vibedate 0.7.2 → 0.8.1

package/dist/cli.js

@@ -1,12 +1,19 @@
 #!/usr/bin/env node
 import {
-  runMcp
-} from "./chunk-ZD6JBWEW.js";
+  createPairing,
+  daemonStatus,
+  ensureHandle,
+  installDaemonService,
+  removeDaemonState,
+  runMcp,
+  startDaemon,
+  stopDaemon,
+  uninstallDaemonService,
+  writeDaemonState
+} from "./chunk-JBADPOR5.js";
 import {
   CANDIDATES,
-  DEFAULT_HANDLE,
   LIVE_NOTICE,
-  MAX_HANDLE_LEN,
   ROOM_TOPIC_PREFIX,
   TOPIC_PREFIX,
   addBlock,
@@ -23,7 +30,6 @@ import {
   leagueTopic,
   leaguesWithin,
   loadBlocklist,
-  loadHandle,
   loadOrCreateIdentity,
   loadOrCreateNostrKey,
   loadPeers,
@@ -40,458 +46,19 @@ import {
   signHelloClaims,
   startDiscovery,
   startRoom
-} from "./chunk-HDHJLZZG.js";
+} from "./chunk-S7MO5OSO.js";
 
 // src/cli.ts
 import readline from "readline";
 import "url";
 import process2 from "process";
 
-// src/handlegen.ts
-import { randomBytes } from "crypto";
-var FIRST = [
-  "segfault",
-  "yak",
-  "vibe",
-  "null",
-  "async",
-  "await",
-  "heap",
-  "stack",
-  "sudo",
-  "regex",
-  "token",
-  "prompt",
-  "context",
-  "merge",
-  "rebase",
-  "hotfix",
-  "flaky",
-  "cursed",
-  "based",
-  "quantum",
-  "turbo",
-  "neural",
-  "agentic",
-  "kernel",
-  "docker",
-  "kube",
-  "lambda",
-  "pointer",
-  "buffer",
-  "packet",
-  "syscall",
-  "runtime",
-  "monad",
-  "borrow",
-  "cache",
-  "deadlock",
-  "localhost",
-  "darkmode",
-  "wasm",
-  "diff"
-];
-var SECOND = [
-  "sommelier",
-  "shaver",
-  "goblin",
-  "nomad",
-  "gremlin",
-  "wizard",
-  "bard",
-  "pirate",
-  "ninja",
-  "monk",
-  "prophet",
-  "oracle",
-  "smith",
-  "farmer",
-  "whisperer",
-  "tamer",
-  "connoisseur",
-  "maximalist",
-  "enjoyer",
-  "dealer",
-  "herder",
-  "wrangler",
-  "juggler",
-  "mechanic",
-  "surgeon",
-  "detective",
-  "librarian",
-  "alchemist",
-  "overlord",
-  "apprentice",
-  "sensei",
-  "chef",
-  "dj",
-  "ranger",
-  "paladin",
-  "barbarian",
-  "summoner",
-  "cartographer",
-  "archivist",
-  "plumber"
-];
-var SUFFIX = [
-  "prime",
-  "9000",
-  "3000",
-  "max",
-  "ultra",
-  "xl",
-  "mk2",
-  "777",
-  "404",
-  "1337",
-  "2077",
-  "xd"
-];
-function cryptoRand() {
-  return randomBytes(4).readUInt32BE(0) / 2 ** 32;
-}
-function pick(list, rand) {
-  return list[Math.min(list.length - 1, Math.floor(rand() * list.length))];
-}
-function generateHandle(rand = cryptoRand) {
-  const first = pick(FIRST, rand);
-  const second = pick(SECOND, rand);
-  let body = `${first}_${second}`;
-  if (rand() < 0.5) {
-    const withSuffix = `${body}_${pick(SUFFIX, rand)}`;
-    if (withSuffix.length + 1 <= MAX_HANDLE_LEN) body = withSuffix;
-  }
-  const canonical = normalizeHandle(body);
-  if (canonical === null) throw new Error(`handle generator produced an invalid handle: ${body}`);
-  return canonical;
-}
-function ensureHandle(dir = defaultStateDir()) {
-  const env = process.env["VIBEDATING_HANDLE"];
-  if (env !== void 0 && env.trim() !== "") {
-    const canonical = normalizeHandle(env);
-    if (canonical !== null) return { handle: canonical, generated: false };
-  }
-  const persisted = loadHandle(dir);
-  if (persisted !== DEFAULT_HANDLE) return { handle: persisted, generated: false };
-  const generated = generateHandle();
-  return { handle: saveHandle(generated, dir), generated: true };
-}
-
-// src/daemon.ts
-import { spawn, spawnSync } from "child_process";
-import { mkdirSync, openSync, readFileSync, rmSync, writeFileSync } from "fs";
-import os from "os";
-import path from "path";
-function daemonStatePath(dir) {
-  return path.join(dir, "daemon.json");
-}
-function daemonLogPath(dir) {
-  return path.join(dir, "daemon.log");
-}
-function readDaemonState(dir = defaultStateDir()) {
-  try {
-    const raw = readFileSync(daemonStatePath(dir), "utf8");
-    const data = JSON.parse(raw);
-    if (typeof data["pid"] !== "number" || !Number.isInteger(data["pid"]) || data["pid"] <= 0 || typeof data["startedAt"] !== "string" || typeof data["any"] !== "boolean" || typeof data["version"] !== "string") {
-      return null;
-    }
-    return { pid: data["pid"], startedAt: data["startedAt"], any: data["any"], version: data["version"] };
-  } catch {
-    return null;
-  }
-}
-function writeDaemonState(dir, state) {
-  mkdirSync(dir, { recursive: true });
-  writeFileSync(daemonStatePath(dir), JSON.stringify(state, null, 2) + "\n", "utf8");
-}
-function removeDaemonState(dir = defaultStateDir()) {
-  try {
-    rmSync(daemonStatePath(dir), { force: true });
-  } catch {
-  }
-}
-function isPidAlive(pid, kill = process.kill) {
-  try {
-    kill(pid, 0);
-    return true;
-  } catch (err) {
-    return err.code === "EPERM";
-  }
-}
-function daemonStatus(dir = defaultStateDir(), alive = isPidAlive) {
-  const state = readDaemonState(dir);
-  if (state === null) return { running: false, state: null };
-  if (alive(state.pid)) return { running: true, state };
-  removeDaemonState(dir);
-  return { running: false, state: null };
-}
-function defaultSpawn(execPath, scriptPath, args, logPath) {
-  mkdirSync(path.dirname(logPath), { recursive: true });
-  const fd = openSync(logPath, "a");
-  const child = spawn(execPath, [scriptPath, ...args], {
-    detached: true,
-    stdio: ["ignore", fd, fd]
-  });
-  child.unref();
-  if (child.pid === void 0) throw new Error("could not spawn daemon child process");
-  return child.pid;
-}
-function startDaemon(opts) {
-  const dir = opts.dir ?? defaultStateDir();
-  const status = daemonStatus(dir, opts.alive);
-  if (status.running && status.state !== null) {
-    return { started: false, reason: `already running (pid ${status.state.pid})` };
-  }
-  const execPath = opts.execPath ?? process.execPath;
-  const scriptPath = opts.scriptPath ?? process.argv[1];
-  if (scriptPath === void 0) return { started: false, reason: "cannot locate the CLI entry point" };
-  const args = ["daemon", "run", ...opts.any ? ["--any"] : []];
-  const spawnProcess = opts.spawnProcess ?? ((a, logPath) => defaultSpawn(execPath, scriptPath, [...a], logPath));
-  const pid = spawnProcess(args, daemonLogPath(dir));
-  writeDaemonState(dir, { pid, startedAt: (/* @__PURE__ */ new Date()).toISOString(), any: opts.any, version: opts.version });
-  return { started: true, pid };
-}
-async function stopDaemon(opts = {}) {
-  const dir = opts.dir ?? defaultStateDir();
-  const kill = opts.kill ?? process.kill;
-  const alive = opts.alive ?? ((pid) => isPidAlive(pid, kill));
-  const state = readDaemonState(dir);
-  if (state === null) return { stopped: false, reason: "not running" };
-  if (!alive(state.pid)) {
-    removeDaemonState(dir);
-    return { stopped: false, reason: "not running (cleaned stale pidfile)" };
-  }
-  try {
-    kill(state.pid, "SIGTERM");
-  } catch {
-  }
-  const deadline = Date.now() + (opts.waitMs ?? 2e3);
-  while (Date.now() < deadline && alive(state.pid)) {
-    await new Promise((r) => setTimeout(r, 50));
-  }
-  removeDaemonState(dir);
-  return { stopped: true, pid: state.pid };
-}
-var DAEMON_SERVICE_LABEL = "ai.vibedating.daemon";
-var SYSTEMD_UNIT_NAME = "vibedating.service";
-function daemonServicePath(platform = process.platform, homeDir = os.homedir()) {
-  if (platform === "darwin") {
-    return path.join(homeDir, "Library", "LaunchAgents", `${DAEMON_SERVICE_LABEL}.plist`);
-  }
-  if (platform === "linux") {
-    return path.join(homeDir, ".config", "systemd", "user", SYSTEMD_UNIT_NAME);
-  }
-  return null;
-}
-function serviceArgv(execPath, scriptPath, any) {
-  return [execPath, scriptPath, "daemon", "run", ...any ? ["--any"] : []];
-}
-function renderLaunchdPlist(opts) {
-  const args = serviceArgv(opts.execPath, opts.scriptPath, opts.any).map((a) => `    <string>${a}</string>`).join("\n");
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>Label</key>
-  <string>${DAEMON_SERVICE_LABEL}</string>
-  <key>ProgramArguments</key>
-  <array>
-${args}
-  </array>
-  <key>RunAtLoad</key>
-  <true/>
-  <key>KeepAlive</key>
-  <false/>
-  <key>StandardOutPath</key>
-  <string>${opts.logPath}</string>
-  <key>StandardErrorPath</key>
-  <string>${opts.logPath}</string>
-</dict>
-</plist>
-`;
-}
-function renderSystemdUnit(opts) {
-  const execStart = serviceArgv(opts.execPath, opts.scriptPath, opts.any).join(" ");
-  return `[Unit]
-Description=vibedating notify-only daemon (alerts on new matches; never opens chat/video)
-
-[Service]
-ExecStart=${execStart}
-Restart=on-failure
-RestartSec=10
-
-[Install]
-WantedBy=default.target
-`;
-}
-var defaultRun = (cmd, args) => spawnSync(cmd, args, { stdio: "inherit" }).status === 0;
-function installDaemonService(opts) {
-  const platform = opts.platform ?? process.platform;
-  const homeDir = opts.homeDir ?? os.homedir();
-  const run = opts.run ?? defaultRun;
-  const servicePath = daemonServicePath(platform, homeDir);
-  if (servicePath === null) {
-    return {
-      installed: false,
-      servicePath: null,
-      detail: `unsupported platform (${platform}) \u2014 run \`vibedate daemon start\` manually instead`
-    };
-  }
-  const execPath = opts.execPath ?? process.execPath;
-  const scriptPath = opts.scriptPath ?? process.argv[1];
-  if (scriptPath === void 0) {
-    return { installed: false, servicePath, detail: "cannot locate the CLI entry point" };
-  }
-  mkdirSync(path.dirname(servicePath), { recursive: true });
-  if (platform === "darwin") {
-    const logPath = daemonLogPath(opts.dir ?? defaultStateDir());
-    writeFileSync(servicePath, renderLaunchdPlist({ execPath, scriptPath, any: opts.any, logPath }), "utf8");
-    const uid = process.getuid?.() ?? 501;
-    run("launchctl", ["bootout", `gui/${uid}`, servicePath]);
-    if (!run("launchctl", ["bootstrap", `gui/${uid}`, servicePath])) {
-      return { installed: false, servicePath, detail: "launchctl bootstrap failed \u2014 service written but not loaded" };
-    }
-    return { installed: true, servicePath, detail: "launchd agent installed \u2014 the daemon starts on login" };
-  }
-  writeFileSync(servicePath, renderSystemdUnit({ execPath, scriptPath, any: opts.any }), "utf8");
-  run("systemctl", ["--user", "daemon-reload"]);
-  if (!run("systemctl", ["--user", "enable", "--now", SYSTEMD_UNIT_NAME])) {
-    return { installed: false, servicePath, detail: "systemctl enable failed \u2014 unit written but not started" };
-  }
-  return { installed: true, servicePath, detail: "systemd --user service installed \u2014 the daemon starts on login" };
-}
-function uninstallDaemonService(opts) {
-  const platform = opts.platform ?? process.platform;
-  const homeDir = opts.homeDir ?? os.homedir();
-  const run = opts.run ?? defaultRun;
-  const servicePath = daemonServicePath(platform, homeDir);
-  if (servicePath === null) {
-    return {
-      installed: false,
-      servicePath: null,
-      detail: `unsupported platform (${platform})`
-    };
-  }
-  if (platform === "darwin") {
-    const uid = process.getuid?.() ?? 501;
-    run("launchctl", ["bootout", `gui/${uid}`, servicePath]);
-  } else {
-    run("systemctl", ["--user", "disable", "--now", SYSTEMD_UNIT_NAME]);
-    run("systemctl", ["--user", "daemon-reload"]);
-  }
-  try {
-    rmSync(servicePath, { force: true });
-  } catch {
-  }
-  return { installed: false, servicePath, detail: "login service removed \u2014 the daemon no longer starts on login" };
-}
-
-// src/pairing.ts
-var MAX_BUFFERED = 100;
-function createPairing() {
-  const queue = [];
-  const matchCbs = /* @__PURE__ */ new Set();
-  const msgCbs = /* @__PURE__ */ new Set();
-  const queuedCbs = /* @__PURE__ */ new Set();
-  const buffers = /* @__PURE__ */ new Map();
-  let current;
-  const emitMatch = (link) => {
-    for (const cb of matchCbs) cb(link);
-  };
-  const deliver = (from, m) => {
-    for (const cb of msgCbs) cb(from, m);
-  };
-  const notifyQueued = (from, n) => {
-    for (const cb of queuedCbs) cb(from, n);
-  };
-  const flush = (link) => {
-    const buf = buffers.get(link);
-    if (buf !== void 0 && buf.length > 0) {
-      for (const m of buf) deliver(link.hello.handle, m);
-      buffers.set(link, []);
-    }
-  };
-  const setCurrent = (link) => {
-    current = link;
-    if (link !== void 0) flush(link);
-    emitMatch(link);
-  };
-  const watch = (link) => {
-    link.onClose(() => {
-      buffers.delete(link);
-      if (current === link) {
-        const nextUp = queue.shift();
-        setCurrent(nextUp);
-      } else {
-        const idx = queue.indexOf(link);
-        if (idx >= 0) queue.splice(idx, 1);
-      }
-    });
-  };
-  const bindMessages = (link) => {
-    link.onMessage((m) => {
-      if (link === current) {
-        deliver(link.hello.handle, m);
-      } else {
-        const buf = buffers.get(link) ?? [];
-        buf.push(m);
-        if (buf.length > MAX_BUFFERED) buf.shift();
-        buffers.set(link, buf);
-        notifyQueued(link.hello.handle, buf.length);
-      }
-    });
-  };
-  return {
-    get available() {
-      return queue.length;
-    },
-    current() {
-      return current;
-    },
-    add(link) {
-      watch(link);
-      bindMessages(link);
-      if (current === void 0) {
-        setCurrent(link);
-      } else {
-        queue.push(link);
-      }
-    },
-    next() {
-      if (current !== void 0) {
-        current.close();
-        current = void 0;
-      }
-      const nextUp = queue.shift();
-      setCurrent(nextUp);
-      return current;
-    },
-    open(handle2) {
-      const idx = queue.findIndex((l) => l.hello.handle === handle2);
-      if (idx < 0) return void 0;
-      const link = queue.splice(idx, 1)[0];
-      if (current !== void 0) {
-        current.close();
-        current = void 0;
-      }
-      setCurrent(link);
-      return current;
-    },
-    onMatch(cb) {
-      matchCbs.add(cb);
-    },
-    onMessage(cb) {
-      msgCbs.add(cb);
-    },
-    onQueued(cb) {
-      queuedCbs.add(cb);
-    }
-  };
-}
-
 // src/server.ts
 import http from "http";
 import { randomUUID } from "crypto";
+import fs from "fs";
+import os from "os";
+import path from "path";
 import { makeEvent, notify as vibeCoreNotify } from "@pooriaarab/vibe-core";
 
 // src/web-app-html.ts
@@ -1035,15 +602,23 @@ var webAppHtml = `<!DOCTYPE html>
     max-width: 85%; padding: 7px 11px; border-radius: 13px;
     font-size: .82rem; line-height: 1.4; word-break: break-word; white-space: pre-wrap;
   }
+  .cp-msg img, .cp-msg video { max-width: 100%; border-radius: 8px; margin-top: 4px; display: block; }
+  .cp-msg a.media-link { color: var(--coral); text-decoration: underline; word-break: break-all; }
   .cp-msg.them{ align-self: flex-start; background: rgba(248,239,232,.07); border: 1px solid var(--border); }
   .cp-msg.you{ align-self: flex-end; background: rgba(255,122,104,.16); border: 1px solid rgba(255,122,104,.32); }
   .cp-msg.sys{ align-self: center; background: transparent; border: 0; color: var(--muted-2); font-size: .72rem; padding: 2px 6px; }
   .chat-panel .cp-inputrow{ display: flex; gap: 8px; padding: 10px; border-top: 1px solid var(--border); }
-  .chat-panel .cp-inputrow input{
+  .chat-panel .cp-inputrow input[type="text"]{
     flex: 1; border: 1px solid var(--border-2); border-radius: 10px; background: rgba(0,0,0,.22);
     color: var(--fg); padding: 9px 11px; font: inherit; font-size: .82rem; outline: none; min-width: 0;
   }
-  .chat-panel .cp-inputrow input:focus{ border-color: var(--coral); }
+  .chat-panel .cp-inputrow input[type="text"]:focus{ border-color: var(--coral); }
+  .chat-panel .cp-attach{
+    border: 1px solid var(--border-2); border-radius: 10px; background: rgba(0,0,0,.22);
+    color: var(--muted); padding: 9px 12px; font-size: 1rem; flex-shrink: 0;
+    transition: color var(--dur-fast) ease, border-color var(--dur-fast) ease;
+  }
+  .chat-panel .cp-attach:hover{ color: var(--fg); border-color: var(--muted-2); }
   .chat-panel .cp-send{
     border: 0; border-radius: 10px; padding: 9px 14px; font-weight: 700; font-size: .8rem;
     background: linear-gradient(180deg, var(--coral), var(--coral-dim)); color: #2a1109;
@@ -1222,6 +797,8 @@ var webAppHtml = `<!DOCTYPE html>
   </div>
   <div class="cp-msgs" id="chatMsgs"></div>
   <div class="cp-inputrow">
+    <button class="cp-attach" id="chatAttachBtn" type="button" aria-label="Attach file" title="Attach file">\u{1F4CE}</button>
+    <input type="file" id="chatFileInput" style="display:none;">
     <input id="chatInput" type="text" maxlength="4000" placeholder="message&hellip;" autocomplete="off">
     <button class="cp-send" id="chatSend" type="button">Send</button>
   </div>
@@ -1740,6 +1317,8 @@ var webAppHtml = `<!DOCTYPE html>
   var chatSub = document.getElementById("chatSub");
   var chatMsgs = document.getElementById("chatMsgs");
   var chatInput = document.getElementById("chatInput");
+  var chatAttachBtn = document.getElementById("chatAttachBtn");
+  var chatFileInput = document.getElementById("chatFileInput");
   var chatSend = document.getElementById("chatSend");
   var chatClose = document.getElementById("chatClose");
 
@@ -1747,6 +1326,7 @@ var webAppHtml = `<!DOCTYPE html>
   var conversations = {};   // handle -> [{from:"you"|"them"|"sys", text}]
   var unread = {};          // handle -> count of unseen incoming messages
   var chatLoops = {};       // handle -> true while its poll loop is running
+  var mediaLoops = {};      // handle -> true while its poll loop is running
   var MAX_CHAT_KEPT = 200;  // per-conversation local cap (mirrors the server)
 
   function fetchMessage(handle, timeoutMs){
@@ -1757,6 +1337,14 @@ var webAppHtml = `<!DOCTYPE html>
       .catch(function(e){ clearTimeout(t); throw e; });
   }
 
+  function fetchMedia(handle, timeoutMs){
+    var ctrl = new AbortController();
+    var t = setTimeout(function(){ ctrl.abort(); }, timeoutMs);
+    return fetch("/live/media?handle=" + encodeURIComponent(handle), { signal: ctrl.signal })
+      .then(function(r){ clearTimeout(t); return r; })
+      .catch(function(e){ clearTimeout(t); throw e; });
+  }
+
   function postChat(handle, text){
     return fetch("/live/message", {
       method: "POST",
@@ -1765,6 +1353,14 @@ var webAppHtml = `<!DOCTYPE html>
     });
   }
 
+  function postMedia(handle, name, mime, dataB64){
+    return fetch("/live/media", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ handle: handle, name: name, mime: mime, dataB64: dataB64 })
+    });
+  }
+
   function peerKnown(handle){
     for (var i = 0; i < knownPeers.length; i++){ if (knownPeers[i].handle === handle) return true; }
     return false;
@@ -1779,27 +1375,51 @@ var webAppHtml = `<!DOCTYPE html>
   // One long-poll loop per connected peer: started when the peer is first
   // seen, stopped when it vanishes (its mailbox on the server is gone).
   function ensureChatLoop(handle){
-    if (chatLoops[handle]) return;
-    chatLoops[handle] = true;
-    (async function(){
-      while (peerKnown(handle)) {
-        var res;
-        try { res = await fetchMessage(handle, 30000); }
-        catch(e){ await sleep(1000); continue; }
-        if (!res || res.status !== 200) { await sleep(1000); continue; }
-        var data = await res.json();
-        var m = data && data.message;
-        if (!m) continue; // timed out empty
-        pushChat(handle, { from: "them", text: m.text });
-        if (chatWith === handle) {
-          renderChat();
-        } else {
-          unread[handle] = (unread[handle] || 0) + 1;
-          renderLiveRows(knownPeers);
+    if (!chatLoops[handle]) {
+      chatLoops[handle] = true;
+      (async function(){
+        while (peerKnown(handle)) {
+          var res;
+          try { res = await fetchMessage(handle, 30000); }
+          catch(e){ await sleep(1000); continue; }
+          if (!res || res.status !== 200) { await sleep(1000); continue; }
+          var data = await res.json();
+          var m = data && data.message;
+          if (!m) continue; // timed out empty
+          pushChat(handle, { from: "them", text: m.text });
+          if (chatWith === handle) {
+            renderChat();
+          } else {
+            unread[handle] = (unread[handle] || 0) + 1;
+            renderLiveRows(knownPeers);
+          }
         }
-      }
-      delete chatLoops[handle];
-    })();
+        delete chatLoops[handle];
+      })();
+    }
+
+    if (!mediaLoops[handle]) {
+      mediaLoops[handle] = true;
+      (async function(){
+        while (peerKnown(handle)) {
+          var res;
+          try { res = await fetchMedia(handle, 30000); }
+          catch(e){ await sleep(1000); continue; }
+          if (!res || res.status !== 200) { await sleep(1000); continue; }
+          var data = await res.json();
+          var m = data && data.media;
+          if (!m) continue; // timed out empty
+          pushChat(handle, { from: "them", media: m });
+          if (chatWith === handle) {
+            renderChat();
+          } else {
+            unread[handle] = (unread[handle] || 0) + 1;
+            renderLiveRows(knownPeers);
+          }
+        }
+        delete mediaLoops[handle];
+      })();
+    }
   }
 
   function renderChat(){
@@ -1815,8 +1435,30 @@ var webAppHtml = `<!DOCTYPE html>
     conv.forEach(function(m){
       var el = document.createElement("div");
       el.className = "cp-msg " + (m.from === "you" ? "you" : m.from === "sys" ? "sys" : "them");
-      // textContent only \u2014 a peer's text is never parsed as HTML.
-      el.textContent = m.text;
+      if (m.media) {
+        var isImage = m.media.mime.indexOf("image/") === 0;
+        var isVideo = m.media.mime.indexOf("video/") === 0;
+        if (isImage) {
+          var img = document.createElement("img");
+          img.src = "data:" + m.media.mime + ";base64," + m.media.dataB64;
+          el.appendChild(img);
+        } else if (isVideo) {
+          var vid = document.createElement("video");
+          vid.src = "data:" + m.media.mime + ";base64," + m.media.dataB64;
+          vid.controls = true;
+          el.appendChild(vid);
+        } else {
+          var a = document.createElement("a");
+          a.className = "media-link";
+          a.href = "data:" + (m.media.mime || "application/octet-stream") + ";base64," + m.media.dataB64;
+          a.download = m.media.name;
+          a.textContent = "\u{1F4CE} " + m.media.name;
+          el.appendChild(a);
+        }
+      } else {
+        // textContent only \u2014 a peer's text is never parsed as HTML.
+        el.textContent = m.text;
+      }
       chatMsgs.appendChild(el);
     });
     chatMsgs.scrollTop = chatMsgs.scrollHeight;
@@ -1858,6 +1500,34 @@ var webAppHtml = `<!DOCTYPE html>
   chatSend.addEventListener("click", sendChat);
   chatInput.addEventListener("keydown", function(e){ if (e.key === "Enter") sendChat(); });
 
+  chatAttachBtn.addEventListener("click", function(){
+    if (!chatWith) return;
+    chatFileInput.click();
+  });
+  chatFileInput.addEventListener("change", function(e){
+    var target = chatWith;
+    if (!target) return;
+    var file = e.target.files[0];
+    if (!file) return;
+    chatFileInput.value = ""; // clear
+    var reader = new FileReader();
+    reader.onload = function(evt) {
+      var res = evt.target.result; // data:mime;base64,.....
+      var mime = res.split(';')[0].split(':')[1] || '';
+      var b64 = res.split(',')[1];
+      postMedia(target, file.name, mime, b64).then(function(r){
+        pushChat(target, r && r.status === 200
+          ? { from: "you", media: { name: file.name, mime: mime, dataB64: b64 } }
+          : { from: "sys", text: "(file not delivered \u2014 too large or peer offline?)" });
+        if (chatWith === target) renderChat();
+      }).catch(function(){
+        pushChat(target, { from: "sys", text: "(file not delivered \u2014 server unreachable)" });
+        if (chatWith === target) renderChat();
+      });
+    };
+    reader.readAsDataURL(file);
+  });
+
   // Render the live-peers rows: one per connected peer with its verification
   // marks, a Chat button (opens the conversation), and a Call button that
   // rings THAT peer specifically.
@@ -2186,7 +1856,7 @@ function createLiveBridge() {
     },
     addLink(link) {
       const handle2 = link.hello.handle;
-      boxes.set(handle2, { link, incoming: [], messages: [] });
+      boxes.set(handle2, { link, incoming: [], messages: [], media: [] });
       link.onSignal((f) => {
         const mb = boxes.get(handle2);
         if (mb) mb.incoming.push(f);
@@ -2199,6 +1869,20 @@ function createLiveBridge() {
           mb.messages.splice(0, mb.messages.length - MAX_QUEUED_MESSAGES);
         }
       });
+      link.onMedia((m) => {
+        const mb = boxes.get(handle2);
+        if (!mb) {
+          fs.unlink(m.path, () => {
+          });
+          return;
+        }
+        mb.media.push({ ...m, name: sanitizePeerText(m.name), mime: sanitizePeerText(m.mime) });
+        if (mb.media.length > MAX_QUEUED_MESSAGES) {
+          const dropped = mb.media.splice(0, mb.media.length - MAX_QUEUED_MESSAGES);
+          for (const d of dropped) fs.unlink(d.path, () => {
+          });
+        }
+      });
       link.onClose(() => {
         const cur = boxes.get(handle2);
         if (cur && cur.link === link) boxes.delete(handle2);
@@ -2235,6 +1919,39 @@ function createLiveBridge() {
         if (cur.messages.length > 0) return cur.messages.shift() ?? null;
       }
       return null;
+    },
+    async sendMedia(handle2, filePath) {
+      const mb = boxes.get(handle2);
+      if (!mb) throw new Error("Peer not found");
+      await mb.link.sendMedia(filePath);
+    },
+    async pollMedia(handle2, timeoutMs) {
+      const mb = boxes.get(handle2);
+      if (!mb) return null;
+      let targetMedia = null;
+      if (mb.media.length > 0) {
+        targetMedia = mb.media.shift() ?? null;
+      } else {
+        const deadline = Date.now() + timeoutMs;
+        while (Date.now() < deadline) {
+          await new Promise((r) => setTimeout(r, 100));
+          const cur = boxes.get(handle2);
+          if (!cur) return null;
+          if (cur.media.length > 0) {
+            targetMedia = cur.media.shift() ?? null;
+            break;
+          }
+        }
+      }
+      if (!targetMedia) return null;
+      try {
+        const buf = await fs.promises.readFile(targetMedia.path);
+        await fs.promises.unlink(targetMedia.path).catch(() => {
+        });
+        return { name: targetMedia.name, mime: targetMedia.mime, dataB64: buf.toString("base64") };
+      } catch (err) {
+        return null;
+      }
     }
   };
   return bridge;
@@ -2352,10 +2069,18 @@ function send(res, status, contentType, body) {
 function sendJson(res, status, data) {
   send(res, status, "application/json; charset=utf-8", JSON.stringify(data));
 }
-function readBody(req) {
+function readBody(req, maxLength) {
   return new Promise((resolve, reject) => {
     const chunks = [];
-    req.on("data", (c) => chunks.push(c));
+    let len = 0;
+    req.on("data", (c) => {
+      chunks.push(c);
+      len += c.length;
+      if (maxLength !== void 0 && len > maxLength) {
+        req.destroy();
+        reject(new Error("payload too large"));
+      }
+    });
     req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
     req.on("error", reject);
   });
@@ -2546,6 +2271,69 @@ async function handle(req, res, opts) {
     sendJson(res, 200, { ok: true });
     return;
   }
+  if (req.method === "GET" && pathname === "/live/media") {
+    const live = opts.live;
+    if (!live) {
+      sendJson(res, 200, { media: null, reason: "live-not-attached" });
+      return;
+    }
+    const handle2 = url.searchParams.get("handle") ?? "";
+    if (handle2 === "") {
+      sendJson(res, 400, { error: "missing handle" });
+      return;
+    }
+    const media = await live.pollMedia(handle2, 25e3);
+    if (req.destroyed || res.writableEnded) return;
+    sendJson(res, 200, { media });
+    return;
+  }
+  if (req.method === "POST" && pathname === "/live/media") {
+    const live = opts.live;
+    if (!live) {
+      sendJson(res, 400, { error: "live-not-attached" });
+      return;
+    }
+    let body;
+    try {
+      body = await readBody(req, 35 * 1024 * 1024);
+    } catch (e) {
+      sendJson(res, 413, { error: "payload too large" });
+      return;
+    }
+    let parsed = {};
+    try {
+      parsed = JSON.parse(body);
+    } catch {
+      sendJson(res, 400, { error: "invalid JSON body" });
+      return;
+    }
+    const handle2 = typeof parsed["handle"] === "string" ? parsed["handle"] : "";
+    const name = typeof parsed["name"] === "string" ? parsed["name"] : "";
+    const mime = typeof parsed["mime"] === "string" ? parsed["mime"] : "";
+    const dataB64 = typeof parsed["dataB64"] === "string" ? parsed["dataB64"] : "";
+    if (handle2 === "" || name === "" || mime === "" || dataB64 === "") {
+      sendJson(res, 400, { error: "missing handle, name, mime, or dataB64" });
+      return;
+    }
+    const decoded = Buffer.from(dataB64, "base64");
+    if (decoded.length > 25 * 1024 * 1024) {
+      sendJson(res, 413, { error: "file exceeds 25MiB limit" });
+      return;
+    }
+    const tmpPath = path.join(os.tmpdir(), `vibe-media-send-${randomUUID()}`);
+    await fs.promises.writeFile(tmpPath, decoded);
+    try {
+      await live.sendMedia(handle2, tmpPath);
+    } catch (err) {
+      sendJson(res, 500, { error: err.message });
+      return;
+    } finally {
+      await fs.promises.unlink(tmpPath).catch(() => {
+      });
+    }
+    sendJson(res, 200, { ok: true });
+    return;
+  }
   if (req.method === "GET" && pathname === "/api/room") {
     const room = opts.room;
     sendJson(res, 200, room ? { room: room.name, self: room.self ?? null, members: room.members } : { room: null, self: null, members: [] });
@@ -2640,7 +2428,7 @@ async function handle(req, res, opts) {
 }
 
 // src/cli.ts
-var VERSION = "0.7.2";
+var VERSION = "0.8.1";
 function parsePort(raw) {
   const n = Number(raw);
   if (!Number.isInteger(n) || n < 1 || n > 65535) return void 0;
@@ -3066,6 +2854,16 @@ async function cmdOpen(port, any, room) {
 function shouldKeepAlive(flag, stdinIsTTY) {
   return flag || stdinIsTTY !== true;
 }
+function parseSendCommand(text) {
+  const parts = text.split(" ");
+  const cmd = parts[0];
+  if (cmd === "/send" || cmd === "/file" || cmd === "/image") {
+    const path2 = text.slice(cmd.length).trim();
+    if (!path2) return { error: "missing_path" };
+    return { path: path2 };
+  }
+  return null;
+}
 async function cmdLiveViaRelay(profile, to) {
   const target = to !== void 0 ? normalizeHandle(to) : null;
   if (to !== void 0 && target === null) {
@@ -3235,6 +3033,12 @@ async function cmdLive(dating, any, to, keepAlive, viaRelay) {
         process2.stdout.write(`  \u2605 found ${sanitizePeerText(link.hello.handle)} \u2014 auto-opening
 `);
       }
+      link.onMedia((m) => {
+        process2.stdout.write(
+          `  \u{1F4CE} <${sanitizePeerText(link.hello.handle)}> sent ${sanitizePeerText(m.name)} \u2014 saved to ${m.path}
+`
+        );
+      });
       pairing.add(link);
     }
   });
@@ -3242,7 +3046,7 @@ async function cmdLive(dating, any, to, keepAlive, viaRelay) {
     `  topic: ${TOPIC_PREFIX}${profile.league} \u2192 ${session.topic.toString("hex").slice(0, 12)}\u2026${topics.length > 1 ? ` (+${topics.length - 1} more)` : ""}
 `
   );
-  process2.stdout.write("  type to chat \xB7 /next \xB7 /open <handle> \xB7 /quit\n");
+  process2.stdout.write("  type to chat \xB7 /send <path> \xB7 /next \xB7 /open <handle> \xB7 /quit\n");
   process2.stdout.write("  video chat: live A/V runs in the web app \u2014 run `vibedating open`\n\n");
   const rl = readline.createInterface({ input: process2.stdin, terminal: false });
   const stop = () => {
@@ -3265,6 +3069,28 @@ async function cmdLive(dating, any, to, keepAlive, viaRelay) {
       const handle2 = text.slice("/open ".length).trim();
       if (pairing.open(handle2) === void 0) {
         process2.stdout.write(`  \xB7 no available peer "${handle2}"
+`);
+      }
+      continue;
+    }
+    const sendRes = parseSendCommand(text);
+    if (sendRes !== null) {
+      if ("error" in sendRes) {
+        process2.stdout.write("  usage: /send <path>\n");
+        continue;
+      }
+      const cur3 = pairing.current();
+      if (cur3 === void 0) {
+        process2.stdout.write("  \xB7 no peer yet \u2014 waiting for a match\u2026\n");
+        continue;
+      }
+      try {
+        process2.stdout.write(`  \u{1F4CE} sending ${sendRes.path}\u2026
+`);
+        await cur3.sendMedia(sendRes.path);
+        process2.stdout.write("  \u2713 sent\n");
+      } catch (err) {
+        process2.stdout.write(`  \u2717 failed to send media: ${err instanceof Error ? err.message : String(err)}
 `);
       }
       continue;
@@ -3651,7 +3477,7 @@ Usage:
                                 --room <name> opens the room view instead: roster +
                                 group chat + full-mesh group video (~6 people; an SFU
                                 is the upgrade path for bigger rooms).
-  vibedating mcp                Run the stdio MCP server (profile, matches)
+  vibedating mcp                Run the stdio MCP server (full agent-native tools: live/room/discover/media)
   vibedating --version
   vibedating --help
 
@@ -3739,5 +3565,6 @@ if (entryUrl !== void 0) {
 export {
   formatAgo,
   parseArgs,
+  parseSendCommand,
   shouldKeepAlive
 };