@echomem/mcp 1.4.44 → 1.4.45

package/dist/setup-page/client-lifecycle.js

@@ -1,6 +1,8 @@
 // Generated by splitting the previous inline setup page. Keep this source readable: it is emitted into one browser IIFE.
-export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- local-history permission and setup routing ---------- */
-      function renderLocalHistoryConsent() {
+export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- scan-first poll for the forensic report ---------- */
+      function renderLocalScanConsent() {
+        setScanMode(false);
+        setCityMode(false);
         setExtractMode(false);
         setReadyMode(true);
         setHead("Local file access", "Consent");
@@ -12,15 +14,15 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- local
               '<img class="mvpConsentEcho" src="/hud-assets/echo-face-cutout.png" alt="" />' +
               '<div class="mvpConsentPitch">' +
                 '<h2 id="mvpConsentTitle">Start with the context you’ve already built.</h2>' +
-                '<p class="mvpConsentIntro">Choose which local coding conversations to bring into EchoMem.</p>' +
+                '<p class="mvpConsentIntro">See what you keep re-explaining—and what’s worth carrying into future sessions.</p>' +
               '</div>' +
             '</div>' +
-            '<p class="mvpConsentTrustLine">Your history stays on this computer until you choose what to import. ' + dataHandlingLink("Data handling") + '</p>' +
-            '<button type="button" class="primary mvpPrimary" id="allowLocalHistory">Continue <span aria-hidden="true">→</span></button>' +
+            '<p class="mvpConsentTrustLine">Your history stays on your Mac until you choose what to import. ' + dataHandlingLink("Data handling") + '</p>' +
+            '<button type="button" class="primary mvpPrimary" id="allowLocalScan">Build my private report <span aria-hidden="true">→</span></button>' +
             '<p class="consentFine" id="consentStatus" role="status" aria-live="polite"></p>' +
           '</section>';
-        var allow = document.getElementById("allowLocalHistory");
-        if (allow) allow.onclick = allowLocalHistory;
+        var allow = document.getElementById("allowLocalScan");
+        if (allow) allow.onclick = allowLocalScan;
       }
       function setConsentStatus(message, tone) {
         var node = document.getElementById("consentStatus");
@@ -29,26 +31,18 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- local
           node.classList.toggle("is-required", tone === "required");
         }
       }
-      function continueAfterLocalHistoryConsent() {
-        if (connected) {
-          try { void refreshBillingStatus(); } catch (_) {}
-          void waitForStats();
-          return;
-        }
-        rememberSetupPlanChoice("");
-        renderLocalLogin("");
-      }
-      async function allowLocalHistory() {
-        var allow = document.getElementById("allowLocalHistory");
+      async function allowLocalScan() {
+        var allow = document.getElementById("allowLocalScan");
         if (allow) allow.disabled = true;
-        setConsentStatus("Saving your choice...");
+        setConsentStatus("Starting local scan...");
         try {
-          await postJson("/local-history-consent", { allowed: true }, 5000);
+          await postJson("/report-consent", { allowed: true }, 5000);
           localHistoryConsentGranted = true;
-          continueAfterLocalHistoryConsent();
+          await showReport();
         } catch (error) {
           // The localhost bridge may have accepted consent even if the browser loses the POST
-          // response while it swaps connections. Recover from the server's authoritative state.
+          // response while it swaps connections. Recover from the server's authoritative state
+          // instead of leaving the user forever on "Starting local scan...".
           try {
             var configResponse = await fetchWithTimeout(
               "/config?nonce=" + encodeURIComponent(nonce),
@@ -58,14 +52,80 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- local
             var config = configResponse.ok ? await configResponse.json() : null;
             if (config && config.consentGranted === true) {
               localHistoryConsentGranted = true;
-              continueAfterLocalHistoryConsent();
+              await showReport();
               return;
             }
           } catch (_) {}
-          if (allow) allow.disabled = false;
-          setConsentStatus(error && error.message ? error.message : "Could not save local-history access.", "required");
+          renderReportIssue("CONSENT_SAVE_FAILED", error && error.message ? error.message : "Could not start the local scan.");
         }
       }
+      async function showReport() {
+        if (reportPollStarted) return;
+        reportPollStarted = true;
+        if (!report) renderLoading();
+        try {
+          var fails = 0;
+          for (;;) {
+            if (decisionMade) return;
+            var res;
+            try {
+              res = await fetchWithTimeout("/report?nonce=" + encodeURIComponent(nonce), { credentials: "omit", cache: "no-store" }, 12000);
+            } catch (_) {
+              // Only a RUN of consecutive failures is a real bridge problem. A long scan that keeps
+              // answering valid 202 envelopes must never trip this.
+              fails++;
+              if (fails >= 8) { renderBridgeIssue(); return; }
+              await sleep(700);
+              continue;
+            }
+            if (res.status === 403) {
+              renderReportIssue("SETUP_SESSION_INVALID", "This setup link is missing or has an invalid local session nonce.");
+              return;
+            }
+            var envelope;
+            try {
+              envelope = await res.json();
+            } catch (_) {
+              renderReportIssue("REPORT_RESPONSE_INVALID", "The local bridge returned a report response that could not be decoded.");
+              return;
+            }
+            try {
+              validateProductionReportEnvelope(envelope);
+            } catch (_) {
+              renderReportIssue("REPORT_SCHEMA_INVALID", "The local report failed its provenance or ledger consistency checks.");
+              return;
+            }
+            if (res.status === 202 && envelope.kind === "scanning") {
+              fails = 0;
+              reportEnvelope = envelope;
+              scheduleReportToCity();
+              renderLoading();
+              await sleep(700);
+              continue;
+            }
+            if (res.status === 200 && envelope.kind === "empty") {
+              renderEmptyReport();
+              return;
+            }
+            if (res.status === 200 && envelope.kind === "ready") {
+              reportEnvelope = envelope;
+              report = envelope.report;
+              try {
+                renderForensicReport();
+              } catch (_) {
+                renderReportIssue("RENDER_FAILED", "Your validated local report could not be rendered safely.");
+              }
+              return;
+            }
+            if (envelope.kind === "failed") {
+              renderReportIssue(envelope.error.code, envelope.error.message);
+              return;
+            }
+            renderReportIssue("REPORT_STATE_MISMATCH", "The local bridge returned a report state that did not match its HTTP status.");
+            return;
+          }
+        } finally { reportPollStarted = false; }
+      }
 
       window.addEventListener("message", function (event) {
         if (event.origin !== location.origin) return;
@@ -80,22 +140,27 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- local
           rememberSetupPlanChoice("");
           try { void refreshBillingStatus(); } catch (_) {}
           void waitForStats();
+        } else if (data.type === "echomem:city-ready" && data.nonce === nonce) {
+          scheduleReportToCity();
+        } else if (data.type === "echomem:connect-click") {
+          onConnectClick();
         }
       });
       async function init() {
         if (!nonce) throw new Error("Missing setup nonce. Re-run echomem-mcp init.");
+        // Older builds cached a report under the nonce. It is never an authority now; the current
+        // server envelope and scan identity are the only inputs allowed to unlock personalized UI.
+        try { sessionStorage.removeItem("echomem:setup-report:" + nonce); } catch (_) {}
         var configLoaded = false;
         var consentRequired = true;
         var consentGranted = false;
+        // Learn the connection state and server-side consent gate before routing.
         try {
           var cfg = await getJson("/config");
           configLoaded = true;
           connected = !!cfg.connected;
           setupFlow = cfg.flow === "login" ? "login" : "onboarding";
           workspacePath = cfg.workspacePath || workspacePath;
-          setupPlatform = cfg.platform || setupPlatform;
-          canOpenClaudeDesktop = !!(cfg.capabilities && cfg.capabilities.openClaudeDesktop);
-          canOpenAgentSessions = !!(cfg.capabilities && cfg.capabilities.openAgentSessions);
           consentRequired = cfg.consentRequired !== false;
           consentGranted = cfg.consentGranted === true;
           localHistoryConsentGranted = consentGranted;
@@ -108,27 +173,32 @@ export const SETUP_PAGE_CLIENT_LIFECYCLE = String.raw `      /* ---------- local
         if (!connected) rememberSetupPlanChoice("");
         if (params.get("connected") === "1") {
           if (!configLoaded || (consentRequired && !consentGranted)) {
-            renderLocalHistoryConsent();
+            renderLocalScanConsent();
             setConsentStatus("Local history access is required before you can connect EchoMem or continue setup.", "required");
             return;
           }
           connected = true;
           if (notifyOpenerConnected()) {
+            // Popup flow: hand the main tab back control, then this popup closes.
             setHead("EchoMem connected", "Done");
             app.className = "notice";
             app.innerHTML = '<h2 style="color:#203820">This device is connected</h2><p style="margin-top:10px">Returning to the local setup page...</p>';
+            // Fallback: if window.close() was blocked (auth opened as a tab, or the browser refused),
+            // this window would otherwise hang on "Returning..." forever. After a beat, take over here
+            // so the user always lands on the dashboard instead of a dead page.
             setTimeout(function () { if (!window.closed) void waitForStats(); }, 1500);
           } else {
+            // Same-tab fallback (popup was blocked): go straight to the extraction dashboard.
             try { void refreshBillingStatus(); } catch (_) {}
             void waitForStats();
           }
           return;
         }
         if (consentGranted) {
-          continueAfterLocalHistoryConsent();
+          await showReport();
           return;
         }
-        renderLocalHistoryConsent();
+        renderLocalScanConsent();
       }
       __ECHO_SETUP_STARTUP__;
 `;