@echomem/mcp 1.4.9 → 1.4.10

package/dist/setup.js

@@ -765,6 +765,12 @@ function repoCityArtifactsRoot() {
 function serveRepoCityAsset(reqPath, res) {
     const root = repoCityArtifactsRoot();
     const rel = reqPath === "/city" || reqPath === "/city/" ? "echo-ai-city-only.html" : decodeURIComponent(reqPath.slice("/city/".length));
+    // Archives stay in the checkout for recovery, but must never become a localhost UI surface.
+    const normalizedRel = rel.replace(/\\/g, "/");
+    if (normalizedRel === "archive" || normalizedRel.startsWith("archive/")) {
+        res.writeHead(404).end("not found");
+        return true;
+    }
     const filePath = path.resolve(root, rel);
     const rootWithSep = root.endsWith(path.sep) ? root : root + path.sep;
     if (!filePath.startsWith(rootWithSep)) {
@@ -1062,7 +1068,10 @@ function publicRunningForensicProgress(value) {
  * import session.
  */
 export function startCallbackServer(opts = {}) {
-    const timeoutMs = opts.timeoutMs ?? 300_000;
+    const timeoutMs = opts.timeoutMs ?? 15 * 60_000;
+    const approvalTimeoutLabel = timeoutMs >= 60_000
+        ? `${Math.round(timeoutMs / 60_000)} minutes`
+        : `${Math.ceil(timeoutMs / 1000)} seconds`;
     const dashboardTimeoutMs = 4 * 60 * 60 * 1000;
     const expectedNonce = opts.nonce;
     const scanId = opts.scanId ?? randomUUID();
@@ -1106,7 +1115,7 @@ export function startCallbackServer(opts = {}) {
             const waitMs = onToken.settled() ? dashboardTimeoutMs : timeoutMs;
             timer = setTimeout(() => {
                 if (!onToken.settled()) {
-                    onToken.reject(new Error("timed out waiting for browser approval"));
+                    onToken.reject(new Error(`browser approval did not finish in ${approvalTimeoutLabel}`));
                 }
                 else if (!decision.settled()) {
                     decision.resolve("timeout");
@@ -1120,6 +1129,7 @@ export function startCallbackServer(opts = {}) {
                 return void text(res, 403, "bad nonce");
             if (!token)
                 return void text(res, 400, "missing token");
+            console.log(`[${new Date().toISOString()}] Browser approval callback received.`);
             const firstToken = !onToken.settled();
             connected = true;
             const setupPath = `/setup?nonce=${encodeURIComponent(nonce || "")}&connected=1`;
@@ -1634,8 +1644,10 @@ async function cmdInit(flags) {
         await cmdSetupHud(flags);
     // 3. Start onboarding — opens the browser dashboard (scan → connect → extraction) and waits there.
     console.log("");
-    if (!flags["skip-login"] && !flags["no-login"])
-        await cmdLogin(flags);
+    if (!flags["skip-login"] && !flags["no-login"] && !await cmdLogin(flags)) {
+        console.log("\nEchoMem is configured, but this device was not connected. Restart EchoMem and use the new page it opens.");
+        return;
+    }
     console.log("");
     console.log("🎉 EchoMem is ready.");
     console.log("   • MCP memory is configured for every coding agent installed on this machine.");
@@ -1750,7 +1762,7 @@ async function cmdLogin(flags) {
         });
         if (!ok)
             process.exitCode = 1;
-        return;
+        return ok;
     }
     // Browser path: open a localhost dashboard. It briefly leaves for hosted auth, then returns here
     // after the web page has delivered the token+key to the callback. The nonce gates every local route.
@@ -1799,6 +1811,7 @@ async function cmdLogin(flags) {
     srv.setAuthUrl(connectUrl, switchAccountUrl.toString());
     openBrowser(localSetupUrl);
     console.log(`If it didn't open, visit:\n  ${localSetupUrl}\n`);
+    console.log("Waiting for browser approval for up to 15 minutes…");
     // Scan-first: build the local forensic "Context Doctor" report off-thread so the page shows it
     // BEFORE the user connects an account (the scan is local-only; nothing leaves the machine).
     buildForensicReportOffThread((progress) => {
@@ -1846,14 +1859,14 @@ async function cmdLogin(flags) {
     }
     catch (e) {
         srv.close();
-        console.error(`❌ ${e?.message || e}. You can instead run: echomem-mcp login --token ec_… [--passphrase <vault pass>]`);
+        console.error(`❌ ${e?.message || e}. Restart EchoMem and use the new page it opens.`);
         process.exitCode = 1;
-        return;
+        return false;
     }
     if (!await verifyAndPrint({ token, key })) {
         srv.close();
         process.exitCode = 1;
-        return;
+        return false;
     }
     let disc = null;
     let exactDiscovery = Promise.resolve(null);
@@ -2186,7 +2199,7 @@ async function cmdLogin(flags) {
             sendMigrate({ error: "IMPORT_START_FAILED", message: "Local session discovery did not finish." }, 500);
             srv.close();
             process.exitCode = 1;
-            return;
+            return true;
         }
         activeJobCount = exact.pending.length;
         const updateProgress = (patch) => {
@@ -2218,7 +2231,7 @@ async function cmdLogin(flags) {
                 sendMigrate({ error: "NO_PENDING_SESSIONS" }, 409);
                 srv.close();
                 console.log("Setup complete — no unprocessed local conversations to extract.");
-                return;
+                return true;
             }
             updateProgress({ status: "starting", running: 0, queued: exact.pending.length, latest: "Creating import session." });
             // Plan caps limit how many conversations one import session accepts (IMPORT_LIMIT_EXCEEDED →
@@ -2332,6 +2345,7 @@ async function cmdLogin(flags) {
         console.log("Setup complete — run `echomem-mcp migrate` later to back-fill your history.");
         srv.close();
     }
+    return true;
 }
 async function cmdUnlock(flags) {
     const store = new KeyStore();

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@echomem/mcp",
-  "version": "1.4.9",
+  "version": "1.4.10",
   "description": "EchoMem MCP bridge: cloud-first memory tools, local context HUD, and the Agent Doctor workspace forensics report (cost ledger + 3D repo city)",
   "main": "dist/index.js",
   "type": "module",
   "bin": {
-    "mcp": "./dist/index.js",
-    "echomem-mcp": "./dist/index.js",
-    "echomem-hud": "./dist/hud/cli.js"
+    "mcp": "dist/index.js",
+    "echomem-mcp": "dist/index.js",
+    "echomem-hud": "dist/hud/cli.js"
   },
   "files": [
     "dist",