npm - @echomem/mcp - Versions diffs - 1.4.23 → 1.4.25 - Mend

@echomem/mcp 1.4.23 → 1.4.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/dist/hud/server.js +1 -1
package/dist/hud/web.js +1 -1
package/dist/index.js +111 -15
package/dist/package-metadata.js +5 -2
package/dist/setup-page/client-extraction.js +1 -1
package/dist/setup-preview.js +1 -1
package/dist/setup.js +8 -5
package/dist/v1-contract.js +81 -5
package/package.json +1 -1

package/dist/hud/server.js CHANGED Viewed

@@ -13,7 +13,7 @@ import { assembleCodex, assembleClaude } from "../migrate.js";
 import { readBillingAlert } from "../billing-alert.js";
 import { readSessionWorkingDirectory, } from "./session-launcher.js";
 const API_BASE = (process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app").replace(/\/$/, "");
-const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing").replace(/\/$/, "");
+const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/account").replace(/\/$/, "");
 export async function createHudServer(opts = {}) {
     const mode = opts.mode || "auto";
     const port = opts.port ?? 17377;

package/dist/hud/web.js CHANGED Viewed

@@ -1729,7 +1729,7 @@ export const HUD_HTML = String.raw `<!doctype html>
           state: "ok",
           plan: "pro",
           paid: true,
-          pricingUrl: "https://yeahecho.com/pricing?source=hud_preview",
+          pricingUrl: "https://echoknows.com/account?source=hud_preview",
           memoryProcessingQuota: { used: previewProcessingUsed, limit: 200000, remaining: 200000 - previewProcessingUsed, resetAt: new Date(Date.now() + 31 * 60 * 60 * 1000).toISOString() },
           memorySearchQuota: { used: previewSearchUsed, limit: 500, remaining: 500 - previewSearchUsed, resetAt: new Date(Date.now() + 31 * 60 * 60 * 1000).toISOString() },
           historicalConversationQuota: { used: 191, limit: 500, remaining: 309 },

package/dist/index.js CHANGED Viewed

@@ -4,7 +4,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { CallToolRequestSchema, ErrorCode, ListToolsRequestSchema, McpError, } from "@modelcontextprotocol/sdk/types.js";
 import axios from "axios";
 import { ZodError } from "zod";
-import { canonicalToolNames, completeGroupPublicationSchema, createGroupInviteSchema, createGroupSchema, deleteMemorySchema, getByContextSchema, groupContextSchema, joinGroupSchema, keywordsSchema, listFriendsSchema, listToolSpecs, othersSchema, publishBatchToGroupSchema, publishToGroupSchema, prepareGroupPublicationSchema, publicMemorySchema, resolveCanonicalToolName, saveConversationSchema, searchMemoriesSchema, searchUsersSchema, sendFriendRequestSchema, timeRangeSchema, } from "./v1-contract.js";
+import { canonicalToolNames, completeGroupPublicationSchema, createGroupInviteSchema, createGroupSchema, deleteMemorySchema, flagPublicationAttentionSchema, getByContextSchema, groupContextSchema, joinGroupSchema, keywordsSchema, listFriendsSchema, listToolSpecs, othersSchema, publishBatchToGroupSchema, publishToGroupSchema, prepareGroupPublicationSchema, publicMemorySchema, resolveCanonicalToolName, saveConversationSchema, searchMemoriesSchema, searchUsersSchema, sendFriendRequestSchema, timeRangeSchema, updateGroupProfileSchema, } from "./v1-contract.js";
 import { KeyStore } from "./keystore.js";
 import { EventLogger, hashText } from "./events.js";
 import { buildReportText } from "./report.js";
@@ -16,7 +16,11 @@ import { MCP_PACKAGE_VERSION, MCP_SERVER_INSTRUCTIONS } from "./package-metadata
 import { clearBillingAlert, writeBillingAlert } from "./billing-alert.js";
 import { checkLatestUpdateStatus, formatUpdateNotice, formatUpdateStatusText, startBackgroundUpdateCheck, } from "./update-check.js";
 const ECHO_API_BASE_URL = process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app";
-const ECHO_PRICING_URL = process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing";
+const ECHO_PRICING_URL = process.env.ECHO_PRICING_URL || "https://echoknows.com/account";
+const ECHO_MEMORY_WEB_URL = (process.env.ECHO_MEMORY_WEB_URL || "https://echoknows.com/company/memories").replace(/\/$/, "");
+function memoryWebUrl(memoryId) {
+    return `${ECHO_MEMORY_WEB_URL}?memoryId=${encodeURIComponent(memoryId)}`;
+}
 /** Thrown when no API token is present yet — the model gets a "run login" nudge, not a hard error. */
 class NoTokenError extends Error {
 }
@@ -495,6 +499,14 @@ function inputAnalyticsForTool(canonicalName, args) {
                 memory_id_hash: memoryId ? hashText(memoryId) : undefined,
             };
         }
+        case canonicalToolNames.flagPublicationAttention: {
+            const memoryIds = Array.isArray(a.memoryIds) ? a.memoryIds.filter((id) => typeof id === "string") : [];
+            return {
+                memory_count: memoryIds.length,
+                has_label: !!readString(a, "label"),
+                confirmed: a.confirmed === true,
+            };
+        }
         case canonicalToolNames.publishBatchToGroup: {
             const memoryIds = Array.isArray(a.memoryIds) ? a.memoryIds.filter((id) => typeof id === "string") : [];
             return {
@@ -983,6 +995,16 @@ class EchoMemApiClient {
         const response = await this.axios.post("/api/extension/social/groups/current/publications/prepare", parsed, { headers: enc.enabled && enc.key ? { "X-Encryption-Key": enc.key } : undefined });
         return response.data;
     }
+    async flagMemoriesForPublicationAttention(args) {
+        const parsed = flagPublicationAttentionSchema.parse(args ?? {});
+        const response = await this.axios.post("/api/extension/memories/publication-attention", parsed);
+        return response.data;
+    }
+    async updateGroupProfile(args) {
+        const parsed = updateGroupProfileSchema.parse(args ?? {});
+        const response = await this.axios.patch("/api/extension/social/groups/current/profile", parsed);
+        return response.data;
+    }
     async completeGroupPublication(args) {
         const parsed = completeGroupPublicationSchema.parse(args ?? {});
         const enc = await this.encState();
@@ -993,7 +1015,9 @@ class EchoMemApiClient {
         const parsed = publishToGroupSchema.parse(args ?? {});
         const enc = await this.encState();
         try {
-            const response = await this.axios.post(`/api/extension/social/groups/current/memories/${encodeURIComponent(parsed.memoryId)}/publish`, {}, {
+            const response = await this.axios.post(`/api/extension/social/groups/current/memories/${encodeURIComponent(parsed.memoryId)}/publish`, {
+                acknowledgedFlaggedMemoryIds: parsed.acknowledgedFlaggedMemoryIds,
+            }, {
                 headers: enc.enabled && enc.key ? { "X-Encryption-Key": enc.key } : undefined,
             });
             return response.data;
@@ -1009,6 +1033,8 @@ class EchoMemApiClient {
             const response = await this.axios.post("/api/extension/social/groups/current/memories/publish-batch", {
                 memoryIds: parsed.memoryIds,
                 contextId: parsed.contextId,
+                selectionReason: parsed.selectionReason,
+                acknowledgedFlaggedMemoryIds: parsed.acknowledgedFlaggedMemoryIds,
             }, {
                 headers: enc.enabled && enc.key ? { "X-Encryption-Key": enc.key } : undefined,
             });
@@ -1205,6 +1231,10 @@ class EchoMemMCPServer {
                         return await this.handleJoinGroup(request.params.arguments);
                     case canonicalToolNames.prepareGroupPublication:
                         return await this.handlePrepareGroupPublication(request.params.arguments);
+                    case canonicalToolNames.flagPublicationAttention:
+                        return await this.handleFlagPublicationAttention(request.params.arguments);
+                    case canonicalToolNames.updateGroupProfile:
+                        return await this.handleUpdateGroupProfile(request.params.arguments);
                     case canonicalToolNames.completeGroupPublication:
                         return await this.handleCompleteGroupPublication(request.params.arguments);
                     case canonicalToolNames.publishToGroup:
@@ -1627,6 +1657,7 @@ Details: ${m.details || "N/A"}`)
                     ? m.similarity_score
                     : undefined;
             return `[${idx + 1}] Memory ID: ${m.id || "unknown"}
+Open memory: ${memoryWebUrl(String(m.id || "unknown"))}
 User ID: ${m.user_id || "unknown"}
 User Name: ${m.username || m.user_name || m.name || "Anonymous"}
 Time: ${m.time} | Location: ${m.location}
@@ -1752,6 +1783,7 @@ Details: ${m.details || "N/A"}`;
         }
         const text = [
             `Memory ID: ${memory.id || parsed.memoryId}`,
+            `Open memory: ${memoryWebUrl(String(memory.id || parsed.memoryId))}`,
             `Owner User ID: ${memory.owner_user_id || memory.user_id || "Unknown"}`,
             memory.time ? `Time: ${memory.time}` : "",
             memory.location ? `Location: ${memory.location}` : "",
@@ -1776,6 +1808,9 @@ Details: ${m.details || "N/A"}`;
         const participants = Array.isArray(payload?.participants)
             ? payload.participants.filter(isRecord)
             : [];
+        const currentParticipant = isRecord(payload?.currentParticipant)
+            ? payload.currentParticipant
+            : null;
         const coverage = isRecord(payload?.coverage) ? payload.coverage : {};
         if (!group) {
             return {
@@ -1803,6 +1838,10 @@ Details: ${m.details || "N/A"}`;
             participantText,
             "",
             "Declared titles and responsibilities are directory facts. Use search_others_memories for current work evidence, and label suggested contribution areas as inference that should be confirmed with the team.",
+            currentParticipant
+                && (!readString(currentParticipant, "title") || !readString(currentParticipant, "responsibilitySummary"))
+                ? "Your group profile is incomplete. Use prepare_group_publication to review your memory evidence, propose the missing fields, and save them only after confirmation with update_group_profile."
+                : "",
         ].filter(Boolean).join("\n");
         return { content: [{ type: "text", text }] };
     }
@@ -1854,8 +1893,8 @@ Details: ${m.details || "N/A"}`;
             content: [{
                     type: "text",
                     text: payload?.alreadyMember
-                        ? `You are already a member of ${payload?.group?.name ?? "this group"}. No memories were published.`
-                        : `Joined ${payload?.group?.name ?? "the company group"}. No memories were published. Use prepare_group_publication to review candidates.`,
+                        ? `You are already a member of ${payload?.group?.name ?? "this group"}. No memories were published. Use prepare_group_publication to review memories and propose any missing title or responsibility fields.`
+                        : `Joined ${payload?.group?.name ?? "the company group"}. No memories were published. Next use prepare_group_publication to review candidates, infer a proposed title and responsibility summary, and ask the user to confirm that profile together with the publication preview.`,
                 }],
         };
     }
@@ -1863,15 +1902,29 @@ Details: ${m.details || "N/A"}`;
         const parsed = prepareGroupPublicationSchema.parse(args ?? {});
         const payload = await this.client.prepareGroupPublication(parsed);
         const candidates = Array.isArray(payload?.candidates) ? payload.candidates : [];
-        const formatted = candidates.map((candidate, index) => [
-            `[${index + 1}] Memory ID: ${readString(candidate, "memoryId") ?? "unknown"}`,
-            `Created: ${readString(candidate, "createdAt") ?? "unknown"}`,
-            `Category: ${readString(candidate, "category") ?? "unknown"}`,
-            `Description: ${readString(candidate, "description") ?? ""}`,
-            readString(candidate, "details") ? `Details: ${readString(candidate, "details")}` : "",
-            `Already published: ${candidate.alreadyPublished === true ? "yes" : "no"}`,
-            `Exact content duplicate: ${candidate.exactContentDuplicate === true ? "yes" : "no"}`,
-        ].filter(Boolean).join("\n")).join("\n\n");
+        const participantProfile = isRecord(payload?.participantProfile)
+            ? payload.participantProfile
+            : {};
+        const formatted = candidates.map((candidate, index) => {
+            const attention = isRecord(candidate.publicationAttention)
+                ? candidate.publicationAttention
+                : null;
+            return [
+                `[${index + 1}] Memory ID: ${readString(candidate, "memoryId") ?? "unknown"}`,
+                `Open memory: ${memoryWebUrl(readString(candidate, "memoryId") ?? "unknown")}`,
+                `Created: ${readString(candidate, "createdAt") ?? "unknown"}`,
+                `Category: ${readString(candidate, "category") ?? "unknown"}`,
+                `Description: ${readString(candidate, "description") ?? ""}`,
+                readString(candidate, "details") ? `Details: ${readString(candidate, "details")}` : "",
+                `Already published: ${candidate.alreadyPublished === true ? "yes" : "no"}`,
+                `Exact content duplicate: ${candidate.exactContentDuplicate === true ? "yes" : "no"}`,
+                attention ? `PUBLICATION ATTENTION: ${readString(attention, "label") ?? "flagged"}` : "",
+            ].filter(Boolean).join("\n");
+        }).join("\n\n");
+        const flaggedIds = candidates
+            .filter((candidate) => isRecord(candidate.publicationAttention))
+            .map((candidate) => readString(candidate, "memoryId"))
+            .filter(Boolean);
         return {
             content: [{
                     type: "text",
@@ -1879,10 +1932,53 @@ Details: ${m.details || "N/A"}`;
                         `Prepared publication scan ${payload?.scanId} for ${payload?.group?.name ?? "your group"}.`,
                         `Window: ${payload?.windowStart ?? "context start"} → ${payload?.windowEnd}`,
                         `Candidates: ${candidates.length}. Nothing has been published.`,
+                        `Current title: ${readString(participantProfile, "title") ?? "Not declared"}`,
+                        `Current declared responsibility: ${readString(participantProfile, "responsibilitySummary") ?? "Not provided"}`,
                         "",
                         formatted,
                         "",
-                        "Select exact memory IDs matching the user's instruction, show the preview, and ask for confirmation before calling complete_group_publication.",
+                        flaggedIds.length
+                            ? `Extra attention required: ${flaggedIds.length} candidate(s) are flagged (${flaggedIds.join(", ")}). Show them in a separate warning and require a separate explicit acknowledgement before including their exact IDs in acknowledgedFlaggedMemoryIds.`
+                            : "",
+                        "Select exact memory IDs matching the user's instruction. From memory evidence, draft a concise title and responsibility summary. Show the profile proposal and memory preview together, then ask for explicit confirmation. After confirmation, call update_group_profile and complete_group_publication.",
+                    ].join("\n"),
+                }],
+        };
+    }
+    async handleFlagPublicationAttention(args) {
+        const parsed = flagPublicationAttentionSchema.parse(args ?? {});
+        const payload = await this.client.flagMemoriesForPublicationAttention(parsed);
+        const alreadyPublished = typeof payload?.alreadyPublishedGroupCount === "number"
+            ? payload.alreadyPublishedGroupCount
+            : 0;
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        `Flagged ${payload?.flaggedCount ?? parsed.memoryIds.length} memories for publication attention.`,
+                        `Label: ${parsed.label}`,
+                        `Memory IDs: ${parsed.memoryIds.join(", ")}`,
+                        "No memory was published, decrypted, or made globally public.",
+                        alreadyPublished > 0
+                            ? `Attention: ${alreadyPublished} flagged memories already have group snapshots. This flag does not retract those existing snapshots.`
+                            : "",
+                    ].filter(Boolean).join("\n"),
+                }],
+        };
+    }
+    async handleUpdateGroupProfile(args) {
+        const parsed = updateGroupProfileSchema.parse(args ?? {});
+        const payload = await this.client.updateGroupProfile(parsed);
+        const participant = isRecord(payload?.participant) ? payload.participant : {};
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        "Confirmed company-group profile updated.",
+                        `Display name: ${readString(participant, "displayName") ?? parsed.displayName ?? "unchanged"}`,
+                        `Title: ${readString(participant, "title") ?? parsed.title}`,
+                        `Declared responsibility: ${readString(participant, "responsibilitySummary") ?? parsed.responsibilitySummary}`,
+                        "These fields are now declared directory facts visible to group members.",
                     ].join("\n"),
                 }],
         };

package/dist/package-metadata.js CHANGED Viewed

@@ -28,8 +28,11 @@ export const MCP_SERVER_INSTRUCTIONS = [
     `If the user or local config expects a newer EchoMem MCP version than ${MCP_PACKAGE_VERSION}, update once with \`${MCP_UPDATE_ALL_COMMAND}\` and start a new MCP session.`,
     "Use echomem_update_status to check whether npm has a newer bridge; it is cached and non-blocking during normal tool listing.",
     "Do not auto-update on every MCP startup; this bridge is intentionally stable between explicit updates.",
-    "For company-group sharing, use get_group_context for orientation; create_memory_group/create_group_invite/join_memory_group for membership; and prepare_group_publication as a no-write preview before complete_group_publication.",
-    "Never complete a group publication without explicit confirmation of the prepared candidate set, and never store or log an echo_grp_ invite code.",
+    "For company-group sharing, use get_group_context for orientation; create_memory_group/create_group_invite/join_memory_group for membership; and prepare_group_publication as a no-publication preview.",
+    "After joining or when profile fields are missing, use candidate memory evidence to propose a title and responsibility summary. Ask the user to confirm that proposal together with the publication preview, then call update_group_profile and complete_group_publication.",
+    "Each group-search result is one memory: preserve its Memory ID and direct echoknows.com link when citing it.",
+    "For sensitive-topic flags, search and preview exact owned memories before confirmed flag_memories_for_publication_attention. During publication, separate flagged candidates and require exact-ID acknowledgement.",
+    "Never save an inferred group profile or complete a group publication without explicit confirmation, and never store or log an echo_grp_ invite code.",
 ].join(" ");
 export function withMcpVersion(description) {
     return `${description}\n\nEchoMem MCP bridge: ${MCP_PACKAGE_LABEL}. If this version is stale, update once with \`${MCP_UPDATE_ALL_COMMAND}\` (or add \`--client cursor|windsurf|claude-desktop|claude-code|codex\` for a single client), then start a new MCP session. Do not run updates repeatedly or on every startup.`;

package/dist/setup-page/client-extraction.js CHANGED Viewed

@@ -900,7 +900,7 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         var paidPlan = plan === "power" ? "power" : "pro";
         return (billingStatus && billingStatus.pricingUrl)
           ? billingStatus.pricingUrl + (startTrial ? "&start=" + paidPlan + "&trial=" + (billingStatus.trialAvailable === false ? "0" : "1") : "")
-          : "https://echoknows.com/pricing?source=mcp_onboarding" + (startTrial ? "&start=" + paidPlan + "&trial=1" : "");
+          : "https://echoknows.com/account?source=mcp_onboarding" + (startTrial ? "&start=" + paidPlan + "&trial=1" : "");
       }
       function setupPlanConfirmed() {
         return setupPlanChoice === "free" || paidRecallPlan(billingStatus && billingStatus.plan);

package/dist/setup-preview.js CHANGED Viewed

@@ -234,7 +234,7 @@ function extractionPreviewBootstrap(options) {
         trialUsed: options.trialUsed,
         subscriptionStatus: options.subscriptionStatus ?? null,
         trialEndedAt: options.trialEndedAt ?? null,
-        pricingUrl: "https://echoknows.com/pricing?source=mcp_onboarding",
+        pricingUrl: "https://echoknows.com/account?source=mcp_onboarding",
         account: {
             displayName: "Preview User",
             email: "preview@example.com",

package/dist/setup.js CHANGED Viewed

@@ -37,7 +37,7 @@ import { checkLatestUpdateStatus, compareSemver, readCachedUpdateStatus } from "
 // The setup dashboard, account login, and encryption passphrase entry are all served by this
 // localhost bridge. The hosted API only sends OTP email, verifies the code, and mints a device token.
 const API_BASE_URL = (process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app").replace(/\/$/, "");
-const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing").replace(/\/$/, "");
+const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/account").replace(/\/$/, "");
 function hostedBillingEndpoint(pathname) {
     const url = new URL(PRICING_URL);
     url.pathname = pathname;
@@ -396,10 +396,13 @@ function echomemGuidanceBlock() {
         "- Use `get_group_context` when the user asks who is in their company group, what teammates are responsible for, or what work is already covered. Treat declared participant fields as facts and published-memory conclusions as evidence or inference.",
         "- A group publication is separate from a globally public memory: publishing to a group creates a group-scoped snapshot and must not change the encrypted original or its global `is_public` setting.",
         "- If a user asks to create a group, call `create_memory_group`; if they ask for a code to share, call `create_group_invite` and return the secret invite code only to that user. Never save the invite code to memory or include it in logs, analytics, summaries, or unrelated output.",
-        "- If a user supplies an `echo_grp_...` code and explicitly asks to join, call `join_memory_group`. Joining never authorizes publishing by itself and must not move a user out of another group.",
-        "- For requests such as “prepare my recent work memories,” “upload work from this ticket,” or “publish work since my last sync,” call `prepare_group_publication` first. This is a no-write preview. For encrypted accounts, tell the user to run `echomem-mcp unlock` locally if the tool reports that the key is required.",
-        "- After preparing, select only exact candidate memory IDs that match the user's stated scope, exclude already-published or exact-content duplicates, summarize what would be shared, and ask the user to confirm. Do not call `complete_group_publication` until the user explicitly confirms that preview.",
-        "- On confirmation, call `complete_group_publication` with the exact `scanId`, selected memory IDs, and `confirmed: true`. An explicit request to join and upload still requires the publication preview and confirmation after joining.",
+        "- If a user supplies an `echo_grp_...` code and explicitly asks to join, call `join_memory_group`. Joining never authorizes publishing by itself and must not move a user out of another group. After joining, continue into the profile-and-publication preview instead of leaving title or responsibility blank.",
+        "- For requests such as “prepare my recent work memories,” “upload work from this ticket,” or “publish work since my last sync,” call `prepare_group_publication` first. This is a no-publication preview. For encrypted accounts, tell the user to run `echomem-mcp unlock` locally if the tool reports that the key is required.",
+        "- After preparing, select only exact candidate memory IDs that match the user's stated scope and exclude already-published or exact-content duplicates. Use the candidate evidence to draft a concise title and responsibility summary for the current member, but label both as proposals rather than facts.",
+        "- Each returned group-search result is one memory. When citing it in a bullet, preserve its Memory ID and include its `https://echoknows.com/company/memories?memoryId=...` link so the user can open the evidence directly.",
+        "- If the user asks to flag memories about a sensitive topic, search their own memories first, show the exact matches, and ask them to confirm. Only then call `flag_memories_for_publication_attention`; flagging does not publish, decrypt, change visibility, or retract an existing group snapshot.",
+        "- Present the proposed title/responsibility and the memory publication preview together and ask for explicit confirmation. Never save an inferred profile or publish memories before confirmation. Show flagged candidates in a separate warning.",
+        "- On confirmation, call `update_group_profile` with the confirmed title, responsibility summary, and `confirmed: true`, then call `complete_group_publication` with the exact `scanId`, selected memory IDs, and `confirmed: true`. If a flagged memory is selected, require separate explicit acknowledgement and pass its exact ID in `acknowledgedFlaggedMemoryIds`. If the user edits either proposal, use their wording. An explicit request to join and upload still requires this preview and confirmation.",
         "- If the user asks to show, reopen, restart, or bring back the EchoMem HUD (the context-health overlay), run the shell command `echomem-hud app --client auto`.",
         "- If the user wants the HUD to come back after a computer restart, run the shell command `echomem-hud autostart on --client auto`.",
         AGENTS_MD_END,

package/dist/v1-contract.js CHANGED Viewed

@@ -15,6 +15,8 @@ export const canonicalToolNames = {
     createGroupInvite: "create_group_invite",
     joinGroup: "join_memory_group",
     prepareGroupPublication: "prepare_group_publication",
+    flagPublicationAttention: "flag_memories_for_publication_attention",
+    updateGroupProfile: "update_group_profile",
     completeGroupPublication: "complete_group_publication",
     publishToGroup: "publish_memory_to_group",
     publishBatchToGroup: "publish_memories_to_group",
@@ -143,22 +145,38 @@ export const prepareGroupPublicationSchema = z.object({
     limit: z.number().int().min(1).max(50).optional(),
     instruction: z.string().max(500).optional(),
 });
+export const flagPublicationAttentionSchema = z.object({
+    ...triggerMetadataSchema,
+    memoryIds: z.array(z.string().min(1)).min(1).max(50),
+    label: z.string().min(1).max(120),
+    confirmed: z.literal(true),
+});
+export const updateGroupProfileSchema = z.object({
+    ...triggerMetadataSchema,
+    displayName: z.string().min(1).max(120).optional(),
+    title: z.string().min(1).max(160),
+    responsibilitySummary: z.string().min(1).max(1000),
+    confirmed: z.literal(true),
+});
 export const completeGroupPublicationSchema = z.object({
     ...triggerMetadataSchema,
     scanId: z.string().min(1),
     memoryIds: z.array(z.string().min(1)).max(50),
     confirmed: z.literal(true),
     selectionReason: z.string().max(500).optional(),
+    acknowledgedFlaggedMemoryIds: z.array(z.string().min(1)).max(50).optional(),
 });
 export const publishToGroupSchema = z.object({
     ...triggerMetadataSchema,
     memoryId: z.string().min(1),
+    acknowledgedFlaggedMemoryIds: z.array(z.string().min(1)).max(1).optional(),
 });
 export const publishBatchToGroupSchema = z.object({
     ...triggerMetadataSchema,
     memoryIds: z.array(z.string().min(1)).min(1).max(50),
     contextId: z.string().min(1).optional(),
     selectionReason: z.string().max(500).optional(),
+    acknowledgedFlaggedMemoryIds: z.array(z.string().min(1)).max(50).optional(),
 });
 export const deleteMemorySchema = z.object({
     memoryId: z.string().min(1),
@@ -460,7 +478,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.joinGroup,
-            description: "Join a company memory group using an invite code after the user explicitly asks to join. Joining never publishes memories; call prepare_group_publication separately.",
+            description: "Join a company memory group using an invite code after the user explicitly asks to join. Joining never publishes memories. Next call prepare_group_publication, infer a proposed title and responsibility summary from the user's own candidate memories, and ask the user to confirm the profile together with the publication preview.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -474,7 +492,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.prepareGroupPublication,
-            description: "Prepare a no-write preview of up to 50 owned memories for group publication. For encrypted accounts the local bridge must be unlocked. The host agent selects exact work-related memory ids from the returned candidates and asks the user to confirm; this tool never publishes.",
+            description: "Prepare a no-publication preview of up to 50 owned memories for group publication. For encrypted accounts the local bridge must be unlocked. The host agent selects exact work-related memory ids, drafts a concise title and responsibility summary from memory evidence, and asks the user to confirm both the profile and publication selection together. Flagged memories are identified separately and require extra attention before publication. This tool never publishes.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -488,9 +506,49 @@ export function listToolSpecs(opts = {}) {
                 },
             },
         },
+        {
+            name: canonicalToolNames.flagPublicationAttention,
+            description: "Mark exact owned memories for extra attention during future group publication. First search the user's own memories, show the matching memory IDs and summaries, and obtain explicit confirmation. This only records a safety flag; it does not publish, decrypt, change visibility, or retract an existing group snapshot.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    memoryIds: {
+                        type: "array",
+                        minItems: 1,
+                        maxItems: 50,
+                        items: { type: "string" },
+                        description: "Exact owned memory IDs the user reviewed and confirmed.",
+                    },
+                    label: {
+                        type: "string",
+                        description: "A short user-supplied attention label, such as investment or customer-confidential.",
+                    },
+                    confirmed: {
+                        type: "boolean",
+                        const: true,
+                        description: "Set true only after the user confirms the exact memories.",
+                    },
+                },
+                required: ["memoryIds", "label", "confirmed"],
+            },
+        },
+        {
+            name: canonicalToolNames.updateGroupProfile,
+            description: "Save the current member's declared group title and responsibility summary only after the user explicitly confirms the agent's proposal. These become directory facts visible to group members; never save an unconfirmed inference.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    displayName: { type: "string" },
+                    title: { type: "string" },
+                    responsibilitySummary: { type: "string" },
+                    confirmed: { type: "boolean", const: true },
+                },
+                required: ["title", "responsibilitySummary", "confirmed"],
+            },
+        },
         {
             name: canonicalToolNames.completeGroupPublication,
-            description: "Publish only the exact memory ids from a prepared scan after the user explicitly confirms the preview. confirmed must be true. Completing an empty selection safely advances the scan cursor without publishing.",
+            description: "Publish only the exact memory ids from a prepared scan after the user explicitly confirms the preview. confirmed must be true. Any flagged memories must be called out separately and their exact IDs supplied in acknowledgedFlaggedMemoryIds after extra user acknowledgement. Completing an empty selection safely advances the scan cursor without publishing.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -498,13 +556,19 @@ export function listToolSpecs(opts = {}) {
                     memoryIds: { type: "array", maxItems: 50, items: { type: "string" } },
                     confirmed: { type: "boolean", const: true },
                     selectionReason: { type: "string" },
+                    acknowledgedFlaggedMemoryIds: {
+                        type: "array",
+                        maxItems: 50,
+                        items: { type: "string" },
+                        description: "Exact flagged IDs the user separately acknowledged for this publication.",
+                    },
                 },
                 required: ["scanId", "memoryIds", "confirmed"],
             },
         },
         {
             name: canonicalToolNames.publishToGroup,
-            description: "Publish one exact memory snapshot to your current company group without changing the memory's global is_public or encryption state. Call only after the user explicitly asks to publish or push that memory. The operation is idempotent.",
+            description: "Publish one exact memory snapshot to your current company group without changing the memory's global is_public or encryption state. Call only after the user explicitly asks to publish or push that memory. If it is flagged, call it out and pass its ID in acknowledgedFlaggedMemoryIds only after extra user acknowledgement. The operation is idempotent.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -517,13 +581,19 @@ export function listToolSpecs(opts = {}) {
                         description: "Optional user message that explicitly requested publication.",
                     },
                     triggerMessageRole: { type: "string", default: "user" },
+                    acknowledgedFlaggedMemoryIds: {
+                        type: "array",
+                        maxItems: 1,
+                        items: { type: "string" },
+                        description: "Include the memory ID only after separate acknowledgement if the memory is flagged.",
+                    },
                 },
                 required: ["memoryId"],
             },
         },
         {
             name: canonicalToolNames.publishBatchToGroup,
-            description: "Publish up to 50 exact memory snapshots to your current company group without changing global is_public or the encrypted originals. For a session request, first call get_memories_by_context, select the exact ids that match the user's instruction, then pass those ids with the same contextId. Call only after explicit group-publication intent; report what was selected when the user delegates work-related filtering.",
+            description: "Publish up to 50 exact memory snapshots to your current company group without changing global is_public or the encrypted originals. For a session request, first call get_memories_by_context, select the exact ids that match the user's instruction, then pass those ids with the same contextId. Call only after explicit group-publication intent; report what was selected when the user delegates work-related filtering. Flagged memories must be called out separately and acknowledged by exact ID.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -547,6 +617,12 @@ export function listToolSpecs(opts = {}) {
                         description: "Optional user message that explicitly requested publication.",
                     },
                     triggerMessageRole: { type: "string", default: "user" },
+                    acknowledgedFlaggedMemoryIds: {
+                        type: "array",
+                        maxItems: 50,
+                        items: { type: "string" },
+                        description: "Exact flagged IDs the user separately acknowledged for this publication.",
+                    },
                 },
                 required: ["memoryIds"],
             },

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@echomem/mcp",
-  "version": "1.4.23",
+  "version": "1.4.25",
   "description": "EchoMem MCP bridge: cloud-first memory tools, local context HUD, and the Agent Doctor workspace forensics report (cost ledger + 3D repo city)",
   "main": "dist/index.js",
   "type": "module",