@echomem/mcp 1.4.39 → 1.4.41

package/dist/v1-contract.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { MCP_DESKTOP_MANAGED, MCP_VAULT_UNLOCK_INSTRUCTION, MEMORY_CITATION_INSTRUCTION, SAVED_MEMORY_RECEIPT_INSTRUCTION, withMcpVersion, } from "./package-metadata.js";
 export const canonicalToolNames = {
+    bindSourceSession: "bind_source_session",
     search: "search_memories",
     save: "save_conversation",
     timeRange: "get_memories_by_time_range",
@@ -59,6 +60,7 @@ const READ_ONLY_TOOL_NAMES = new Set([
     canonicalToolNames.recompose,
 ]);
 const IDEMPOTENT_WRITE_TOOL_NAMES = new Set([
+    canonicalToolNames.bindSourceSession,
     canonicalToolNames.recordCitations,
     canonicalToolNames.setGroupSessionSharing,
     canonicalToolNames.updateGroupProfile,
@@ -77,6 +79,7 @@ const REQUIRES_USER_INTERACTION_TOOL_NAMES = new Set([
     canonicalToolNames.delete,
 ]);
 const ALWAYS_LOAD_TOOL_NAMES = new Set([
+    canonicalToolNames.bindSourceSession,
     canonicalToolNames.search,
     canonicalToolNames.save,
 ]);
@@ -187,6 +190,9 @@ export const saveConversationSchema = z.object({
     }))
         .optional(),
 });
+export const bindSourceSessionSchema = z.object({
+    bindingToken: z.string().uuid(),
+});
 const dateBoundarySchema = z.string().trim().min(1).refine((value) => Number.isFinite(Date.parse(value)), "Expected an ISO-8601 date or date-time string");
 export const timeRangeSchema = z.object({
     ...triggerMetadataSchema,
@@ -403,6 +409,22 @@ export function listToolSpecs(opts = {}) {
         required: ["startDate", "endDate"],
     };
     const tools = [
+        {
+            name: canonicalToolNames.bindSourceSession,
+            title: "Bind this agent conversation to its source session",
+            description: withMcpVersion("Compatibility fallback for clients where EchoMem's automatic SessionStart binding is unavailable or reports that the session is unbound. Generate a fresh random UUID for bindingToken and pass only that token. EchoMem finds this exact tool call in the local host JSONL, derives the real provider session ID itself, and idempotently binds the authenticated backend context. Never reuse a bindingToken, guess a session ID, or copy a token between conversations. After success, later saves, recalls, citations, sharing decisions, and MCP activity from this bridge are attached to the returned context automatically. Do not call it routinely when automatic binding is active."),
+            inputSchema: {
+                type: "object",
+                properties: {
+                    bindingToken: {
+                        type: "string",
+                        format: "uuid",
+                        description: "A fresh random UUID generated only for this invocation. The local bridge verifies it inside the current host JSONL.",
+                    },
+                },
+                required: ["bindingToken"],
+            },
+        },
         {
             name: canonicalToolNames.search,
             title: "Search your memories by topic",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@echomem/mcp",
-  "version": "1.4.39",
+  "version": "1.4.41",
   "description": "EchoMem MCP bridge: cloud-first memory tools and the Agent Doctor workspace forensics report (cost ledger + 3D repo city)",
   "main": "dist/index.js",
   "type": "module",
@@ -33,7 +33,7 @@
     "test:ui": "npm run build && node test/setup-ui.test.mjs",
     "test:onboarding-resilience": "npm run build && node test/onboarding-resilience.test.mjs",
     "test:billing-ui": "npm run build && node test/setup-ui.test.mjs billing",
-    "test": "npm run build && node test/local-data-paths.test.mjs && node test/crypto.test.mjs && node test/integration.test.mjs && node test/onboarding-resilience.test.mjs && node test/local-auth.test.mjs && node test/retrieval-only.test.mjs && node test/no-restart.test.mjs && node test/report.test.mjs && node test/forensics.test.mjs && node test/canonical-golden.test.mjs && node test/tools.test.mjs && node test/group-map.test.mjs && node test/update-check.test.mjs && node test/headless-runtime.test.mjs && node test/claude-code-config.test.mjs && node test/delete.test.mjs && node test/low-touch-tools.test.mjs && node test/migrate.test.mjs && node test/restart-recovery.test.mjs && node test/save-checkpoint-hook.test.mjs",
+    "test": "npm run build && node test/source-session.test.mjs && node test/source-session-hook.test.mjs && node test/local-data-paths.test.mjs && node test/crypto.test.mjs && node test/integration.test.mjs && node test/onboarding-resilience.test.mjs && node test/local-auth.test.mjs && node test/retrieval-only.test.mjs && node test/no-restart.test.mjs && node test/report.test.mjs && node test/forensics.test.mjs && node test/canonical-golden.test.mjs && node test/tools.test.mjs && node test/group-map.test.mjs && node test/update-check.test.mjs && node test/headless-runtime.test.mjs && node test/claude-code-config.test.mjs && node test/delete.test.mjs && node test/low-touch-tools.test.mjs && node test/migrate.test.mjs && node test/restart-recovery.test.mjs && node test/save-checkpoint-hook.test.mjs",
     "prepack": "npm run build && node scripts/bundle-city.mjs"
   },
   "dependencies": {

package/templates/echomem-recall.md

@@ -6,6 +6,9 @@
 
 This project has EchoMem connected — the user's long-term memory across all their AI tools.
 
+- EchoMem's local SessionStart hook automatically binds new Codex and Claude Code conversations to
+  their real provider session. Call `bind_source_session` with a fresh random UUID only as a
+  compatibility fallback when automatic binding is unavailable or reports that the session is unbound.
 - **At the start of any non-trivial task**, call `search_memories` first to recall the user's
   prior decisions, preferences, and constraints before planning or writing code. Don't re-derive
   things they've already decided.