@echomem/mcp 1.4.14 → 1.4.16

package/dist/setup-page/styles-extraction.js

@@ -59,7 +59,73 @@ export const SETUP_PAGE_STYLES_EXTRACTION = String.raw `    /* ---- dashboard (p
     }
     .primary { background: var(--echo-ink-primary); color: #fff; }
     .secondary { background: #fff; color: var(--echo-ink-primary); }
+    .textButton {
+      min-height: 36px;
+      border-color: transparent;
+      background: transparent;
+      color: var(--echo-ink-faint);
+      padding: 0 8px;
+      font-size: 13px;
+      font-weight: 700;
+    }
+    .textButton:hover { color: var(--echo-ink-primary); background: transparent; }
     button:disabled { cursor: not-allowed; opacity: 0.55; }
+    .consentStage {
+      display: grid;
+      place-items: center;
+      min-height: min(620px, calc(100vh - 180px));
+    }
+    .localConsent {
+      width: min(680px, 100%);
+      border: 2px solid var(--echo-ink-primary);
+      border-radius: 8px;
+      background: var(--echo-paper-white);
+      padding: clamp(22px, 4vw, 34px);
+      box-shadow: 0 18px 38px -28px rgba(26,58,143,0.45);
+    }
+    .consentEyebrow {
+      margin: 0 0 10px;
+      font-family: var(--echo-font-mono);
+      font-size: 11px;
+      font-weight: 800;
+      letter-spacing: 0.08em;
+      text-transform: uppercase;
+      color: var(--echo-ink-primary);
+    }
+    .localConsent h2 {
+      max-width: 620px;
+      margin: 0;
+      font-size: clamp(30px, 3.4vw, 42px);
+      line-height: 1.04;
+      color: var(--echo-ink-primary);
+    }
+    .localConsent > p:not(.consentEyebrow):not(.consentFine) {
+      max-width: 590px;
+      margin: 14px 0 0;
+      font-size: 16px;
+      line-height: 1.55;
+      color: var(--echo-ink-mute);
+    }
+    .consentActions {
+      display: flex;
+      flex-wrap: wrap;
+      gap: 10px;
+      align-items: center;
+      margin-top: 22px;
+    }
+    .consentActions button {
+      min-height: 48px;
+      padding: 0 18px;
+    }
+    .consentFine {
+      min-height: 18px;
+      margin: 10px 0 0;
+      font-family: var(--echo-font-mono);
+      font-size: 11px;
+      line-height: 1.45;
+      color: var(--echo-ink-faint);
+    }
+    .consentFine:empty { display: none; }
     .track { height: 12px; overflow: hidden; border-radius: 999px; background: #e8e8e1; margin: 16px 0 10px; }
     .fill { height: 100%; width: 0%; background: var(--echo-ink-primary); transition: width 180ms ease; }
     /* indeterminate "we're working on it" bar for the prep phase (before job counts move) */
@@ -93,6 +159,7 @@ export const SETUP_PAGE_STYLES_EXTRACTION = String.raw `    /* ---- dashboard (p
       .explainCopy h2 { font-size: 38px; }
       .explainCta .promiseActions { width: 100%; }
       .explainCta .primary, .explainCta .secondary { width: 100%; }
+      .consentActions .primary { width: 100%; }
       .cityHero { min-height: auto; }
       .cityShell {
         width: 100vw;
@@ -615,6 +682,150 @@ export const SETUP_PAGE_STYLES_EXTRACTION = String.raw `    /* ---- dashboard (p
     .exCountdown strong { color: var(--echo-ink-primary); font-weight: 700; }
     .exOverdue { margin: 0; max-width: 620px; border: 1px solid rgba(196, 148, 42, 0.45); background: rgba(233, 185, 73, 0.12); border-radius: 8px; padding: 12px 14px; font-size: 13px; line-height: 1.5; color: var(--echo-ink-text); }
     .exOverdue strong { display: block; margin-bottom: 4px; color: var(--echo-ink-primary); }
+    .is-hidden { display: none !important; }
+    .recallGateBlock { width: min(680px, 100%); margin: 2px auto 0; }
+    .recallGate {
+      width: 100%;
+      position: relative;
+      overflow: hidden;
+      border: 1px solid rgba(33,64,154,0.42);
+      border-radius: 12px;
+      background:
+        linear-gradient(180deg, rgba(239,244,255,0.98) 0%, rgba(255,255,255,0.99) 46%),
+        var(--echo-paper-white);
+      padding: clamp(24px, 4vw, 36px);
+      box-shadow: 0 28px 60px -42px rgba(33,64,154,0.48);
+      text-align: left;
+    }
+    .recallGate::before {
+      content: "";
+      position: absolute;
+      inset: 0 0 auto 0;
+      height: 8px;
+      background: linear-gradient(90deg, #18317d, #4b6bd4, var(--echo-ink-primary));
+    }
+    .recallEyebrow {
+      display: inline-flex;
+      align-items: center;
+      gap: 8px;
+      margin: 0 0 14px;
+      border: 1px solid rgba(33,64,154,0.18);
+      border-radius: 999px;
+      background: #eef3ff;
+      padding: 7px 11px;
+      font-family: var(--echo-font-mono);
+      font-size: 11px;
+      font-weight: 900;
+      letter-spacing: 0.06em;
+      text-transform: uppercase;
+      color: #18317d;
+    }
+    .recallEyebrow i {
+      width: 8px;
+      height: 8px;
+      border-radius: 999px;
+      background: var(--echo-ink-primary);
+      box-shadow: 0 0 0 4px rgba(33,64,154,0.1);
+    }
+    .recallGate h3 {
+      margin: 0;
+      max-width: 520px;
+      font-family: var(--echo-font-brand);
+      font-size: clamp(34px, 4.6vw, 48px);
+      line-height: 1.02;
+      font-weight: 900;
+      color: var(--echo-ink-text);
+      letter-spacing: 0;
+    }
+    .recallGate p {
+      max-width: 560px;
+      margin: 14px 0 0;
+      font-size: 16px;
+      line-height: 1.55;
+      color: var(--echo-ink-mute);
+    }
+    .recallTrial {
+      margin-top: 18px;
+      display: inline-grid;
+      grid-template-columns: auto 1fr;
+      gap: 10px;
+      align-items: center;
+      border: 1px solid rgba(33,64,154,0.18);
+      border-radius: 10px;
+      background: #f3f6ff;
+      padding: 10px 12px;
+      color: #18317d;
+    }
+    .recallTrial strong {
+      font-size: 28px;
+      line-height: 1;
+      color: #18317d;
+    }
+    .recallTrial span {
+      font-size: 13px;
+      line-height: 1.25;
+      font-weight: 800;
+    }
+    .recallUsedNote {
+      margin-top: 18px;
+      border-left: 4px solid var(--echo-ink-primary);
+      background: #f3f6ff;
+      padding: 11px 13px;
+      color: #18317d;
+      font-size: 13px;
+      line-height: 1.45;
+      font-weight: 700;
+    }
+    .recallGateActions {
+      display: flex;
+      flex-wrap: wrap;
+      gap: 14px;
+      align-items: center;
+      margin-top: 24px;
+    }
+    .recallGateActions button {
+      min-height: 50px;
+    }
+    .recallGateActions .primary {
+      min-width: 0;
+      border-color: #18317d;
+      background: var(--echo-ink-primary);
+      color: #fff;
+      box-shadow: 0 18px 34px -26px rgba(33,64,154,0.85);
+    }
+    .recallGateActions .primary:hover {
+      background: #18317d;
+    }
+    .recallGate .recallFine {
+      margin-top: 10px;
+      font-family: var(--echo-font-mono);
+      font-size: 11px;
+      color: var(--echo-ink-faint);
+    }
+    @media (max-width: 720px) {
+      .recallGateActions .primary { width: 100%; }
+    }
+    .recallGate code,
+    .recallSkipNote code {
+      font-family: var(--echo-font-mono);
+      font-size: 0.92em;
+      background: var(--echo-paper-soft);
+      border: 1px solid var(--echo-line-soft);
+      border-radius: 5px;
+      padding: 1px 5px;
+      color: var(--echo-ink-primary);
+    }
+    .recallTryWrap { width: 100%; }
+    .recallSkipNote {
+      margin: 0 0 12px;
+      border: 1px solid var(--echo-line-soft);
+      border-radius: 8px;
+      background: rgba(246,244,238,0.86);
+      padding: 10px 12px;
+      font-size: 13px;
+      line-height: 1.45;
+      color: var(--echo-ink-mute);
+    }
     .tryCard { margin-top: 2px; max-width: 760px; border: 2px solid var(--echo-ink-primary); border-radius: 8px; background: var(--echo-paper-white); padding: clamp(18px, 3vw, 26px); box-shadow: 0 18px 38px -28px rgba(26,58,143,0.45); }
     .tryCard .tryK { margin: 0 0 10px; font-family: var(--echo-font-mono); font-size: 12px; font-weight: 800; letter-spacing: 0.08em; text-transform: uppercase; color: var(--echo-ink-primary); }
     .tryCard .tryTitle {

package/dist/setup.js

@@ -38,6 +38,7 @@ import { checkLatestUpdateStatus, compareSemver, readCachedUpdateStatus } from "
 // device unless the user explicitly starts migration. Override the hosted auth origin with ECHO_WEB_URL.
 const WEB_URL = (process.env.ECHO_WEB_URL || "https://yeahecho.com").replace(/\/$/, "");
 const API_BASE_URL = (process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app").replace(/\/$/, "");
+const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing").replace(/\/$/, "");
 function home(...p) {
     return path.join(os.homedir(), ...p);
 }
@@ -1250,6 +1251,33 @@ export function startCallbackServer(opts = {}) {
                     json(res, 200, payload);
                     return;
                 }
+                if (route === "/billing-status" && req.method === "GET") {
+                    if (!checkNonce(url.searchParams.get("nonce") || undefined))
+                        return void text(res, 403, "bad nonce");
+                    const token = new KeyStore().getToken();
+                    const pricingUrl = `${PRICING_URL}?source=mcp_onboarding`;
+                    if (!token) {
+                        json(res, 200, { plan: "free", paid: false, trialAvailable: true, trialUsed: false, pricingUrl });
+                        return;
+                    }
+                    try {
+                        const response = await authedAxios(token).get("/api/extension/account/bootstrap", { timeout: 6000 });
+                        const plan = (asString(response.data?.plan) || "free").toLowerCase();
+                        const trialUsed = response.data?.billing?.trialUsed === true;
+                        const trialAvailable = response.data?.billing?.trialAvailable !== false;
+                        json(res, 200, {
+                            plan,
+                            paid: ["pro", "power", "team", "enterprise"].includes(plan),
+                            trialAvailable,
+                            trialUsed,
+                            pricingUrl,
+                        });
+                    }
+                    catch {
+                        json(res, 200, { plan: "unknown", paid: false, trialAvailable: true, trialUsed: false, pricingUrl });
+                    }
+                    return;
+                }
                 if (route === "/report" && req.method === "GET") {
                     // Local forensic "Context Doctor" report — computed locally, served BEFORE auth (scan-first).
                     res.setHeader("Cache-Control", "no-store");
@@ -1353,6 +1381,22 @@ export function startCallbackServer(opts = {}) {
                     json(res, 200, progress);
                     return;
                 }
+                if (route === "/report-consent" && req.method === "POST") {
+                    let body;
+                    try {
+                        body = await readJsonBody(req);
+                    }
+                    catch {
+                        text(res, 400, "bad json");
+                        return;
+                    }
+                    if (!checkNonce(asString(body.nonce)))
+                        return void text(res, 403, "bad nonce");
+                    const allowed = body.allowed === true;
+                    opts.onReportConsent?.(allowed);
+                    json(res, 200, { ok: true, allowed });
+                    return;
+                }
                 if (route === "/logout" && req.method === "POST") {
                     let body;
                     try {
@@ -1780,6 +1824,8 @@ async function cmdLogin(flags) {
     const nonce = devNonce || randomUUID();
     let stats = null;
     let forensicReport = null;
+    let forensicConsent = "pending";
+    let forensicScanStarted = false;
     const forensicStartedAt = Date.now();
     let forensicStageStartedAt = forensicStartedAt;
     let forensicStage = "starting";
@@ -1799,6 +1845,28 @@ async function cmdLogin(flags) {
         getStats: () => stats,
         getReport: () => forensicReport,
         getReportProgress: () => forensicProgress,
+        onReportConsent: (allowed) => {
+            if (!allowed) {
+                forensicConsent = "declined";
+                forensicProgress = {
+                    status: "failed",
+                    scanned: 0,
+                    total: 0,
+                    stage: "failed",
+                    label: "Local scan skipped",
+                    elapsedMs: Date.now() - forensicStartedAt,
+                    stageElapsedMs: Date.now() - forensicStageStartedAt,
+                    updatedAt: Date.now(),
+                    error: {
+                        code: "REPORT_SCAN_DECLINED",
+                        message: "Local file analysis was skipped. EchoMem can still connect, save conversations, and import memories.",
+                    },
+                };
+                return;
+            }
+            forensicConsent = "allowed";
+            startForensicScan();
+        },
     });
     const callbackUrl = `http://127.0.0.1:${srv.port}/callback`;
     const localSetupUrl = `http://127.0.0.1:${srv.port}/setup?nonce=${nonce}`;
@@ -1812,46 +1880,50 @@ async function cmdLogin(flags) {
     openBrowser(localSetupUrl);
     console.log(`If it didn't open, visit:\n  ${localSetupUrl}\n`);
     console.log("Waiting for browser approval for up to 15 minutes…");
-    // Scan-first: build the local forensic "Context Doctor" report off-thread so the page shows it
-    // BEFORE the user connects an account (the scan is local-only; nothing leaves the machine).
-    buildForensicReportOffThread((progress) => {
-        const now = Date.now();
-        const nextStage = progress.stage || forensicStage;
-        if (nextStage !== forensicStage) {
-            forensicStage = nextStage;
-            forensicStageStartedAt = now;
-            console.log(`Local scan: ${forensicStageLabel(forensicStage)}…`);
-        }
-        forensicProgress = {
-            status: "running",
-            scanned: progress.done,
-            total: progress.total,
-            stage: forensicStage,
-            label: forensicStageLabel(forensicStage),
-            detail: progress.detail,
-            elapsedMs: now - forensicStartedAt,
-            stageElapsedMs: now - forensicStageStartedAt,
-            updatedAt: now,
-        };
-    })
-        .then((r) => {
-        forensicReport = r;
-    })
-        .catch((e) => {
-        const now = Date.now();
-        forensicProgress = {
-            status: "failed",
-            scanned: forensicProgress.scanned,
-            total: forensicProgress.total,
-            stage: "failed",
-            label: "Local scan failed",
-            elapsedMs: now - forensicStartedAt,
-            stageElapsedMs: now - forensicStageStartedAt,
-            updatedAt: now,
-            error: safeForensicError(e),
-        };
-        console.error(`Could not build the local report: ${e instanceof Error ? e.message : String(e)}`);
-    });
+    const startForensicScan = () => {
+        if (forensicScanStarted || forensicConsent !== "allowed")
+            return;
+        forensicScanStarted = true;
+        // Build the local forensic "Context Doctor" report off-thread only after explicit consent.
+        buildForensicReportOffThread((progress) => {
+            const now = Date.now();
+            const nextStage = progress.stage || forensicStage;
+            if (nextStage !== forensicStage) {
+                forensicStage = nextStage;
+                forensicStageStartedAt = now;
+                console.log(`Local scan: ${forensicStageLabel(forensicStage)}…`);
+            }
+            forensicProgress = {
+                status: "running",
+                scanned: progress.done,
+                total: progress.total,
+                stage: forensicStage,
+                label: forensicStageLabel(forensicStage),
+                detail: progress.detail,
+                elapsedMs: now - forensicStartedAt,
+                stageElapsedMs: now - forensicStageStartedAt,
+                updatedAt: now,
+            };
+        })
+            .then((r) => {
+            forensicReport = r;
+        })
+            .catch((e) => {
+            const now = Date.now();
+            forensicProgress = {
+                status: "failed",
+                scanned: forensicProgress.scanned,
+                total: forensicProgress.total,
+                stage: "failed",
+                label: "Local scan failed",
+                elapsedMs: now - forensicStartedAt,
+                stageElapsedMs: now - forensicStageStartedAt,
+                updatedAt: now,
+                error: safeForensicError(e),
+            };
+            console.error(`Could not build the local report: ${e instanceof Error ? e.message : String(e)}`);
+        });
+    };
     let token;
     let key;
     try {

package/dist/v1-contract.js

@@ -108,6 +108,7 @@ export function listToolSpecs(opts = {}) {
     const currentTime = new Date().toISOString();
     const map = opts.map?.trim();
     const updateNotice = opts.updateNotice?.trim();
+    const paidRecallNote = "Requires Echo Pro or Power; saving conversations and memory extraction remain included.";
     const updateSection = updateNotice ? `\n\nUPDATE NOTICE: ${updateNotice}` : "";
     const mapSection = map
         ? `\n\nThis user's EchoMem currently covers these topics (a relevance guide — recall when the task relates to one of them):\n${map}\n`
@@ -115,7 +116,7 @@ export function listToolSpecs(opts = {}) {
     return [
         {
             name: canonicalToolNames.search,
-            description: withMcpVersion(`Recall the user's prior decisions, preferences, and project context from EchoMem — their long-term memory across ALL their AI tools, not just this session. Use it instead of re-deriving or re-asking what the user already settled.${mapSection}\nReturns the ranked memories; set includeAnswer=true only if you need the legacy synthesized answer. Current time: ${currentTime}.${updateSection}`),
+            description: withMcpVersion(`Recall the user's prior decisions, preferences, and project context from EchoMem — their long-term memory across ALL their AI tools, not just this session. Use it instead of re-deriving or re-asking what the user already settled. ${paidRecallNote}${mapSection}\nReturns the ranked memories; set includeAnswer=true only if you need the legacy synthesized answer. Current time: ${currentTime}.${updateSection}`),
             inputSchema: {
                 type: "object",
                 properties: {
@@ -138,7 +139,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: "search_memories_by_description_semantic",
-            description: "Legacy alias for search_memories.",
+            description: `Legacy alias for search_memories. ${paidRecallNote}`,
             inputSchema: {
                 type: "object",
                 properties: {
@@ -161,7 +162,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.save,
-            description: "Save this conversation into EchoMem as long-term memory (durable memories are extracted automatically). passthrough=true stores the text verbatim as a session capsule instead — reload it later via get_memories_by_context.",
+            description: "Save this conversation into EchoMem as long-term memory (durable memories are extracted automatically). Saving is included. passthrough=true stores the text verbatim as a session capsule; reloading/searching saved memories requires Echo Pro or Power.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -194,7 +195,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.timeRange,
-            description: `Retrieve memories within a specific date range. Current time: ${currentTime}.`,
+            description: `Retrieve memories within a specific date range. ${paidRecallNote} Current time: ${currentTime}.`,
             inputSchema: {
                 type: "object",
                 properties: {
@@ -212,7 +213,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.keywords,
-            description: "Search memories based on keywords in keys field.",
+            description: `Search memories based on keywords in keys field. ${paidRecallNote}`,
             inputSchema: {
                 type: "object",
                 properties: {
@@ -369,7 +370,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.getByContext,
-            description: withMcpVersion(`Deterministically re-fetch the exact batch of memories saved under one contextId — no semantic search, no ranking, just that session's saved capsule. save_conversation returns a contextId; pass it here to pull back precisely those memories, e.g. to warm up a fresh session with what a prior session saved, or to verify the saved facts are still present. Current time: ${currentTime}.`),
+            description: withMcpVersion(`Deterministically re-fetch the exact batch of memories saved under one contextId — no semantic search, no ranking, just that session's saved capsule. ${paidRecallNote} save_conversation returns a contextId; pass it here to pull back precisely those memories, e.g. to warm up a fresh session with what a prior session saved, or to verify the saved facts are still present. Current time: ${currentTime}.`),
             inputSchema: {
                 type: "object",
                 properties: {
@@ -386,7 +387,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.checkpointByContext,
-            description: withMcpVersion(`Rebuild a clean-context checkpoint / decision log from one EchoMem contextId. Use this when the user or EchoMem HUD gives you a contextId for a renewed coding session and you need the session handoff, not a raw memory dump. It deterministically fetches that context and formats it as orientation state: decisions, carryover, constraints, and checkpoints. Current time: ${currentTime}.`),
+            description: withMcpVersion(`Rebuild a clean-context checkpoint / decision log from one EchoMem contextId. ${paidRecallNote} Use this when the user or EchoMem HUD gives you a contextId for a renewed coding session and you need the session handoff, not a raw memory dump. It deterministically fetches that context and formats it as orientation state: decisions, carryover, constraints, and checkpoints. Current time: ${currentTime}.`),
             inputSchema: {
                 type: "object",
                 properties: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@echomem/mcp",
-  "version": "1.4.14",
+  "version": "1.4.16",
   "description": "EchoMem MCP bridge: cloud-first memory tools, local context HUD, and the Agent Doctor workspace forensics report (cost ledger + 3D repo city)",
   "main": "dist/index.js",
   "type": "module",