@echomem/mcp 1.4.19 → 1.4.20

package/dist/setup-page/styles-website-alignment.js

@@ -88,6 +88,144 @@ export const SETUP_PAGE_STYLES_WEBSITE_ALIGNMENT = String.raw `
       box-shadow: none;
     }
 
+    /* Local scan -------------------------------------------------------------- */
+    body.scanMode {
+      background:
+        radial-gradient(circle, rgba(26,58,143,0.075) 0 1px, transparent 1.35px) 0 0 / 18px 18px,
+        radial-gradient(circle, rgba(78,205,196,0.07) 0 1px, transparent 1.35px) 9px 9px / 22px 22px,
+        var(--echo-paper-canvas);
+    }
+    body.scanMode main {
+      padding: clamp(32px, 6vw, 72px) clamp(18px, 5vw, 58px);
+    }
+    body.scanMode #app {
+      width: min(860px, 100%);
+      min-height: min(72vh, 680px);
+    }
+    .scanLoader {
+      position: relative;
+      overflow: visible;
+      width: min(760px, 100%);
+      border: 1.5px solid rgba(26,58,143,0.20);
+      border-radius: var(--echo-radius-panel);
+      background: rgba(255,255,255,0.92);
+      padding: clamp(26px, 5vw, 48px);
+      box-shadow: var(--echo-shadow-pop);
+    }
+    .scanLoader::before {
+      content: "";
+      position: absolute;
+      top: -11px;
+      left: 50%;
+      z-index: 2;
+      width: 88px;
+      height: 25px;
+      border: 1px solid rgba(43,42,38,0.07);
+      background: color-mix(in srgb, var(--echo-note-cream) 72%, white 28%);
+      box-shadow: 0 1px 2px rgba(43,42,38,0.07);
+      opacity: 0.82;
+      transform: translateX(-50%) rotate(-1deg);
+    }
+    .scanLoaderLead {
+      display: grid;
+      grid-template-columns: auto minmax(0, 1fr);
+      align-items: center;
+      gap: clamp(20px, 4vw, 34px);
+    }
+    .scanMascot {
+      display: grid;
+      place-items: center;
+      width: clamp(92px, 13vw, 118px);
+      aspect-ratio: 1;
+      flex: 0 0 auto;
+      border: 1px solid rgba(26,58,143,0.11);
+      border-radius: 20px;
+      background: color-mix(in srgb, var(--echo-paper-white) 64%, var(--echo-note-cream) 36%);
+      box-shadow: var(--echo-shadow-paper);
+      transform: rotate(-1.5deg);
+    }
+    .scanMascot img {
+      display: block;
+      width: 76%;
+      height: 76%;
+      object-fit: contain;
+      filter: drop-shadow(0 12px 14px rgba(26,58,143,0.16));
+    }
+    .scanLoaderCopy { min-width: 0; }
+    .scanEyebrow {
+      width: fit-content;
+      margin: 0 0 15px;
+      border: 1px solid rgba(26,58,143,0.13);
+      border-radius: 999px;
+      background: rgba(255,255,255,0.72);
+      padding: 6px 11px;
+      box-shadow: var(--echo-shadow-glass);
+      color: color-mix(in srgb, var(--echo-ink-primary) 70%, var(--echo-ink-accent) 30%);
+      font-size: 11px;
+      letter-spacing: 0.11em;
+    }
+    .scanLoader h2.siteHeadline {
+      max-width: 560px;
+      font-size: clamp(40px, 6vw, 64px);
+      line-height: 0.98;
+    }
+    .scanIntro {
+      max-width: 520px;
+      margin: 18px 0 0;
+      color: var(--echo-ink-mute);
+      font-size: 15px;
+      font-weight: 500;
+      line-height: 1.55;
+    }
+    .scanProgressCard {
+      margin-top: clamp(26px, 5vw, 38px);
+      border: 1px solid rgba(26,58,143,0.10);
+      border-radius: var(--echo-radius-card);
+      background: color-mix(in srgb, var(--echo-paper-white) 68%, var(--echo-note-blue) 32%);
+      padding: 17px 18px 15px;
+      box-shadow: var(--echo-shadow-paper);
+    }
+    .scanProgress {
+      width: 100%;
+      height: 10px;
+      margin: 0;
+      border-radius: 999px;
+      background: rgba(255,255,255,0.78);
+      box-shadow: inset 0 1px 3px rgba(20,24,34,0.10);
+    }
+    .scanProgressFill {
+      min-width: 10px;
+      border-radius: 999px;
+      background: linear-gradient(90deg, var(--echo-ink-primary), color-mix(in srgb, var(--echo-ink-primary) 72%, var(--echo-ink-accent) 28%));
+      box-shadow: 0 0 0 1px rgba(26,58,143,0.08), 0 3px 9px rgba(26,58,143,0.20);
+    }
+    .scanCaption {
+      margin: 12px 0 0;
+      color: var(--echo-ink-mute);
+      font-size: 12px;
+      font-weight: 700;
+      line-height: 1.5;
+    }
+    .scanPrivacy {
+      display: flex;
+      align-items: center;
+      gap: 8px;
+      margin: 15px 2px 0;
+      color: var(--echo-ink-faint);
+      font-family: var(--echo-font-mono);
+      font-size: 11px;
+      font-weight: 600;
+      line-height: 1.45;
+    }
+    .scanPrivacy > span {
+      width: 8px;
+      height: 8px;
+      flex: 0 0 auto;
+      border-radius: 50%;
+      background: var(--echo-ink-accent-deep);
+      box-shadow: 0 0 0 4px rgba(78,205,196,0.13);
+    }
+
     /* Permission and skip states ------------------------------------------------ */
     .localConsent {
       overflow: visible;
@@ -379,6 +517,9 @@ export const SETUP_PAGE_STYLES_WEBSITE_ALIGNMENT = String.raw `
     .readyDecision .actions .primary:not(:disabled):hover {
       box-shadow: inset 0 1px 0 rgba(255,255,255,0.28), 0 16px 34px rgba(26,58,143,0.25);
     }
+    .readyDecision .actions .skipHistoryButton {
+      border-radius: 999px;
+    }
     .readyFoot {
       border-top-color: rgba(26,58,143,0.10);
       border-radius: 0 0 calc(var(--echo-radius-panel) - 2px) calc(var(--echo-radius-panel) - 2px);
@@ -563,6 +704,16 @@ export const SETUP_PAGE_STYLES_WEBSITE_ALIGNMENT = String.raw `
       background: color-mix(in srgb, var(--echo-paper-white) 64%, var(--echo-note-blue) 36%);
       box-shadow: inset 3px 0 0 var(--echo-ink-primary);
     }
+    .sessionPickerLimitCard {
+      border-color: rgba(26,58,143,0.16);
+      border-radius: var(--echo-radius-card);
+      background: color-mix(in srgb, rgba(255,255,255,0.94) 84%, var(--echo-note-cream) 16%);
+      box-shadow: var(--echo-shadow-pop);
+    }
+    .sessionPickerLimitActions .button,
+    .sessionPickerLimitActions button {
+      border-radius: 999px;
+    }
     .sessionPickerSource {
       border-radius: 9px;
       box-shadow: var(--echo-shadow-paper);
@@ -585,6 +736,38 @@ export const SETUP_PAGE_STYLES_WEBSITE_ALIGNMENT = String.raw `
       .skipStage {
         border-radius: 18px;
       }
+      body.scanMode main {
+        padding: 34px 14px 52px;
+      }
+      body.scanMode #app {
+        min-height: calc(100vh - 86px);
+      }
+      .scanLoader {
+        border-radius: 18px;
+        padding: 28px 20px 22px;
+      }
+      .scanLoaderLead {
+        grid-template-columns: 1fr;
+        gap: 18px;
+      }
+      .scanMascot {
+        width: 76px;
+        border-radius: 16px;
+      }
+      .scanLoader h2.siteHeadline {
+        font-size: clamp(38px, 12vw, 52px);
+      }
+      .scanIntro {
+        margin-top: 14px;
+        font-size: 14px;
+      }
+      .scanProgressCard {
+        margin-top: 24px;
+        padding: 15px 14px 13px;
+      }
+      .scanPrivacy {
+        align-items: flex-start;
+      }
       .consentLead,
       .skippedEcho {
         border-radius: 16px 16px 0 0;

package/dist/setup-preview.js

@@ -1,9 +1,11 @@
 export const SETUP_PREVIEW_STATES = [
     "consent",
     "consent-required",
+    "scan",
     "report",
     "extract-counting",
     "extract-ready",
+    "extract-limit",
     "extract-run",
     "extract-overdue",
     "extract-done",
@@ -211,6 +213,17 @@ export function renderSetupPreviewBootstrap(state) {
         renderLocalScanConsent();
         setConsentStatus("Local history access is required to continue setup. Nothing will be scanned or uploaded unless you allow it.", "required");`;
     }
+    if (state === "scan") {
+        return `${watermark}
+        reportEnvelope = {
+          schemaVersion: 1,
+          kind: "scanning",
+          mode: "preview",
+          scanId: "design-preview",
+          progress: { stage: "classifying-sessions", label: "Classifying repeated context", scanned: 116, total: 180, stageElapsedMs: 3000 }
+        };
+        renderLoading();`;
+    }
     if (state === "report") {
         const reportJson = JSON.stringify(previewReport);
         return `${watermark}
@@ -223,7 +236,8 @@ export function renderSetupPreviewBootstrap(state) {
         stats = null;
         renderDashboard();`;
     }
-    if (state === "extract-ready") {
+    if (state === "extract-ready" || state === "extract-limit") {
+        const remainingHistory = state === "extract-limit" ? 0 : 28;
         return `${watermark}
         connected = true;
         billingStatus = {
@@ -234,7 +248,7 @@ export function renderSetupPreviewBootstrap(state) {
             email: "erik@example.com",
             avatarUrl: "/hud-assets/echo-face-cutout.png"
           },
-          historicalConversationQuota: { used: 72, limit: 100, remaining: 28 }
+          historicalConversationQuota: { used: ${100 - remainingHistory}, limit: 100, remaining: ${remainingHistory} }
         };
         stats = {
           sessions: { total: 136, codex: 82, claudeCode: 54 },

package/dist/setup.js

@@ -39,9 +39,107 @@ import { checkLatestUpdateStatus, compareSemver, readCachedUpdateStatus } from "
 const WEB_URL = (process.env.ECHO_WEB_URL || "https://yeahecho.com").replace(/\/$/, "");
 const API_BASE_URL = (process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app").replace(/\/$/, "");
 const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing").replace(/\/$/, "");
+const CODEX_SKILL_NAMES = [
+    "echomem-search",
+    "echomem-save",
+    "echomem-forget",
+    "echomem-login",
+];
 function home(...p) {
     return path.join(os.homedir(), ...p);
 }
+function codexHome() {
+    const configured = process.env.CODEX_HOME?.trim();
+    if (!configured)
+        return home(".codex");
+    if (configured === "~")
+        return os.homedir();
+    if (configured.startsWith(`~${path.sep}`))
+        return path.join(os.homedir(), configured.slice(2));
+    return path.resolve(configured);
+}
+function filesEqual(left, right) {
+    try {
+        return fs.readFileSync(left).equals(fs.readFileSync(right));
+    }
+    catch {
+        return false;
+    }
+}
+function packagedSkillMatches(source, destination) {
+    return filesEqual(path.join(source, "SKILL.md"), path.join(destination, "SKILL.md"))
+        && filesEqual(path.join(source, "agents", "openai.yaml"), path.join(destination, "agents", "openai.yaml"));
+}
+function readSkillMetadata(skillFile) {
+    try {
+        const content = fs.readFileSync(skillFile, "utf8");
+        const frontmatter = content.match(/^---\s*\n([\s\S]*?)\n---/);
+        if (!frontmatter)
+            return null;
+        const name = frontmatter[1].match(/^name:\s*(.+)$/m)?.[1]?.trim().replace(/^['"]|['"]$/g, "") ?? "";
+        const description = frontmatter[1].match(/^description:\s*(.+)$/m)?.[1]?.trim().replace(/^['"]|['"]$/g, "") ?? "";
+        return name ? { name, description } : null;
+    }
+    catch {
+        return null;
+    }
+}
+function detectCompetingMemorySkills(skillsRoot) {
+    let entries = [];
+    try {
+        entries = fs.readdirSync(skillsRoot, { withFileTypes: true });
+    }
+    catch {
+        return [];
+    }
+    const echoNames = new Set(CODEX_SKILL_NAMES);
+    return entries
+        .filter((entry) => entry.isDirectory() && !entry.name.startsWith("."))
+        .map((entry) => readSkillMetadata(path.join(skillsRoot, entry.name, "SKILL.md")))
+        .filter((metadata) => Boolean(metadata))
+        .filter(({ name, description }) => {
+        if (echoNames.has(name))
+            return false;
+        const text = `${name} ${description}`;
+        return /\b(memory|memories|remember|recall)\b/i.test(text)
+            && /\b(search|save|forget|delete|login|connect|recall|remember)\b/i.test(text);
+    })
+        .map(({ name }) => name)
+        .sort();
+}
+/** Install the EchoMem-owned Codex skills bundled with this npm package. Other providers are never modified. */
+export function installCodexSkills(targetCodexHome = codexHome(), templateRoot = fileURLToPath(new URL("../templates/codex-skills/", import.meta.url))) {
+    const skillsRoot = path.join(targetCodexHome, "skills");
+    const report = {
+        skillsRoot,
+        installed: [],
+        updated: [],
+        unchanged: [],
+        competingMemorySkills: [],
+    };
+    fs.mkdirSync(skillsRoot, { recursive: true });
+    for (const skillName of CODEX_SKILL_NAMES) {
+        const source = path.join(templateRoot, skillName);
+        const destination = path.join(skillsRoot, skillName);
+        const sourceSkillFile = path.join(source, "SKILL.md");
+        if (!fs.existsSync(sourceSkillFile) || !fs.statSync(sourceSkillFile).isFile()) {
+            throw new Error(`EchoMem package is missing the ${skillName} skill template.`);
+        }
+        if (!fs.existsSync(destination)) {
+            fs.cpSync(source, destination, { recursive: true, force: true });
+            report.installed.push(skillName);
+        }
+        else if (packagedSkillMatches(source, destination)) {
+            report.unchanged.push(skillName);
+        }
+        else {
+            fs.cpSync(source, destination, { recursive: true, force: true });
+            report.updated.push(skillName);
+        }
+    }
+    report.competingMemorySkills = detectCompetingMemorySkills(skillsRoot);
+    return report;
+}
 /** Map a source entry to its compiled sibling without ever guessing outside this package. */
 export function compiledDistPathForSource(entry) {
     if (!entry.endsWith(".ts") || !path.isAbsolute(entry))
@@ -96,7 +194,7 @@ export function knownClients() {
         { id: "windsurf", label: "Windsurf", kind: "json", configPath: home(".codeium", "windsurf", "mcp_config.json") },
         { id: "claude-desktop", label: "Claude Desktop", kind: "json", configPath: path.join(appSupport, "Claude", "claude_desktop_config.json") },
         { id: "claude-code", label: "Claude Code", kind: "snippet", note: "run: claude mcp add-json echomem '<entry>'  (or add to .mcp.json)" },
-        { id: "codex", label: "Codex", kind: "command", detectDir: home(".codex"), configPath: home(".codex", "config.toml"), note: "add to ~/.codex/config.toml under [mcp_servers.echomem]" },
+        { id: "codex", label: "Codex", kind: "command", detectDir: codexHome(), configPath: path.join(codexHome(), "config.toml"), note: "add to ~/.codex/config.toml under [mcp_servers.echomem]" },
     ];
 }
 /** A client is "present" if its config dir already exists (JSON) — a cheap heuristic for detection. */
@@ -222,6 +320,7 @@ function echomemGuidanceBlock() {
         AGENTS_MD_BEGIN,
         "## Memory (EchoMem)",
         "EchoMem is your long-term memory across all coding sessions and tools.",
+        "- Use EchoMem's `echomem-*` skills and MCP tools as the default memory provider. Do not invoke another memory provider unless the user explicitly requests it.",
         "- Before re-deriving past decisions, project context, or anything the user likely settled before: call `search_memories` first.",
         "- When meaningful work wraps up (a decision, a fix, a milestone) or the user asks to remember something: call `save_conversation`.",
         "- If the user pastes a session carryover/checkpoint: it may reference `get_checkpoint_by_context` — use it to pull the checkpoint/decision trail when you need more than the snapshot.",
@@ -1693,16 +1792,20 @@ export async function verifyAndStore(input) {
         return "Token saved, but this account is ENCRYPTED. Re-run with --passphrase to unlock the vault.";
     }
     store.saveKey(keyB64);
-    return "✅ Token + encryption key verified and saved. Reload your MCP client.";
+    return "✅ Token + encryption key verified. This device stays unlocked until you run `echomem-mcp lock` or log out. Retry EchoMem in this session — no editor restart needed.";
 }
 function prompt(question, { silent = false } = {}) {
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout, terminal: true });
     return new Promise((resolve) => {
         if (silent) {
             const out = process.stdout;
-            rl._writeToOutput = () => out.write("");
+            // readline renders `question` through this private writer too. Print the label first, then
+            // suppress only the user's characters; otherwise the CLI waits on a completely blank line.
+            out.write(question);
+            const silentRl = rl;
+            silentRl._writeToOutput = () => undefined;
         }
-        rl.question(question, (answer) => {
+        rl.question(silent ? "" : question, (answer) => {
             rl.close();
             if (silent)
                 process.stdout.write("\n");
@@ -1767,6 +1870,9 @@ async function cmdSetup(flags) {
     if (!flags["no-agents-md"]) {
         writeMemoryGuidanceForTargets(targets);
     }
+    if (!flags["no-codex-skills"]) {
+        writeCodexSkillsForTargets(targets);
+    }
     console.log("");
     if (flags["skip-login"] || flags["no-login"]) {
         // init drives login itself right after, so the "skipped" note would be misleading there.
@@ -1781,10 +1887,10 @@ async function cmdSetup(flags) {
 }
 /**
  * `echomem-mcp init` — the one-command install. Configures EVERY coding agent installed on this
- * machine (Codex + Claude Code + Claude Desktop, not just auto-detected ones), writes the AGENTS.md
- * memory guidance, logs in via the browser, and launches the context HUD — the whole product in a
- * single command. `setup`/`update` remain the granular primitives; init just picks the "do everything"
- * defaults and frames the result.
+ * machine (Codex + Claude Code + Claude Desktop, not just auto-detected ones), installs EchoMem's
+ * Codex skills, writes the AGENTS.md memory guidance, logs in via the browser, and launches the
+ * context HUD — the whole product in a single command. `setup`/`update` remain the granular
+ * primitives; init just picks the "do everything" defaults and frames the result.
  */
 async function cmdInit(flags) {
     console.log("Setting up EchoMem — shared memory for all your coding agents, plus the live context HUD.\n");
@@ -1819,8 +1925,8 @@ async function cmdInit(flags) {
 function writeMemoryGuidanceForTargets(targets) {
     const files = new Map(); // path → label
     for (const t of targets) {
-        if (t.id === "codex")
-            files.set(home(".codex", "AGENTS.md"), "Codex");
+        if (t.id === "codex" && t.kind === "command")
+            files.set(path.join(t.detectDir, "AGENTS.md"), "Codex");
         if (t.id === "claude-code" || t.id === "claude-desktop")
             files.set(home(".claude", "CLAUDE.md"), "Claude");
     }
@@ -1838,6 +1944,24 @@ function writeMemoryGuidanceForTargets(targets) {
         }
     }
 }
+function writeCodexSkillsForTargets(targets) {
+    const target = targets.find((client) => client.id === "codex" && client.kind === "command");
+    if (!target)
+        return;
+    try {
+        const report = installCodexSkills(target.detectDir);
+        const changed = [...report.installed, ...report.updated];
+        if (changed.length > 0) {
+            console.log(`✅ Installed EchoMem Codex skills: ${CODEX_SKILL_NAMES.join(", ")} — start a new Codex session to load them.`);
+        }
+        if (report.competingMemorySkills.length > 0) {
+            console.log(`ℹ️  Other memory skills remain installed: ${report.competingMemorySkills.join(", ")}. EchoMem did not modify them; its global guidance now selects EchoMem by default.`);
+        }
+    }
+    catch (error) {
+        console.log(`ℹ️  Could not install EchoMem Codex skills: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
 async function cmdUpdate(flags) {
     await cmdSetup({ ...flags, "skip-login": true });
     console.log(`Update config complete. Start a new MCP session to load ${MCP_PACKAGE_LABEL}.`);
@@ -2654,7 +2778,9 @@ async function cmdUnlock(flags) {
     let passphrase = typeof flags.passphrase === "string" ? flags.passphrase : undefined;
     const key = typeof flags.key === "string" ? flags.key : undefined;
     if (!passphrase && !key) {
-        passphrase = await prompt("Vault passphrase: ", { silent: true });
+        console.log("This is a private, one-time unlock for this trusted device.");
+        console.log("Enter your vault passphrase below. Your typing is hidden; press Return when finished.");
+        passphrase = await prompt("Vault passphrase (typing is hidden): ", { silent: true });
     }
     const keyB64 = passphrase ? await deriveAndVerifyKey(passphrase, config) : key && (await verifyKeyB64(key, config)) ? key : null;
     if (!keyB64) {
@@ -2663,7 +2789,22 @@ async function cmdUnlock(flags) {
         return;
     }
     store.saveKey(keyB64);
-    console.log("✅ Vault unlocked. Reload your MCP client (or start a new session).");
+    console.log("✅ Vault unlocked. This device stays unlocked until you run `echomem-mcp lock` or log out.");
+    console.log("Retry the EchoMem action in your current agent session — no restart needed.");
+}
+function cmdLock() {
+    if (process.env.ECHO_ENCRYPTION_KEY) {
+        console.error("The vault key comes from ECHO_ENCRYPTION_KEY. Unset that environment variable to lock this device.");
+        process.exitCode = 1;
+        return;
+    }
+    const store = new KeyStore();
+    if (!store.getKey()) {
+        console.log("EchoMem vault is already locked.");
+        return;
+    }
+    store.clearKey();
+    console.log("🔒 EchoMem vault locked on this device. Your login remains connected.");
 }
 async function cmdStatus(flags = {}) {
     const store = new KeyStore();
@@ -2700,7 +2841,13 @@ async function cmdStatus(flags = {}) {
             console.log(`Logged in as: (could not verify — ${formatVerificationError(error)})`);
         }
     }
-    console.log(`Encryption key: ${store.getKey() ? "present" : store.isKeyExpired() ? "EXPIRED — run `echomem-mcp unlock`" : "not set"}`);
+    const key = store.getKey();
+    const keyStatus = key
+        ? process.env.ECHO_ENCRYPTION_KEY
+            ? "present — provided by environment"
+            : "present — trusted on this device until `echomem-mcp lock` or logout"
+        : "not set — open Terminal and run `echomem-mcp unlock` for encrypted accounts";
+    console.log(`Encryption key: ${keyStatus}`);
     const detected = detectClients();
     console.log(`Detected clients: ${detected.length ? detected.map((c) => c.label).join(", ") : "none auto-detected"}`);
     const reports = inspectClientConfigs(latest ?? MCP_PACKAGE_VERSION);
@@ -2729,11 +2876,13 @@ Usage:
   echomem-mcp                       Run the MCP server (stdio; default — used by your editor)
   echomem-mcp setup [--client X]    Detect editor, write its MCP config, then log in
   echomem-mcp setup --skip-login    Write MCP config without opening login/browser
+  echomem-mcp setup --no-codex-skills  Skip installing the bundled EchoMem Codex skills
   echomem-mcp update --all          Repoint detected clients to this installed bridge; no login/browser
   echomem-mcp update --client X     Repoint one MCP client; no login/browser
   echomem-mcp setup --with-hud      Configure MCP, then launch the EchoMem context HUD
   echomem-mcp login                 Approve this device in the browser (or --token/--passphrase)
-  echomem-mcp unlock                Re-derive the encryption key after its TTL (or --passphrase)
+  echomem-mcp unlock                Privately unlock the vault on this trusted device
+  echomem-mcp lock                  Remove the local vault key while keeping the device login
   echomem-mcp status                Show token/key/clients
   echomem-mcp doctor [--no-network] Diagnose configured client bridge versions
   echomem-mcp logout                Remove stored credentials
@@ -2777,6 +2926,9 @@ export async function runCli(argv) {
         case "unlock":
             await cmdUnlock(flags);
             return true;
+        case "lock":
+            cmdLock();
+            return true;
         case "status":
             await cmdStatus(flags);
             return true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@echomem/mcp",
-  "version": "1.4.19",
+  "version": "1.4.20",
   "description": "EchoMem MCP bridge: cloud-first memory tools, local context HUD, and the Agent Doctor workspace forensics report (cost ledger + 3D repo city)",
   "main": "dist/index.js",
   "type": "module",

package/templates/codex-skills/echomem-forget/SKILL.md

@@ -0,0 +1,16 @@
+---
+name: echomem-forget
+description: Find, review, and delete outdated or incorrect memories from EchoMem. Use when the user asks EchoMem to forget, remove, or correct remembered information, or says a stored fact is no longer true. Require an explicit confirmation before the destructive delete step and do not operate on another memory provider unless requested.
+---
+
+# EchoMem Forget
+
+Use EchoMem's two-step deletion workflow.
+
+1. Search EchoMem when needed to identify the exact memory and its ID.
+2. Call `delete_memory` with the memory ID only to preview the target and receive a confirmation token.
+3. Show the preview and ask the user to confirm deletion of that exact memory.
+4. Only after confirmation, call `delete_memory` with `confirmed: true` and the exact token.
+5. If the user supplied corrected information, offer to save the replacement with `save_conversation` after deletion.
+
+Never bypass the preview or confirmation step.

package/templates/codex-skills/echomem-forget/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: "EchoMem Forget"
+  short_description: "Review and delete an EchoMem memory"
+  default_prompt: "Use $echomem-forget to find the outdated memory, show me what will be deleted, and ask for confirmation."
+policy:
+  allow_implicit_invocation: true

package/templates/codex-skills/echomem-login/SKILL.md

@@ -0,0 +1,27 @@
+---
+name: echomem-login
+description: Connect, authenticate, diagnose, or unlock the local EchoMem MCP bridge. Use when EchoMem reports a missing token, locked or expired encryption key, disconnected MCP server, setup problem, or when the user asks to log in, connect a device, check EchoMem status, or unlock their memory vault.
+---
+
+# EchoMem Login
+
+Use the installed EchoMem CLI and keep credentials out of chat and client configuration.
+
+- Run `echomem-mcp status` to diagnose the current connection.
+- Run `echomem-mcp login` to connect the device through the browser approval flow.
+- EchoMem treats the MCP bridge as a trusted device. A verified local key stays available until the
+  user runs `echomem-mcp lock`, logs out, or removes the local credentials. When the key is absent,
+  tell the user to open their own Terminal and run `echomem-mcp unlock`.
+- Run `echomem-mcp setup --client codex --skip-login` when the MCP entry itself is missing.
+
+Do not run the bare interactive `echomem-mcp unlock` command through an agent shell: it waits for a
+private passphrase that the user must enter themselves. Tell the user that the prompt reads
+`Vault passphrase (typing is hidden):`, no characters appear while typing, and they should press
+Return when finished. After it succeeds, retry the MCP action in the current session; no editor
+restart is needed.
+
+Use `echomem-mcp lock` when the user wants to remove the local vault key without disconnecting their
+device login.
+
+Prefer the interactive browser flow for login. Never print, log, or ask the user to paste tokens,
+passphrases, or encryption keys into the conversation or expose them through command-line flags.

package/templates/codex-skills/echomem-login/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: "EchoMem Login"
+  short_description: "Connect or unlock EchoMem locally"
+  default_prompt: "Use $echomem-login to connect this device to EchoMem or unlock my encrypted memory vault."
+policy:
+  allow_implicit_invocation: true

package/templates/codex-skills/echomem-save/SKILL.md

@@ -0,0 +1,14 @@
+---
+name: echomem-save
+description: Save durable knowledge to EchoMem, the user's cross-agent long-term memory. Use when the user asks to remember, save, preserve, or carry forward information, or when active EchoMem guidance requires capturing a meaningful decision, resolved bug, architectural choice, preference, or project milestone. Prefer EchoMem when it is connected; do not silently save to another memory provider.
+---
+
+# EchoMem Save
+
+Use the `save_conversation` tool from the `echomem` MCP server.
+
+1. Capture the goal, decision or outcome, important reasoning, and relevant files or constraints. Omit noise and unrelated transcript content.
+2. Prefer structured `messages`; add a concise title, source, and useful tags.
+3. Use `passthrough: true` only when the user explicitly needs a verbatim session capsule.
+4. Never include secrets, credentials, or unnecessary sensitive content.
+5. Confirm what EchoMem saved. If saving fails, report the failure without switching providers silently.

package/templates/codex-skills/echomem-save/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: "EchoMem Save"
+  short_description: "Save durable project knowledge to EchoMem"
+  default_prompt: "Use $echomem-save to preserve this decision and its important context in EchoMem."
+policy:
+  allow_implicit_invocation: true

package/templates/codex-skills/echomem-search/SKILL.md

@@ -0,0 +1,14 @@
+---
+name: echomem-search
+description: Search EchoMem, the user's cross-agent long-term memory, for prior decisions, preferences, project context, and past work. Use when a request refers to previous work or sessions, asks what was decided or how something was implemented, needs a catch-up, or plausibly depends on context the user settled before. Prefer EchoMem when it is connected; do not silently substitute another memory provider.
+---
+
+# EchoMem Search
+
+Use the `echomem` MCP server as the source of long-term memory.
+
+1. Call `search_memories` with a concise query describing the context needed. Keep `includeAnswer` false unless an EchoMem-generated synthesis is specifically useful.
+2. Use `get_memories_by_time_range` for explicit dates, `search_memories_by_keywords` for exact terms, and `get_checkpoint_by_context` when a carryover references an EchoMem checkpoint.
+3. Distinguish recalled facts from inference and preserve dates or provenance returned by EchoMem.
+4. If EchoMem returns an action-required URL, give the user that exact URL and explanation.
+5. If EchoMem is unavailable, say so. Do not switch to another memory provider unless the user requests it.

package/templates/codex-skills/echomem-search/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: "EchoMem Search"
+  short_description: "Recall decisions and context from EchoMem"
+  default_prompt: "Use $echomem-search to recall my prior decisions and relevant project context before continuing."
+policy:
+  allow_implicit_invocation: true