@chatpanel/gateway 0.6.39 → 0.6.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/gateway",
-  "version": "0.6.39",
+  "version": "0.6.41",
   "description": "Local privacy gateway \u2014 redacts PII out of OpenAI/Anthropic API traffic before it reaches a model, then restores it in the reply. Point opencode, codex, aider, Claude Code, etc. at it.",
   "type": "module",
   "bin": {

package/src/history-store.js

@@ -178,6 +178,15 @@ export class HistoryStore {
     return this.records.size;
   }
 
+  // Wipe every record — the user purging the on-disk warm copy. Returns how many were dropped.
+  clear() {
+    const n = this.records.size;
+    this.records.clear();
+    this.index = new SearchIndex();
+    this.schedulePersist();
+    return n;
+  }
+
   search(query, opts) {
     return this.index.search(query, opts);
   }

package/src/mcp.js

@@ -21,6 +21,25 @@ import { ensureGatewayToken } from './gateway-token.js';
 const PROTOCOL_VERSION = '2024-11-05';
 const SERVER = { name: 'chatpanel-history', version: '1.0.0' };
 
+// MCP servers may return `instructions` from initialize; hosts (Codex, Claude Code, …) fold
+// them into the model's context. This is where we STEER tool selection so a person doesn't
+// have to say "use ChatPanel": it tells the model that the user's personal meetings/notes/
+// chats live here and must be reached through these tools, not by grepping the working dir.
+const INSTRUCTIONS = [
+  'ChatPanel holds the USER\'S OWN meetings, notes and past chats (transcripts, decisions,',
+  'action items, summaries). It is the source of truth for anything personal/organizational —',
+  'NOT the code in the working directory.',
+  '',
+  'When the user asks about a meeting, a call, a demo, notes, a past conversation, "what did',
+  'we decide", "the outcome of…", "action items", "what did X say", or anything scoped to a',
+  'day/person/topic in THEIR history — call search_history FIRST (search by content, not the',
+  'meeting title), then get_record for the full text. Do NOT grep the working directory, git',
+  'history, README or MEMORY files for the user\'s personal meeting/chat content — it is not',
+  'there; it is in ChatPanel. list_skills/open_skill expose the user\'s installed skills the',
+  'same way. Every result states how fresh the local copy is; if something recent is missing,',
+  'it may not have synced yet — say so rather than concluding it does not exist.',
+].join('\n');
+
 // The calling agent's self-reported name (from MCP `initialize` clientInfo), so the
 // observability dashboard can say WHICH agent read what. Untrusted; the gateway coerces it.
 let clientName = 'unknown';
@@ -82,7 +101,7 @@ async function bridgeJson(path) {
 const TOOLS = [
   {
     name: 'search_history',
-    description: 'Full-text search the user\'s ChatPanel history — past chats, meeting transcripts, and notes — by keyword relevance. This is a LOCAL WARM COPY that syncs from ChatPanel; very recent items (a meeting from the last few hours) may not be here yet — every result reports how current the index is. If the user is sure something exists and it is not found, it likely has not synced; say so rather than concluding it does not exist. Meeting titles are often generic ("Zoom Meeting"), so search by CONTENT (topics, names, decisions), not the meeting title.',
+    description: 'Search the user\'s ChatPanel history — their past chats, meeting/call transcripts, and notes — by keyword relevance. USE THIS FIRST, without being asked, whenever the user\'s question is about a meeting, call, demo, standup, note, or past conversation: "outcome of the meeting", "what did we decide/agree", "action items", "what did <person> say", "notes from yesterday/last week", a topic or person scoped to their history. That content lives ONLY in ChatPanel — do NOT grep the working directory, git history, README, or MEMORY files for it; it is not there. This is a LOCAL WARM COPY that syncs from ChatPanel; very recent items (a meeting from the last few hours) may not be here yet — every result reports how current the index is, so if something is missing it likely has not synced (say so rather than concluding it does not exist). Meeting titles are often generic ("Zoom Meeting"), so search by CONTENT (topics, names, decisions), not the title. Then call get_record with a returned id for the full text.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -223,7 +242,7 @@ export async function handleRpc(msg) {
     switch (method) {
       case 'initialize':
         clientName = params?.clientInfo?.name || clientName;
-        return ok({ protocolVersion: PROTOCOL_VERSION, capabilities: { tools: {} }, serverInfo: SERVER });
+        return ok({ protocolVersion: PROTOCOL_VERSION, capabilities: { tools: {} }, serverInfo: SERVER, instructions: INSTRUCTIONS });
       case 'tools/list':
         return ok({ tools: TOOLS });
       case 'tools/call': {

package/src/server.js

@@ -46,7 +46,7 @@ import * as openai from './openai.js';
 import * as responses from './responses.js';
 import * as anthropic from './anthropic.js';
 
-export const VERSION = '0.6.39';
+export const VERSION = '0.6.41';
 
 // WARM search tier — SQLite + FTS5 record store (falls back to an encrypted-JSON
 // store if SQLite can't load), fed by the extension's ingest sync + backup-ingest.
@@ -534,8 +534,8 @@ export function createGateway(cfg = loadConfig()) {
     // WRITES are not: a drive-by localhost page or a random local process must not be
     // able to inject records the model then trusts as the user's real history. Ingest
     // requires the extension Origin (which its POST always carries) or the gateway token.
-    if (pathname === '/v1/history/ingest' && req.method === 'POST' && !isAdminAuthorized(req)) {
-      return sendJson(res, 403, { error: { message: 'history ingest is a write — extension origin or gateway token required', type: 'forbidden' } });
+    if ((pathname === '/v1/history/ingest' || pathname === '/v1/history/clear') && req.method === 'POST' && !isAdminAuthorized(req)) {
+      return sendJson(res, 403, { error: { message: 'history write — extension origin or gateway token required', type: 'forbidden' } });
     }
     // The access log is who-read-what — sensitive, and writable only by the local MCP
     // process (which sends the gateway token). Extension Origin or token for both the
@@ -596,6 +596,10 @@ export function createGateway(cfg = loadConfig()) {
         return sendJson(res, 400, { error: { message: `ingest failed: ${e.message}`, type: 'ingest_error' } });
       }
     }
+    if (pathname === '/v1/history/clear' && req.method === 'POST') {
+      const dropped = historyStore.clear();
+      return sendJson(res, 200, { ok: true, dropped, size: historyStore.size });
+    }
     if (pathname === '/v1/history/search' && req.method === 'POST') {
       try {
         const body = JSON.parse((await readBody(req, cfg.maxBodyBytes)).toString('utf8')) || {};

package/src/sqlite-store.js

@@ -153,6 +153,14 @@ export class SqliteHistoryStore {
     const body = this.db.get('SELECT text FROM fts WHERE id = ?', [id]);
     return { ...meta, text: body?.text || '' };
   }
+
+  // Wipe every record — the user purging the on-disk warm copy. Returns how many were dropped.
+  clear() {
+    const n = this.size;
+    this.db.exec('DELETE FROM records');
+    this.db.exec('DELETE FROM fts');
+    return n;
+  }
 }
 
 // Pick the best available warm engine. SQLite when it loads; otherwise the