@echomem/mcp 1.4.34 → 1.4.36

package/dist/v1-contract.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { MEMORY_CITATION_INSTRUCTION, SAVED_MEMORY_RECEIPT_INSTRUCTION, withMcpVersion, } from "./package-metadata.js";
+import { MCP_DESKTOP_MANAGED, MCP_VAULT_UNLOCK_INSTRUCTION, MEMORY_CITATION_INSTRUCTION, SAVED_MEMORY_RECEIPT_INSTRUCTION, withMcpVersion, } from "./package-metadata.js";
 export const canonicalToolNames = {
     search: "search_memories",
     save: "save_conversation",
@@ -34,7 +34,6 @@ export const canonicalToolNames = {
 };
 export const legacyAliasToCanonical = {
     search_memories_by_description_semantic: canonicalToolNames.search,
-    search_memories_by_time_range: canonicalToolNames.timeRange,
 };
 export function resolveCanonicalToolName(toolName) {
     return legacyAliasToCanonical[toolName] ?? toolName;
@@ -44,7 +43,6 @@ const READ_ONLY_TOOL_NAMES = new Set([
     canonicalToolNames.search,
     "search_memories_by_description_semantic",
     canonicalToolNames.timeRange,
-    "search_memories_by_time_range",
     canonicalToolNames.keywords,
     canonicalToolNames.friends,
     canonicalToolNames.searchUsers,
@@ -166,11 +164,11 @@ const triggerMetadataSchema = {
 };
 export const searchMemoriesSchema = z.object({
     ...triggerMetadataSchema,
-    query: z.string().optional(),
-    k: z.number().optional(),
-    limit: z.number().optional(),
-    threshold: z.number().optional().default(0.1),
-    timeFrameDays: z.number().optional(),
+    query: z.string().trim().min(1).optional(),
+    k: z.number().int().min(1).max(50).optional(),
+    limit: z.number().int().min(1).max(50).optional(),
+    threshold: z.number().min(0).max(1).optional().default(0.1),
+    timeFrameDays: z.number().int().min(1).max(3650).optional(),
     includeAnswer: z.boolean().optional().default(false),
 });
 export const saveConversationSchema = z.object({
@@ -189,11 +187,20 @@ export const saveConversationSchema = z.object({
     }))
         .optional(),
 });
+const dateBoundarySchema = z.string().trim().min(1).refine((value) => Number.isFinite(Date.parse(value)), "Expected an ISO-8601 date or date-time string");
 export const timeRangeSchema = z.object({
     ...triggerMetadataSchema,
-    startDate: z.string(),
-    endDate: z.string(),
-    limit: z.number().optional().default(50),
+    startDate: dateBoundarySchema,
+    endDate: dateBoundarySchema,
+    limit: z.number().int().min(1).max(100).optional().default(50),
+}).superRefine((value, ctx) => {
+    if (Date.parse(value.startDate) > Date.parse(value.endDate)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["startDate"],
+            message: "startDate must be earlier than or equal to endDate",
+        });
+    }
 });
 const keywordListSchema = z.preprocess((value) => {
     if (typeof value !== "string")
@@ -206,15 +213,15 @@ const keywordListSchema = z.preprocess((value) => {
 export const keywordsSchema = z.object({
     ...triggerMetadataSchema,
     keywords: keywordListSchema,
-    limit: z.number().optional().default(10),
+    limit: z.number().int().min(1).max(50).optional().default(10),
 });
 export const listFriendsSchema = z.object({
     ...triggerMetadataSchema,
 });
 export const searchUsersSchema = z.object({
     ...triggerMetadataSchema,
-    query: z.string().min(1),
-    limit: z.number().optional().default(10),
+    query: z.string().trim().min(1),
+    limit: z.number().int().min(1).max(50).optional().default(10),
 });
 export const sendFriendRequestSchema = z.object({
     ...triggerMetadataSchema,
@@ -222,17 +229,17 @@ export const sendFriendRequestSchema = z.object({
 });
 export const othersSchema = z.object({
     ...triggerMetadataSchema,
-    query: z.string().optional().default(""),
-    limit: z.number().optional().default(10),
+    query: z.string().trim().optional().default(""),
+    limit: z.number().int().min(1).max(50).optional().default(10),
     target: z.string().optional(),
     ownerUserId: z.string().optional(),
     ownerName: z.string().optional(),
     targetFriendIds: z.array(z.string()).optional(),
     targetFriendNames: z.array(z.string()).optional(),
     recordAccess: z.boolean().optional(),
-    kPerUser: z.number().optional(),
-    similarityThreshold: z.number().optional(),
-    timeFrameDays: z.number().optional(),
+    kPerUser: z.number().int().min(1).max(50).optional(),
+    similarityThreshold: z.number().min(0).max(1).optional(),
+    timeFrameDays: z.number().int().min(1).max(3650).optional(),
 });
 export const publicMemorySchema = z.object({
     ...triggerMetadataSchema,
@@ -329,8 +336,8 @@ export const deleteMemorySchema = z.object({
 });
 export const getByContextSchema = z.object({
     ...triggerMetadataSchema,
-    contextId: z.string().min(1),
-    limit: z.number().optional().default(50),
+    contextId: z.string().trim().min(1),
+    limit: z.number().int().min(1).max(100).optional().default(50),
 });
 export function listToolSpecs(opts = {}) {
     const currentTime = new Date().toISOString();
@@ -349,46 +356,68 @@ export function listToolSpecs(opts = {}) {
     const groupMapSection = groupMap
         ? `\n\nThis user's company group currently shares work in these areas (a relevance guide — search the group when the task relates to one of these people or topics):\n${compactGroupRoster(groupMap)}\n${groupMap}\n`
         : "";
+    const semanticSearchInputSchema = {
+        type: "object",
+        properties: {
+            query: {
+                type: "string",
+                minLength: 1,
+                description: "Required topic or question to search for. Never omit this field or send it as conversation.",
+            },
+            limit: { type: "integer", minimum: 1, maximum: 50, default: 10 },
+            threshold: { type: "number", minimum: 0, maximum: 1, default: 0.1 },
+            timeFrameDays: {
+                type: "integer",
+                minimum: 1,
+                maximum: 3650,
+                description: "Optional recency filter for this query, such as 14 for the last two weeks.",
+            },
+            triggerMessage: {
+                type: "string",
+                description: "Optional: the user's message that caused this recall. EchoMem stores only a redacted analytics preview and hash.",
+            },
+            triggerMessageRole: { type: "string", default: "user" },
+        },
+        required: ["query"],
+    };
+    const timeRangeInputSchema = {
+        type: "object",
+        properties: {
+            startDate: {
+                type: "string",
+                minLength: 1,
+                description: "Required ISO-8601 start date or date-time. Must not be later than endDate.",
+            },
+            endDate: {
+                type: "string",
+                minLength: 1,
+                description: "Required ISO-8601 end date or date-time. Must not be earlier than startDate.",
+            },
+            limit: { type: "integer", minimum: 1, maximum: 100, default: 50 },
+            triggerMessage: {
+                type: "string",
+                description: "Optional: the user's message that caused this lookup. EchoMem stores only a redacted analytics preview and hash.",
+            },
+            triggerMessageRole: { type: "string", default: "user" },
+        },
+        required: ["startDate", "endDate"],
+    };
     const tools = [
         {
             name: canonicalToolNames.search,
-            description: withMcpVersion(`Recall the user's prior decisions, preferences, and project context from EchoMem — their long-term memory across ALL their AI tools, not just this session. Use it instead of re-deriving or re-asking what the user already settled. ${recallPlanNote} ${searchBillingReplyInstruction} ${memoryCitationInstruction}${mapSection}\nReturns ranked memories only; the MCP host model writes the final answer. Current time: ${currentTime}.${updateSection}`),
-            inputSchema: {
-                type: "object",
-                properties: {
-                    query: { type: "string" },
-                    limit: { type: "number", default: 10 },
-                    threshold: { type: "number", default: 0.1 },
-                    timeFrameDays: { type: "number" },
-                    triggerMessage: {
-                        type: "string",
-                        description: "Optional: the user's message that caused this recall. EchoMem stores only a redacted analytics preview and hash.",
-                    },
-                    triggerMessageRole: { type: "string", default: "user" },
-                },
-            },
+            title: "Search your memories by topic",
+            description: withMcpVersion(`TOPIC SEARCH for the user's own EchoMem memories across all AI tools. Always pass a non-empty query; optionally add timeFrameDays to filter that topic to recent memories. Do not pass keywords, startDate, or endDate. For exact memory-key terms use search_memories_by_keywords. For an explicit calendar range use get_memories_by_time_range. Use this tool instead of re-deriving or re-asking what the user already settled. ${recallPlanNote} ${searchBillingReplyInstruction} ${memoryCitationInstruction}${mapSection}\nReturns ranked memories only; the MCP host model writes the final answer. Current time: ${currentTime}.${updateSection}`),
+            inputSchema: semanticSearchInputSchema,
         },
         {
             name: "search_memories_by_description_semantic",
-            description: `Legacy alias for search_memories. ${recallPlanNote} ${searchBillingReplyInstruction} ${memoryCitationInstruction}`,
-            inputSchema: {
-                type: "object",
-                properties: {
-                    query: { type: "string" },
-                    limit: { type: "number", default: 10 },
-                    threshold: { type: "number", default: 0.1 },
-                    timeFrameDays: { type: "number" },
-                    triggerMessage: {
-                        type: "string",
-                        description: "Optional: the user's message that caused this recall. EchoMem stores only a redacted analytics preview and hash.",
-                    },
-                    triggerMessageRole: { type: "string", default: "user" },
-                },
-            },
+            title: "Legacy topic search (compatibility)",
+            description: `LEGACY TOPIC SEARCH alias for search_memories. Prefer search_memories. Always pass a non-empty query; timeFrameDays is only an optional recency filter. Do not pass keywords, startDate, or endDate. ${recallPlanNote} ${searchBillingReplyInstruction} ${memoryCitationInstruction}`,
+            inputSchema: semanticSearchInputSchema,
         },
         {
             name: canonicalToolNames.save,
-            description: `Save durable knowledge from this conversation into the user's private EchoMem (durable memories are extracted automatically). Call before the final response when work produced a durable decision, confirmed preference, implementation, resolved bug, commit, passing verification, release, or project milestone; this private checkpoint does not require a separate user request. Omit secrets, incidental chatter, and trivial read-only work. If the encrypted vault is locked, tell the user to run \`echomem-mcp unlock\` and never silently skip a qualifying checkpoint. Private persistence happens first. For group sharing, reuse the exact groupSharingScopeId returned by get_group_session_sharing, request_group_session_sharing, or an earlier save in this conversation. Never reuse it in another conversation or save it as memory. Each group has an independent decision under the same conversation scope; eligible memories sync automatically to every approved group, while flagged memories stay private. If a selected group has no decision yet, call request_group_session_sharing so supported hosts render a choice UI; its fallback tells you when a text Yes/No prompt is required. Silence leaves consent unset; never infer the answer. New extraction input uses the plan's weekly processing allowance; if the limit is reached, nothing is saved. passthrough=true stores the text verbatim as a session capsule. ${SAVED_MEMORY_RECEIPT_INSTRUCTION}`,
+            description: `Save durable knowledge from this conversation into the user's private EchoMem (durable memories are extracted automatically). Call before the final response when work produced a durable decision, confirmed preference, implementation, resolved bug, commit, passing verification, release, or project milestone; this private checkpoint does not require a separate user request. Omit secrets, incidental chatter, and trivial read-only work. If the encrypted vault is locked, tell the user to ${MCP_VAULT_UNLOCK_INSTRUCTION} and never silently skip a qualifying checkpoint. Private persistence happens first. For group sharing, reuse the exact groupSharingScopeId returned by get_group_session_sharing, request_group_session_sharing, or an earlier save in this conversation. Never reuse it in another conversation or save it as memory. Each group has an independent decision under the same conversation scope; eligible memories sync automatically to every approved group, while flagged memories stay private. If a selected group has no decision yet, call request_group_session_sharing so supported hosts render a choice UI; its fallback tells you when a text Yes/No prompt is required. Silence leaves consent unset; never infer the answer. New extraction input uses the plan's weekly processing allowance; if the limit is reached, nothing is saved. passthrough=true stores the text verbatim as a session capsule. ${SAVED_MEMORY_RECEIPT_INSTRUCTION}`,
             inputSchema: {
                 type: "object",
                 properties: {
@@ -426,25 +455,14 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.timeRange,
-            description: `Retrieve memories within a specific date range. ${recallPlanNote} ${memoryCitationInstruction} Current time: ${currentTime}.`,
-            inputSchema: {
-                type: "object",
-                properties: {
-                    startDate: { type: "string" },
-                    endDate: { type: "string" },
-                    limit: { type: "number", default: 50 },
-                    triggerMessage: {
-                        type: "string",
-                        description: "Optional: the user's message that caused this lookup. EchoMem stores only a redacted analytics preview and hash.",
-                    },
-                    triggerMessageRole: { type: "string", default: "user" },
-                },
-                required: ["startDate", "endDate"],
-            },
+            title: "Get your memories by date range",
+            description: `DATE-RANGE FETCH for the user's own memories. Always pass both startDate and endDate as ISO-8601 strings. Do not pass query, keywords, or timeFrameDays. For a topic with a recency filter use search_memories instead. ${recallPlanNote} ${memoryCitationInstruction} Current time: ${currentTime}.`,
+            inputSchema: timeRangeInputSchema,
         },
         {
             name: canonicalToolNames.keywords,
-            description: `Search memories based on keywords in keys field. Pass keywords as valid JSON: preferably an array of quoted strings, for example {"keywords":["flow-lab","flow.html","Rive"],"limit":8}. A comma-separated JSON string is also accepted as a compatibility fallback. Never emit bare comma-separated tokens. ${recallPlanNote} ${memoryCitationInstruction}`,
+            title: "Search your memory keys exactly",
+            description: `EXACT-KEYWORD SEARCH over the keys field of the user's own memories. Pass keywords as valid JSON: preferably an array of quoted strings, for example {"keywords":["flow-lab","flow.html","Rive"],"limit":8}. Do not pass query, timeFrameDays, startDate, or endDate. For natural-language topic search use search_memories. A comma-separated JSON string is accepted only as a compatibility fallback. Never emit bare comma-separated tokens. ${recallPlanNote} ${memoryCitationInstruction}`,
             inputSchema: {
                 type: "object",
                 properties: {
@@ -477,6 +495,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.friends,
+            title: "List accepted EchoMem friends",
             description: "Friends: list accepted EchoMem friends with each friend's public memory count. Use this before asking a specific friend by name.",
             inputSchema: {
                 type: "object",
@@ -491,7 +510,8 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.searchUsers,
-            description: "Search EchoMem users by display name/username before sending a friend request. Results include total memories, public memories, and current relationship state.",
+            title: "Search the EchoMem user directory",
+            description: "USER-DIRECTORY SEARCH by display name or username before sending a friend request. This searches people/accounts, not memory content. Results include total memories, public memories, and current relationship state.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -530,12 +550,16 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.others,
-            description: `Search public memories from accepted friends or people who share your company group. EchoMem identifies the caller from the EchoMem credential and has already excluded only that authenticated user's own memories. Present every returned owner; never filter again using a Claude account, host profile, git identity, or inferred identity. For onboarding and division-of-work questions, call get_group_context first, then use this tool for current evidence. Returned memories are recorded in memory_views for the owners. ${memoryCitationInstruction}${groupMapSection}`,
+            title: "Search teammates' and friends' memories",
+            description: `PEER-MEMORY SEARCH for public memories owned by accepted friends or company-group members—not the user's own memories. Pass query for a topic; omit it only when intentionally browsing peer memories, and optionally use target to scope a person. Do not use this tool for the user's private memories or the EchoMem user directory. EchoMem identifies the caller from the EchoMem credential and has already excluded only that authenticated user's own memories. Present every returned owner; never filter again using a Claude account, host profile, git identity, or inference. For onboarding and division-of-work questions, call get_group_context first. Returned memories are recorded in memory_views for the owners. ${memoryCitationInstruction}${groupMapSection}`,
             inputSchema: {
                 type: "object",
                 properties: {
-                    query: { type: "string" },
-                    limit: { type: "number", default: 10 },
+                    query: {
+                        type: "string",
+                        description: "Optional peer-memory topic. Omit only for an intentional broad browse; never send this field as conversation.",
+                    },
+                    limit: { type: "integer", minimum: 1, maximum: 50, default: 10 },
                     target: {
                         type: "string",
                         description: "Accessible friend or group-member user id or exact display name. Prefer this for @Name asks.",
@@ -562,9 +586,9 @@ export function listToolSpecs(opts = {}) {
                         type: "boolean",
                         description: "Defaults true. When true, returned public memories are recorded in memory_views.",
                     },
-                    kPerUser: { type: "number", default: 5 },
-                    similarityThreshold: { type: "number", default: 0.1 },
-                    timeFrameDays: { type: "number" },
+                    kPerUser: { type: "integer", minimum: 1, maximum: 50, default: 5 },
+                    similarityThreshold: { type: "number", minimum: 0, maximum: 1, default: 0.1 },
+                    timeFrameDays: { type: "integer", minimum: 1, maximum: 3650 },
                     triggerMessage: {
                         type: "string",
                         description: "Optional: the user's message that caused this public-memory search. EchoMem stores only a redacted analytics preview and hash.",
@@ -575,6 +599,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.publicMemory,
+            title: "Get one teammate or friend memory",
             description: `Fetch one public memory by id when its owner is an accepted friend or shares your company group. If the caller is not the owner, EchoMem records the access in memory_views. ${memoryCitationInstruction}`,
             inputSchema: {
                 type: "object",
@@ -892,6 +917,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.getByContext,
+            title: "Get the exact memories from a saved context",
             description: withMcpVersion(`Deterministically re-fetch the exact batch of memories saved under one contextId — no semantic search, no ranking, just that session's saved capsule. ${recallPlanNote} save_conversation returns a contextId; pass it here to pull back precisely those memories, e.g. to warm up a fresh session with what a prior session saved, or to verify the saved facts are still present. ${memoryCitationInstruction} Current time: ${currentTime}.`),
             inputSchema: {
                 type: "object",
@@ -909,11 +935,12 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.checkpointByContext,
-            description: withMcpVersion(`Rebuild a clean-context checkpoint / decision log from one EchoMem contextId. ${recallPlanNote} Use this when the user or EchoMem HUD gives you a contextId for a renewed coding session and you need the session handoff, not a raw memory dump. It deterministically fetches that context and formats it as orientation state: decisions, carryover, constraints, and checkpoints. ${memoryCitationInstruction} Current time: ${currentTime}.`),
+            title: "Rebuild a checkpoint from a saved context",
+            description: withMcpVersion(`Rebuild a clean-context checkpoint / decision log from one EchoMem contextId. ${recallPlanNote} Use this when the user or EchoMem returns a contextId for a renewed coding session and you need the session handoff, not a raw memory dump. It deterministically fetches that context and formats it as orientation state: decisions, carryover, constraints, and checkpoints. ${memoryCitationInstruction} Current time: ${currentTime}.`),
             inputSchema: {
                 type: "object",
                 properties: {
-                    contextId: { type: "string", description: "The EchoMem contextId shown by the HUD or returned by save_conversation / Renew session." },
+                    contextId: { type: "string", description: "The EchoMem contextId returned by save_conversation or Renew session." },
                     limit: { type: "number", default: 100 },
                     triggerMessage: {
                         type: "string",
@@ -931,7 +958,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.updateStatus,
-            description: `Check whether this installed EchoMem MCP bridge is behind the latest published npm version. Works without login, uploads no user transcript, and normal background checks are cached so EchoMem does not hit npm on every startup. If it reports an update, tell the user and offer to run the returned update command; after updating, the user must start a new agent/MCP session.${updateSection}`,
+            description: `Check whether this installed EchoMem MCP bridge is behind the latest version. Works without login, uploads no user transcript, and normal background checks are cached. ${MCP_DESKTOP_MANAGED ? "Echo Desktop owns updates for this runtime; direct the user back to the desktop app." : "If it reports an update, tell the user and offer to run the returned update command."} After updating, the user must start a new agent/MCP session.${updateSection}`,
             inputSchema: {
                 type: "object",
                 properties: {
@@ -945,7 +972,7 @@ export function listToolSpecs(opts = {}) {
         },
         {
             name: canonicalToolNames.contextHealth,
-            description: "Show the current local Codex/Claude context-health score as markdown: clean percentage, tracked lower-bound dead-weight, redundant reads, source client, and token-count source. Use when the user asks about the context HUD, dirty context, context pollution, whether cleanup is worth it, or wants an in-chat fallback to the passive HUD. This reads local agent logs only and needs no login.",
+            description: "Show the current local Codex/Claude context-health score as markdown: clean percentage, tracked lower-bound dead-weight, redundant reads, source client, and token-count source. Use when the user asks about dirty context, context pollution, or whether cleanup is worth it. This on-demand tool reads local agent logs only and needs no login.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -971,19 +998,6 @@ export function listToolSpecs(opts = {}) {
                 },
             },
         },
-        {
-            name: "search_memories_by_time_range",
-            description: "Legacy alias for get_memories_by_time_range.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    startDate: { type: "string" },
-                    endDate: { type: "string" },
-                    limit: { type: "number", default: 50 },
-                },
-                required: ["startDate", "endDate"],
-            },
-        },
     ];
     return tools.map(decorateLocalToolSpec);
 }

package/package.json

@@ -1,13 +1,16 @@
 {
   "name": "@echomem/mcp",
-  "version": "1.4.34",
-  "description": "EchoMem MCP bridge: cloud-first memory tools, local context HUD, and the Agent Doctor workspace forensics report (cost ledger + 3D repo city)",
+  "version": "1.4.36",
+  "description": "EchoMem MCP bridge: cloud-first memory tools and the Agent Doctor workspace forensics report (cost ledger + 3D repo city)",
   "main": "dist/index.js",
   "type": "module",
+  "echoDesktop": {
+    "minimumVersion": "1.0.0",
+    "runtimeLayout": 1
+  },
   "bin": {
     "mcp": "dist/index.js",
-    "echomem-mcp": "dist/index.js",
-    "echomem-hud": "dist/hud/cli.js"
+    "echomem-mcp": "dist/index.js"
   },
   "files": [
     "dist",
@@ -23,22 +26,24 @@
     "smoke": "node smoke.mjs",
     "preview:extraction": "npm run build && node scripts/preview-extraction.mjs",
     "stress:long-history": "npm run build && node scripts/stress-long-history.mjs",
+    "stress:long-claude-history": "npm run build && node scripts/stress-long-claude-history.mjs",
     "test:artifact": "npm run build && node test/package-artifact.test.mjs",
     "test:registry": "node test/registry-artifact.test.mjs",
     "test:registry-ui": "npm run build && node test/registry-ui.test.mjs",
     "test:ui": "npm run build && node test/setup-ui.test.mjs",
+    "test:onboarding-resilience": "npm run build && node test/onboarding-resilience.test.mjs",
     "test:billing-ui": "npm run build && node test/setup-ui.test.mjs billing",
-    "test": "npm run build && node test/local-data-paths.test.mjs && node test/crypto.test.mjs && node test/integration.test.mjs && node test/local-auth.test.mjs && node test/retrieval-only.test.mjs && node test/no-restart.test.mjs && node test/report.test.mjs && node test/forensics.test.mjs && node test/canonical-golden.test.mjs && node test/tools.test.mjs && node test/group-map.test.mjs && node test/update-check.test.mjs && node test/delete.test.mjs && node test/low-touch-tools.test.mjs && node test/migrate.test.mjs && node test/restart-recovery.test.mjs && node test/hud.test.mjs && node test/save-checkpoint-hook.test.mjs",
+    "test": "npm run build && node test/local-data-paths.test.mjs && node test/crypto.test.mjs && node test/integration.test.mjs && node test/onboarding-resilience.test.mjs && node test/local-auth.test.mjs && node test/retrieval-only.test.mjs && node test/no-restart.test.mjs && node test/report.test.mjs && node test/forensics.test.mjs && node test/canonical-golden.test.mjs && node test/tools.test.mjs && node test/group-map.test.mjs && node test/update-check.test.mjs && node test/delete.test.mjs && node test/low-touch-tools.test.mjs && node test/migrate.test.mjs && node test/restart-recovery.test.mjs && node test/save-checkpoint-hook.test.mjs",
     "prepack": "npm run build && node scripts/bundle-city.mjs"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.1",
     "axios": "^1.6.8",
-    "electron": "41.7.1",
     "zod": "^3.22.4"
   },
   "devDependencies": {
     "@types/node": "^20.11.0",
+    "electron": "41.7.1",
     "tsx": "^4.22.4",
     "typescript": "^5.3.3"
   }