@echomem/mcp 1.4.18 → 1.4.19

package/dist/setup-page/client-lifecycle.js

@@ -4,67 +4,65 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- scan-
         setScanMode(false);
         setCityMode(false);
         setExtractMode(false);
-        setReadyMode(false);
+        setReadyMode(true);
         setHead("Local file access", "Consent");
         app.className = "consentStage";
         app.innerHTML =
-          '<section class="localConsent">' +
-            '<p class="consentEyebrow">Local visualization</p>' +
-            '<h2>Let Echo scan locally to build your Agent Doctor view?</h2>' +
-            '<p>Echo reads local Codex and Claude Code history on this machine only, then turns it into a private usage visualization. Nothing from this scan leaves your device.</p>' +
-            '<div class="consentActions">' +
-              '<button type="button" class="primary" id="allowLocalScan">Continue with local scan</button>' +
-              '<button type="button" class="textButton" id="declineLocalScan">Skip the insight for now</button>' +
+          '<section class="localConsent localConsentAccess">' +
+            '<div class="consentLead">' +
+              '<p class="consentEyebrow">Local history access / required</p>' +
+              '<h2 class="siteHeadline">Let Echo read your <strong>local coding history?</strong></h2>' +
+              '<p class="consentIntro">Echo needs this access to find your local Codex and Claude Code sessions, build your private usage report, and prepare conversations for memory extraction.</p>' +
+              '<div class="consentLocalMark"><img src="/hud-assets/echo-face-cutout.png" alt="" /><span><strong>Processed on this Mac</strong><small>This scan does not send transcripts to EchoMem.</small></span></div>' +
+            '</div>' +
+            '<div class="consentDecision">' +
+              '<div class="consentScopeHead"><strong>What this access does</strong><span>Local scan</span></div>' +
+              '<div class="consentScope" aria-label="What this permission allows">' +
+                '<div><span class="consentScopeNumber" aria-hidden="true">01</span><p><strong>Reads supported session logs</strong><small>Only local Codex and Claude Code history on this device.</small></p></div>' +
+                '<div><span class="consentScopeNumber" aria-hidden="true">02</span><p><strong>Builds the Agent Doctor report</strong><small>Usage patterns and visualizations are computed locally.</small></p></div>' +
+                '<div><span class="consentScopeNumber" aria-hidden="true">03</span><p><strong>Keeps transcripts on this device</strong><small>Nothing is uploaded unless you later select conversations for memory extraction.</small></p></div>' +
+              '</div>' +
+              '<label class="consentCheck"><input type="checkbox" id="localScanConsentCheck" /><span><strong>I understand and allow this local scan</strong><small>Required for Agent Doctor and to choose local conversations for extraction.</small></span></label>' +
+              '<div class="consentActions">' +
+                '<button type="button" class="primary" id="allowLocalScan" disabled>Allow local scan</button>' +
+                '<button type="button" class="textButton" id="declineLocalScan">Not now</button>' +
+              '</div>' +
+              '<p class="consentFine" id="consentStatus" role="status" aria-live="polite"></p>' +
             '</div>' +
-            '<p class="consentFine" id="consentStatus"></p>' +
           '</section>';
         var allow = document.getElementById("allowLocalScan");
         if (allow) allow.onclick = allowLocalScan;
+        var consentCheck = document.getElementById("localScanConsentCheck");
+        if (consentCheck && allow) consentCheck.onchange = function () {
+          allow.disabled = !consentCheck.checked;
+          if (consentCheck.checked) setConsentStatus("");
+        };
         var decline = document.getElementById("declineLocalScan");
         if (decline) decline.onclick = declineLocalScan;
       }
-      function setConsentStatus(message) {
+      function setConsentStatus(message, tone) {
         var node = document.getElementById("consentStatus");
-        if (node) node.textContent = message || "";
+        if (node) {
+          node.textContent = message || "";
+          node.classList.toggle("is-required", tone === "required");
+        }
       }
       async function allowLocalScan() {
         setConsentStatus("Starting local scan...");
         try {
           await postJson("/report-consent", { allowed: true });
+          localHistoryConsentGranted = true;
           await showReport();
         } catch (error) {
           renderReportIssue("CONSENT_SAVE_FAILED", error && error.message ? error.message : "Could not start the local scan.");
         }
       }
       async function declineLocalScan() {
-        setConsentStatus("Skipping Agent Doctor...");
+        localHistoryConsentGranted = false;
         try {
           await postJson("/report-consent", { allowed: false });
         } catch (_) {}
-        renderLocalScanSkipped();
-      }
-      function renderLocalScanSkipped() {
-        setScanMode(false);
-        setCityMode(false);
-        setExtractMode(false);
-        setReadyMode(true);
-        setHead("Agent Doctor skipped", connected ? "Signed in" : "Optional");
-        app.className = "consentStage";
-        app.innerHTML =
-          '<section class="localConsent">' +
-            '<p class="consentEyebrow">Visualization skipped</p>' +
-            '<h2>No problem. Echo can still set up memory.</h2>' +
-            '<p>We will skip Agent Doctor and continue with EchoMem setup.</p>' +
-            '<div class="consentActions">' +
-              '<button type="button" class="primary" data-connect-echo>' + (connected ? "Continue setup" : "Connect EchoMem") + '</button>' +
-              '<button type="button" class="textButton" id="changeConsent">Go back</button>' +
-            '</div>' +
-            '<p class="consentFine" data-signin-help></p>' +
-            '<a class="button secondary hidden" data-signin-fallback target="_blank" rel="noopener noreferrer">Open sign-in</a>' +
-          '</section>';
-        bindConnect();
-        var change = document.getElementById("changeConsent");
-        if (change) change.onclick = renderLocalScanConsent;
+        setConsentStatus("Local history access is required to continue setup. Nothing will be scanned or uploaded unless you allow it.", "required");
       }
       async function showReport() {
         if (reportPollStarted) return;
@@ -138,6 +136,12 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- scan-
         if (event.origin !== location.origin) return;
         var data = event.data || {};
         if (data.type === "echomem:connected" && data.nonce === nonce) {
+          if (!localHistoryConsentGranted) {
+            closeAuthWindow();
+            renderLocalScanConsent();
+            setConsentStatus("Local history access is required before you can connect EchoMem or continue setup.", "required");
+            return;
+          }
           connected = true;
           closeAuthWindow();
           void waitForStats();
@@ -152,7 +156,27 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- scan-
         // Older builds cached a report under the nonce. It is never an authority now; the current
         // server envelope and scan identity are the only inputs allowed to unlock personalized UI.
         try { sessionStorage.removeItem("echomem:setup-report:" + nonce); } catch (_) {}
+        var configLoaded = false;
+        var consentRequired = true;
+        var consentGranted = false;
+        // Learn the auth URL, connection state, and server-side consent gate before routing.
+        try {
+          var cfg = await getJson("/config");
+          configLoaded = true;
+          authUrl = cfg.authUrl || authUrl;
+          switchAccountUrl = cfg.switchAccountUrl || switchAccountUrl || authUrl;
+          connected = !!cfg.connected;
+          workspacePath = cfg.workspacePath || workspacePath;
+          consentRequired = cfg.consentRequired !== false;
+          consentGranted = cfg.consentGranted === true;
+          localHistoryConsentGranted = consentGranted;
+        } catch (_) {}
         if (params.get("connected") === "1") {
+          if (!configLoaded || (consentRequired && !consentGranted)) {
+            renderLocalScanConsent();
+            setConsentStatus("Local history access is required before you can connect EchoMem or continue setup.", "required");
+            return;
+          }
           connected = true;
           if (notifyOpenerConnected()) {
             // Popup flow: hand the main tab back control, then this popup closes.
@@ -169,13 +193,10 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- scan-
           }
           return;
         }
-        // Learn the auth URL + connection state before asking for optional local file access.
-        try {
-          var cfg = await getJson("/config");
-          authUrl = cfg.authUrl || authUrl;
-          connected = !!cfg.connected;
-          workspacePath = cfg.workspacePath || workspacePath;
-        } catch (_) {}
+        if (consentGranted) {
+          await showReport();
+          return;
+        }
         renderLocalScanConsent();
       }
       __ECHO_SETUP_STARTUP__;