } = params;
-      const fullPath = [...path15, ...issueData.path || []];
+      const { data, path: path17, errorMaps, issueData } = params;
+      const fullPath = [...path17, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -789,11 +789,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path15, key) {
+      constructor(parent, value, path17, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path15;
+        this._path = path17;
         this._key = key;
       }
       get path() {
@@ -4373,10 +4373,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj, path15) {
-  if (!path15)
+function getElementAtPath(obj, path17) {
+  if (!path17)
     return obj;
-  return path15.reduce((acc, key) => acc?.[key], obj);
+  return path17.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -4625,11 +4625,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path15, issues) {
+function prefixIssues(path17, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path15);
+    iss.path.unshift(path17);
     return iss;
   });
 }
@@ -16457,8 +16457,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path15) {
-      let input2 = path15;
+    function removeDotSegments(path17) {
+      let input2 = path17;
       const output2 = [];
       let nextSlash = -1;
       let len = 0;
@@ -16710,8 +16710,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path15, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path15 && path15 !== "/" ? path15 : void 0;
+        const [path17, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path17 && path17 !== "/" ? path17 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -20104,12 +20104,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list3, fs33, exportName) {
+    function addFormats(ajv, list3, fs35, exportName) {
       var _a;
       var _b;
       (_a = (_b = ajv.opts.code).formats) !== null && _a !== void 0 ? _a : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list3)
-        ajv.addFormat(f, fs33[f]);
+        ajv.addFormat(f, fs35[f]);
     }
     module.exports = exports = formatsPlugin;
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -22288,8 +22288,8 @@ function assertNonEmpty(part, name) {
     throw new Error("`" + name + "` cannot be empty");
   }
 }
-function assertPath(path15, name) {
-  if (!path15) {
+function assertPath(path17, name) {
+  if (!path17) {
     throw new Error("Setting `" + name + "` requires `path` to be set too");
   }
 }
@@ -22474,13 +22474,13 @@ var init_lib4 = __esm({
        * @returns {undefined}
        *   Nothing.
        */
-      set path(path15) {
-        if (isUrl(path15)) {
-          path15 = fileURLToPath(path15);
+      set path(path17) {
+        if (isUrl(path17)) {
+          path17 = fileURLToPath(path17);
         }
-        assertNonEmpty(path15, "path");
-        if (this.path !== path15) {
-          this.history.push(path15);
+        assertNonEmpty(path17, "path");
+        if (this.path !== path17) {
+          this.history.push(path17);
         }
       }
       /**
@@ -31190,7 +31190,7 @@ function transformGfmAutolinkLiterals(tree) {
     { ignore: ["link", "linkReference"] }
   );
 }
-function findUrl(_, protocol, domain2, path15, match) {
+function findUrl(_, protocol, domain2, path17, match) {
   let prefix = "";
   if (!previous2(match)) {
     return false;
@@ -31203,7 +31203,7 @@ function findUrl(_, protocol, domain2, path15, match) {
   if (!isCorrectDomain(domain2)) {
     return false;
   }
-  const parts = splitUrl(domain2 + path15);
+  const parts = splitUrl(domain2 + path17);
   if (!parts[0]) return false;
   const result = {
     type: "link",
@@ -38608,6 +38608,19 @@ function connectErrorFromEvent(ev) {
   if (ev?.minVersion) err.minVersion = ev.minVersion;
   return err;
 }
+function terminalConnectionCode(ev) {
+  if (ev.code) return [
+    "auth",
+    "auth_failed",
+    "authentication_failed",
+    "invalid_token",
+    "ACP_AUTH_FAILED",
+    "upgrade_required",
+    "taken_over",
+    "superseded"
+  ].includes(ev.code) ? ev.code : null;
+  return /^(?:authentication failed|invalid or expired (?:Jefri Chat )?token)(?:\b|$)/i.test(ev.message ?? "") ? "auth" : null;
+}
 var subtle, enc, dec, E2E_ALG, e2eDir, b64, fromB64, safeName, canonicalJwk, JefriAuthError, JefriClient, serveDir;
 var init_src2 = __esm({
   "../sdk/src/index.ts"() {
@@ -38634,6 +38647,17 @@ var init_src2 = __esm({
     };
     JefriClient = class _JefriClient {
       ws;
+      recoveryEnabled = false;
+      registeredSocket;
+      retireRecoverySocket;
+      recoveryRegisterTimer;
+      get registeredRecoveryEnabled() {
+        return this.recoveryEnabled;
+      }
+      get connectionStatus() {
+        if (this.terminalCode || this.closing) return "stopped";
+        return this.online ? "online" : this.hasConnected ? "reconnecting" : "connecting";
+      }
       handlers = /* @__PURE__ */ new Map();
       /** Why the client stopped reconnecting: "auth" | "upgrade_required" | "taken_over". */
       terminalCode = null;
@@ -38661,6 +38685,14 @@ var init_src2 = __esm({
        *  so pre-0.49 SDKs stop via their /auth/i match. */
       noteTerminalError(ev) {
         if (ev?.event !== "error") return;
+        if (this.recoveryEnabled) {
+          const code3 = terminalConnectionCode(ev);
+          if (code3) {
+            this.authFailed = true;
+            this.terminalCode = code3;
+          }
+          return;
+        }
         if (/auth/i.test(ev.message ?? "") || ev.code === "upgrade_required" || ev.code === "taken_over" || ev.code === "superseded") {
           this.authFailed = true;
           this.terminalCode = ev.code ?? "auth";
@@ -38756,6 +38788,8 @@ var init_src2 = __esm({
        *  "offline" honestly instead of claiming an agent can be reached and then
        *  failing on send. */
       get online() {
+        if (this.recoveryEnabled)
+          return !this.closing && !this.authFailed && !!this.ws && this.ws.readyState === wrapper_default.OPEN && this.registeredSocket === this.ws;
         return this.hasConnected && !this.closing && this.ws?.readyState === this.ws?.OPEN;
       }
       constructor(server2) {
@@ -38764,6 +38798,7 @@ var init_src2 = __esm({
       static async connect(opts = {}) {
         const server2 = (opts.server ?? "https://jefrichat.com").replace(/\/$/, "");
         const client = new _JefriClient(server2);
+        client.recoveryEnabled = opts.registeredRecovery === true;
         let token = opts.token;
         if (!token) {
           const res = await fetch(`${server2}/api/agents`, {
@@ -38803,7 +38838,9 @@ var init_src2 = __esm({
             fn();
           };
           onReg = () => finish(resolve);
-          onErr = (ev) => finish(() => reject(connectErrorFromEvent(ev)));
+          onErr = (ev) => finish(() => reject(
+            client.recoveryEnabled && !ev?.code && !terminalConnectionCode(ev) ? new Error(ev?.message ?? "hub rejected the connection") : connectErrorFromEvent(ev)
+          ));
           const regTimeoutMs = typeof process !== "undefined" && Number(process.env?.JEFRI_REGISTER_TIMEOUT_MS) || 8e3;
           timer = setTimeout(
             () => finish(() => reject(new Error("timed out waiting for the hub to register the connection"))),
@@ -38830,11 +38867,47 @@ var init_src2 = __esm({
         return client;
       }
       openSocket() {
+        if (this.recoveryEnabled) {
+          this.retireRecoverySocket?.();
+          this.registeredSocket = void 0;
+        }
         const wsUrl = this.server.replace(/^http/, "ws") + `/ws`;
         this.ws = new wrapper_default(wsUrl, { headers: this.socketHeaders() });
+        const ws = this.ws;
+        const current = () => !this.recoveryEnabled || this.ws === ws && !this.closing && !this.authFailed;
         return new Promise((resolve, reject) => {
           let settled = false;
+          let registrationTimer;
+          const clearRegistrationTimer = () => {
+            clearTimeout(registrationTimer);
+            if (this.recoveryRegisterTimer === registrationTimer) this.recoveryRegisterTimer = void 0;
+            registrationTimer = void 0;
+          };
+          if (this.recoveryEnabled) {
+            const timeoutMs = Number(process.env.JEFRI_REGISTER_TIMEOUT_MS) || 8e3;
+            registrationTimer = setTimeout(() => {
+              if (!current() || this.registeredSocket === ws) return;
+              if (!settled) {
+                settled = true;
+                reject(new Error("timed out waiting for the hub to register the connection"));
+              }
+              ws.terminate();
+            }, timeoutMs);
+            this.recoveryRegisterTimer = registrationTimer;
+            this.retireRecoverySocket = () => {
+              clearRegistrationTimer();
+              if (!settled) {
+                settled = true;
+                reject(new Error("connection attempt cancelled"));
+              }
+              ws.removeAllListeners();
+              ws.on("error", () => {
+              });
+              ws.terminate();
+            };
+          }
           this.ws.on("open", () => {
+            if (!current()) return;
             this.startPing();
             this.emit("socket_open", {});
             try {
@@ -38850,17 +38923,28 @@ var init_src2 = __esm({
             }
           });
           this.ws.on("error", (e) => {
+            if (this.recoveryEnabled && this.ws !== ws) return;
             if (!settled) {
               settled = true;
               reject(e);
             }
           });
           this.ws.on("close", () => {
+            if (this.recoveryEnabled) {
+              clearRegistrationTimer();
+              if (this.ws !== ws) return;
+              this.registeredSocket = void 0;
+              if (!settled) {
+                settled = true;
+                reject(new Error("connection closed before opening"));
+              }
+            }
             this.stopPing();
             this.emit("socket_close", {});
             if (this.hasConnected && !this.closing && !this.authFailed) this.scheduleReconnect();
           });
           this.ws.on("message", (data) => {
+            if (!current()) return;
             let ev;
             try {
               ev = JSON.parse(data.toString());
@@ -38868,6 +38952,10 @@ var init_src2 = __esm({
               return;
             }
             if (ev.event === "registered") {
+              if (this.recoveryEnabled) {
+                this.registeredSocket = ws;
+                clearRegistrationTimer();
+              }
               this.identity = ev.identity;
               this.generation = typeof ev.generation === "string" ? ev.generation : null;
               const rev = ev.identity?.statusRev;
@@ -38876,6 +38964,14 @@ var init_src2 = __esm({
               this.reconnectAttempts = 0;
             }
             this.noteTerminalError(ev);
+            if (this.recoveryEnabled && this.authFailed) {
+              clearRegistrationTimer();
+              this.registeredSocket = void 0;
+              this.stopPing();
+              if (this.reconnectTimer) clearTimeout(this.reconnectTimer);
+              this.reconnectTimer = void 0;
+              ws.close();
+            }
             this.notePresenceAck(ev);
             this.emit(ev.event, ev);
             this.emit("*", ev);
@@ -38891,14 +38987,17 @@ var init_src2 = __esm({
       // triggers the existing reconnect.
       startPing() {
         this.stopPing();
+        const ws = this.ws;
+        const current = () => !this.recoveryEnabled || this.ws === ws && !this.closing && !this.authFailed;
         this.isAlive = true;
         try {
           this.ws.on("pong", () => {
-            this.isAlive = true;
+            if (current()) this.isAlive = true;
           });
         } catch {
         }
         this.pingTimer = setInterval(() => {
+          if (!current()) return;
           if (this.ws.readyState !== this.ws.OPEN) return;
           if (!this.isAlive) {
             try {
@@ -38988,6 +39087,12 @@ var init_src2 = __esm({
         this.dispatch(event, payload, this.handlers.get(event) ?? []);
       }
       send(ev) {
+        if (this.recoveryEnabled && !this.online) {
+          if (this.terminalCode)
+            throw new Error(`Jefri Chat connection stopped (${this.terminalCode}) \u2014 not reconnecting automatically; check this desktop session's connection`);
+          if (this.closing) throw new Error("Jefri Chat connection closed \u2014 restart this desktop connector");
+          throw new Error("Jefri Chat hub connection is not registered yet (reconnecting) \u2014 try again after registration");
+        }
         if (!this.ws || this.ws.readyState !== this.ws.OPEN)
           throw new Error("not connected to the Jefri Chat hub (reconnecting) \u2014 try again in a moment");
         this.ws.send(JSON.stringify(ev));
@@ -39143,6 +39248,11 @@ var init_src2 = __esm({
       }
       close() {
         this.closing = true;
+        if (this.recoveryEnabled) {
+          this.registeredSocket = void 0;
+          clearTimeout(this.recoveryRegisterTimer);
+          this.recoveryRegisterTimer = void 0;
+        }
         this.stopPing();
         if (this.reconnectTimer) clearTimeout(this.reconnectTimer);
         this.reconnectTimer = void 0;
@@ -39511,6 +39621,61 @@ var init_stream_utils = __esm({
   }
 });
 
+// src/send-confirmed.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+function sendConfirmed(client, target, text5, opts = {}) {
+  const clientId = opts.clientId ?? randomUUID2();
+  const timeoutMs = opts.timeoutMs ?? SEND_CONFIRM_TIMEOUT_MS;
+  return new Promise((resolve) => {
+    let settled = false;
+    const finish = (out) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      clearInterval(linkCheck);
+      client.off("reply_ack", onAck);
+      client.off("error", onErr);
+      resolve(out);
+    };
+    const onAck = (ev) => {
+      if (ev?.replyId !== clientId) return;
+      finish({ outcome: "sent", hubMessageId: String(ev.messageId ?? "") });
+    };
+    const onErr = (ev) => {
+      if (ev?.replyId !== clientId) return;
+      finish({
+        outcome: "rejected",
+        reason: String(ev.message ?? "the hub refused the message"),
+        ...typeof ev.code === "string" ? { code: ev.code } : {},
+        ...typeof ev.status === "number" ? { status: ev.status } : {}
+      });
+    };
+    const timer = setTimeout(
+      () => finish({ outcome: "ambiguous", reason: `no answer from the hub within ${Math.round(timeoutMs / 1e3)}s \u2014 check history before retrying` }),
+      timeoutMs
+    );
+    const linkCheck = setInterval(() => {
+      if (client.online === false) finish({ outcome: "ambiguous", reason: "the hub connection dropped before it answered \u2014 check history before retrying" });
+    }, 250);
+    client.on("reply_ack", onAck);
+    client.on("error", onErr);
+    try {
+      if (target.groupId) client.groupMessage(target.groupId, text5, { clientId });
+      else if (target.to) client.message(target.to, text5, { clientId });
+      else return finish({ outcome: "rejected", reason: "need `to` or `groupId`" });
+    } catch (e) {
+      finish({ outcome: "rejected", reason: e?.message ?? "send failed" });
+    }
+  });
+}
+var SEND_CONFIRM_TIMEOUT_MS;
+var init_send_confirmed = __esm({
+  "src/send-confirmed.ts"() {
+    "use strict";
+    SEND_CONFIRM_TIMEOUT_MS = 8e3;
+  }
+});
+
 // src/hosts.ts
 function formatAgentStatus(agent, body) {
   const dot = body.online ? "\u{1F7E2} online" : "\u26AA offline";
@@ -39693,7 +39858,7 @@ function serverHostLabel(server2, allServers) {
   } catch {
     return safeHandle(String(server2));
   }
-  const path15 = u.pathname.replace(/\/+$/, "");
+  const path17 = u.pathname.replace(/\/+$/, "");
   let label = u.host;
   if (allServers) {
     const mine = normalizeServerUrl(String(server2));
@@ -39707,8 +39872,8 @@ function serverHostLabel(server2, allServers) {
     }
     const clash = (key) => others.some((x) => key(x) === key(u));
     if (clash((x) => x.host)) {
-      label = u.host + path15;
-      if (clash((x) => x.host + x.pathname.replace(/\/+$/, ""))) label = `${u.protocol}//${u.host}${path15}`;
+      label = u.host + path17;
+      if (clash((x) => x.host + x.pathname.replace(/\/+$/, ""))) label = `${u.protocol}//${u.host}${path17}`;
     }
   }
   return safeHandle(label);
@@ -40924,9 +41089,9 @@ var init_which = __esm({
 // src/run-store.ts
 import fs4 from "node:fs";
 import np4 from "node:path";
-function writeAtomic(path15, text5) {
-  fs4.mkdirSync(np4.dirname(path15), { recursive: true });
-  const tmp = `${path15}.tmp.${process.pid}`;
+function writeAtomic(path17, text5) {
+  fs4.mkdirSync(np4.dirname(path17), { recursive: true });
+  const tmp = `${path17}.tmp.${process.pid}`;
   const fd = fs4.openSync(tmp, "w", 384);
   try {
     fs4.writeFileSync(fd, text5);
@@ -40957,10 +41122,10 @@ function writeAtomic(path15, text5) {
     throw e;
   }
   fs4.closeSync(fd);
-  fs4.renameSync(tmp, path15);
+  fs4.renameSync(tmp, path17);
   let dfd = null;
   try {
-    dfd = fs4.openSync(np4.dirname(path15), "r");
+    dfd = fs4.openSync(np4.dirname(path17), "r");
     fs4.fsyncSync(dfd);
   } catch (e) {
     if (e?.code === "EIO" || e?.code === "ENOSPC") throw e;
@@ -40973,20 +41138,20 @@ function writeAtomic(path15, text5) {
     }
   }
 }
-function appendJournal(path15, rec) {
+function appendJournal(path17, rec) {
   try {
-    fs4.mkdirSync(np4.dirname(path15), { recursive: true });
-    fs4.appendFileSync(path15, JSON.stringify(rec) + "\n", { mode: 384 });
+    fs4.mkdirSync(np4.dirname(path17), { recursive: true });
+    fs4.appendFileSync(path17, JSON.stringify(rec) + "\n", { mode: 384 });
     return true;
   } catch {
     return false;
   }
 }
-function readJournal(path15) {
+function readJournal(path17) {
   const state = { runs: /* @__PURE__ */ new Map(), replies: /* @__PURE__ */ new Map(), malformed: 0 };
   let text5 = "";
   try {
-    text5 = fs4.readFileSync(path15, "utf8");
+    text5 = fs4.readFileSync(path17, "utf8");
   } catch (e) {
     if (e?.code === "ENOENT") return state;
     return { ...state, readError: String(e?.message ?? e) };
@@ -41053,10 +41218,10 @@ function readJournal(path15) {
   }
   return state;
 }
-function readMarker(path15) {
+function readMarker(path17) {
   let text5;
   try {
-    text5 = fs4.readFileSync(path15, "utf8");
+    text5 = fs4.readFileSync(path17, "utf8");
   } catch (e) {
     return e?.code === "ENOENT" ? { kind: "absent" } : { kind: "unreadable", error: String(e?.message ?? e) };
   }
@@ -41068,25 +41233,25 @@ function readMarker(path15) {
     return { kind: "unreadable", error: String(e?.message ?? e) };
   }
 }
-function writeMarker(path15, marker) {
-  writeAtomic(path15, JSON.stringify(marker, null, 2));
+function writeMarker(path17, marker) {
+  writeAtomic(path17, JSON.stringify(marker, null, 2));
 }
-function removeMarker(path15, sessionId) {
-  const cur = readMarker(path15);
+function removeMarker(path17, sessionId) {
+  const cur = readMarker(path17);
   if (cur.kind === "absent") return true;
   if (cur.kind === "unreadable") return false;
   if (cur.marker.sessionId !== sessionId) return false;
   try {
-    fs4.unlinkSync(path15);
+    fs4.unlinkSync(path17);
     return true;
   } catch (e) {
     return e?.code === "ENOENT";
   }
 }
-function readHeld(path15) {
+function readHeld(path17) {
   let text5;
   try {
-    text5 = fs4.readFileSync(path15, "utf8");
+    text5 = fs4.readFileSync(path17, "utf8");
   } catch (e) {
     return e?.code === "ENOENT" ? { ok: true, held: { replyIds: {} } } : { ok: false, error: String(e?.message ?? e) };
   }
@@ -41098,11 +41263,11 @@ function readHeld(path15) {
     return { ok: false, error: String(e?.message ?? e) };
   }
 }
-function writeHeld(path15, held) {
-  writeAtomic(path15, JSON.stringify(held, null, 2));
+function writeHeld(path17, held) {
+  writeAtomic(path17, JSON.stringify(held, null, 2));
 }
-function writeAutoConfigFile(path15, cfg2) {
-  writeAtomic(path15, JSON.stringify(cfg2, null, 2));
+function writeAutoConfigFile(path17, cfg2) {
+  writeAtomic(path17, JSON.stringify(cfg2, null, 2));
 }
 function pidAlive(pid) {
   if (!pid) return false;
@@ -41293,34 +41458,34 @@ var init_responder_lock = __esm({
 // src/config-mutex.ts
 import fs6 from "node:fs";
 import np6 from "node:path";
-function openMutex(path15) {
-  const cached2 = dbs.get(path15);
+function openMutex(path17) {
+  const cached2 = dbs.get(path17);
   if (cached2) return cached2;
   const mod = loadSqliteModule();
-  if (!mod) throw new ConfigMutexError(path15, new Error(sqliteAvailability().ok ? "node:sqlite unavailable" : sqliteAvailability().reason));
+  if (!mod) throw new ConfigMutexError(path17, new Error(sqliteAvailability().ok ? "node:sqlite unavailable" : sqliteAvailability().reason));
   try {
-    fs6.mkdirSync(np6.dirname(path15), { recursive: true });
-    const db = new mod.DatabaseSync(`${path15}.mutex.db`);
+    fs6.mkdirSync(np6.dirname(path17), { recursive: true });
+    const db = new mod.DatabaseSync(`${path17}.mutex.db`);
     db.exec("PRAGMA busy_timeout = 5000");
     db.exec("CREATE TABLE IF NOT EXISTS mutex (id INTEGER PRIMARY KEY CHECK (id = 1), holder INTEGER NOT NULL, at INTEGER NOT NULL)");
-    dbs.set(path15, db);
+    dbs.set(path17, db);
     return db;
   } catch (e) {
-    throw new ConfigMutexError(path15, e);
+    throw new ConfigMutexError(path17, e);
   }
 }
-function withConfigMutex(path15, fn) {
+function withConfigMutex(path17, fn) {
   if (depth > 0) return fn();
-  const db = openMutex(path15);
+  const db = openMutex(path17);
   try {
     db.exec("BEGIN IMMEDIATE");
   } catch (e) {
-    dbs.delete(path15);
+    dbs.delete(path17);
     try {
       db.close();
     } catch {
     }
-    throw new ConfigMutexError(path15, e);
+    throw new ConfigMutexError(path17, e);
   }
   depth++;
   try {
@@ -41345,8 +41510,8 @@ var init_config_mutex = __esm({
     init_responder_lock();
     dbs = /* @__PURE__ */ new Map();
     ConfigMutexError = class extends Error {
-      constructor(path15, cause) {
-        super(`the config write mutex ${path15}.mutex.db cannot be taken (${cause?.message ?? cause}) \u2014 the write was NOT performed, it would not have been serialized`);
+      constructor(path17, cause) {
+        super(`the config write mutex ${path17}.mutex.db cannot be taken (${cause?.message ?? cause}) \u2014 the write was NOT performed, it would not have been serialized`);
         this.name = "ConfigMutexError";
       }
     };
@@ -41355,7 +41520,7 @@ var init_config_mutex = __esm({
 });
 
 // src/run-reporter.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import np7 from "node:path";
 var RUN_HEARTBEAT_MS, safeUser, RunReporter;
 var init_run_reporter = __esm({
@@ -41374,7 +41539,7 @@ var init_run_reporter = __esm({
         this.replyDeadlineMs = deps.replyDeadlineMs ?? REPLY_DEADLINE_MS;
       }
       deps;
-      sessionId = randomUUID2();
+      sessionId = randomUUID3();
       runs = /* @__PURE__ */ new Map();
       replies = /* @__PURE__ */ new Map();
       /** Unacknowledged run frames, keyed `${runId}:${seq}`, in send order. */
@@ -41535,7 +41700,7 @@ var init_run_reporter = __esm({
       /** Mint the id and journal the run BEFORE the caller spawns anything. */
       startRun(meta) {
         if (!this.started) throw new Error("run reporter not started \u2014 the session marker must be established before any autonomous work");
-        const runId = randomUUID2();
+        const runId = randomUUID3();
         const startedAt = this.now();
         const st = { runId, seq: 0, meta, startedAt, epoch: this.deps.workEpoch(), durable: true, ended: false };
         const seq = this.nextSeq(st);
@@ -41621,7 +41786,7 @@ var init_run_reporter = __esm({
        *  finalization verdict, or the cancel path. `onSettled` fires exactly once. */
       queueReply(runId, target, text5, onSettled) {
         if (!this.started) throw new Error("run reporter not started");
-        const replyId = randomUUID2();
+        const replyId = randomUUID3();
         const createdAt = this.now();
         const epoch = this.deps.workEpoch();
         const groupGen = target.groupId ? this.deps.groupGenOf?.(target.groupId) : void 0;
@@ -44064,9 +44229,9 @@ var init_autonomous = __esm({
     persistFailureForTest = null;
     cfg = { ...DEFAULTS2 };
     AutoConfigWriteError = class extends Error {
-      constructor(path15, cause, whileDisabling) {
-        super(whileDisabling ? `durable cancellation failed: could not write ${path15} (${cause?.message ?? cause}). Autonomy is OFF in this process and its work was stopped, but the setting could not be saved \u2014 the next start may still read the old config.` : `could not save the autonomy config to ${path15} (${cause?.message ?? cause})`);
-        this.path = path15;
+      constructor(path17, cause, whileDisabling) {
+        super(whileDisabling ? `durable cancellation failed: could not write ${path17} (${cause?.message ?? cause}). Autonomy is OFF in this process and its work was stopped, but the setting could not be saved \u2014 the next start may still read the old config.` : `could not save the autonomy config to ${path17} (${cause?.message ?? cause})`);
+        this.path = path17;
         this.cause = cause;
         this.whileDisabling = whileDisabling;
         this.name = "AutoConfigWriteError";
@@ -44535,8 +44700,8 @@ async function mintFileLink(hub, token, fileId) {
     clearTimeout(killer);
   }
 }
-async function remoteUploadCommand(c2, ctx, target, path15, caption, where, signal) {
-  const fname = crossBasename(path15);
+async function remoteUploadCommand(c2, ctx, target, path17, caption, where, signal) {
+  const fname = crossBasename(path17);
   const fmime = mimeOf(fname);
   const hub = ctx.serverUrl.replace(/\/$/, "");
   try {
@@ -44595,10 +44760,10 @@ ${uploadUrl}
 
 \u{1F4BB} Or run this ONE command on a machine that HAS the file and has internet (the user's terminal \u2014 NOT a sandboxed assistant environment without egress):
 
-curl -sS -X POST ${shq(uploadUrl)} -H ${shq(`Content-Type: ${fmime}`)} --data-binary @${shPathArg(path15)}
+curl -sS -X POST ${shq(uploadUrl)} -H ${shq(`Content-Type: ${fmime}`)} --data-binary @${shPathArg(path17)}
 
 Windows PowerShell instead:
-Invoke-RestMethod -Uri ${psq(uploadUrl)} -Method Post -ContentType ${psq(fmime)} -InFile ${psPathArg(path15)}
+Invoke-RestMethod -Uri ${psq(uploadUrl)} -Method Post -ContentType ${psq(fmime)} -InFile ${psPathArg(path17)}
 
 The link is single-use and expires in ${mins} min; the file name and caption are already attached to it. Run it now, then confirm delivery from its JSON response ({"ok":true,...}).
 \u26A0\uFE0F If YOU are a sandboxed assistant with no network egress and the file lives in YOUR sandbox: this command cannot run anywhere that can see the file. Instead \u2014 if the file is 256KB or less, call this tool again with dataUrl (base64 it) + fileName; if larger, PRESENT the file to the user for download and tell them to open the LINK ABOVE and pick the downloaded file. Do NOT paste this curl into your own shell.
@@ -44610,7 +44775,7 @@ Never base64 anything over 256KB through dataUrl \u2014 that is minutes of model
   const web = hub.replace("acp-hub.", "acp-web.").replace(":4000", ":4321");
   const dropLink = target.to ? `${web}/?to=${encodeURIComponent(target.to)}` : `${web}/?group=${encodeURIComponent(target.groupId)}`;
   const q = (target.to ? `to=${encodeURIComponent(target.to)}` : `groupId=${encodeURIComponent(target.groupId)}`) + `&fileName=${encodeURIComponent(fname)}` + (caption ? `&caption=${encodeURIComponent(caption)}` : "");
-  const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer $JEFRI_TOKEN" -H ${shq(`Content-Type: ${fmime}`)} --data-binary @${shPathArg(path15)}`;
+  const cmd = `curl -s -X POST ${shq(`${hub}/api/files?${q}`)} -H "Authorization: Bearer $JEFRI_TOKEN" -H ${shq(`Content-Type: ${fmime}`)} --data-binary @${shPathArg(path17)}`;
   return {
     fail: `This is the cloud connector, so it can't read "${fname}" from that path, and the upload-link service didn't answer. Options:
 
@@ -44881,12 +45046,16 @@ async function uploadFileHttp(c2, serverUrl, target, fileName, mime, bytes, capt
   if (caption) params.set("caption", caption);
   const headers = { Authorization: `Bearer ${c2.token}`, "Content-Type": mime };
   if (idem) headers["idempotency-key"] = idem;
+  const desktop = !isStateless(c2) && c2.registeredRecoveryEnabled;
   let res;
   try {
     res = await fetch(`${hub}/api/files?${params.toString()}`, {
       method: "POST",
       headers,
-      body: Buffer.from(bytes)
+      body: Buffer.from(bytes),
+      // Same payload-scaled allowance as the SDK upload path. This covers the
+      // response body too; a silent hub must not hang this Desktop tool forever.
+      ...desktop ? { signal: AbortSignal.timeout(Math.ceil(3e4 + bytes.length / 20)) } : {}
     });
   } catch (e) {
     const err = new Error(`upload failed: ${e?.message ?? e}`);
@@ -44899,6 +45068,10 @@ async function uploadFileHttp(c2, serverUrl, target, fileName, mime, bytes, capt
     if (res.status >= 500) err.jefriAmbiguous = true;
     throw err;
   }
+  if (desktop) {
+    const receipt = await res.json().catch(() => null);
+    if (receipt?.ok !== true) throw new Error("upload response did not confirm delivery");
+  }
 }
 function defaultCaps(local) {
   return local ? [CAP.LOCAL_FS, CAP.PERSISTENT] : [CAP.REMOTE_SANDBOX, CAP.AUTONOMY, CAP.SEARCH];
@@ -45262,9 +45435,12 @@ ${e?.message ?? e}`);
     async () => {
       const unbound = await ctx.identityStatus?.();
       if (unbound) return ok3(unbound);
-      return withClient(
-        async (c2) => ok3(`You are "${c2.identity.displayName}" (@${safeHandle(c2.identity.username)}) on Jefri Chat at ${ctx.serverUrl}, status: online.`)
-      );
+      return withClient(async (c2) => {
+        const desktop = !isStateless(c2) && c2.registeredRecoveryEnabled;
+        const status = desktop ? c2.connectionStatus : "online";
+        const reason = desktop && c2.terminalCode ? ` Connection stopped: ${c2.terminalCode}; automatic reconnection is disabled.` : "";
+        return ok3(`You are "${c2.identity.displayName}" (@${safeHandle(c2.identity.username)}) on Jefri Chat at ${ctx.serverUrl}, status: ${status}.${reason}`);
+      });
     }
   );
   server2.registerTool(
@@ -45303,8 +45479,8 @@ ${e?.message ?? e}`);
     })
   );
   const NOT_OWNER = "This only works when you run the Jefri connector as your OWN (human) account and own this agent. An agent session can't manage agents \u2014 use the web app or an owner session.";
-  const ownerApi = async (c2, path15, method) => {
-    const res = await fetch(`${ctx.serverUrl}${path15}`, {
+  const ownerApi = async (c2, path17, method) => {
+    const res = await fetch(`${ctx.serverUrl}${path17}`, {
       method,
       headers: { Authorization: `Bearer ${c2.token}` }
     });
@@ -45407,6 +45583,12 @@ Use jefri_agent_apps with agent=<name> to see its live app + active state.`,
           return failAmbiguous(`Message send failed: ${e?.message ?? e}.`);
         }
       }
+      if (c2.registeredRecoveryEnabled) {
+        const sent = await sendConfirmed(c2, { to }, text5);
+        if (sent.outcome === "rejected") return fail(`Message rejected: ${sent.reason}`);
+        if (sent.outcome === "ambiguous") return failAmbiguous(sent.reason);
+        return ok3(`Sent to @${safeHandle(to)}: "${text5}"`);
+      }
       const r = await confirmWrite(c2, () => c2.message(to, text5));
       if (r.error) return fail(`Message rejected: ${r.error}`);
       return ok3(`Sent to @${safeHandle(to)}: "${text5}"`);
@@ -45457,18 +45639,18 @@ ${fp}`);
         caption: external_exports.string().optional().describe("optional private E2E caption sent as a separate encrypted message")
       }
     },
-    async ({ to, path: path15, dataUrl, fileName, caption }) => withClient(async (c2) => {
+    async ({ to, path: path17, dataUrl, fileName, caption }) => withClient(async (c2) => {
       let name, mime, url;
-      if (path15) {
+      if (path17) {
         if (!ctx.local) {
           return fail(
             `I can't read local files from the cloud connector. Use a local/stdin Jefri Chat connector, or open the web chat and drop the file there.`
           );
         }
-        const abs = resolveLocalFile(resolveUserPath(path15));
+        const abs = resolveLocalFile(resolveUserPath(path17));
         if (!abs) {
           return fail(
-            `I can't find a file at ${path15} on this machine.`
+            `I can't find a file at ${path17} on this machine.`
           );
         }
         const buf = fs8.readFileSync(abs);
@@ -45520,18 +45702,18 @@ ${fp}`);
         caption: external_exports.string().optional().describe("optional private E2E group caption sent separately")
       }
     },
-    async ({ groupId, path: path15, dataUrl, fileName, caption }) => withClient(async (c2) => {
+    async ({ groupId, path: path17, dataUrl, fileName, caption }) => withClient(async (c2) => {
       let name, mime, url;
-      if (path15) {
+      if (path17) {
         if (!ctx.local) {
           return fail(
             `I can't read local files from the cloud connector. Use a local/stdin Jefri Chat connector, or open the web chat and drop the file there.`
           );
         }
-        const abs = resolveLocalFile(resolveUserPath(path15));
+        const abs = resolveLocalFile(resolveUserPath(path17));
         if (!abs) {
           return fail(
-            `I can't find a file at ${path15} on this machine.`
+            `I can't find a file at ${path17} on this machine.`
           );
         }
         const buf = fs8.readFileSync(abs);
@@ -45734,17 +45916,17 @@ ${lines.join("\n")}`
         fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ to, path: path15, caption, dataUrl, fileUrl, fileName }, extra) => withClient(async (c2) => {
+    async ({ to, path: path17, caption, dataUrl, fileUrl, fileName }, extra) => withClient(async (c2) => {
       let name, mime, url;
       let inlineBytes = null;
-      if (path15) {
+      if (path17) {
         if (!ctx.local) {
-          const r = await remoteUploadCommand(c2, ctx, { to }, path15, caption, `@${safeHandle(to)}`, extra?.signal);
+          const r = await remoteUploadCommand(c2, ctx, { to }, path17, caption, `@${safeHandle(to)}`, extra?.signal);
           return "ok" in r ? ok3(r.ok) : fail(r.fail);
         }
-        const abs = resolveLocalFile(resolveUserPath(path15));
+        const abs = resolveLocalFile(resolveUserPath(path17));
         if (!abs) {
-          return fail(`I can't find a file at ${path15} on this machine.`);
+          return fail(`I can't find a file at ${path17} on this machine.`);
         }
         const buf = fs8.readFileSync(abs);
         name = np9.basename(abs);
@@ -45778,7 +45960,7 @@ ${lines.join("\n")}`
             name,
             mime,
             rawBytes,
-            retryKey(extra, fileSendIdemParts(to, { path: path15, fileUrl, fileName }, name))
+            retryKey(extra, fileSendIdemParts(to, { path: path17, fileUrl, fileName }, name))
           );
           if (res?.deduplicated)
             return ok3(`Already delivered \u2014 ${name} matched a recent identical upload and was suppressed as a retry (round 28 #2: suppression is SAID, never a false "Sent"). If you meant a new copy, send it again.`);
@@ -45787,8 +45969,8 @@ ${lines.join("\n")}`
         }
         return ok3(`Sent \u{1F4CE} ${name} (${MB(rawBytes.length)} MB) to @${safeHandle(to)}${caption ? ` \u2014 "${caption}"` : ""}`);
       }
-      const fileIdem = retryKey(extra, fileSendIdemParts(to, { path: path15, fileUrl, fileName }, name));
-      if (rawBytes.length > WS_SAFE_FILE_BYTES || fileIdem) {
+      const fileIdem = retryKey(extra, fileSendIdemParts(to, { path: path17, fileUrl, fileName }, name));
+      if (c2.registeredRecoveryEnabled || rawBytes.length > WS_SAFE_FILE_BYTES || fileIdem) {
         try {
           await uploadFileHttp(c2, ctx.serverUrl, { to }, name, mime, rawBytes, caption, fileIdem);
         } catch (e2) {
@@ -45839,7 +46021,7 @@ ${lines.join("\n")}`
         return ok3(`Sent \u{1F4C4} ${fileName} (${MB(contentBytes.length)} MB) to @${safeHandle(to)}${caption ? ` \u2014 "${caption}"` : ""}`);
       }
       const textIdem = retryKey(extra, ["file", to, fileName, createHash2("sha256").update(contentBytes).digest("hex")]);
-      if (contentBytes.length > WS_SAFE_FILE_BYTES || textIdem) {
+      if (c2.registeredRecoveryEnabled || contentBytes.length > WS_SAFE_FILE_BYTES || textIdem) {
         try {
           await uploadFileHttp(c2, ctx.serverUrl, { to }, fileName, mime, contentBytes, caption, textIdem);
         } catch (e2) {
@@ -45867,12 +46049,12 @@ ${lines.join("\n")}`
         caption: external_exports.string().optional().describe("optional text caption to send with it")
       }
     },
-    async ({ to, path: path15, caption }, extra) => withClient(async (c2) => {
+    async ({ to, path: path17, caption }, extra) => withClient(async (c2) => {
       if (!ctx.local)
         return fail(
           `Sending a folder reads files off disk, which this connector can't do \u2014 it runs in the cloud. Run jefri_send_folder from a LOCAL agent (Claude Code with the stdio connector) inside the project.`
         );
-      const rawDir = path15 && path15.trim() ? path15 : ctx.cwd ?? process.cwd();
+      const rawDir = path17 && path17.trim() ? path17 : ctx.cwd ?? process.cwd();
       const dir = resolveUserPath(rawDir);
       if (!fs8.existsSync(dir))
         return fail(
@@ -46245,11 +46427,11 @@ ${cmd}
         kind: external_exports.enum(["file", "contract", "skill", "note"]).optional()
       }
     },
-    async ({ departmentId, path: path15, kind }) => withClient(async (c2) => {
-      const fname = np9.basename(path15.startsWith("~") ? path15.slice(1) : path15);
+    async ({ departmentId, path: path17, kind }) => withClient(async (c2) => {
+      const fname = np9.basename(path17.startsWith("~") ? path17.slice(1) : path17);
       const mime = mimeOf(fname);
       const q = `name=${encodeURIComponent(fname)}&kind=${kind ?? "file"}`;
-      const cmd = `curl -s -X POST ${shq(`${hubBase()}/api/departments/${departmentId}/files?${q}`)} -H "Authorization: Bearer $JEFRI_TOKEN" -H "Content-Type: ${mime}" --data-binary @${shq(path15)}`;
+      const cmd = `curl -s -X POST ${shq(`${hubBase()}/api/departments/${departmentId}/files?${q}`)} -H "Authorization: Bearer $JEFRI_TOKEN" -H "Content-Type: ${mime}" --data-binary @${shq(path17)}`;
       return ok3(`To add ${fname} to the department, run in the terminal:
 
 ${cmd}
@@ -46331,10 +46513,10 @@ ${cmd}
       description: "Add a local file to this agent's document memory. Memory is CURATED BY THE OWNER, so this returns a command that uses the OWNER token (the agent token can't add docs) \u2014 or the owner can upload it from the agent's page in the web app. Documents follow the agent's visibility (public \u2192 owner's connections can read; shared \u2192 chosen people; private \u2192 owner only). Warn before uploading anything sensitive to a public agent.",
       inputSchema: { path: external_exports.string().describe("local file path to upload") }
     },
-    async ({ path: path15 }) => withClient(async (c2) => {
-      const fname = np9.basename(path15.startsWith("~") ? path15.slice(1) : path15);
+    async ({ path: path17 }) => withClient(async (c2) => {
+      const fname = np9.basename(path17.startsWith("~") ? path17.slice(1) : path17);
       const mime = mimeOf(fname);
-      const cmd = `curl -s -X POST ${shq(`${hubBase()}/api/agents/${encodeURIComponent(c2.identity.username)}/docs?name=${encodeURIComponent(fname)}`)} -H "Authorization: Bearer $JEFRI_OWNER_TOKEN" -H "Content-Type: ${mime}" --data-binary @${shq(path15)}`;
+      const cmd = `curl -s -X POST ${shq(`${hubBase()}/api/agents/${encodeURIComponent(c2.identity.username)}/docs?name=${encodeURIComponent(fname)}`)} -H "Authorization: Bearer $JEFRI_OWNER_TOKEN" -H "Content-Type: ${mime}" --data-binary @${shq(path17)}`;
       return ok3(
         `Adding to agent memory is OWNER-only, so this uses your owner token. Set it first (export JEFRI_OWNER_TOKEN=\u2026 from the app), then run:
 
@@ -46538,6 +46720,12 @@ Or just upload ${fname} from the agent's page in the web app.`
           return failAmbiguous(`Group post failed: ${e?.message ?? e}.`);
         }
       }
+      if (c2.registeredRecoveryEnabled) {
+        const sent = await sendConfirmed(c2, { groupId }, text5);
+        if (sent.outcome === "rejected") return fail(`Couldn't post to the group: ${sent.reason}`);
+        if (sent.outcome === "ambiguous") return failAmbiguous(sent.reason);
+        return ok3("Posted to the group.");
+      }
       const r = await confirmWrite(c2, () => c2.groupMessage(groupId, text5));
       if (r.error) return fail(`Couldn't post to the group: ${r.error}`);
       return ok3(`Posted to the group.`);
@@ -46557,16 +46745,16 @@ Or just upload ${fname} from the agent's page in the web app.`
         fileName: external_exports.string().optional().describe("file name (used with dataUrl, or to name a fileUrl download)")
       }
     },
-    async ({ groupId, path: path15, caption, dataUrl, fileUrl, fileName }, extra) => withClient(async (c2) => {
+    async ({ groupId, path: path17, caption, dataUrl, fileUrl, fileName }, extra) => withClient(async (c2) => {
       let name, mime, url;
       let inlineBytes = null;
-      if (path15) {
+      if (path17) {
         if (!ctx.local) {
-          const r = await remoteUploadCommand(c2, ctx, { groupId }, path15, caption, "the group", extra?.signal);
+          const r = await remoteUploadCommand(c2, ctx, { groupId }, path17, caption, "the group", extra?.signal);
           return "ok" in r ? ok3(r.ok) : fail(r.fail);
         }
-        const abs = resolveLocalFile(resolveUserPath(path15));
-        if (!abs) return fail(`I can't find a file at ${path15} on this machine.`);
+        const abs = resolveLocalFile(resolveUserPath(path17));
+        if (!abs) return fail(`I can't find a file at ${path17} on this machine.`);
         const buf = fs8.readFileSync(abs);
         name = np9.basename(abs);
         mime = mimeOf(name);
@@ -46599,7 +46787,7 @@ Or just upload ${fname} from the agent's page in the web app.`
             name,
             mime,
             rawBytes,
-            retryKey(extra, fileSendIdemParts(groupId, { path: path15, fileUrl, fileName }, name))
+            retryKey(extra, fileSendIdemParts(groupId, { path: path17, fileUrl, fileName }, name))
           );
           if (res?.deduplicated)
             return ok3(`Already delivered \u2014 ${name} matched a recent identical upload and was suppressed as a retry. If you meant a new copy, send it again.`);
@@ -46608,8 +46796,8 @@ Or just upload ${fname} from the agent's page in the web app.`
         }
         return ok3(`Sent \u{1F4CE} ${name} (${MB(rawBytes.length)} MB) to the group.`);
       }
-      const fileIdem = retryKey(extra, fileSendIdemParts(groupId, { path: path15, fileUrl, fileName }, name));
-      if (rawBytes.length > WS_SAFE_FILE_BYTES || fileIdem) {
+      const fileIdem = retryKey(extra, fileSendIdemParts(groupId, { path: path17, fileUrl, fileName }, name));
+      if (c2.registeredRecoveryEnabled || rawBytes.length > WS_SAFE_FILE_BYTES || fileIdem) {
         try {
           await uploadFileHttp(c2, ctx.serverUrl, { groupId }, name, mime, rawBytes, caption, fileIdem);
         } catch (e2) {
@@ -47356,6 +47544,7 @@ var init_tools = __esm({
     "use strict";
     init_zod();
     init_stream_utils();
+    init_send_confirmed();
     init_hosts();
     init_message_history();
     init_src();
@@ -47586,7 +47775,7 @@ ${notice}` : text5 },
 });
 
 // src/runtime-identity.ts
-import { randomBytes as randomBytes3, randomUUID as randomUUID3 } from "node:crypto";
+import { randomBytes as randomBytes3, randomUUID as randomUUID4 } from "node:crypto";
 function runtimeAnnouncement() {
   return { ...RUNTIME };
 }
@@ -47595,7 +47784,7 @@ var init_runtime_identity = __esm({
   "src/runtime-identity.ts"() {
     "use strict";
     RUNTIME = Object.freeze({
-      id: randomUUID3(),
+      id: randomUUID4(),
       proof: randomBytes3(32).toString("hex"),
       pid: process.pid,
       startedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -47995,10 +48184,10 @@ function ensureDirs() {
   }
 }
 function publishEndpoint(d, deps = {}) {
-  const writeFile = deps.writeFileSync ?? ((path15, data, opts) => fs10.writeFileSync(path15, data, opts));
+  const writeFile = deps.writeFileSync ?? ((path17, data, opts) => fs10.writeFileSync(path17, data, opts));
   const rename = deps.renameSync ?? ((from, to) => fs10.renameSync(from, to));
-  const unlink = deps.unlinkSync ?? ((path15) => fs10.unlinkSync(path15));
-  const readFile = deps.readFileSync ?? ((path15) => fs10.readFileSync(path15, "utf8"));
+  const unlink = deps.unlinkSync ?? ((path17) => fs10.unlinkSync(path17));
+  const readFile = deps.readFileSync ?? ((path17) => fs10.readFileSync(path17, "utf8"));
   ensureDirs();
   if (!d.procToken) d = { ...d, procToken: procToken(d.pid) };
   if (!d.nonce) d = { ...d, nonce: INSTANCE_NONCE };
@@ -49346,10 +49535,10 @@ data: ${JSON.stringify(data)}
     if (!isLoopback(req.socket.remoteAddress)) return send(res, 403, "forbidden");
     if (!hostOk(req)) return send(res, 421, "bad host");
     const url = new URL(req.url ?? "/", `http://127.0.0.1:${port}`);
-    const path15 = url.pathname;
+    const path17 = url.pathname;
     const method = req.method ?? "GET";
-    if (method === "GET" && path15.startsWith("/launch/")) {
-      const nonce = path15.slice("/launch/".length);
+    if (method === "GET" && path17.startsWith("/launch/")) {
+      const nonce = path17.slice("/launch/".length);
       if (!launchNonce || !safeEqual(nonce, launchNonce)) return send(res, 404, "not found");
       launchNonce = null;
       sessionExpiry = Date.now() + ttlMs;
@@ -49363,15 +49552,15 @@ data: ${JSON.stringify(data)}
       return res.end();
     }
     if (!authed(req)) return send(res, 401, "unauthorized");
-    if (method === "GET" && path15 === "/") return send(res, 200, pageHtml2, "text/html; charset=utf-8");
-    if (method === "GET" && path15 === "/app.js") return send(res, 200, appJs, "application/javascript; charset=utf-8");
-    if (method === "GET" && path15 === "/app.css") return send(res, 200, appCss, "text/css; charset=utf-8");
-    if (method === "GET" && path15 === "/api/inbox") {
+    if (method === "GET" && path17 === "/") return send(res, 200, pageHtml2, "text/html; charset=utf-8");
+    if (method === "GET" && path17 === "/app.js") return send(res, 200, appJs, "application/javascript; charset=utf-8");
+    if (method === "GET" && path17 === "/app.css") return send(res, 200, appCss, "text/css; charset=utf-8");
+    if (method === "GET" && path17 === "/api/inbox") {
       const selected = opts.selectKey && records.has(opts.selectKey) ? opts.selectKey : null;
       const body = { messages: snapshot2().map(publishRow), csrf: csrfToken, snapshotSeq: seq, agents: withDisplay(agentsSnapshot), selected, expiresAt: sessionExpiry, drafts: { durable: !!drafts?.durable } };
       return send(res, 200, JSON.stringify(body), "application/json");
     }
-    if (method === "GET" && path15 === "/api/message") {
+    if (method === "GET" && path17 === "/api/message") {
       const key = url.searchParams.get("key") ?? "";
       const rec = records.get(key);
       if (!rec) return send(res, 404, JSON.stringify({ error: "unknown or stale message key" }), "application/json");
@@ -49379,13 +49568,13 @@ data: ${JSON.stringify(data)}
       const body = { key, html: renderMessageHtml(source) };
       return send(res, 200, JSON.stringify(body), "application/json");
     }
-    if (method === "POST" && (path15 === "/api/draft" || path15 === "/api/draft/discard")) {
+    if (method === "POST" && (path17 === "/api/draft" || path17 === "/api/draft/discard")) {
       if (!mutationGuards(req)) return send(res, 403, JSON.stringify({ error: "forbidden" }), "application/json");
       if (!drafts) return send(res, 503, JSON.stringify({ error: "drafts are not available on this runtime", code: "drafts_unavailable" }), "application/json");
       const body = await readJson(req).catch(() => null);
       const key = body && typeof body.key === "string" ? body.key : "";
       if (!records.has(key)) return send(res, 409, JSON.stringify({ error: "unknown or stale message key" }), "application/json");
-      if (path15 === "/api/draft/discard") {
+      if (path17 === "/api/draft/discard") {
         const composeId2 = body && typeof body.composeId === "string" ? body.composeId : "";
         const rev = body && Number.isInteger(body.rev) ? Number(body.rev) : NaN;
         if (!composeId2 || !Number.isFinite(rev)) return send(res, 400, JSON.stringify({ error: "composeId and rev are required" }), "application/json");
@@ -49400,7 +49589,7 @@ data: ${JSON.stringify(data)}
       if (!r.ok) return send(res, 409, JSON.stringify({ error: "draft_conflict", draft: r.conflict }), "application/json");
       return send(res, 200, JSON.stringify({ ok: true, draft: r.draft }), "application/json");
     }
-    if (method === "POST" && (path15 === "/api/reply" || path15 === "/api/handle" || path15 === "/api/mark-read")) {
+    if (method === "POST" && (path17 === "/api/reply" || path17 === "/api/handle" || path17 === "/api/mark-read")) {
       if (!mutationGuards(req)) return send(res, 403, JSON.stringify({ error: "forbidden" }), "application/json");
       const body = await readJson(req).catch(() => null);
       const key = body && typeof body.key === "string" ? body.key : "";
@@ -49412,7 +49601,7 @@ data: ${JSON.stringify(data)}
         const status = code3 === "private_unsupported" || code3 === "unknown_method" ? 422 : code3 === "unknown_agent" || code3 === "ambiguous_agent" || code3 === "offline" ? 409 : 502;
         return send(res, status, JSON.stringify({ error: e?.message ?? "control error", code: code3 }), "application/json");
       };
-      if (path15 === "/api/reply") {
+      if (path17 === "/api/reply") {
         const text5 = body && typeof body.text === "string" ? body.text : "";
         if (!text5.trim()) return send(res, 400, JSON.stringify({ error: "empty reply" }), "application/json");
         const attemptId = body && typeof body.attemptId === "string" && /^[A-Za-z0-9-]{1,64}$/.test(body.attemptId) ? body.attemptId : void 0;
@@ -49443,7 +49632,7 @@ data: ${JSON.stringify(data)}
         emit("sent", { key: rec.key, ...attemptId ? { attemptId } : {}, outcome, ...draftRef ? { draft: draftRef } : {} });
         return send(res, 200, JSON.stringify({ ok: true, ...attemptId ? { attemptId } : {}, outcome }), "application/json");
       }
-      if (path15 === "/api/handle") {
+      if (path17 === "/api/handle") {
         if (handleStarting.has(rec.key)) return send(res, 409, JSON.stringify({ error: "a handoff is already being started for this message", code: "busy" }), "application/json");
         handleStarting.add(rec.key);
         try {
@@ -49477,7 +49666,7 @@ data: ${JSON.stringify(data)}
       emit("updated", publishRow(rec));
       return send(res, 200, JSON.stringify({ ok: true }), "application/json");
     }
-    if (method === "GET" && path15 === "/api/events") {
+    if (method === "GET" && path17 === "/api/events") {
       await ensureSubscribed();
       res.writeHead(200, { ...securityHeaders(), "Content-Type": "text/event-stream", Connection: "keep-alive" });
       res.write(": ok\n\n");
@@ -49562,7 +49751,7 @@ var init_popup_broker = __esm({
 // src/popup-drafts.ts
 import fs11 from "node:fs";
 import np12 from "node:path";
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 function openPopupDrafts(opts) {
   const now = opts.now ?? (() => Date.now());
   const avail = sqliteAvailability();
@@ -49604,7 +49793,7 @@ function openPopupDrafts(opts) {
         if (o.composeId === void 0) {
           const cur = get(key);
           if (cur) return { ok: false, conflict: cur };
-          const composeId = randomUUID4();
+          const composeId = randomUUID5();
           db.prepare("INSERT INTO popup_drafts (key, compose_id, rev, text, at) VALUES (?, ?, 1, ?, ?)").run(key, composeId, text5, at);
           return { ok: true, draft: { composeId, rev: 1, text: text5, at } };
         }
@@ -49613,7 +49802,7 @@ function openPopupDrafts(opts) {
         if (Number(r.changes) !== 1) {
           const cur = get(key);
           if (!cur) {
-            const composeId = randomUUID4();
+            const composeId = randomUUID5();
             db.prepare("INSERT INTO popup_drafts (key, compose_id, rev, text, at) VALUES (?, ?, 1, ?, ?)").run(key, composeId, text5, at);
             return { ok: true, draft: { composeId, rev: 1, text: text5, at } };
           }
@@ -49658,12 +49847,12 @@ function memoryDrafts(now) {
       const cur = m.get(key) ?? null;
       if (o.composeId === void 0) {
         if (cur) return { ok: false, conflict: cur };
-        const d2 = { composeId: randomUUID4(), rev: 1, text: text5, at };
+        const d2 = { composeId: randomUUID5(), rev: 1, text: text5, at };
         m.set(key, d2);
         return { ok: true, draft: d2 };
       }
       if (!cur) {
-        const d2 = { composeId: randomUUID4(), rev: 1, text: text5, at };
+        const d2 = { composeId: randomUUID5(), rev: 1, text: text5, at };
         m.set(key, d2);
         return { ok: true, draft: d2 };
       }
@@ -49803,7 +49992,7 @@ function serverHostLabel2(server2, allServers) {
   } catch {
     return safeHandle(String(server2));
   }
-  const path15 = u.pathname.replace(/\/+$/, "");
+  const path17 = u.pathname.replace(/\/+$/, "");
   let label = u.host;
   if (allServers) {
     const mine = normalizeServerUrl(String(server2));
@@ -49817,8 +50006,8 @@ function serverHostLabel2(server2, allServers) {
     }
     const clash = (key) => others.some((o) => key(o) === key(u));
     if (clash((x) => x.host)) {
-      label = u.host + path15;
-      if (clash((x) => x.host + x.pathname.replace(/\/+$/, ""))) label = `${u.protocol}//${u.host}${path15}`;
+      label = u.host + path17;
+      if (clash((x) => x.host + x.pathname.replace(/\/+$/, ""))) label = `${u.protocol}//${u.host}${path17}`;
     }
   }
   return safeHandle(label);
@@ -51788,61 +51977,6 @@ var init_version = __esm({
   }
 });
 
-// src/send-confirmed.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
-function sendConfirmed(client, target, text5, opts = {}) {
-  const clientId = opts.clientId ?? randomUUID5();
-  const timeoutMs = opts.timeoutMs ?? SEND_CONFIRM_TIMEOUT_MS;
-  return new Promise((resolve) => {
-    let settled = false;
-    const finish = (out) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      clearInterval(linkCheck);
-      client.off("reply_ack", onAck);
-      client.off("error", onErr);
-      resolve(out);
-    };
-    const onAck = (ev) => {
-      if (ev?.replyId !== clientId) return;
-      finish({ outcome: "sent", hubMessageId: String(ev.messageId ?? "") });
-    };
-    const onErr = (ev) => {
-      if (ev?.replyId !== clientId) return;
-      finish({
-        outcome: "rejected",
-        reason: String(ev.message ?? "the hub refused the message"),
-        ...typeof ev.code === "string" ? { code: ev.code } : {},
-        ...typeof ev.status === "number" ? { status: ev.status } : {}
-      });
-    };
-    const timer = setTimeout(
-      () => finish({ outcome: "ambiguous", reason: `no answer from the hub within ${Math.round(timeoutMs / 1e3)}s \u2014 check history before retrying` }),
-      timeoutMs
-    );
-    const linkCheck = setInterval(() => {
-      if (client.online === false) finish({ outcome: "ambiguous", reason: "the hub connection dropped before it answered \u2014 check history before retrying" });
-    }, 250);
-    client.on("reply_ack", onAck);
-    client.on("error", onErr);
-    try {
-      if (target.groupId) client.groupMessage(target.groupId, text5, { clientId });
-      else if (target.to) client.message(target.to, text5, { clientId });
-      else return finish({ outcome: "rejected", reason: "need `to` or `groupId`" });
-    } catch (e) {
-      finish({ outcome: "rejected", reason: e?.message ?? "send failed" });
-    }
-  });
-}
-var SEND_CONFIRM_TIMEOUT_MS;
-var init_send_confirmed = __esm({
-  "src/send-confirmed.ts"() {
-    "use strict";
-    SEND_CONFIRM_TIMEOUT_MS = 8e3;
-  }
-});
-
 // src/identity-lock.ts
 import fs17 from "node:fs";
 import os8 from "node:os";
@@ -55163,6 +55297,158 @@ var init_secret_input = __esm({
   }
 });
 
+// plugin/claude-layout.mjs
+import fs27 from "node:fs";
+import path13 from "node:path";
+function buildPluginManifest(version2) {
+  return {
+    name: "jefri-chat",
+    displayName: "Jefri Chat",
+    version: version2,
+    description: "WhatsApp for AI agents \u2014 local Claude Desktop connector. Needs Node installed. Configure this desktop identity with plugin install --app claude before importing; credentials stay on this machine, outside the plugin.",
+    author: { name: "Jefri Chat", url: "https://jefrichat.com" },
+    homepage: "https://jefrichat.com",
+    license: "UNLICENSED",
+    keywords: ["mcp", "agents", "chat", "jefri"]
+  };
+}
+function buildPluginMcp() {
+  return {
+    mcpServers: {
+      jefri: {
+        command: "node",
+        args: ["${CLAUDE_PLUGIN_ROOT}/server/launch.mjs"],
+        env: { JEFRI_CONNECTOR_PROFILE: "claude_desktop", JEFRI_CLAUDE_DESKTOP_RECOVERY: "1" }
+      }
+    }
+  };
+}
+function writePluginFiles(out, version2) {
+  fs27.mkdirSync(path13.join(out, ".claude-plugin"), { recursive: true });
+  fs27.mkdirSync(path13.join(out, "server"), { recursive: true });
+  fs27.writeFileSync(path13.join(out, ".claude-plugin", "plugin.json"), JSON.stringify(buildPluginManifest(version2), null, 2) + "\n");
+  fs27.writeFileSync(path13.join(out, ".mcp.json"), JSON.stringify(buildPluginMcp(), null, 2) + "\n");
+  fs27.writeFileSync(path13.join(out, "package.json"), JSON.stringify({ name: "jefri-chat-desktop-plugin", version: version2, private: true, type: "module" }, null, 2) + "\n");
+  fs27.writeFileSync(path13.join(out, "server", "launch.mjs"), CLAUDE_LAUNCHER);
+}
+var CLAUDE_LAUNCHER;
+var init_claude_layout = __esm({
+  "plugin/claude-layout.mjs"() {
+    "use strict";
+    CLAUDE_LAUNCHER = `import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+const configPath = path.join(os.homedir(), ".jefri", "claude-desktop", "connection.json");
+let fd;
+try {
+  fd = fs.openSync(configPath, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
+  const st = fs.fstatSync(fd);
+  if (!st.isFile() || st.size > 16384 || (process.platform !== "win32" &&
+      ((st.mode & 0o077) !== 0 || (process.getuid && st.uid !== process.getuid())))) throw new Error();
+  const c = JSON.parse(fs.readFileSync(fd, "utf8"));
+  const hub = new URL(c.server);
+  if (c.schema !== 1 || typeof c.agent !== "string" || !c.agent.trim() ||
+      typeof c.token !== "string" || !c.token.trim() || /[\\r\\n]/.test(c.token) ||
+      !["http:", "https:"].includes(hub.protocol) || hub.username || hub.password ||
+      hub.search || hub.hash || hub.pathname !== "/") throw new Error();
+  for (const k of ["JEFRI_AS", "JEFRI_PROFILE", "JEFRI_LIVE_HANDOFF", "JEFRI_DAEMON", "JEFRI_TAKEOVER_TICKET", "JEFRI_OWNER_TOKEN"]) delete process.env[k];
+  process.env.JEFRI_TOKEN = c.token;
+  process.env.JEFRI_SERVER = hub.origin;
+  process.env.JEFRI_CONNECTOR_PROFILE = "claude_desktop";
+  process.env.JEFRI_CLAUDE_DESKTOP_RECOVERY = "1";
+} catch {
+  console.error("Jefri Claude Desktop setup is missing or invalid. Run this connector's plugin install --app claude --agent <username> command; enter the token at its hidden prompt. The private connection.json must be owned by you and mode 0600. No other identity was used.");
+  process.exitCode = 1;
+} finally { if (fd !== undefined) fs.closeSync(fd); }
+if (!process.exitCode) await import("./index.mjs");
+`;
+  }
+});
+
+// src/claude-plugin-setup.ts
+import fs28 from "node:fs";
+import path14 from "node:path";
+import { execFileSync } from "node:child_process";
+function installClaudePlugin(opts) {
+  const hub = normalizeHub2(opts.server);
+  if (!opts.agent || opts.agent.length > 128 || /\s/.test(opts.agent)) throw new Error("agent username is required");
+  const version2 = bundleVersionOf(opts.bundlePath);
+  if (!version2 || !fs28.statSync(opts.bundlePath).isFile()) throw new Error("cannot determine the pinned connector bundle and version; nothing was written");
+  const dir = claudePluginDir(opts.home);
+  const lock2 = acquireInstallLock(path14.join(opts.home, ".jefri", "claude-desktop-install.lock"));
+  let stage;
+  let previous3;
+  let swapped = false;
+  try {
+    let old;
+    if (fs28.existsSync(dir)) {
+      if (fs28.lstatSync(dir).isSymbolicLink() || !fs28.existsSync(path14.join(dir, MARKER)))
+        throw new Error("Claude Desktop setup directory is not managed by this installer; left untouched");
+      try {
+        const file = path14.join(dir, "connection.json");
+        const st = fs28.lstatSync(file);
+        if (!st.isFile() || st.size > 16384 || process.platform !== "win32" && ((st.mode & 63) !== 0 || st.uid !== process.getuid?.())) throw new Error();
+        old = JSON.parse(fs28.readFileSync(file, "utf8"));
+      } catch {
+        throw new Error("existing Claude Desktop configuration is unreadable or not private; left untouched");
+      }
+    }
+    const token = opts.token || (old?.agent === opts.agent && old?.server === hub ? old.token : void 0);
+    if (typeof token !== "string" || token.length > 4096 || !token.trim() || /[\r\n]/.test(token))
+      throw new Error("no token: enter this Claude Desktop agent's token at the hidden prompt; nothing was written");
+    execFileSync("zip", ["-v"], { stdio: "ignore" });
+    stage = fs28.mkdtempSync(path14.join(path14.dirname(dir), ".claude-desktop-stage-"));
+    fs28.chmodSync(stage, 448);
+    fs28.writeFileSync(path14.join(stage, MARKER), "1\n", { mode: 384 });
+    fs28.writeFileSync(path14.join(stage, "connection.json"), JSON.stringify({ schema: 1, agent: opts.agent, server: hub, token }, null, 2) + "\n", { mode: 384 });
+    const plugin = path14.join(stage, "plugin");
+    writePluginFiles(plugin, version2);
+    fs28.copyFileSync(opts.bundlePath, path14.join(plugin, "server", "index.mjs"));
+    execFileSync("zip", ["-q", "-r", "-X", path14.join(stage, "jefri-chat.plugin"), ".claude-plugin", ".mcp.json", "package.json", "server"], { cwd: plugin, stdio: "ignore" });
+    lock2.assertHeld("replacing Claude Desktop setup");
+    if (fs28.existsSync(dir)) {
+      previous3 = `${stage}.previous`;
+      fs28.renameSync(dir, previous3);
+    }
+    try {
+      fs28.renameSync(stage, dir);
+      swapped = true;
+    } catch (e) {
+      if (previous3) {
+        try {
+          fs28.renameSync(previous3, dir);
+          previous3 = void 0;
+        } catch {
+          throw new Error(`could not activate or restore Claude Desktop setup; previous setup is intact at ${previous3}`);
+        }
+      }
+      throw e;
+    }
+    return {
+      archive: path14.join(dir, "jefri-chat.plugin"),
+      configPath: path14.join(dir, "connection.json"),
+      version: version2,
+      hub,
+      agent: opts.agent,
+      identity: opts.token ? "stored" : "kept",
+      previous: previous3
+    };
+  } finally {
+    if (stage && !swapped) fs28.rmSync(stage, { recursive: true, force: true });
+    lock2.release();
+  }
+}
+var claudePluginDir, MARKER;
+var init_claude_plugin_setup = __esm({
+  "src/claude-plugin-setup.ts"() {
+    "use strict";
+    init_claude_layout();
+    init_plugin_setup();
+    claudePluginDir = (home) => path14.join(home, ".jefri", "claude-desktop");
+    MARKER = ".jefri-claude-install";
+  }
+});
+
 // src/plugin-cli.ts
 var plugin_cli_exports = {};
 __export(plugin_cli_exports, {
@@ -55170,7 +55456,7 @@ __export(plugin_cli_exports, {
   runPluginCli: () => runPluginCli,
   selfBundlePath: () => selfBundlePath
 });
-import fs27 from "node:fs";
+import fs29 from "node:fs";
 import os15 from "node:os";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function selfBundlePath() {
@@ -55184,12 +55470,12 @@ async function runPluginCli(argv, deps = {}) {
   const err = deps.err ?? ((l) => console.error(l));
   const sub = argv[0];
   if (sub !== "install") {
-    err("usage: jefrichat-mcp plugin install --app chatgpt|codex --agent <username> [--server <hub url>]   (the token is asked for hidden, or read from JEFRI_TOKEN)");
+    err("usage: jefrichat-mcp plugin install --app chatgpt|codex|claude --agent <username> [--server <hub url>]   (the token is asked for hidden, or read from JEFRI_TOKEN)");
     return 2;
   }
   const app = argValue(argv, "--app") ?? "chatgpt";
-  if (app !== "chatgpt" && app !== "codex") {
-    err(`--app must be chatgpt or codex, got ${JSON.stringify(app)}`);
+  if (app !== "chatgpt" && app !== "codex" && app !== "claude") {
+    err(`--app must be chatgpt, codex or claude, got ${JSON.stringify(app)}`);
     return 2;
   }
   const agent = argValue(argv, "--agent");
@@ -55201,12 +55487,13 @@ async function runPluginCli(argv, deps = {}) {
     err("refusing --token on the command line: it never belongs in shell history or a process list \u2014 run without it and paste the token at the hidden prompt (or set JEFRI_TOKEN for scripts)");
     return 2;
   }
-  if (env.JEFRI_CONNECTOR_PROFILE && env.JEFRI_CONNECTOR_PROFILE !== PLUGIN_CONNECTOR_PROFILE)
-    err(`ignoring JEFRI_CONNECTOR_PROFILE=${JSON.stringify(env.JEFRI_CONNECTOR_PROFILE)}: desktop plugins always use ${PLUGIN_CONNECTOR_PROFILE} (the agent identity is a separate profile)`);
+  const connectorProfile = app === "claude" ? "claude_desktop" : PLUGIN_CONNECTOR_PROFILE;
+  if (env.JEFRI_CONNECTOR_PROFILE && env.JEFRI_CONNECTOR_PROFILE !== connectorProfile)
+    err(`ignoring JEFRI_CONNECTOR_PROFILE=${JSON.stringify(env.JEFRI_CONNECTOR_PROFILE)}: this desktop plugin uses ${connectorProfile} (the agent identity is separate)`);
   const server2 = argValue(argv, "--server") || env.JEFRI_SERVER || "https://jefrichat.com";
   const home = deps.home ?? os15.homedir();
   const bundlePath = deps.bundlePath ?? selfBundlePath();
-  if (!fs27.existsSync(bundlePath)) {
+  if (!fs29.existsSync(bundlePath)) {
     err(`cannot find the connector bundle to pin (${bundlePath})`);
     return 1;
   }
@@ -55221,6 +55508,22 @@ async function runPluginCli(argv, deps = {}) {
     }
   }
   let r;
+  if (app === "claude") {
+    try {
+      const c2 = installClaudePlugin({ agent, server: server2, token, home, bundlePath });
+      out(`Claude Desktop package prepared (connector ${c2.version}): ${c2.archive}`);
+      out(`Private desktop identity ${c2.identity}: ${c2.configPath} (0600, not inside the plugin)`);
+      if (c2.previous) out(`Previous setup kept privately for recovery: ${c2.previous}`);
+      out("Not activated or verified yet. Claude Desktop -> Settings -> Plugins -> Upload local plugin: import the file above, replacing the old Jefri plugin, then start a NEW chat.");
+      out("Use only one Jefri plugin/extension for this identity. Do not enable an old extension alongside it. Other apps and shared saved identities were not changed.");
+      out(`Expected identity: @${safeHandle(agent)} on ${c2.hub}. Capability profile: claude_desktop.`);
+      out(VERIFY_PROMPT);
+      return 0;
+    } catch (e) {
+      err(`Claude Desktop setup failed: ${String(e?.message ?? e).replaceAll(token ?? "\0", "[redacted]")}`);
+      return 1;
+    }
+  }
   try {
     r = installLocalPlugin({ agent, server: server2, token, app, home, bundlePath });
   } catch (e) {
@@ -55251,6 +55554,7 @@ var init_plugin_cli = __esm({
     init_src();
     init_plugin_setup();
     init_secret_input();
+    init_claude_plugin_setup();
     argValue = (argv, flag) => {
       const i = argv.indexOf(flag);
       return i >= 0 && i + 1 < argv.length ? argv[i + 1] : void 0;
@@ -55630,41 +55934,41 @@ var init_daemon_control = __esm({
 });
 
 // src/daemon.ts
-import * as fs28 from "node:fs";
+import * as fs30 from "node:fs";
 import * as np18 from "node:path";
 import { randomBytes as randomBytes13 } from "node:crypto";
 import { createHash as createHash9 } from "node:crypto";
-function realOpenExclusive(path15, content3) {
-  const tmp = `${path15}.${process.pid}.${randomBytes13(6).toString("hex")}.tmp`;
-  fs28.writeFileSync(tmp, content3, { mode: 384 });
+function realOpenExclusive(path17, content3) {
+  const tmp = `${path17}.${process.pid}.${randomBytes13(6).toString("hex")}.tmp`;
+  fs30.writeFileSync(tmp, content3, { mode: 384 });
   try {
-    fs28.linkSync(tmp, path15);
+    fs30.linkSync(tmp, path17);
     return true;
   } catch (e) {
     if (e.code === "EEXIST") return false;
     throw e;
   } finally {
     try {
-      fs28.unlinkSync(tmp);
+      fs30.unlinkSync(tmp);
     } catch {
     }
   }
 }
-function realReadFile(path15) {
+function realReadFile(path17) {
   try {
-    return fs28.readFileSync(path15, "utf8");
+    return fs30.readFileSync(path17, "utf8");
   } catch {
     return null;
   }
 }
-function realWriteFileAtomic(path15, content3) {
-  const tmp = `${path15}.${process.pid}.${randomBytes13(6).toString("hex")}.tmp`;
-  fs28.writeFileSync(tmp, content3, { mode: 384 });
-  fs28.renameSync(tmp, path15);
+function realWriteFileAtomic(path17, content3) {
+  const tmp = `${path17}.${process.pid}.${randomBytes13(6).toString("hex")}.tmp`;
+  fs30.writeFileSync(tmp, content3, { mode: 384 });
+  fs30.renameSync(tmp, path17);
 }
-function realRemoveFile(path15) {
+function realRemoveFile(path17) {
   try {
-    fs28.unlinkSync(path15);
+    fs30.unlinkSync(path17);
   } catch {
   }
 }
@@ -56099,7 +56403,7 @@ var init_daemon_proxy_proto = __esm({
 });
 
 // src/daemon-server.ts
-import fs29 from "node:fs";
+import fs31 from "node:fs";
 import net4 from "node:net";
 import { randomBytes as randomBytes14 } from "node:crypto";
 function errToCode(e) {
@@ -56365,7 +56669,7 @@ async function startDaemonServer(opts) {
   });
   if (process.platform !== "win32") {
     try {
-      fs29.chmodSync(opts.socketPath, 384);
+      fs31.chmodSync(opts.socketPath, 384);
     } catch {
     }
   }
@@ -56461,7 +56765,7 @@ async function startDaemonServer(opts) {
       server2.close(() => {
         if (process.platform !== "win32") {
           try {
-            fs29.unlinkSync(opts.socketPath);
+            fs31.unlinkSync(opts.socketPath);
           } catch {
           }
         }
@@ -56913,13 +57217,13 @@ var init_proxy = __esm({
               if (typeof t.unref === "function") t.unref();
             });
             if (this.closed) return;
-            let path15 = this.opts.socketPath;
+            let path17 = this.opts.socketPath;
             try {
-              if (this.opts.resolveSocket) path15 = await this.opts.resolveSocket();
+              if (this.opts.resolveSocket) path17 = await this.opts.resolveSocket();
             } catch {
             }
             try {
-              const r = await this.startDial(path15);
+              const r = await this.startDial(path17);
               try {
                 this.opts.onReattached?.(r);
               } catch {
@@ -56959,7 +57263,7 @@ var init_proxy = __esm({
 });
 
 // src/inject-quarantine.ts
-import fs30 from "node:fs";
+import fs32 from "node:fs";
 import cp14 from "node:child_process";
 import np19 from "node:path";
 import { createHash as createHash11, randomBytes as randomBytes16 } from "node:crypto";
@@ -57025,7 +57329,7 @@ function createInjectQuarantine(resolution2, dir = dirFor(), deps = {}) {
   const read = () => {
     let raw;
     try {
-      raw = fs30.readFileSync(file, "utf8");
+      raw = fs32.readFileSync(file, "utf8");
     } catch {
       return "absent";
     }
@@ -57044,7 +57348,7 @@ function createInjectQuarantine(resolution2, dir = dirFor(), deps = {}) {
   const pruneDeadGenerations = () => {
     let names;
     try {
-      names = fs30.readdirSync(dir);
+      names = fs32.readdirSync(dir);
     } catch {
       return;
     }
@@ -57054,14 +57358,14 @@ function createInjectQuarantine(resolution2, dir = dirFor(), deps = {}) {
       const p = np19.join(dir, n);
       let body;
       try {
-        body = JSON.parse(fs30.readFileSync(p, "utf8"));
+        body = JSON.parse(fs32.readFileSync(p, "utf8"));
       } catch {
         continue;
       }
       if (typeof body.panePid !== "number") continue;
       if (!paneAlive(body.panePid, body.paneToken ?? "")) {
         try {
-          fs30.unlinkSync(p);
+          fs32.unlinkSync(p);
         } catch {
         }
       }
@@ -57080,22 +57384,22 @@ function createInjectQuarantine(resolution2, dir = dirFor(), deps = {}) {
     };
     const tmp = `${file}.${writer.pid}.${attempt}.tmp`;
     try {
-      fs30.mkdirSync(dir, { recursive: true, mode: 448 });
-      fs30.writeFileSync(tmp, JSON.stringify(body), { mode: 384 });
+      fs32.mkdirSync(dir, { recursive: true, mode: 448 });
+      fs32.writeFileSync(tmp, JSON.stringify(body), { mode: 384 });
     } catch (e) {
       try {
-        fs30.unlinkSync(tmp);
+        fs32.unlinkSync(tmp);
       } catch {
       }
       return { ok: false, reason: `could not record the write-ahead marker (${e.code ?? e}) \u2014 refusing to touch the terminal` };
     }
     try {
-      fs30.linkSync(tmp, file);
-      fs30.unlinkSync(tmp);
+      fs32.linkSync(tmp, file);
+      fs32.unlinkSync(tmp);
       return { ok: true, attempt };
     } catch (e) {
       try {
-        fs30.unlinkSync(tmp);
+        fs32.unlinkSync(tmp);
       } catch {
       }
       const code3 = e.code;
@@ -57141,7 +57445,7 @@ function createInjectQuarantine(resolution2, dir = dirFor(), deps = {}) {
       if (body.attempt !== attempt || body.writerPid !== writer.pid) return;
       if (outcome === "clean") {
         try {
-          fs30.unlinkSync(file);
+          fs32.unlinkSync(file);
         } catch {
         }
         return;
@@ -57149,8 +57453,8 @@ function createInjectQuarantine(resolution2, dir = dirFor(), deps = {}) {
       const dirty = { ...body, state: "dirty", reason: outcome.dirty, at: (/* @__PURE__ */ new Date()).toISOString() };
       try {
         const tmp = `${file}.${writer.pid}.dirty.tmp`;
-        fs30.writeFileSync(tmp, JSON.stringify(dirty), { mode: 384 });
-        fs30.renameSync(tmp, file);
+        fs32.writeFileSync(tmp, JSON.stringify(dirty), { mode: 384 });
+        fs32.renameSync(tmp, file);
       } catch {
       }
     }
@@ -57185,16 +57489,16 @@ __export(daemon_mode_exports, {
   wireInboxEvents: () => wireInboxEvents,
   wireIncomingDelivery: () => wireIncomingDelivery
 });
-import fs31 from "node:fs";
+import fs33 from "node:fs";
 import os17 from "node:os";
-import path13 from "node:path";
+import path15 from "node:path";
 function resolveIdentityEnv() {
   const agent = process.env.JEFRI_AS;
   const token = process.env.JEFRI_TOKEN;
   if (agent && token) return { agent, token };
   if (agent) {
     try {
-      const cache = JSON.parse(fs31.readFileSync(jefriPath("tokens.json"), "utf8"));
+      const cache = JSON.parse(fs33.readFileSync(jefriPath("tokens.json"), "utf8"));
       const server2 = process.env.JEFRI_SERVER ?? "http://localhost:4000";
       const cached2 = cache[`${server2}::${agent}`];
       if (cached2) return { agent, token: cached2 };
@@ -57910,7 +58214,7 @@ async function runDaemonMode() {
   }
   const transport = new StdioServerTransport();
   await server2.connect(transport);
-  log(`proxy ready \u2014 @${safeHandle(id.agent)} via ${path13.basename(socketPath)}${daemonStopRef.stop ? " (this process IS the daemon)" : ""}`);
+  log(`proxy ready \u2014 @${safeHandle(id.agent)} via ${path15.basename(socketPath)}${daemonStopRef.stop ? " (this process IS the daemon)" : ""}`);
   let shuttingDown = false;
   const shutdown = () => {
     if (shuttingDown) return;
@@ -58036,12 +58340,19 @@ init_state_root();
 init_src();
 init_stdio2();
 init_src2();
-init_src();
-import fs32 from "node:fs";
+import fs34 from "node:fs";
 import os18 from "node:os";
-import path14 from "node:path";
+import path16 from "node:path";
 import { randomBytes as randomBytes17 } from "node:crypto";
 
+// src/claude-desktop-recovery.ts
+function claudeDesktopRecoveryEnabled(env = process.env) {
+  return env.JEFRI_CONNECTOR_PROFILE === "claude_desktop" && env.JEFRI_CLAUDE_DESKTOP_RECOVERY === "1";
+}
+
+// src/index.ts
+init_src();
+
 // src/group-cache.ts
 function createGroupCache(opts) {
   const gateTimeoutMs = opts.gateTimeoutMs ?? 1e4;
@@ -59367,20 +59678,21 @@ var USERNAME = process.env.JEFRI_AS ?? "claude_agent";
 var NAME = process.env.JEFRI_NAME ?? USERNAME;
 var TAGS = (process.env.JEFRI_TAGS ?? "").split(",").map((s) => s.trim()).filter(Boolean);
 var CAPS = (process.env.JEFRI_CAPABILITIES ?? "coding").split(",").map((s) => s.trim()).filter(Boolean);
+var DESKTOP_RECOVERY = claudeDesktopRecoveryEnabled();
 var log2 = (...a) => console.error("[jefrichat-mcp]", ...a);
 var VERBOSE = process.env.JEFRI_DEBUG === "1" || process.env.JEFRI_VERBOSE === "1";
 var note = (...a) => {
   if (VERBOSE) log2(...a);
 };
 var TOKEN_CACHE = () => jefriPath("tokens.json");
-var LEGACY_TOKEN_CACHE = path14.join(os18.homedir(), ".acp", "tokens.json");
+var LEGACY_TOKEN_CACHE = path16.join(os18.homedir(), ".acp", "tokens.json");
 var cacheKey = `${SERVER}::${USERNAME}`;
 function readTokenCache() {
   try {
-    return JSON.parse(fs32.readFileSync(TOKEN_CACHE(), "utf8"));
+    return JSON.parse(fs34.readFileSync(TOKEN_CACHE(), "utf8"));
   } catch {
     try {
-      return JSON.parse(fs32.readFileSync(LEGACY_TOKEN_CACHE, "utf8"));
+      return JSON.parse(fs34.readFileSync(LEGACY_TOKEN_CACHE, "utf8"));
     } catch {
       return {};
     }
@@ -59389,8 +59701,8 @@ function readTokenCache() {
 function cacheToken(tok) {
   const c2 = readTokenCache();
   c2[cacheKey] = tok;
-  fs32.mkdirSync(path14.dirname(TOKEN_CACHE()), { recursive: true });
-  fs32.writeFileSync(TOKEN_CACHE(), JSON.stringify(c2, null, 2));
+  fs34.mkdirSync(path16.dirname(TOKEN_CACHE()), { recursive: true });
+  fs34.writeFileSync(TOKEN_CACHE(), JSON.stringify(c2, null, 2));
 }
 var clientPromise = null;
 var inbox = [];
@@ -59445,6 +59757,7 @@ function ensureClient() {
       };
       const cleanup = [];
       const provision = () => JefriClient.connect({
+        registeredRecovery: DESKTOP_RECOVERY,
         server: hubUrl(),
         username: USERNAME,
         name: NAME,
@@ -59457,7 +59770,7 @@ function ensureClient() {
       });
       let c2;
       if (known) {
-        c2 = await JefriClient.connect({ server: hubUrl(), token: known, status: "online", clientInfo, takeoverTicket: LIVE_DESTINATION ? void 0 : process.env.JEFRI_TAKEOVER_TICKET });
+        c2 = await JefriClient.connect({ registeredRecovery: DESKTOP_RECOVERY, server: hubUrl(), token: known, status: "online", clientInfo, takeoverTicket: LIVE_DESTINATION ? void 0 : process.env.JEFRI_TAKEOVER_TICKET });
         if (!c2.identity) {
           if (TOKEN) throw new Error("JEFRI_TOKEN was rejected by the server");
           if (!LEGACY_MODE) throw new Error("this profile's token was rejected by the server \u2014 fix it in ~/.jefri/identities.json");
@@ -60213,6 +60526,10 @@ async function main() {
   const bootConnect = (attempt = 0) => {
     if (liveHold || liveMessage) return;
     ensureClient().catch((e) => {
+      if (DESKTOP_RECOVERY && terminalConnectionCode(e)) {
+        log2(`initial connect stopped (${terminalConnectionCode(e)}):`, e?.message ?? e);
+        return;
+      }
       const delay = Math.min(2e3 * 2 ** attempt, 3e4);
       const jittered = Math.floor(delay / 2 + Math.random() * (delay / 2));
       log2(`initial connect failed (retrying in ${Math.round(jittered / 1e3)}s):`, e?.message ?? e);