npm - @echomem/mcp - Versions diffs - 1.4.24 → 1.4.26 - Mend

@echomem/mcp 1.4.24 → 1.4.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/dist/hud/server.js +1 -1
package/dist/hud/web.js +1 -1
package/dist/index.js +89 -15
package/dist/package-metadata.js +3 -0
package/dist/setup-page/client-extraction.js +1 -1
package/dist/setup-preview.js +1 -1
package/dist/setup.js +5 -3
package/dist/v1-contract.js +58 -4
package/package.json +1 -1

package/dist/hud/server.js CHANGED Viewed

@@ -13,7 +13,7 @@ import { assembleCodex, assembleClaude } from "../migrate.js";
 import { readBillingAlert } from "../billing-alert.js";
 import { readSessionWorkingDirectory, } from "./session-launcher.js";
 const API_BASE = (process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app").replace(/\/$/, "");
-const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing").replace(/\/$/, "");
+const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/account").replace(/\/$/, "");
 export async function createHudServer(opts = {}) {
     const mode = opts.mode || "auto";
     const port = opts.port ?? 17377;

package/dist/hud/web.js CHANGED Viewed

@@ -1729,7 +1729,7 @@ export const HUD_HTML = String.raw `<!doctype html>
           state: "ok",
           plan: "pro",
           paid: true,
-          pricingUrl: "https://yeahecho.com/pricing?source=hud_preview",
+          pricingUrl: "https://echoknows.com/account?source=hud_preview",
           memoryProcessingQuota: { used: previewProcessingUsed, limit: 200000, remaining: 200000 - previewProcessingUsed, resetAt: new Date(Date.now() + 31 * 60 * 60 * 1000).toISOString() },
           memorySearchQuota: { used: previewSearchUsed, limit: 500, remaining: 500 - previewSearchUsed, resetAt: new Date(Date.now() + 31 * 60 * 60 * 1000).toISOString() },
           historicalConversationQuota: { used: 191, limit: 500, remaining: 309 },

package/dist/index.js CHANGED Viewed

@@ -4,7 +4,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { CallToolRequestSchema, ErrorCode, ListToolsRequestSchema, McpError, } from "@modelcontextprotocol/sdk/types.js";
 import axios from "axios";
 import { ZodError } from "zod";
-import { canonicalToolNames, completeGroupPublicationSchema, createGroupInviteSchema, createGroupSchema, deleteMemorySchema, getByContextSchema, groupContextSchema, joinGroupSchema, keywordsSchema, listFriendsSchema, listToolSpecs, othersSchema, publishBatchToGroupSchema, publishToGroupSchema, prepareGroupPublicationSchema, publicMemorySchema, resolveCanonicalToolName, saveConversationSchema, searchMemoriesSchema, searchUsersSchema, sendFriendRequestSchema, timeRangeSchema, updateGroupProfileSchema, } from "./v1-contract.js";
+import { canonicalToolNames, completeGroupPublicationSchema, createGroupInviteSchema, createGroupSchema, deleteMemorySchema, flagPublicationAttentionSchema, getByContextSchema, groupContextSchema, joinGroupSchema, keywordsSchema, listFriendsSchema, listToolSpecs, othersSchema, publishBatchToGroupSchema, publishToGroupSchema, prepareGroupPublicationSchema, publicMemorySchema, resolveCanonicalToolName, saveConversationSchema, searchMemoriesSchema, searchUsersSchema, sendFriendRequestSchema, timeRangeSchema, updateGroupProfileSchema, } from "./v1-contract.js";
 import { KeyStore } from "./keystore.js";
 import { EventLogger, hashText } from "./events.js";
 import { buildReportText } from "./report.js";
@@ -16,7 +16,15 @@ import { MCP_PACKAGE_VERSION, MCP_SERVER_INSTRUCTIONS } from "./package-metadata
 import { clearBillingAlert, writeBillingAlert } from "./billing-alert.js";
 import { checkLatestUpdateStatus, formatUpdateNotice, formatUpdateStatusText, startBackgroundUpdateCheck, } from "./update-check.js";
 const ECHO_API_BASE_URL = process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app";
-const ECHO_PRICING_URL = process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing";
+const ECHO_PRICING_URL = process.env.ECHO_PRICING_URL || "https://echoknows.com/account";
+const ECHO_MEMORY_WEB_URL = (process.env.ECHO_MEMORY_WEB_URL || "https://echoknows.com/company/memories").replace(/\/$/, "");
+const ECHO_PERSONAL_MEMORY_WEB_URL = (process.env.ECHO_PERSONAL_MEMORY_WEB_URL || "https://echoknows.com/memories/timeline").replace(/\/$/, "");
+function memoryWebUrl(memoryId) {
+    return `${ECHO_MEMORY_WEB_URL}?memoryId=${encodeURIComponent(memoryId)}`;
+}
+function personalMemoryWebUrl(memoryId) {
+    return `${ECHO_PERSONAL_MEMORY_WEB_URL}?memoryId=${encodeURIComponent(memoryId)}`;
+}
 /** Thrown when no API token is present yet — the model gets a "run login" nudge, not a hard error. */
 class NoTokenError extends Error {
 }
@@ -495,6 +503,14 @@ function inputAnalyticsForTool(canonicalName, args) {
                 memory_id_hash: memoryId ? hashText(memoryId) : undefined,
             };
         }
+        case canonicalToolNames.flagPublicationAttention: {
+            const memoryIds = Array.isArray(a.memoryIds) ? a.memoryIds.filter((id) => typeof id === "string") : [];
+            return {
+                memory_count: memoryIds.length,
+                has_label: !!readString(a, "label"),
+                confirmed: a.confirmed === true,
+            };
+        }
         case canonicalToolNames.publishBatchToGroup: {
             const memoryIds = Array.isArray(a.memoryIds) ? a.memoryIds.filter((id) => typeof id === "string") : [];
             return {
@@ -983,6 +999,11 @@ class EchoMemApiClient {
         const response = await this.axios.post("/api/extension/social/groups/current/publications/prepare", parsed, { headers: enc.enabled && enc.key ? { "X-Encryption-Key": enc.key } : undefined });
         return response.data;
     }
+    async flagMemoriesForPublicationAttention(args) {
+        const parsed = flagPublicationAttentionSchema.parse(args ?? {});
+        const response = await this.axios.post("/api/extension/memories/publication-attention", parsed);
+        return response.data;
+    }
     async updateGroupProfile(args) {
         const parsed = updateGroupProfileSchema.parse(args ?? {});
         const response = await this.axios.patch("/api/extension/social/groups/current/profile", parsed);
@@ -998,7 +1019,9 @@ class EchoMemApiClient {
         const parsed = publishToGroupSchema.parse(args ?? {});
         const enc = await this.encState();
         try {
-            const response = await this.axios.post(`/api/extension/social/groups/current/memories/${encodeURIComponent(parsed.memoryId)}/publish`, {}, {
+            const response = await this.axios.post(`/api/extension/social/groups/current/memories/${encodeURIComponent(parsed.memoryId)}/publish`, {
+                acknowledgedFlaggedMemoryIds: parsed.acknowledgedFlaggedMemoryIds,
+            }, {
                 headers: enc.enabled && enc.key ? { "X-Encryption-Key": enc.key } : undefined,
             });
             return response.data;
@@ -1014,6 +1037,8 @@ class EchoMemApiClient {
             const response = await this.axios.post("/api/extension/social/groups/current/memories/publish-batch", {
                 memoryIds: parsed.memoryIds,
                 contextId: parsed.contextId,
+                selectionReason: parsed.selectionReason,
+                acknowledgedFlaggedMemoryIds: parsed.acknowledgedFlaggedMemoryIds,
             }, {
                 headers: enc.enabled && enc.key ? { "X-Encryption-Key": enc.key } : undefined,
             });
@@ -1210,6 +1235,8 @@ class EchoMemMCPServer {
                         return await this.handleJoinGroup(request.params.arguments);
                     case canonicalToolNames.prepareGroupPublication:
                         return await this.handlePrepareGroupPublication(request.params.arguments);
+                    case canonicalToolNames.flagPublicationAttention:
+                        return await this.handleFlagPublicationAttention(request.params.arguments);
                     case canonicalToolNames.updateGroupProfile:
                         return await this.handleUpdateGroupProfile(request.params.arguments);
                     case canonicalToolNames.completeGroupPublication:
@@ -1381,8 +1408,11 @@ class EchoMemMCPServer {
                     : m.details == null
                         ? ""
                         : String(m.details).trim();
+                const memoryId = readString(m, "id");
                 return [
                     `[${idx + 1}] ${key}${typeof score === "number" ? ` (score ${score.toFixed(3)})` : ""}`,
+                    memoryId ? `Memory ID: ${memoryId}` : "",
+                    memoryId ? `Open private memory: ${personalMemoryWebUrl(memoryId)}` : "",
                     meta,
                     `Description: ${description}`,
                     details ? `Details: ${details}` : "",
@@ -1400,6 +1430,7 @@ class EchoMemMCPServer {
         }
         const formattedResults = memories
             .map((m, idx) => `[Result ${idx + 1}] Memory ID: ${m.id || "unknown"} (Similarity: ${m.similarity_score?.toFixed(3) || "N/A"})
+Open private memory: ${personalMemoryWebUrl(String(m.id || "unknown"))}
 Time: ${m.time} | Location: ${m.location}
 Category: ${m.category} | Object: ${m.object} | Emotion: ${m.emotion}
 Description: ${m.description}
@@ -1477,7 +1508,9 @@ Details: ${m.details || "N/A"}`)
             };
         }
         const formattedResults = memories
-            .map((m, idx) => `[${idx + 1}] Time: ${m.time} | Location: ${m.location}
+            .map((m, idx) => `[${idx + 1}] Memory ID: ${m.id || "unknown"}
+Open private memory: ${personalMemoryWebUrl(String(m.id || "unknown"))}
+Time: ${m.time} | Location: ${m.location}
 Category: ${m.category} | Object: ${m.object} | Emotion: ${m.emotion}
 Description: ${m.description}
 Details: ${m.details || "N/A"}`)
@@ -1503,6 +1536,7 @@ Details: ${m.details || "N/A"}`)
         }
         const formattedResults = memories
             .map((m, idx) => `[${idx + 1}] ${m.keys || "Saved memory"}${m.id ? ` · id ${m.id}` : ""}
+${m.id ? `Open private memory: ${personalMemoryWebUrl(String(m.id))}` : ""}
 Time: ${m.time} | Category: ${m.category} | Object: ${m.object} | Emotion: ${m.emotion}
 Description: ${m.description}
 Details: ${m.details || "N/A"}`)
@@ -1581,7 +1615,9 @@ Details: ${m.details || "N/A"}`)
             };
         }
         const formattedResults = memories
-            .map((m, idx) => `[${idx + 1}] Time: ${m.time} | Keys: ${m.keys || "N/A"}
+            .map((m, idx) => `[${idx + 1}] Memory ID: ${m.id || "unknown"}
+Open private memory: ${personalMemoryWebUrl(String(m.id || "unknown"))}
+Time: ${m.time} | Keys: ${m.keys || "N/A"}
 Location: ${m.location} | Category: ${m.category} | Object: ${m.object}
 Description: ${m.description}
 Details: ${m.details || "N/A"}`)
@@ -1634,6 +1670,7 @@ Details: ${m.details || "N/A"}`)
                     ? m.similarity_score
                     : undefined;
             return `[${idx + 1}] Memory ID: ${m.id || "unknown"}
+Open memory: ${memoryWebUrl(String(m.id || "unknown"))}
 User ID: ${m.user_id || "unknown"}
 User Name: ${m.username || m.user_name || m.name || "Anonymous"}
 Time: ${m.time} | Location: ${m.location}
@@ -1759,6 +1796,7 @@ Details: ${m.details || "N/A"}`;
         }
         const text = [
             `Memory ID: ${memory.id || parsed.memoryId}`,
+            `Open memory: ${memoryWebUrl(String(memory.id || parsed.memoryId))}`,
             `Owner User ID: ${memory.owner_user_id || memory.user_id || "Unknown"}`,
             memory.time ? `Time: ${memory.time}` : "",
             memory.location ? `Location: ${memory.location}` : "",
@@ -1880,15 +1918,26 @@ Details: ${m.details || "N/A"}`;
         const participantProfile = isRecord(payload?.participantProfile)
             ? payload.participantProfile
             : {};
-        const formatted = candidates.map((candidate, index) => [
-            `[${index + 1}] Memory ID: ${readString(candidate, "memoryId") ?? "unknown"}`,
-            `Created: ${readString(candidate, "createdAt") ?? "unknown"}`,
-            `Category: ${readString(candidate, "category") ?? "unknown"}`,
-            `Description: ${readString(candidate, "description") ?? ""}`,
-            readString(candidate, "details") ? `Details: ${readString(candidate, "details")}` : "",
-            `Already published: ${candidate.alreadyPublished === true ? "yes" : "no"}`,
-            `Exact content duplicate: ${candidate.exactContentDuplicate === true ? "yes" : "no"}`,
-        ].filter(Boolean).join("\n")).join("\n\n");
+        const formatted = candidates.map((candidate, index) => {
+            const attention = isRecord(candidate.publicationAttention)
+                ? candidate.publicationAttention
+                : null;
+            return [
+                `[${index + 1}] Memory ID: ${readString(candidate, "memoryId") ?? "unknown"}`,
+                `Open private memory: ${personalMemoryWebUrl(readString(candidate, "memoryId") ?? "unknown")}`,
+                `Created: ${readString(candidate, "createdAt") ?? "unknown"}`,
+                `Category: ${readString(candidate, "category") ?? "unknown"}`,
+                `Description: ${readString(candidate, "description") ?? ""}`,
+                readString(candidate, "details") ? `Details: ${readString(candidate, "details")}` : "",
+                `Already published: ${candidate.alreadyPublished === true ? "yes" : "no"}`,
+                `Exact content duplicate: ${candidate.exactContentDuplicate === true ? "yes" : "no"}`,
+                attention ? `PUBLICATION ATTENTION: ${readString(attention, "label") ?? "flagged"}` : "",
+            ].filter(Boolean).join("\n");
+        }).join("\n\n");
+        const flaggedIds = candidates
+            .filter((candidate) => isRecord(candidate.publicationAttention))
+            .map((candidate) => readString(candidate, "memoryId"))
+            .filter(Boolean);
         return {
             content: [{
                     type: "text",
@@ -1901,11 +1950,36 @@ Details: ${m.details || "N/A"}`;
                         "",
                         formatted,
                         "",
-                        "Select exact memory IDs matching the user's instruction. From memory evidence, draft a concise title and responsibility summary. Show the profile proposal and memory preview together, then ask for one explicit confirmation. After confirmation, call update_group_profile and complete_group_publication.",
+                        flaggedIds.length
+                            ? `Extra attention required: ${flaggedIds.length} candidate(s) are flagged (${flaggedIds.join(", ")}). Nothing has been published. Show them in a separate warning and offer to exclude them, review them separately, or first search for and mark similar sensitive owned memories for publication attention. Never auto-flag based on inference. Require separate explicit acknowledgement before including their exact IDs in acknowledgedFlaggedMemoryIds.`
+                            : "",
+                        "Select exact memory IDs matching the user's instruction. From memory evidence, draft a concise title and responsibility summary. If an unflagged candidate appears sensitive, proactively ask whether the user wants to mark its exact ID for publication attention first. Explain that marking does not publish or change encryption; it means you will call it out and ask for detailed confirmation whenever a later publication includes it. Never auto-flag. Show the profile proposal and memory preview together, then ask for explicit confirmation. After confirmation, call update_group_profile and complete_group_publication.",
                     ].join("\n"),
                 }],
         };
     }
+    async handleFlagPublicationAttention(args) {
+        const parsed = flagPublicationAttentionSchema.parse(args ?? {});
+        const payload = await this.client.flagMemoriesForPublicationAttention(parsed);
+        const alreadyPublished = typeof payload?.alreadyPublishedGroupCount === "number"
+            ? payload.alreadyPublishedGroupCount
+            : 0;
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        `Flagged ${payload?.flaggedCount ?? parsed.memoryIds.length} memories for publication attention.`,
+                        `Label: ${parsed.label}`,
+                        `Memory IDs: ${parsed.memoryIds.join(", ")}`,
+                        `Private review links:\n${parsed.memoryIds.map((memoryId) => `- ${memoryId}: ${personalMemoryWebUrl(memoryId)}`).join("\n")}`,
+                        "No memory was published, decrypted, or made globally public.",
+                        alreadyPublished > 0
+                            ? `Attention: ${alreadyPublished} flagged memories already have group snapshots. This flag does not retract those existing snapshots.`
+                            : "",
+                    ].filter(Boolean).join("\n"),
+                }],
+        };
+    }
     async handleUpdateGroupProfile(args) {
         const parsed = updateGroupProfileSchema.parse(args ?? {});
         const payload = await this.client.updateGroupProfile(parsed);

package/dist/package-metadata.js CHANGED Viewed

@@ -30,6 +30,9 @@ export const MCP_SERVER_INSTRUCTIONS = [
     "Do not auto-update on every MCP startup; this bridge is intentionally stable between explicit updates.",
     "For company-group sharing, use get_group_context for orientation; create_memory_group/create_group_invite/join_memory_group for membership; and prepare_group_publication as a no-publication preview.",
     "After joining or when profile fields are missing, use candidate memory evidence to propose a title and responsibility summary. Ask the user to confirm that proposal together with the publication preview, then call update_group_profile and complete_group_publication.",
+    "Use owner-only /memories/timeline?memoryId=... links for the user's private search, flag, and publication-preview evidence. Use /company/memories?memoryId=... only for already-published group evidence.",
+    "Each group-search result is one memory: preserve its Memory ID and direct echoknows.com link when citing it.",
+    "During a publication preview, if an unflagged candidate appears sensitive, proactively ask whether the user wants to mark its exact ID for publication attention first. Explain that marking does not publish or change encryption; it means the agent will call it out and ask for detailed confirmation whenever a later publication includes it. Never auto-flag inferred sensitivity. For sensitive-topic flags, search and preview exact owned memories before confirmed flag_memories_for_publication_attention. Separate already-flagged candidates, state that nothing has been published yet, and offer to exclude them, review them separately, or first search for and mark similar sensitive owned memories.",
     "Never save an inferred group profile or complete a group publication without explicit confirmation, and never store or log an echo_grp_ invite code.",
 ].join(" ");
 export function withMcpVersion(description) {

package/dist/setup-page/client-extraction.js CHANGED Viewed

@@ -900,7 +900,7 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         var paidPlan = plan === "power" ? "power" : "pro";
         return (billingStatus && billingStatus.pricingUrl)
           ? billingStatus.pricingUrl + (startTrial ? "&start=" + paidPlan + "&trial=" + (billingStatus.trialAvailable === false ? "0" : "1") : "")
-          : "https://echoknows.com/pricing?source=mcp_onboarding" + (startTrial ? "&start=" + paidPlan + "&trial=1" : "");
+          : "https://echoknows.com/account?source=mcp_onboarding" + (startTrial ? "&start=" + paidPlan + "&trial=1" : "");
       }
       function setupPlanConfirmed() {
         return setupPlanChoice === "free" || paidRecallPlan(billingStatus && billingStatus.plan);

package/dist/setup-preview.js CHANGED Viewed

@@ -234,7 +234,7 @@ function extractionPreviewBootstrap(options) {
         trialUsed: options.trialUsed,
         subscriptionStatus: options.subscriptionStatus ?? null,
         trialEndedAt: options.trialEndedAt ?? null,
-        pricingUrl: "https://echoknows.com/pricing?source=mcp_onboarding",
+        pricingUrl: "https://echoknows.com/account?source=mcp_onboarding",
         account: {
             displayName: "Preview User",
             email: "preview@example.com",

package/dist/setup.js CHANGED Viewed

@@ -37,7 +37,7 @@ import { checkLatestUpdateStatus, compareSemver, readCachedUpdateStatus } from "
 // The setup dashboard, account login, and encryption passphrase entry are all served by this
 // localhost bridge. The hosted API only sends OTP email, verifies the code, and mints a device token.
 const API_BASE_URL = (process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app").replace(/\/$/, "");
-const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing").replace(/\/$/, "");
+const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/account").replace(/\/$/, "");
 function hostedBillingEndpoint(pathname) {
     const url = new URL(PRICING_URL);
     url.pathname = pathname;
@@ -399,8 +399,10 @@ function echomemGuidanceBlock() {
         "- If a user supplies an `echo_grp_...` code and explicitly asks to join, call `join_memory_group`. Joining never authorizes publishing by itself and must not move a user out of another group. After joining, continue into the profile-and-publication preview instead of leaving title or responsibility blank.",
         "- For requests such as “prepare my recent work memories,” “upload work from this ticket,” or “publish work since my last sync,” call `prepare_group_publication` first. This is a no-publication preview. For encrypted accounts, tell the user to run `echomem-mcp unlock` locally if the tool reports that the key is required.",
         "- After preparing, select only exact candidate memory IDs that match the user's stated scope and exclude already-published or exact-content duplicates. Use the candidate evidence to draft a concise title and responsibility summary for the current member, but label both as proposals rather than facts.",
-        "- Present the proposed title/responsibility and the memory publication preview together and ask for one explicit confirmation. Never save an inferred profile or publish memories before confirmation.",
-        "- On confirmation, call `update_group_profile` with the confirmed title, responsibility summary, and `confirmed: true`, then call `complete_group_publication` with the exact `scanId`, selected memory IDs, and `confirmed: true`. If the user edits either proposal, use their wording. An explicit request to join and upload still requires this combined preview and confirmation.",
+        "- Use two distinct evidence links. For the user's own source memories during search, flag review, or publication preview, preserve the Memory ID and use `https://echoknows.com/memories/timeline?memoryId=...`; this is an owner-only personal link and may require Vault unlock. For already-published results from `search_others_memories`, use `https://echoknows.com/company/memories?memoryId=...`, which requires current group access.",
+        "- If the user asks to flag memories about a sensitive topic, search their own memories first, show the exact matches with owner-only personal links, and ask them to confirm. Only then call `flag_memories_for_publication_attention`; flagging does not publish, decrypt, change visibility, or retract an existing group snapshot.",
+        "- Present the proposed title/responsibility and the memory publication preview together and ask for explicit confirmation. Never save an inferred profile or publish memories before confirmation. If an unflagged candidate appears sensitive, proactively ask whether the user wants to mark its exact ID for publication attention first. Explain naturally: marking does not publish or change encryption; it means you will call it out and ask for detailed confirmation whenever a later publication includes it. Never auto-flag based on agent inference. Show already-flagged candidates in a separate warning, state that nothing has been published yet, and offer three choices: exclude them, review them separately, or first search for and mark similar sensitive owned memories for publication attention.",
+        "- On confirmation, call `update_group_profile` with the confirmed title, responsibility summary, and `confirmed: true`, then call `complete_group_publication` with the exact `scanId`, selected memory IDs, and `confirmed: true`. If a flagged memory is selected, require separate explicit acknowledgement and pass its exact ID in `acknowledgedFlaggedMemoryIds`. If the user edits either proposal, use their wording. An explicit request to join and upload still requires this preview and confirmation.",
         "- If the user asks to show, reopen, restart, or bring back the EchoMem HUD (the context-health overlay), run the shell command `echomem-hud app --client auto`.",
         "- If the user wants the HUD to come back after a computer restart, run the shell command `echomem-hud autostart on --client auto`.",
         AGENTS_MD_END,

package/dist/v1-contract.js CHANGED Viewed

@@ -15,6 +15,7 @@ export const canonicalToolNames = {
     createGroupInvite: "create_group_invite",
     joinGroup: "join_memory_group",
     prepareGroupPublication: "prepare_group_publication",
+    flagPublicationAttention: "flag_memories_for_publication_attention",
     updateGroupProfile: "update_group_profile",
     completeGroupPublication: "complete_group_publication",
     publishToGroup: "publish_memory_to_group",
@@ -144,6 +145,12 @@ export const prepareGroupPublicationSchema = z.object({
     limit: z.number().int().min(1).max(50).optional(),
     instruction: z.string().max(500).optional(),
 });
+export const flagPublicationAttentionSchema = z.object({
+    ...triggerMetadataSchema,
+    memoryIds: z.array(z.string().min(1)).min(1).max(50),
+    label: z.string().min(1).max(120),
+    confirmed: z.literal(true),
+});
 export const updateGroupProfileSchema = z.object({
     ...triggerMetadataSchema,
     displayName: z.string().min(1).max(120).optional(),
@@ -157,16 +164,19 @@ export const completeGroupPublicationSchema = z.object({
     memoryIds: z.array(z.string().min(1)).max(50),
     confirmed: z.literal(true),
     selectionReason: z.string().max(500).optional(),
+    acknowledgedFlaggedMemoryIds: z.array(z.string().min(1)).max(50).optional(),
 });
 export const publishToGroupSchema = z.object({
     ...triggerMetadataSchema,
     memoryId: z.string().min(1),
+    acknowledgedFlaggedMemoryIds: z.array(z.string().min(1)).max(1).optional(),
 });
 export const publishBatchToGroupSchema = z.object({
     ...triggerMetadataSchema,
     memoryIds: z.array(z.string().min(1)).min(1).max(50),
     contextId: z.string().min(1).optional(),
     selectionReason: z.string().max(500).optional(),
+    acknowledgedFlaggedMemoryIds: z.array(z.string().min(1)).max(50).optional(),
 });
 export const deleteMemorySchema = z.object({
     memoryId: z.string().min(1),
@@ -482,7 +492,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.prepareGroupPublication,
-            description: "Prepare a no-publication preview of up to 50 owned memories for group publication. For encrypted accounts the local bridge must be unlocked. The host agent selects exact work-related memory ids, drafts a concise title and responsibility summary from memory evidence, and asks the user to confirm both the profile and publication selection together. This tool never publishes.",
+            description: "Prepare a no-publication preview of up to 50 owned memories for group publication. For encrypted accounts the local bridge must be unlocked. The host agent selects exact work-related memory ids, gives each candidate an owner-only https://echoknows.com/memories/timeline?memoryId=... review link, drafts a concise title and responsibility summary from memory evidence, and asks the user to confirm both the profile and publication selection together. If an unflagged candidate appears sensitive, proactively ask whether the user wants to mark its exact ID for publication attention first. Explain that marking does not publish or change encryption; it means the agent will call it out and ask for detailed confirmation whenever a later publication includes it. Never auto-flag inferred sensitivity. Already-flagged memories are identified separately and require extra attention before publication. This tool never publishes.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -496,6 +506,32 @@ export function listToolSpecs(opts = {}) {
                 },
             },
         },
+        {
+            name: canonicalToolNames.flagPublicationAttention,
+            description: "Mark exact owned memories for extra attention during future group publication. First search the user's own memories, show the matching memory IDs, summaries, and owner-only https://echoknows.com/memories/timeline?memoryId=... review links, and obtain explicit confirmation. This only records a safety flag; it does not publish, decrypt, change visibility, or retract an existing group snapshot.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    memoryIds: {
+                        type: "array",
+                        minItems: 1,
+                        maxItems: 50,
+                        items: { type: "string" },
+                        description: "Exact owned memory IDs the user reviewed and confirmed.",
+                    },
+                    label: {
+                        type: "string",
+                        description: "A short user-supplied attention label, such as investment or customer-confidential.",
+                    },
+                    confirmed: {
+                        type: "boolean",
+                        const: true,
+                        description: "Set true only after the user confirms the exact memories.",
+                    },
+                },
+                required: ["memoryIds", "label", "confirmed"],
+            },
+        },
         {
             name: canonicalToolNames.updateGroupProfile,
             description: "Save the current member's declared group title and responsibility summary only after the user explicitly confirms the agent's proposal. These become directory facts visible to group members; never save an unconfirmed inference.",
@@ -512,7 +548,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.completeGroupPublication,
-            description: "Publish only the exact memory ids from a prepared scan after the user explicitly confirms the preview. confirmed must be true. Completing an empty selection safely advances the scan cursor without publishing.",
+            description: "Publish only the exact memory ids from a prepared scan after the user explicitly confirms the preview. confirmed must be true. Any flagged memories must be called out separately; state that nothing has been published yet and offer to exclude them, review them separately, or first search for and mark similar sensitive owned memories. Never auto-flag inferred sensitivity. Publish flagged memories only after extra user acknowledgement with their exact IDs in acknowledgedFlaggedMemoryIds. Completing an empty selection safely advances the scan cursor without publishing.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -520,13 +556,19 @@ export function listToolSpecs(opts = {}) {
                     memoryIds: { type: "array", maxItems: 50, items: { type: "string" } },
                     confirmed: { type: "boolean", const: true },
                     selectionReason: { type: "string" },
+                    acknowledgedFlaggedMemoryIds: {
+                        type: "array",
+                        maxItems: 50,
+                        items: { type: "string" },
+                        description: "Exact flagged IDs the user separately acknowledged for this publication.",
+                    },
                 },
                 required: ["scanId", "memoryIds", "confirmed"],
             },
         },
         {
             name: canonicalToolNames.publishToGroup,
-            description: "Publish one exact memory snapshot to your current company group without changing the memory's global is_public or encryption state. Call only after the user explicitly asks to publish or push that memory. The operation is idempotent.",
+            description: "Publish one exact memory snapshot to your current company group without changing the memory's global is_public or encryption state. Call only after the user explicitly asks to publish or push that memory. If it is flagged, state that nothing has been published yet and offer to exclude it, review it separately, or first search for and mark similar sensitive owned memories. Never auto-flag inferred sensitivity. Pass its ID in acknowledgedFlaggedMemoryIds only after extra user acknowledgement. The operation is idempotent.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -539,13 +581,19 @@ export function listToolSpecs(opts = {}) {
                         description: "Optional user message that explicitly requested publication.",
                     },
                     triggerMessageRole: { type: "string", default: "user" },
+                    acknowledgedFlaggedMemoryIds: {
+                        type: "array",
+                        maxItems: 1,
+                        items: { type: "string" },
+                        description: "Include the memory ID only after separate acknowledgement if the memory is flagged.",
+                    },
                 },
                 required: ["memoryId"],
             },
         },
         {
             name: canonicalToolNames.publishBatchToGroup,
-            description: "Publish up to 50 exact memory snapshots to your current company group without changing global is_public or the encrypted originals. For a session request, first call get_memories_by_context, select the exact ids that match the user's instruction, then pass those ids with the same contextId. Call only after explicit group-publication intent; report what was selected when the user delegates work-related filtering.",
+            description: "Publish up to 50 exact memory snapshots to your current company group without changing global is_public or the encrypted originals. For a session request, first call get_memories_by_context, select the exact ids that match the user's instruction, then pass those ids with the same contextId. Call only after explicit group-publication intent; report what was selected when the user delegates work-related filtering. Flagged memories must be called out separately; state that nothing has been published yet and offer exclusion, separate review, or a confirmed search-and-flag pass for similar sensitive owned memories. Never auto-flag inferred sensitivity. Publish flagged memories only after exact-ID acknowledgement.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -569,6 +617,12 @@ export function listToolSpecs(opts = {}) {
                         description: "Optional user message that explicitly requested publication.",
                     },
                     triggerMessageRole: { type: "string", default: "user" },
+                    acknowledgedFlaggedMemoryIds: {
+                        type: "array",
+                        maxItems: 50,
+                        items: { type: "string" },
+                        description: "Exact flagged IDs the user separately acknowledged for this publication.",
+                    },
                 },
                 required: ["memoryIds"],
             },

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@echomem/mcp",
-  "version": "1.4.24",
+  "version": "1.4.26",
   "description": "EchoMem MCP bridge: cloud-first memory tools, local context HUD, and the Agent Doctor workspace forensics report (cost ledger + 3D repo city)",
   "main": "dist/index.js",
   "type": "module",