@echomem/mcp 1.4.26 → 1.4.28

package/dist/package-metadata.js

@@ -28,12 +28,14 @@ export const MCP_SERVER_INSTRUCTIONS = [
     `If the user or local config expects a newer EchoMem MCP version than ${MCP_PACKAGE_VERSION}, update once with \`${MCP_UPDATE_ALL_COMMAND}\` and start a new MCP session.`,
     "Use echomem_update_status to check whether npm has a newer bridge; it is cached and non-blocking during normal tool listing.",
     "Do not auto-update on every MCP startup; this bridge is intentionally stable between explicit updates.",
+    "Before the final response for work that produced a durable decision, confirmed preference, implementation, resolved bug, commit, passing verification, release, or project milestone, call save_conversation. This is a private checkpoint and does not require a separate user request. Skip secrets, incidental chatter, and trivial read-only work. If an encrypted vault is locked, tell the user to run echomem-mcp unlock rather than silently skipping the checkpoint.",
+    "For a user with a company group, call get_group_session_sharing near session start or after the first qualifying private save. If this exact session has no decision, ask once whether memories saved from the session should be shared with the current group, then store only the explicit Yes/No answer with set_group_session_sharing. A Yes decision syncs eligible memories after each private save; a No decision keeps later saves private. Flagged memories stay private.",
     "For company-group sharing, use get_group_context for orientation; create_memory_group/create_group_invite/join_memory_group for membership; and prepare_group_publication as a no-publication preview.",
     "After joining or when profile fields are missing, use candidate memory evidence to propose a title and responsibility summary. Ask the user to confirm that proposal together with the publication preview, then call update_group_profile and complete_group_publication.",
-    "Use owner-only /memories/timeline?memoryId=... links for the user's private search, flag, and publication-preview evidence. Use /company/memories?memoryId=... only for already-published group evidence.",
-    "Each group-search result is one memory: preserve its Memory ID and direct echoknows.com link when citing it.",
+    "Use one canonical https://echoknows.com/memory/<memory-id> link for private, group, and friend evidence. Label it with the memory key; the site resolves the authorized representation.",
+    "Each search result is one memory: preserve its Memory ID and canonical echoknows.com link when citing it.",
     "During a publication preview, if an unflagged candidate appears sensitive, proactively ask whether the user wants to mark its exact ID for publication attention first. Explain that marking does not publish or change encryption; it means the agent will call it out and ask for detailed confirmation whenever a later publication includes it. Never auto-flag inferred sensitivity. For sensitive-topic flags, search and preview exact owned memories before confirmed flag_memories_for_publication_attention. Separate already-flagged candidates, state that nothing has been published yet, and offer to exclude them, review them separately, or first search for and mark similar sensitive owned memories.",
-    "Never save an inferred group profile or complete a group publication without explicit confirmation, and never store or log an echo_grp_ invite code.",
+    "Never save an inferred group profile. Manual prepared publication requires explicit preview confirmation; flagged memories still require separate exact-memory confirmation. Never store or log an echo_grp_ invite code.",
 ].join(" ");
 export function withMcpVersion(description) {
     return `${description}\n\nEchoMem MCP bridge: ${MCP_PACKAGE_LABEL}. If this version is stale, update once with \`${MCP_UPDATE_ALL_COMMAND}\` (or add \`--client cursor|windsurf|claude-desktop|claude-code|codex\` for a single client), then start a new MCP session. Do not run updates repeatedly or on every startup.`;

package/dist/save-checkpoint-hook.js

@@ -0,0 +1,111 @@
+import fs from "node:fs";
+const SAVE_TOOL_RE = /^(?:mcp__[\w.-]+__)?save_conversation$/i;
+const MUTATION_TOOL_RE = /(?:^|[._])(?:apply_patch|Edit|Write)$/i;
+const DURABLE_COMMAND_RE = /\b(?:git\s+commit|npm\s+(?:run\s+)?(?:test|build|lint)|pnpm\s+(?:test|build|lint)|yarn\s+(?:test|build|lint)|pytest|cargo\s+test|go\s+test|deploy|publish)\b/i;
+const DURABLE_LANGUAGE_RE = /\b(?:implemented|fixed|resolved|shipped|deployed|published|committed|milestone|decision|architecture|root cause|tests? pass(?:ed|ing)?|build pass(?:ed|ing)?)\b|(?:实现|修复|解决|发布|提交|里程碑|决定|架构|根因|测试通过|构建通过)/i;
+const CHECKPOINT_REASON = [
+    "Run EchoMem's private completion checkpoint before finishing this turn.",
+    "Review the work that just completed. If it produced a durable decision, confirmed preference, implementation, resolved bug, commit, passing verification, release, or project milestone, call `save_conversation` now with a concise structured summary of the outcome, reasoning, relevant files, and constraints.",
+    "Do not save secrets or incidental chatter. If the work was not durable, do not call the tool and finish normally.",
+    "Private persistence happens first. For a user with a company group, call `get_group_session_sharing` near session start or after this first qualifying private save.",
+    "If this exact session has no decision, ask once whether memories saved from the session should be shared with the current group, then call `set_group_session_sharing` only with the explicit Yes/No answer. A Yes decision automatically syncs eligible memories after later private saves; a No decision keeps later saves private.",
+    "Flagged memories are withheld from automatic session sync and remain private.",
+    "If EchoMem reports that the encrypted vault is locked, tell the user to run `echomem-mcp unlock`; never silently skip a qualifying checkpoint.",
+].join(" ");
+function currentTurnSlice(transcript) {
+    const lines = transcript.split(/\r?\n/);
+    let start = 0;
+    for (let index = lines.length - 1; index >= 0; index -= 1) {
+        const line = lines[index];
+        if (/"type"\s*:\s*"user_message"/.test(line)
+            || /"type"\s*:\s*"user"/.test(line)
+            || /"role"\s*:\s*"user"/.test(line)) {
+            start = index;
+            break;
+        }
+    }
+    return lines.slice(start).join("\n");
+}
+function visibleTextSize(value) {
+    return value
+        .replace(/"[^"]+"\s*:/g, "")
+        .replace(/[{}\[\]",\\]/g, "")
+        .trim()
+        .length;
+}
+function toolNamesFromTranscript(transcript) {
+    const names = [];
+    const visit = (value) => {
+        if (Array.isArray(value)) {
+            value.forEach(visit);
+            return;
+        }
+        if (typeof value !== "object" || value === null)
+            return;
+        const record = value;
+        const type = typeof record.type === "string" ? record.type : "";
+        if ((type === "function_call" || type === "tool_use" || type === "mcp_tool_call")
+            && typeof record.name === "string") {
+            names.push(record.name);
+        }
+        Object.values(record).forEach(visit);
+    };
+    for (const line of transcript.split(/\r?\n/)) {
+        try {
+            visit(JSON.parse(line));
+        }
+        catch {
+            // Hook transcripts are JSONL. Ignore a partial final line while Codex is still flushing it.
+        }
+    }
+    return names;
+}
+export function evaluateSaveCheckpoint(payload, transcript) {
+    if (payload.stop_hook_active === true) {
+        return { decision: "allow", reason: "already_checked" };
+    }
+    if (!transcript) {
+        return { decision: "allow", reason: "missing_transcript" };
+    }
+    const turn = currentTurnSlice(transcript);
+    const toolNames = toolNamesFromTranscript(turn);
+    if (toolNames.some((name) => SAVE_TOOL_RE.test(name))) {
+        return { decision: "allow", reason: "already_saved" };
+    }
+    const assistant = typeof payload.last_assistant_message === "string" ? payload.last_assistant_message : "";
+    const durable = toolNames.some((name) => MUTATION_TOOL_RE.test(name))
+        || DURABLE_COMMAND_RE.test(turn)
+        || DURABLE_LANGUAGE_RE.test(assistant)
+        || DURABLE_LANGUAGE_RE.test(turn)
+        || (visibleTextSize(turn) >= 1_200 && assistant.trim().length >= 240);
+    if (!durable) {
+        return { decision: "allow", reason: "not_durable" };
+    }
+    return { decision: "block", reason: CHECKPOINT_REASON };
+}
+export function runSaveCheckpointHook(input) {
+    let payload = {};
+    try {
+        const parsed = JSON.parse(input);
+        if (typeof parsed === "object" && parsed !== null)
+            payload = parsed;
+    }
+    catch {
+        return JSON.stringify({ continue: true });
+    }
+    const transcriptPath = typeof payload.transcript_path === "string" ? payload.transcript_path : "";
+    let transcript = null;
+    if (transcriptPath) {
+        try {
+            transcript = fs.readFileSync(transcriptPath, "utf8");
+        }
+        catch {
+            transcript = null;
+        }
+    }
+    const result = evaluateSaveCheckpoint(payload, transcript);
+    if (result.decision === "block") {
+        return JSON.stringify({ decision: "block", reason: result.reason });
+    }
+    return JSON.stringify({ continue: true });
+}

package/dist/setup-page/client-core.js

@@ -32,6 +32,13 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
       var setupPlanChoice = "";
       var setupPlanPreview = "free";
       var billingActivationPendingPlan = "";
+      var pendingCheckoutSessionId = "";
+      var billingSyncLastAttemptAt = 0;
+      var billingSyncAttempts = 0;
+      var billingLastCheckedAt = 0;
+      var billingCheckMessage = "";
+      var firstRecallPollTimer = null;
+      var firstRecallPollStartedAt = 0;
       var selectedSessionKeys = Object.create(null);
       var sessionSelectionTouched = false;
       var sessionPickerQuery = "";
@@ -40,10 +47,19 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
       var localAuthEmail = "";
       var localAuthTermsAccepted = false;
       var localAuthAgeConfirmed = false;
+      var accountSwitchPending = false;
+      // Invalidates async work started for a previously connected account.
+      var accountStateEpoch = 0;
       var statsPollStarted = false;
       var reportPollStarted = false;
-      var reportEstimateDeadline = 0;
-      var reportEstimateTimer = null;
+      var reportEtaDeadline = 0;
+      var reportEtaDisplaySeconds = 0;
+      var reportEtaUpdatedAt = 0;
+      var reportEtaStage = "";
+      var reportEtaStageDone = 0;
+      var reportEtaStageElapsed = 0;
+      var reportEtaObservedRate = 0;
+      var reportEtaScanId = "";
       var readyStage = "";
       var NIGHT_HOURS = { 22: 1, 23: 1, 0: 1, 1: 1, 2: 1, 3: 1 };
 
@@ -52,6 +68,10 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         if (storedSetupPlanChoice === "free" || storedSetupPlanChoice === "pro" || storedSetupPlanChoice === "power") {
           setupPlanChoice = storedSetupPlanChoice;
         }
+        var storedCheckoutSessionId = sessionStorage.getItem("echomem:checkout-session:" + nonce) || "";
+        if (/^cs_(?:test_|live_)?[A-Za-z0-9_]+$/.test(storedCheckoutSessionId)) {
+          pendingCheckoutSessionId = storedCheckoutSessionId;
+        }
       } catch (_) {}
 
       function esc(value) {
@@ -59,6 +79,11 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           return { "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" }[ch];
         });
       }
+      function dataHandlingLink(label) {
+        return '<a class="dataHandlingLink" href="https://echoknows.com/privacy-policy" target="_blank" rel="noopener noreferrer">' +
+          esc(label || "How Echo handles your coding history") +
+        '</a>';
+      }
       function rememberSetupPlanChoice(choice) {
         setupPlanChoice = choice === "free" || choice === "pro" || choice === "power" ? choice : "";
         try {
@@ -66,6 +91,18 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           else sessionStorage.removeItem("echomem:setup-plan:" + nonce);
         } catch (_) {}
       }
+      function rememberCheckoutSessionId(sessionId) {
+        pendingCheckoutSessionId = /^cs_(?:test_|live_)?[A-Za-z0-9_]+$/.test(String(sessionId || ""))
+          ? String(sessionId)
+          : "";
+        try {
+          if (pendingCheckoutSessionId) {
+            sessionStorage.setItem("echomem:checkout-session:" + nonce, pendingCheckoutSessionId);
+          } else {
+            sessionStorage.removeItem("echomem:checkout-session:" + nonce);
+          }
+        } catch (_) {}
+      }
       function setupIcon(name) {
         var paths = {
           "shield-check": '<path d="M12 3 5 6v5c0 4.6 2.9 8.1 7 10 4.1-1.9 7-5.4 7-10V6l-7-3Z"/><path d="m8.8 12.1 2 2 4.4-4.5"/>',
@@ -80,6 +117,18 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         };
         return '<svg class="setupGlyph" viewBox="0 0 24 24" fill="none" aria-hidden="true" focusable="false"><g stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round">' + (paths[name] || "") + '</g></svg>';
       }
+      function setupJourney(currentStep) {
+        var labels = ["Scan", "Report", "Connect", "Import", "Try Echo"];
+        var items = labels.map(function (label, index) {
+          var step = index + 1;
+          var state = step < currentStep ? " is-complete" : (step === currentStep ? " is-current" : "");
+          return '<li class="setupJourneyStep' + state + '"' + (step === currentStep ? ' aria-current="step"' : "") + '>' +
+            '<span>' + (step < currentStep ? setupIcon("check") : esc(step)) + '</span>' +
+            '<b>' + esc(label) + '</b>' +
+          '</li>';
+        }).join("");
+        return '<nav class="setupJourney" aria-label="EchoMem setup progress"><ol>' + items + '</ol></nav>';
+      }
       function setHead(nextTitle, nextStatus) {
         title.textContent = nextTitle;
         status.textContent = nextStatus;
@@ -179,7 +228,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
       function localAuthLegalHtml() {
         return '<label class="localAuthConsent">' +
           '<input type="checkbox" id="localAuthConsent" ' + (localAuthAgeConfirmed && localAuthTermsAccepted ? "checked" : "") + ' />' +
-          '<span>I confirm that I am at least 18 years old and that I have read and agree to Echo\'s <a href="https://echoknows.com/terms-of-use" target="_blank" rel="noopener noreferrer">Terms of Use</a>, <a href="https://echoknows.com/memory-terms" target="_blank" rel="noopener noreferrer">Memory Usage Terms</a>, and <a href="https://echoknows.com/privacy-policy" target="_blank" rel="noopener noreferrer">Privacy Policy</a>. See our <a href="https://echoknows.com/subprocessor-list" target="_blank" rel="noopener noreferrer">Subprocessor List</a>.</span>' +
+          '<span>I’m at least 18 and agree to Echo\'s <a href="https://echoknows.com/terms-of-use" target="_blank" rel="noopener noreferrer">Terms</a>, <a href="https://echoknows.com/memory-terms" target="_blank" rel="noopener noreferrer">Memory Terms</a>, and <a href="https://echoknows.com/privacy-policy" target="_blank" rel="noopener noreferrer">Privacy Policy</a>. <a href="https://echoknows.com/subprocessor-list" target="_blank" rel="noopener noreferrer">Subprocessors</a></span>' +
         '</label>';
       }
       function captureLocalAuthConsents() {
@@ -209,24 +258,28 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         button.disabled = !value || !localAuthTermsAccepted || !localAuthAgeConfirmed;
       }
       function renderLocalLogin(message) {
+        var onboardingConnect = setupFlow !== "login";
         setCityMode(false);
         setScanMode(false);
         setExtractMode(false);
         setReadyMode(true);
         setHead("Connect EchoMem", "Local login");
-        app.className = "localAuthStage localAuthWelcomeStage";
+        app.className = "localAuthStage localAuthWelcomeStage localAuthEmailStage";
         app.innerHTML =
+          setupJourney(3) +
           '<section class="localAuthWelcome" aria-labelledby="localAuthWelcomeTitle">' +
             '<div class="localAuthOrbScene" aria-hidden="true"><span class="localAuthOrb"></span><span class="localAuthOrbShadow"></span></div>' +
             '<div class="localAuthWelcomeCopy">' +
-              '<h2 id="localAuthWelcomeTitle">Welcome to Echo</h2>' +
-              '<p>Your memories, sovereign and shared.</p>' +
+              '<h2 id="localAuthWelcomeTitle">' + (onboardingConnect ? 'Take your context with you.' : 'Welcome to Echo') + '</h2>' +
+              (onboardingConnect
+                ? '<p class="localAuthConnectPurpose">Connect this Mac to Echo to use the memories you choose across your AI tools.</p>'
+                : '') +
             '</div>' +
             '<form class="localAuthWelcomeForm" id="localAuthEmailForm">' +
               '<div class="localAuthEmailCapsule">' +
                 '<label class="srOnly" for="localAuthEmail">Email</label>' +
                 '<input id="localAuthEmail" type="email" autocomplete="email" placeholder="Enter your email" value="' + esc(localAuthEmail) + '" />' +
-                '<button id="localAuthSend" type="submit" aria-label="Send one-time code"><span aria-hidden="true">→</span></button>' +
+                '<button id="localAuthSend" type="submit">Email me a code</button>' +
               '</div>' +
               localAuthLegalHtml() +
               '<p class="localAuthStatus' + (message ? " is-error" : "") + '" id="localAuthStatus" role="status" aria-live="polite">' + esc(message || "") + '</p>' +
@@ -254,9 +307,8 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           '<section class="localAuthCard localAuthComplete">' +
             '<div class="localAuthLead">' +
               '<img src="/hud-assets/echo-face-cutout.png" alt="" />' +
-              '<p class="consentEyebrow">This device is connected</p>' +
               '<h2 class="siteHeadline">You\'re signed in.</h2>' +
-              '<p>Your local device token and encryption key are ready. Return to Terminal, or run <code>echomem-mcp init</code> when you want to start local-history onboarding.</p>' +
+              '<p>Return to Terminal, or run <code>echomem-mcp init</code> to start onboarding.</p>' +
             '</div>' +
           '</section>';
       }
@@ -280,7 +332,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           return;
         }
         var button = document.getElementById("localAuthSend");
-        if (button) { button.disabled = true; button.innerHTML = '<span class="localAuthSpinner" aria-hidden="true"></span>'; }
+        if (button) { button.disabled = true; button.innerHTML = '<span class="localAuthSpinner" aria-hidden="true"></span><span>Sending…</span>'; }
         setLocalAuthStatus("Sending verification code...");
         try {
           var data = await postJson("/local-auth/send-otp", {
@@ -291,7 +343,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
           localAuthEmail = data.email || localAuthEmail;
           renderLocalOtp("Code sent. Check your inbox.");
         } catch (error) {
-          if (button) { button.disabled = false; button.innerHTML = '<span aria-hidden="true">→</span>'; }
+          if (button) { button.disabled = false; button.textContent = "Email me a code"; }
           setLocalAuthStatus(error && error.message ? error.message : "Could not send the code.", "error");
         }
       }
@@ -303,6 +355,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         setHead("Check your email", "Local login");
         app.className = "localAuthStage localAuthWelcomeStage localAuthOtpStage";
         app.innerHTML =
+          setupJourney(3) +
           '<section class="localAuthWelcome localAuthOtpWelcome" aria-labelledby="localAuthOtpTitle">' +
             '<div class="localAuthOrbScene" aria-hidden="true"><span class="localAuthOrb"></span><span class="localAuthOrbShadow"></span></div>' +
             '<div class="localAuthWelcomeCopy">' +
@@ -398,17 +451,22 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         setHead(setupMode ? "Create encrypted vault" : "Unlock encrypted vault", "Local passphrase");
         app.className = "localAuthStage localAuthWelcomeStage localAuthPassphraseStage";
         app.innerHTML =
+          setupJourney(3) +
           '<section class="localAuthWelcome localAuthPassphraseWelcome">' +
             '<div class="localAuthOrbScene" aria-hidden="true"><span class="localAuthOrb"></span><span class="localAuthOrbShadow"></span></div>' +
             '<div class="localAuthWelcomeCopy">' +
-              '<h2>' + (setupMode ? 'Create your local vault passphrase.' : 'Enter your vault passphrase.') + '</h2>' +
-              '<p>' + (setupMode ? 'Echo derives your encryption key on this device. The passphrase and key are never sent to EchoMem. If you forget it, encrypted memories cannot be recovered.' : 'Echo verifies this passphrase locally against your account encryption token. The passphrase is never sent to EchoMem.') + '</p>' +
+              '<h2>' + (setupMode ? 'Protect your memories with a passphrase.' : 'Enter your vault passphrase.') + '</h2>' +
+              '<p>' + (setupMode ? 'It encrypts memories before upload and unlocks them on your trusted devices. Echo can’t recover it, so save it in your password manager.' : 'Verified only on this device. It is never sent to EchoMem.') + '</p>' +
             '</div>' +
             '<form class="localAuthWelcomeForm localAuthPassphraseForm" id="localAuthPassphraseForm">' +
               '<label class="localAuthField"><span>Passphrase</span><input id="localAuthPassphrase" type="password" autocomplete="' + (setupMode ? "new-password" : "current-password") + '" placeholder="Encryption passphrase" /></label>' +
               (setupMode ? '<label class="localAuthField"><span>Confirm passphrase</span><input id="localAuthPassphraseConfirm" type="password" autocomplete="new-password" placeholder="Confirm passphrase" /></label>' : '') +
               '<button class="primary localAuthPassphraseSubmit" id="localAuthUnlock" type="submit">' + (setupMode ? "Create vault" : "Unlock") + '</button>' +
-              '<button class="secondary localAuthBackWide" id="localAuthRestart" type="button">Use a different email</button>' +
+              (setupMode
+                ? '<p class="localAuthVaultDeferNote">You can turn on encryption later.</p>' +
+                  '<button class="localAuthTextAction" id="localAuthSkipVault" type="button">Skip encryption for now</button>'
+                : '') +
+              '<button class="localAuthTextAction localAuthRestartAction" id="localAuthRestart" type="button">Use a different email</button>' +
               '<p class="localAuthStatus' + (message ? " is-error" : "") + '" id="localAuthStatus" role="status" aria-live="polite">' + esc(message || "") + '</p>' +
             '</form>' +
           '</section>';
@@ -416,9 +474,23 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
         if (form) form.onsubmit = function (event) { event.preventDefault(); void submitLocalPassphrase(setupMode); };
         var restart = document.getElementById("localAuthRestart");
         if (restart) restart.onclick = function () { renderLocalLogin(""); };
+        var skipVault = document.getElementById("localAuthSkipVault");
+        if (skipVault) skipVault.onclick = function () { void skipLocalVaultSetup(); };
         var pass = document.getElementById("localAuthPassphrase");
         if (pass) pass.focus();
       }
+      async function skipLocalVaultSetup() {
+        var button = document.getElementById("localAuthSkipVault");
+        if (button) { button.disabled = true; button.textContent = "Continuing…"; }
+        setLocalAuthStatus("Continuing without encryption…");
+        try {
+          await postJson("/local-auth/skip-encryption", {});
+          await finishLocalLogin();
+        } catch (error) {
+          if (button) { button.disabled = false; button.textContent = "Skip encryption for now"; }
+          setLocalAuthStatus(error && error.message ? error.message : "Could not continue without encryption.", "error");
+        }
+      }
       async function submitLocalPassphrase(setupMode) {
         var pass = document.getElementById("localAuthPassphrase");
         var confirm = document.getElementById("localAuthPassphraseConfirm");
@@ -441,7 +513,7 @@ export const SETUP_PAGE_CLIENT_CORE = String.raw `      var params = new URLSear
       function onConnectClick() {
         if (!localHistoryConsentGranted) {
           renderLocalScanConsent();
-          setConsentStatus("Local history access is required before you can connect EchoMem or continue setup.", "required");
+          setConsentStatus("Allow the local scan to continue.", "required");
           return;
         }
         if (connected) { void waitForStats(); return; }