@echomem/mcp 1.4.26 → 1.4.27

package/dist/save-checkpoint-hook.js

@@ -0,0 +1,111 @@
+import fs from "node:fs";
+const SAVE_TOOL_RE = /^(?:mcp__[\w.-]+__)?save_conversation$/i;
+const MUTATION_TOOL_RE = /(?:^|[._])(?:apply_patch|Edit|Write)$/i;
+const DURABLE_COMMAND_RE = /\b(?:git\s+commit|npm\s+(?:run\s+)?(?:test|build|lint)|pnpm\s+(?:test|build|lint)|yarn\s+(?:test|build|lint)|pytest|cargo\s+test|go\s+test|deploy|publish)\b/i;
+const DURABLE_LANGUAGE_RE = /\b(?:implemented|fixed|resolved|shipped|deployed|published|committed|milestone|decision|architecture|root cause|tests? pass(?:ed|ing)?|build pass(?:ed|ing)?)\b|(?:实现|修复|解决|发布|提交|里程碑|决定|架构|根因|测试通过|构建通过)/i;
+const CHECKPOINT_REASON = [
+    "Run EchoMem's private completion checkpoint before finishing this turn.",
+    "Review the work that just completed. If it produced a durable decision, confirmed preference, implementation, resolved bug, commit, passing verification, release, or project milestone, call `save_conversation` now with a concise structured summary of the outcome, reasoning, relevant files, and constraints.",
+    "Do not save secrets or incidental chatter. If the work was not durable, do not call the tool and finish normally.",
+    "Private persistence happens first. For a user with a company group, call `get_group_session_sharing` near session start or after this first qualifying private save.",
+    "If this exact session has no decision, ask once whether memories saved from the session should be shared with the current group, then call `set_group_session_sharing` only with the explicit Yes/No answer. A Yes decision automatically syncs eligible memories after later private saves; a No decision keeps later saves private.",
+    "Flagged memories are withheld from automatic session sync and remain private.",
+    "If EchoMem reports that the encrypted vault is locked, tell the user to run `echomem-mcp unlock`; never silently skip a qualifying checkpoint.",
+].join(" ");
+function currentTurnSlice(transcript) {
+    const lines = transcript.split(/\r?\n/);
+    let start = 0;
+    for (let index = lines.length - 1; index >= 0; index -= 1) {
+        const line = lines[index];
+        if (/"type"\s*:\s*"user_message"/.test(line)
+            || /"type"\s*:\s*"user"/.test(line)
+            || /"role"\s*:\s*"user"/.test(line)) {
+            start = index;
+            break;
+        }
+    }
+    return lines.slice(start).join("\n");
+}
+function visibleTextSize(value) {
+    return value
+        .replace(/"[^"]+"\s*:/g, "")
+        .replace(/[{}\[\]",\\]/g, "")
+        .trim()
+        .length;
+}
+function toolNamesFromTranscript(transcript) {
+    const names = [];
+    const visit = (value) => {
+        if (Array.isArray(value)) {
+            value.forEach(visit);
+            return;
+        }
+        if (typeof value !== "object" || value === null)
+            return;
+        const record = value;
+        const type = typeof record.type === "string" ? record.type : "";
+        if ((type === "function_call" || type === "tool_use" || type === "mcp_tool_call")
+            && typeof record.name === "string") {
+            names.push(record.name);
+        }
+        Object.values(record).forEach(visit);
+    };
+    for (const line of transcript.split(/\r?\n/)) {
+        try {
+            visit(JSON.parse(line));
+        }
+        catch {
+            // Hook transcripts are JSONL. Ignore a partial final line while Codex is still flushing it.
+        }
+    }
+    return names;
+}
+export function evaluateSaveCheckpoint(payload, transcript) {
+    if (payload.stop_hook_active === true) {
+        return { decision: "allow", reason: "already_checked" };
+    }
+    if (!transcript) {
+        return { decision: "allow", reason: "missing_transcript" };
+    }
+    const turn = currentTurnSlice(transcript);
+    const toolNames = toolNamesFromTranscript(turn);
+    if (toolNames.some((name) => SAVE_TOOL_RE.test(name))) {
+        return { decision: "allow", reason: "already_saved" };
+    }
+    const assistant = typeof payload.last_assistant_message === "string" ? payload.last_assistant_message : "";
+    const durable = toolNames.some((name) => MUTATION_TOOL_RE.test(name))
+        || DURABLE_COMMAND_RE.test(turn)
+        || DURABLE_LANGUAGE_RE.test(assistant)
+        || DURABLE_LANGUAGE_RE.test(turn)
+        || (visibleTextSize(turn) >= 1_200 && assistant.trim().length >= 240);
+    if (!durable) {
+        return { decision: "allow", reason: "not_durable" };
+    }
+    return { decision: "block", reason: CHECKPOINT_REASON };
+}
+export function runSaveCheckpointHook(input) {
+    let payload = {};
+    try {
+        const parsed = JSON.parse(input);
+        if (typeof parsed === "object" && parsed !== null)
+            payload = parsed;
+    }
+    catch {
+        return JSON.stringify({ continue: true });
+    }
+    const transcriptPath = typeof payload.transcript_path === "string" ? payload.transcript_path : "";
+    let transcript = null;
+    if (transcriptPath) {
+        try {
+            transcript = fs.readFileSync(transcriptPath, "utf8");
+        }
+        catch {
+            transcript = null;
+        }
+    }
+    const result = evaluateSaveCheckpoint(payload, transcript);
+    if (result.decision === "block") {
+        return JSON.stringify({ decision: "block", reason: result.reason });
+    }
+    return JSON.stringify({ continue: true });
+}

package/dist/setup-page/client-core.js

@@ -32,6 +32,13 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
       var setupPlanChoice = "";
       var setupPlanPreview = "free";
       var billingActivationPendingPlan = "";
+      var pendingCheckoutSessionId = "";
+      var billingSyncLastAttemptAt = 0;
+      var billingSyncAttempts = 0;
+      var billingLastCheckedAt = 0;
+      var billingCheckMessage = "";
+      var firstRecallPollTimer = null;
+      var firstRecallPollStartedAt = 0;
       var selectedSessionKeys = Object.create(null);
       var sessionSelectionTouched = false;
       var sessionPickerQuery = "";
@@ -40,10 +47,9 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
       var localAuthEmail = "";
       var localAuthTermsAccepted = false;
       var localAuthAgeConfirmed = false;
+      var accountSwitchPending = false;
       var statsPollStarted = false;
       var reportPollStarted = false;
-      var reportEstimateDeadline = 0;
-      var reportEstimateTimer = null;
       var readyStage = "";
       var NIGHT_HOURS = { 22: 1, 23: 1, 0: 1, 1: 1, 2: 1, 3: 1 };
 
@@ -52,6 +58,10 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         if (storedSetupPlanChoice === "free" || storedSetupPlanChoice === "pro" || storedSetupPlanChoice === "power") {
           setupPlanChoice = storedSetupPlanChoice;
         }
+        var storedCheckoutSessionId = sessionStorage.getItem("echomem:checkout-session:" + nonce) || "";
+        if (/^cs_(?:test_|live_)?[A-Za-z0-9_]+$/.test(storedCheckoutSessionId)) {
+          pendingCheckoutSessionId = storedCheckoutSessionId;
+        }
       } catch (_) {}
 
       function esc(value) {
@@ -59,6 +69,11 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           return { "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" }[ch];
         });
       }
+      function dataHandlingLink(label) {
+        return '<a class="dataHandlingLink" href="https://echoknows.com/privacy-policy" target="_blank" rel="noopener noreferrer">' +
+          esc(label || "How Echo handles your coding history") +
+        '</a>';
+      }
       function rememberSetupPlanChoice(choice) {
         setupPlanChoice = choice === "free" || choice === "pro" || choice === "power" ? choice : "";
         try {
@@ -66,6 +81,18 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           else sessionStorage.removeItem("echomem:setup-plan:" + nonce);
         } catch (_) {}
       }
+      function rememberCheckoutSessionId(sessionId) {
+        pendingCheckoutSessionId = /^cs_(?:test_|live_)?[A-Za-z0-9_]+$/.test(String(sessionId || ""))
+          ? String(sessionId)
+          : "";
+        try {
+          if (pendingCheckoutSessionId) {
+            sessionStorage.setItem("echomem:checkout-session:" + nonce, pendingCheckoutSessionId);
+          } else {
+            sessionStorage.removeItem("echomem:checkout-session:" + nonce);
+          }
+        } catch (_) {}
+      }
       function setupIcon(name) {
         var paths = {
           "shield-check": '<path d="M12 3 5 6v5c0 4.6 2.9 8.1 7 10 4.1-1.9 7-5.4 7-10V6l-7-3Z"/><path d="m8.8 12.1 2 2 4.4-4.5"/>',
@@ -80,6 +107,18 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         };
         return '<svg class="setupGlyph" viewBox="0 0 24 24" fill="none" aria-hidden="true" focusable="false"><g stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round">' + (paths[name] || "") + '</g></svg>';
       }
+      function setupJourney(currentStep) {
+        var labels = ["Scan", "Report", "Connect", "Import", "Try Echo"];
+        var items = labels.map(function (label, index) {
+          var step = index + 1;
+          var state = step < currentStep ? " is-complete" : (step === currentStep ? " is-current" : "");
+          return '<li class="setupJourneyStep' + state + '"' + (step === currentStep ? ' aria-current="step"' : "") + '>' +
+            '<span>' + (step < currentStep ? setupIcon("check") : esc(step)) + '</span>' +
+            '<b>' + esc(label) + '</b>' +
+          '</li>';
+        }).join("");
+        return '<nav class="setupJourney" aria-label="EchoMem setup progress"><ol>' + items + '</ol></nav>';
+      }
       function setHead(nextTitle, nextStatus) {
         title.textContent = nextTitle;
         status.textContent = nextStatus;
@@ -179,7 +218,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
       function localAuthLegalHtml() {
         return '<label class="localAuthConsent">' +
           '<input type="checkbox" id="localAuthConsent" ' + (localAuthAgeConfirmed && localAuthTermsAccepted ? "checked" : "") + ' />' +
-          '<span>I confirm that I am at least 18 years old and that I have read and agree to Echo\'s <a href="https://echoknows.com/terms-of-use" target="_blank" rel="noopener noreferrer">Terms of Use</a>, <a href="https://echoknows.com/memory-terms" target="_blank" rel="noopener noreferrer">Memory Usage Terms</a>, and <a href="https://echoknows.com/privacy-policy" target="_blank" rel="noopener noreferrer">Privacy Policy</a>. See our <a href="https://echoknows.com/subprocessor-list" target="_blank" rel="noopener noreferrer">Subprocessor List</a>.</span>' +
+          '<span>I’m at least 18 and agree to Echo\'s <a href="https://echoknows.com/terms-of-use" target="_blank" rel="noopener noreferrer">Terms</a>, <a href="https://echoknows.com/memory-terms" target="_blank" rel="noopener noreferrer">Memory Terms</a>, and <a href="https://echoknows.com/privacy-policy" target="_blank" rel="noopener noreferrer">Privacy Policy</a>. <a href="https://echoknows.com/subprocessor-list" target="_blank" rel="noopener noreferrer">Subprocessors</a></span>' +
         '</label>';
       }
       function captureLocalAuthConsents() {
@@ -209,24 +248,28 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         button.disabled = !value || !localAuthTermsAccepted || !localAuthAgeConfirmed;
       }
       function renderLocalLogin(message) {
+        var onboardingConnect = setupFlow !== "login";
         setCityMode(false);
         setScanMode(false);
         setExtractMode(false);
         setReadyMode(true);
         setHead("Connect EchoMem", "Local login");
-        app.className = "localAuthStage localAuthWelcomeStage";
+        app.className = "localAuthStage localAuthWelcomeStage localAuthEmailStage";
         app.innerHTML =
+          setupJourney(3) +
           '<section class="localAuthWelcome" aria-labelledby="localAuthWelcomeTitle">' +
             '<div class="localAuthOrbScene" aria-hidden="true"><span class="localAuthOrb"></span><span class="localAuthOrbShadow"></span></div>' +
             '<div class="localAuthWelcomeCopy">' +
-              '<h2 id="localAuthWelcomeTitle">Welcome to Echo</h2>' +
-              '<p>Your memories, sovereign and shared.</p>' +
+              '<h2 id="localAuthWelcomeTitle">' + (onboardingConnect ? 'Take your context with you.' : 'Welcome to Echo') + '</h2>' +
+              (onboardingConnect
+                ? '<p class="localAuthConnectPurpose">Connect this Mac to Echo to use the memories you choose across your AI tools.</p>'
+                : '') +
             '</div>' +
             '<form class="localAuthWelcomeForm" id="localAuthEmailForm">' +
               '<div class="localAuthEmailCapsule">' +
                 '<label class="srOnly" for="localAuthEmail">Email</label>' +
                 '<input id="localAuthEmail" type="email" autocomplete="email" placeholder="Enter your email" value="' + esc(localAuthEmail) + '" />' +
-                '<button id="localAuthSend" type="submit" aria-label="Send one-time code"><span aria-hidden="true">→</span></button>' +
+                '<button id="localAuthSend" type="submit">Email me a code</button>' +
               '</div>' +
               localAuthLegalHtml() +
               '<p class="localAuthStatus' + (message ? " is-error" : "") + '" id="localAuthStatus" role="status" aria-live="polite">' + esc(message || "") + '</p>' +
@@ -254,9 +297,8 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           '<section class="localAuthCard localAuthComplete">' +
             '<div class="localAuthLead">' +
               '<img src="/hud-assets/echo-face-cutout.png" alt="" />' +
-              '<p class="consentEyebrow">This device is connected</p>' +
               '<h2 class="siteHeadline">You\'re signed in.</h2>' +
-              '<p>Your local device token and encryption key are ready. Return to Terminal, or run <code>echomem-mcp init</code> when you want to start local-history onboarding.</p>' +
+              '<p>Return to Terminal, or run <code>echomem-mcp init</code> to start onboarding.</p>' +
             '</div>' +
           '</section>';
       }
@@ -280,7 +322,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           return;
         }
         var button = document.getElementById("localAuthSend");
-        if (button) { button.disabled = true; button.innerHTML = '<span class="localAuthSpinner" aria-hidden="true"></span>'; }
+        if (button) { button.disabled = true; button.innerHTML = '<span class="localAuthSpinner" aria-hidden="true"></span><span>Sending…</span>'; }
         setLocalAuthStatus("Sending verification code...");
         try {
           var data = await postJson("/local-auth/send-otp", {
@@ -291,7 +333,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           localAuthEmail = data.email || localAuthEmail;
           renderLocalOtp("Code sent. Check your inbox.");
         } catch (error) {
-          if (button) { button.disabled = false; button.innerHTML = '<span aria-hidden="true">→</span>'; }
+          if (button) { button.disabled = false; button.textContent = "Email me a code"; }
           setLocalAuthStatus(error && error.message ? error.message : "Could not send the code.", "error");
         }
       }
@@ -303,6 +345,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         setHead("Check your email", "Local login");
         app.className = "localAuthStage localAuthWelcomeStage localAuthOtpStage";
         app.innerHTML =
+          setupJourney(3) +
           '<section class="localAuthWelcome localAuthOtpWelcome" aria-labelledby="localAuthOtpTitle">' +
             '<div class="localAuthOrbScene" aria-hidden="true"><span class="localAuthOrb"></span><span class="localAuthOrbShadow"></span></div>' +
             '<div class="localAuthWelcomeCopy">' +
@@ -398,17 +441,22 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         setHead(setupMode ? "Create encrypted vault" : "Unlock encrypted vault", "Local passphrase");
         app.className = "localAuthStage localAuthWelcomeStage localAuthPassphraseStage";
         app.innerHTML =
+          setupJourney(3) +
           '<section class="localAuthWelcome localAuthPassphraseWelcome">' +
             '<div class="localAuthOrbScene" aria-hidden="true"><span class="localAuthOrb"></span><span class="localAuthOrbShadow"></span></div>' +
             '<div class="localAuthWelcomeCopy">' +
-              '<h2>' + (setupMode ? 'Create your local vault passphrase.' : 'Enter your vault passphrase.') + '</h2>' +
-              '<p>' + (setupMode ? 'Echo derives your encryption key on this device. The passphrase and key are never sent to EchoMem. If you forget it, encrypted memories cannot be recovered.' : 'Echo verifies this passphrase locally against your account encryption token. The passphrase is never sent to EchoMem.') + '</p>' +
+              '<h2>' + (setupMode ? 'Protect your memories with a passphrase.' : 'Enter your vault passphrase.') + '</h2>' +
+              '<p>' + (setupMode ? 'It encrypts memories before upload and unlocks them on your trusted devices. Echo can’t recover it, so save it in your password manager.' : 'Verified only on this device. It is never sent to EchoMem.') + '</p>' +
             '</div>' +
             '<form class="localAuthWelcomeForm localAuthPassphraseForm" id="localAuthPassphraseForm">' +
               '<label class="localAuthField"><span>Passphrase</span><input id="localAuthPassphrase" type="password" autocomplete="' + (setupMode ? "new-password" : "current-password") + '" placeholder="Encryption passphrase" /></label>' +
               (setupMode ? '<label class="localAuthField"><span>Confirm passphrase</span><input id="localAuthPassphraseConfirm" type="password" autocomplete="new-password" placeholder="Confirm passphrase" /></label>' : '') +
               '<button class="primary localAuthPassphraseSubmit" id="localAuthUnlock" type="submit">' + (setupMode ? "Create vault" : "Unlock") + '</button>' +
-              '<button class="secondary localAuthBackWide" id="localAuthRestart" type="button">Use a different email</button>' +
+              (setupMode
+                ? '<p class="localAuthVaultDeferNote">Import won’t start until you create your vault.</p>' +
+                  '<button class="localAuthTextAction" id="localAuthSkipVault" type="button">Skip for now</button>'
+                : '') +
+              '<button class="localAuthTextAction localAuthRestartAction" id="localAuthRestart" type="button">Use a different email</button>' +
               '<p class="localAuthStatus' + (message ? " is-error" : "") + '" id="localAuthStatus" role="status" aria-live="polite">' + esc(message || "") + '</p>' +
             '</form>' +
           '</section>';
@@ -416,9 +464,32 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         if (form) form.onsubmit = function (event) { event.preventDefault(); void submitLocalPassphrase(setupMode); };
         var restart = document.getElementById("localAuthRestart");
         if (restart) restart.onclick = function () { renderLocalLogin(""); };
+        var skipVault = document.getElementById("localAuthSkipVault");
+        if (skipVault) skipVault.onclick = function () { void skipLocalVaultSetup(); };
         var pass = document.getElementById("localAuthPassphrase");
         if (pass) pass.focus();
       }
+      async function skipLocalVaultSetup() {
+        var button = document.getElementById("localAuthSkipVault");
+        if (button) { button.disabled = true; button.textContent = "Leaving setup…"; }
+        setLocalAuthStatus("Leaving setup. Your coding history will stay on this Mac.");
+        try {
+          await postJson("/skip", {});
+          setHead("Setup paused", "Vault deferred");
+          app.className = "localAuthStage localAuthWelcomeStage localAuthPassphraseStage";
+          app.innerHTML =
+            '<section class="localAuthWelcome localAuthDeferred" aria-labelledby="localAuthDeferredTitle">' +
+              '<div class="localAuthWelcomeCopy">' +
+                '<h2 id="localAuthDeferredTitle">Setup paused.</h2>' +
+                '<p>Your coding history is unchanged. Run <code>echomem-mcp init</code> when you’re ready to create your vault and continue.</p>' +
+              '</div>' +
+            '</section>';
+          try { window.close(); } catch (_) {}
+        } catch (error) {
+          if (button) { button.disabled = false; button.textContent = "Skip for now"; }
+          setLocalAuthStatus(error && error.message ? error.message : "Could not leave setup safely.", "error");
+        }
+      }
       async function submitLocalPassphrase(setupMode) {
         var pass = document.getElementById("localAuthPassphrase");
         var confirm = document.getElementById("localAuthPassphraseConfirm");
@@ -441,7 +512,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
       function onConnectClick() {
         if (!localHistoryConsentGranted) {
           renderLocalScanConsent();
-          setConsentStatus("Local history access is required before you can connect EchoMem or continue setup.", "required");
+          setConsentStatus("Allow the local scan to continue.", "required");
           return;
         }
         if (connected) { void waitForStats(); return; }