jefrichat-mcp 0.49.37 → 0.49.38

package/dist/index.js

@@ -63967,7 +63967,9 @@ function nativeHubRequest(client, operation, payload = {}, timeoutMs = 1e4) {
         return;
       }
       cleanup();
-      if (!event.result || typeof event.result !== "object" || event.result.ok !== true) reject(Error("Native hub refused this binding or operation"));
+      if (!event.result || typeof event.result !== "object" || event.result.ok !== true) reject(Error(
+        event.result?.reason === "native_terminal_disabled" ? "Native terminal monitor is disabled on this hub. It needs an operator-approved hub rollout; restarting Claude Code, starting tmux or running jefrichat-mcp run will not enable it. Leave any working headless responder unchanged." : "Native hub refused this binding or operation. The hub may have native monitoring disabled, or this credential/connection is not eligible. Check the selected hub and credential before changing autonomy; do not retry uncertain work."
+      ));
       else resolve(event.result);
     };
     const timer2 = setTimeout(() => {
@@ -64394,6 +64396,23 @@ function codexQueueArgs(thread, text5, endpoint) {
     throw Error("Native Codex preview accepts only private local Unix endpoints");
   return ["queue", "--thread", thread, "--message", text5, ...endpoint ? ["--remote", endpoint] : []];
 }
+var codexProcessEnv = () => Object.fromEntries(
+  ["PATH", "HOME", "USER", "LOGNAME", "LANG", "LC_ALL", "TMPDIR", "SHELL", "CODEX_HOME", "XDG_CONFIG_HOME"].flatMap((k) => process.env[k] === void 0 ? [] : [[k, process.env[k]]])
+);
+async function checkCodexQueue() {
+  await new Promise((resolve, reject) => {
+    execFile(
+      "codex",
+      ["queue", "--help"],
+      { env: codexProcessEnv(), timeout: 5e3, maxBuffer: 128e3, windowsHide: true },
+      (error2, stdout) => {
+        if (error2 || !stdout.includes("--thread") || !stdout.includes("--message"))
+          reject(Error("This Codex CLI does not expose the native queue interface. Update Codex before enabling monitor; leave any working responder unchanged."));
+        else resolve();
+      }
+    );
+  });
+}
 function validateCodexEndpoint(endpoint) {
   if (!endpoint || endpoint === "unix://") return;
   if (!endpoint.startsWith("unix:///")) throw Error("Native Codex endpoint must be a private local socket");
@@ -64415,9 +64434,7 @@ function codexQueueTransport(thread, endpoint) {
   validateCodexEndpoint(endpoint);
   let open = true;
   const children = /* @__PURE__ */ new Set();
-  const env = {};
-  for (const k of ["PATH", "HOME", "USER", "LOGNAME", "LANG", "LC_ALL", "TMPDIR", "SHELL", "CODEX_HOME", "XDG_CONFIG_HOME"])
-    if (process.env[k] !== void 0) env[k] = process.env[k];
+  const env = codexProcessEnv();
   return {
     host: "codex_local",
     target: thread,
@@ -64474,7 +64491,7 @@ function registerTerminalLive(server2, deps) {
   };
   const result = (data) => ({ content: [{ type: "text", text: JSON.stringify(data) }] });
   const wrap2 = (fn) => async (args, extra) => {
-    const signal = args.action === "off" || args.action === "status" ? void 0 : extra?.signal;
+    const signal = args.action === "off" || args.action === "status" || args.action === "check" ? void 0 : extra?.signal;
     const abort = () => stop("native tool cancelled by host");
     try {
       if (signal?.aborted) throw Error("Native request already cancelled");
@@ -64483,17 +64500,32 @@ function registerTerminalLive(server2, deps) {
       if (signal?.aborted) throw Error("Native request cancelled; already-dispatched effects cannot be undone");
       return result(data);
     } catch (e) {
-      return { ...result({ error: e instanceof Error ? e.message : "Native live refused" }), isError: true };
+      return { ...result({
+        error: e instanceof Error ? e.message : "Native live refused",
+        ...args.action ? { hub: deps.hub(), host: host ?? null, username: deps.currentClient()?.identity?.username ?? null } : {}
+      }), isError: true };
     } finally {
       signal?.removeEventListener("abort", abort);
     }
   };
   const host = deps.env.JEFRI_TERMINAL_HOST;
   const supported = (h) => NATIVE_PILOT_PROFILES.includes(String(h));
+  const verifyAuthority = async (c2, stillCurrent, operation = "check", payload = {}) => {
+    if (!supported(host)) throw Error(`Native preview hosts are ${NATIVE_PILOT_PROFILES.join(" or ")}; set JEFRI_TERMINAL_HOST to the matching local connector host.`);
+    if (!c2.identity?.username || !c2.identity.owner || !c2.token) throw Error("A named credential and its owner are required");
+    const answer = await credentialProfileDecision(deps.hub(), c2.token);
+    const profile = answer.lookup.kind === "profile" ? answer.lookup.profile : null;
+    if (!stillCurrent() || profile !== host || !mechanismAllowed(profile, true, "terminal_live", true) || answer.verifiedAt === null || !credentialProfileDecisionCurrent(answer))
+      throw Error("Native live refused: the current connection needs a verified credential for this terminal host. Check its identity, hub and connection; changing autonomy will not repair a credential mismatch.");
+    const permission = await nativeHubRequest(c2, operation, payload);
+    if (!stillCurrent() || !credentialProfileDecisionCurrent(answer) || operation === "check" && permission.protocol !== 1)
+      throw Error("Native hub fencing is unavailable for this binding");
+    return { ...answer, verifiedAt: answer.verifiedAt };
+  };
   server2.registerTool("jefri_terminal_live", {
     title: "Native terminal live (preview)",
-    description: "Explicitly opt in to experimental no-tmux delivery. Uses the same owner-side sender, sibling-agent loop brake and group routing as tmux. Groups respect pause and current membership. Headless/tmux must be OFF first. prepare sends a native wake probe; only its callback can arm this exact MCP session. off always works and changes no saved autonomy config. recover never replays work: pass nextLocalCursor as localCursor for the next local page, and hubPending.nextCursor as cursor independently for the next hub page; null ends that scan. Requires a running host; not detached persistence.",
-    inputSchema: { action: external_exports.enum(["status", "prepare", "off", "recover"]), confirmPreview: external_exports.boolean().optional(), replyMode: external_exports.enum(["mentions", "all", "dms"]).optional(), cursor: external_exports.string().max(256).optional(), localCursor: external_exports.string().max(256).optional(), threadId: external_exports.string().uuid().optional() }
+    description: "Native terminal monitor ON/OFF: experimental visible automatic replies in THIS conversation, without tmux. 'monitor on' explicitly requests this preview, not headless or tmux. Use THIS connection's selected agent; verify with jefri_whoami and do not ask the user to choose again when already bound. FIRST call check on the selected identity BEFORE asking to turn off headless/tmux/standby; check tests hub and credential eligibility without changing any responder or arming a watch. If refused, leave working autonomy unchanged. After a successful check, explicitly confirm any switch with the user; headless/tmux/standby must be OFF for prepare. prepare requires confirmPreview:true and sends a wake probe; only its callback can arm this exact MCP session. In Codex, run `printenv CODEX_THREAD_ID` in THIS conversation and pass it as threadId; do not ask the user for it or guess from history. Uses owner-side sender, sibling-agent loop brake and group routing; respects group pause/membership. off changes no saved autonomy config. recover never replays work: nextLocalCursor feeds localCursor, hubPending.nextCursor feeds cursor independently; null ends a scan. Requires the current interactive Claude Code/Codex session to stay open, NOT jefrichat-mcp run or tmux. A successful check is not proof of Monitor attachment or delivery.",
+    inputSchema: { action: external_exports.enum(["status", "check", "prepare", "off", "recover"]), confirmPreview: external_exports.boolean().optional(), replyMode: external_exports.enum(["mentions", "all", "dms"]).optional(), cursor: external_exports.string().max(256).optional(), localCursor: external_exports.string().max(256).optional(), threadId: external_exports.string().uuid().optional() }
   }, wrap2(async (args) => {
     if (args.action === "off") {
       stop();
@@ -64505,7 +64537,40 @@ function registerTerminalLive(server2, deps) {
         rollback: "Saved headless/tmux configuration is unchanged. Re-enable it explicitly if wanted."
       };
     }
-    if (args.action === "status") return { ...broker.status(), preparing: !!pending, scope: "owner-side DMs and groups; experimental; running host required; no 10k certification" };
+    if (args.action === "status") return {
+      ...broker.status(),
+      preparing: !!pending,
+      hub: deps.hub(),
+      username: deps.currentClient()?.identity?.username ?? null,
+      autonomyEnabled: getAuto().enabled,
+      scope: "owner-side DMs and groups; experimental; current interactive session must stay open; no 10k certification"
+    };
+    if (args.action === "check") {
+      const c3 = deps.currentClient();
+      if (!c3?.online) throw Error("Select and connect a Jefri identity in THIS session first: use jefri_whoami to verify username and hub, and jefri_be if unassigned. Do not take over another session without the user's approval.");
+      const hub2 = deps.hub(), token2 = c3.token, connectionGeneration2 = c3.generation;
+      const self2 = c3.identity?.username, owner3 = c3.identity?.owner, attempt2 = generation;
+      const stillCurrent = () => attempt2 === generation && deps.currentClient() === c3 && deps.hub() === hub2 && c3.online && c3.token === token2 && c3.generation === connectionGeneration2 && c3.identity?.username === self2 && c3.identity?.owner === owner3;
+      const authority = await verifyAuthority(c3, stillCurrent);
+      if (host === "codex_local") await checkCodexQueue();
+      if (!stillCurrent() || !credentialProfileDecisionCurrent(authority)) throw Error("Native binding superseded during preflight");
+      const auto = getAuto(), standby = standbyEngaged(), nativeActive = broker.active() || !!pending;
+      return {
+        state: "preflight only; no settings changed",
+        hub: hub2,
+        username: self2,
+        host,
+        hubEligible: true,
+        canPrepare: !auto.enabled && !standby && !nativeActive,
+        autonomyEnabled: auto.enabled,
+        autonomyMode: auto.mode,
+        standbyEngaged: standby,
+        nativeActive,
+        ...host === "codex_local" ? { threadInstruction: "Run `printenv CODEX_THREAD_ID` in THIS Codex conversation, then pass that exact UUID as threadId to prepare. Do not ask the user for a thread ID; do not use a name, --last or history lookup." } : {},
+        nextStep: nativeActive ? "A native binding is already active or preparing; inspect status, do not start a second watch." : auto.enabled || standby ? "Hub check passed. Ask the user before switching off existing headless/tmux/standby; disabling can cancel in-flight work. Then prepare with explicit preview consent." : "With explicit user preview consent, call prepare. Only the wake callback can confirm this conversation is armed.",
+        warning: "Eligibility is checked again at prepare. Monitor attachment and real host delivery have not been tested by this check."
+      };
+    }
     if (args.action === "recover") return broker.recover(args.cursor, args.localCursor);
     if (args.confirmPreview !== true) throw Error("Explicit user opt-in required: confirmPreview:true");
     if (host === "codex_local" && !deps.env.JEFRI_TERMINAL_THREAD_ID && !args.threadId)
@@ -64543,14 +64608,13 @@ function registerTerminalLive(server2, deps) {
     };
     const payload = (r) => ({ sourceId: r.id, bindingId, wake: r.wake, replyId: r.reply });
     const replyMode = args.replyMode ?? getAuto().replyMode;
-    const current = () => attempt === generation && deps.currentClient() === c2 && deps.hub() === hub && c2.token === token && c2.generation === connectionGeneration && c2.identity?.username === self && c2.identity?.owner === owner2 && c2.online && !getAuto().enabled && !standbyEngaged();
+    const connected = () => attempt === generation && deps.currentClient() === c2 && deps.hub() === hub && c2.token === token && c2.generation === connectionGeneration && c2.identity?.username === self && c2.identity?.owner === owner2 && c2.online;
+    const current = () => connected() && !getAuto().enabled && !standbyEngaged();
+    if (host === "codex_local") await checkCodexQueue();
     const authorize = async () => {
-      const answer = await credentialProfileDecision(hub, token);
-      const profile = answer.lookup.kind === "profile" ? answer.lookup.profile : null;
-      if (!current() || profile !== host || !mechanismAllowed(profile, true, "terminal_live", true) || answer.verifiedAt === null || !credentialProfileDecisionCurrent(answer))
-        throw Error("Native live refused: credential profile, binding or authority unavailable; existing autonomy must be off");
-      const hubPermission = await nativeHubRequest(c2, activated ? "renew" : "check", { bindingId });
-      if (!current() || !activated && hubPermission.protocol !== 1) throw Error("Native hub fencing is unavailable for this binding");
+      const answer = await verifyAuthority(c2, activated ? current : connected, activated ? "renew" : "check", { bindingId });
+      if (!connected()) throw Error("Native binding superseded");
+      if (!current()) throw Error("Native live cannot prepare: existing headless/tmux/standby must be off. The hub check passed, but ask the user before switching: disabling can cancel in-flight work. Nothing was changed.");
       return { verifiedAt: answer.verifiedAt, current: () => current() && credentialProfileDecisionCurrent(answer) };
     };
     await authorize();
@@ -65592,7 +65656,6 @@ async function runDoctor() {
     pass(`Connector jefrichat-mcp v${upd.current} (latest)`);
   else
     pass(`Connector jefrichat-mcp v${connectorVersion()}`, "couldn't reach npm to check for updates (offline is fine)");
-  pass(`Hub URL ${SERVER2}`);
   let savedEntries = [];
   let savedError = null;
   if (!TOKEN2) {
@@ -65602,6 +65665,9 @@ async function runDoctor() {
       savedError = String(e?.message ?? e);
     }
   }
+  if (TOKEN2) info(`Hub URL ${SERVER2}`);
+  else if (savedEntries.length) info("Saved-identity mode \u2014 each identity uses its saved hub (listed below); no identity is selected by doctor.");
+  else info(`Default hub URL ${SERVER2} (no identity selected)`);
   const lock2 = describeLock(IDENTITIES_FILE());
   if (lock2.present)
     warn(`identities.json is locked (${lock2.meta ? `pid ${lock2.meta.pid}, ${lock2.status}` : "unreadable \u2014 ownership unknown"})`, lock2.status === "dead" ? `run: ${unlockCommandHint()}` : lock2.meta ? "a save may be in progress; if that process is gone, run: " + unlockCommandHint() : "see the identity unlock message for the safe recovery step");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jefrichat-mcp",
-  "version": "0.49.37",
+  "version": "0.49.38",
   "engines": {
     "node": ">=22.13"
   },