@llmnesia/mcp 0.1.10 → 0.1.13

package/README.md

@@ -48,13 +48,39 @@ The installer:
 1. sets up the native host that bridges the browser extension to your local
    corpus,
 2. copies the server into `~/.llmnesia/bin` so it has a permanent home,
-3. sets up the supported desktop AI apps (Claude Code, Claude Desktop, Cursor,
+3. sets up the supported desktop AI apps (Claude Code, Cursor,
    and Codex/ChatGPT), and
 4. registers that copy using the client's own CLI where available, or with an
    automatic backup before editing its documented user config. It prepares all
    of those standard config paths, so an app installed later does not require
    running setup again.
 
+Claude Desktop on Windows does not provide a supported API for third-party
+installers to add a local desktop extension. LLMnesia therefore leaves any
+existing Claude configuration untouched rather than claiming that Claude has
+been connected.
+
+### Claude Desktop on Windows (current one-time manual step)
+
+Until LLMnesia is available in Claude's extension directory, Claude Desktop on
+Windows has one extra, manual step. First run `install` above so the local
+browser bridge and corpus exist. Then download the official LLMnesia
+`llmnesia.mcpb` desktop-extension file from LLMnesia and use Claude Desktop's
+**Settings → Extensions → Install extension** flow to install it. Fully quit
+and reopen Claude Desktop afterwards.
+
+This is deliberately separate from the npm command: Claude does not provide a
+supported Windows API for another installer to silently add an `.mcpb`
+extension. The command therefore never edits Claude's internal extension state
+or reports a false success. The packaged extension itself is read-only: it can
+search, list, and read the local corpus but cannot modify it.
+
+The future Claude Directory listing is a convenience distribution route, not a
+dependency for the general LLMnesia release. It will replace this one manual
+Claude step with Claude's own in-app install button if Anthropic selects the
+extension. See [`docs/CLAUDE_DESKTOP_RELEASE_PLAN.md`](../docs/CLAUDE_DESKTOP_RELEASE_PLAN.md)
+for the release and directory-submission plan.
+
 The `install` command is the approval to perform those setup steps. It does not
 interrupt setup with a separate prompt for every detected app, and it never
 prints existing client configurations or their credentials.
@@ -121,7 +147,7 @@ received data — check it before concluding a chat does not exist.
 | Client | How `install` wires it |
 | --- | --- |
 | Claude Code | Runs `claude mcp add --scope user` with the absolute Node and installed runtime paths when available. Otherwise it writes the documented user-scope `~/.claude.json` entry, so Windows users do not need the `claude` command on PATH. |
-| Claude Desktop | Edits `claude_desktop_config.json` at the standard OS-specific path, preparing it in advance if Claude Desktop is installed later. |
+| Claude Desktop | macOS uses the working local JSON registration. On Windows, run `install` for browser sync, then install the official `llmnesia.mcpb` once in Claude Desktop; Claude exposes no supported external installation API for custom desktop extensions. |
 | Cursor | Edits `~/.cursor/mcp.json`, preparing it in advance if Cursor is installed later. |
 | Codex / ChatGPT desktop | Runs `codex mcp add` with the absolute runtime paths when available. If the bundled CLI is unavailable, the installer safely edits `~/.codex/config.toml` itself and backs up existing settings first, including preparing it for a later installation. Read-only LLMnesia tools are configured to run without repeated approval prompts; writes still ask. |
 | Others (Windsurf, Zed, LM Studio, …) | Prints the generic stdio block for you to paste. |
@@ -178,6 +204,23 @@ llmnesia-mcp --version     # print the installed version
 
 Questions and bug reports: [hello@llmnesia.com](mailto:hello@llmnesia.com).
 
+## Privacy Policy
+
+The MCP server reads and writes only the LLMnesia corpus stored on the user's
+own computer. It does not upload conversation content, titles, URLs, prompts,
+responses, or search queries to LLMnesia or to any third party, and it makes no
+analytics or advertising requests of its own.
+
+The browser extension separately sends limited, non-content product analytics
+to PostHog. Conversation data and MCP searches are excluded. The complete
+policy explains collection, local storage, third-party processing, retention,
+deletion, and contact details:
+[LLMnesia Privacy Policy](https://www.llmnesia.com/privacy-policy).
+
+The local MCP corpus remains on the device until the user deletes it. Running
+`uninstall` deliberately leaves that corpus intact so uninstalling the helper
+cannot accidentally destroy the user's history.
+
 ## License
 
 MIT — see [LICENSE](./LICENSE).

package/dist/{chunk-LA3BU5ZR.js → chunk-7DAYOGB6.js}

@@ -38,7 +38,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/version.ts
-var VERSION = true ? "0.1.10" : "0.0.0-dev";
+var VERSION = true ? "0.1.13" : "0.0.0-dev";
 
 export {
   __require,

package/dist/{cli-VUTW2WGY.js → cli-OJM47LQR.js}

@@ -15,7 +15,7 @@ import {
   __commonJS,
   __require,
   __toESM
-} from "./chunk-LA3BU5ZR.js";
+} from "./chunk-7DAYOGB6.js";
 
 // ../node_modules/isexe/windows.js
 var require_windows = __commonJS({
@@ -3258,12 +3258,20 @@ async function registerClients(options) {
     )
   );
   if (claudeDesktop) {
-    results.push(
-      await safe(
-        "Claude Desktop",
-        () => registerJsonClient("Claude Desktop", claudeDesktop, options.serve, options.confirm, now, prepareMissing, false, false)
-      )
-    );
+    if (osPlatform2 === "win32") {
+      results.push({
+        client: "Claude Desktop",
+        action: "skipped",
+        detail: "Automatic Claude Desktop setup is not available on Windows; existing configuration was left unchanged."
+      });
+    } else {
+      results.push(
+        await safe(
+          "Claude Desktop",
+          () => registerJsonClient("Claude Desktop", claudeDesktop, options.serve, options.confirm, now, prepareMissing, false, false)
+        )
+      );
+    }
   }
   results.push(
     await safe("Cursor", () => registerJsonClient("Cursor", cursor, options.serve, options.confirm, now, prepareMissing))
@@ -3849,7 +3857,7 @@ function summarizeClientRegistrations(results) {
   return { connected, prepared, errors };
 }
 function formatInstallSuccess() {
-  return "\nSetup complete.\nFully close and reopen your browser and any desktop AI app you use.\nLLMnesia will be available in each supported desktop AI app you use.\nLLMnesia Settings will confirm when your history is ready.\n";
+  return "\nSetup complete.\nFully close and reopen your browser and any desktop AI app you use.\nLLMnesia will be available in the desktop AI apps connected during setup.\nLLMnesia Settings will confirm when your history is ready.\n";
 }
 async function runInstall(positionals, options, flags) {
   let hadProblems = false;

package/dist/cli.js

@@ -3,7 +3,7 @@ import { createRequire as __llmnesiaCreateRequire } from "node:module";
 const require = __llmnesiaCreateRequire(import.meta.url);
 import {
   VERSION
-} from "./chunk-LA3BU5ZR.js";
+} from "./chunk-7DAYOGB6.js";
 
 // src/nodeDownload.ts
 var NODE_DOWNLOAD_URLS = {
@@ -141,7 +141,7 @@ async function bootstrap() {
     await guideUnsupportedNodeVersion(process.versions.node);
     return 1;
   }
-  const { main } = await import("./cli-VUTW2WGY.js");
+  const { main } = await import("./cli-OJM47LQR.js");
   return main();
 }
 bootstrap().then((code) => {

package/dist/mcp.js

@@ -13,7 +13,7 @@ import {
   __commonJS,
   __export,
   __toESM
-} from "./chunk-LA3BU5ZR.js";
+} from "./chunk-7DAYOGB6.js";
 
 // ../node_modules/ajv/dist/compile/codegen/code.js
 var require_code = __commonJS({
@@ -3211,8 +3211,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path) {
-      let input = path;
+    function removeDotSegments(path2) {
+      let input = path2;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -3464,8 +3464,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path && path !== "/" ? path : void 0;
+        const [path2, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path2 && path2 !== "/" ? path2 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -7375,8 +7375,8 @@ function getErrorMap() {
 
 // ../node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path, errorMaps, issueData } = params;
-  const fullPath = [...path, ...issueData.path || []];
+  const { data, path: path2, errorMaps, issueData } = params;
+  const fullPath = [...path2, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -7492,11 +7492,11 @@ var errorUtil;
 
 // ../node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path, key) {
+  constructor(parent, value, path2, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path;
+    this._path = path2;
     this._key = key;
   }
   get path() {
@@ -11133,10 +11133,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj, path) {
-  if (!path)
+function getElementAtPath(obj, path2) {
+  if (!path2)
     return obj;
-  return path.reduce((acc, key) => acc?.[key], obj);
+  return path2.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -11456,11 +11456,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path, issues) {
+function prefixIssues(path2, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path);
+    iss.path.unshift(path2);
     return iss;
   });
 }
@@ -14871,11 +14871,11 @@ function normalizeObjectSchema(schema) {
   }
   return void 0;
 }
-function getDotPath(path) {
-  if (path.length === 0) {
+function getDotPath(path2) {
+  if (path2.length === 0) {
     return "object root";
   }
-  return path.reduce((acc, seg, index) => {
+  return path2.reduce((acc, seg, index) => {
     if (index === 0) {
       return String(seg);
     }
@@ -21131,6 +21131,11 @@ var StdioServerTransport = class {
   }
 };
 
+// src/mcp.ts
+import { realpathSync } from "fs";
+import { fileURLToPath } from "url";
+import path from "path";
+
 // src/saveSchema.ts
 import { createHash } from "crypto";
 var saveMessageSchema = external_exports.object({
@@ -21360,6 +21365,51 @@ var CompanionService = class _CompanionService {
 function noop() {
 }
 
+// src/lazyResource.ts
+var ResourcePreparingError = class extends Error {
+  constructor() {
+    super("Resource is still preparing");
+    this.name = "ResourcePreparingError";
+  }
+};
+var LazyResource = class {
+  constructor(open) {
+    this.open = open;
+  }
+  open;
+  resource = null;
+  failure;
+  completion = null;
+  start() {
+    if (this.completion) return;
+    this.completion = Promise.resolve().then(() => this.open()).then(
+      (resource) => {
+        this.resource = resource;
+      },
+      (error2) => {
+        this.failure = error2;
+      }
+    );
+  }
+  async get(waitMs) {
+    this.start();
+    if (this.resource) return this.resource;
+    let timeout;
+    await Promise.race([
+      this.completion,
+      new Promise((resolve) => {
+        timeout = setTimeout(resolve, waitMs);
+      })
+    ]);
+    if (timeout) clearTimeout(timeout);
+    if (this.resource) return this.resource;
+    if (this.failure) {
+      throw this.failure;
+    }
+    throw new ResourcePreparingError();
+  }
+};
+
 // src/mcp.ts
 function jsonResult(payload) {
   return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
@@ -21387,13 +21437,25 @@ function parseDate(value) {
 }
 async function runServe() {
   const root = resolveCorpusDir(process.env.LLMNESIA_CORPUS_DIR);
-  const service = await CompanionService.open(root, {
-    // stdout is the MCP JSON-RPC channel, so diagnostics go to stderr.
-    onDrainError: (error2) => process.stderr.write(
-      `llmnesia: inbox drain failed, serving the existing index: ${error2 instanceof Error ? error2.message : String(error2)}
+  const service = new LazyResource(
+    () => CompanionService.open(root, {
+      // stdout is the MCP JSON-RPC channel, so diagnostics go to stderr.
+      onDrainError: (error2) => process.stderr.write(
+        `llmnesia: inbox drain failed, serving the existing index: ${error2 instanceof Error ? error2.message : String(error2)}
 `
-    )
-  });
+      )
+    })
+  );
+  const withService = async (operation) => {
+    try {
+      return await operation(await service.get(5e3));
+    } catch (err) {
+      if (err instanceof ResourcePreparingError) {
+        return errorResult("LLMnesia is still preparing the local conversation index. Retry this tool shortly.");
+      }
+      return errorResult(`LLMnesia could not open the local conversation index: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  };
   const server = new McpServer(
     { name: "llmnesia", version: VERSION },
     {
@@ -21423,7 +21485,7 @@ async function runServe() {
         openWorldHint: false
       }
     },
-    async (args) => {
+    async (args) => withService(async (service2) => {
       const filters = {
         platform: args.platform,
         title: args.title,
@@ -21432,8 +21494,8 @@ async function runServe() {
         limit: args.limit,
         matchMode: args.match_mode
       };
-      const hits = await service.search(args.query, filters);
-      const status = await service.corpusStatus({ refresh: false });
+      const hits = await service2.search(args.query, filters);
+      const status = await service2.corpusStatus({ refresh: false });
       return jsonResult({
         count: hits.length,
         corpus: corpusField(status),
@@ -21450,7 +21512,7 @@ async function runServe() {
           messageCount: h.messageCount
         }))
       });
-    }
+    })
   );
   server.registerTool(
     "get_conversation",
@@ -21467,8 +21529,8 @@ async function runServe() {
         openWorldHint: false
       }
     },
-    async (args) => {
-      const record2 = await service.getConversation(args.id);
+    async (args) => withService(async (service2) => {
+      const record2 = await service2.getConversation(args.id);
       if (!record2) {
         return errorResult(`No conversation found with id '${args.id}'.`);
       }
@@ -21481,7 +21543,7 @@ async function runServe() {
           text: m.formattedText ?? m.text
         }))
       });
-    }
+    })
   );
   server.registerTool(
     "list_recent",
@@ -21498,9 +21560,9 @@ async function runServe() {
         openWorldHint: false
       }
     },
-    async (args) => {
-      const entries = await service.listRecent(args.limit ?? 10);
-      const status = await service.corpusStatus({ refresh: false });
+    async (args) => withService(async (service2) => {
+      const entries = await service2.listRecent(args.limit ?? 10);
+      const status = await service2.corpusStatus({ refresh: false });
       return jsonResult({
         count: entries.length,
         corpus: corpusField(status),
@@ -21514,7 +21576,7 @@ async function runServe() {
           summary: e.summary ?? e.preview
         }))
       });
-    }
+    })
   );
   server.registerTool(
     "list_conversations",
@@ -21532,9 +21594,9 @@ async function runServe() {
         openWorldHint: false
       }
     },
-    async (args) => {
-      const entries = await service.listConversations(args.limit ?? 10, args.sort ?? "recent");
-      const status = await service.corpusStatus({ refresh: false });
+    async (args) => withService(async (service2) => {
+      const entries = await service2.listConversations(args.limit ?? 10, args.sort ?? "recent");
+      const status = await service2.corpusStatus({ refresh: false });
       return jsonResult({
         count: entries.length,
         sort: args.sort ?? "recent",
@@ -21550,7 +21612,7 @@ async function runServe() {
           summary: e.summary ?? e.preview
         }))
       });
-    }
+    })
   );
   server.registerTool(
     "corpus_status",
@@ -21565,39 +21627,49 @@ async function runServe() {
         openWorldHint: false
       }
     },
-    async () => {
-      const status = await service.corpusStatus();
+    async () => withService(async (service2) => {
+      const status = await service2.corpusStatus();
       return jsonResult(status);
-    }
-  );
-  server.registerTool(
-    "save_conversation",
-    {
-      title: "Save conversation",
-      description: "Add or update a conversation in the user's local corpus. Provide platform, title, and the messages; identity is keyed on docId (or platform:sourceId), so re-saving the same conversation updates it in place.",
-      inputSchema: saveConversationSchema.shape,
-      annotations: {
-        readOnlyHint: false,
-        destructiveHint: false,
-        idempotentHint: false,
-        openWorldHint: false
-      }
-    },
-    async (args) => {
-      try {
-        const result = await service.saveConversation(args);
-        return jsonResult(result);
-      } catch (err) {
-        return errorResult(`save_conversation failed: ${err instanceof Error ? err.message : String(err)}`);
-      }
-    }
+    })
   );
+  if (process.env.LLMNESIA_READ_ONLY !== "1") {
+    server.registerTool(
+      "save_conversation",
+      {
+        title: "Save conversation",
+        description: "Add or update a conversation in the user's local corpus. Provide platform, title, and the messages; identity is keyed on docId (or platform:sourceId), so re-saving the same conversation updates it in place.",
+        inputSchema: saveConversationSchema.shape,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: false,
+          idempotentHint: false,
+          openWorldHint: false
+        }
+      },
+      async (args) => withService(async (service2) => {
+        try {
+          const result = await service2.saveConversation(args);
+          return jsonResult(result);
+        } catch (err) {
+          return errorResult(`save_conversation failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+      })
+    );
+  }
+  server.server.oninitialized = () => service.start();
   const transport = new StdioServerTransport();
   await server.connect(transport);
-  process.stderr.write(`llmnesia MCP server ready (corpus: ${root})
+  process.stderr.write(`llmnesia MCP protocol ready; waiting for client initialization (${root})
 `);
 }
-var isMain = import.meta.url === `file://${process.argv[1]}`;
+var isMain = (() => {
+  if (!process.argv[1]) return false;
+  try {
+    return realpathSync(fileURLToPath(import.meta.url)) === realpathSync(process.argv[1]);
+  } catch {
+    return path.resolve(fileURLToPath(import.meta.url)) === path.resolve(process.argv[1]);
+  }
+})();
 if (isMain) {
   runServe().catch((err) => {
     process.stderr.write(`Fatal: ${err instanceof Error ? err.stack ?? err.message : String(err)}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llmnesia/mcp",
-  "version": "0.1.10",
+  "version": "0.1.13",
   "private": false,
   "type": "module",
   "comment:mcpName": "The MCP Registry's ownership marker: it must equal server.json's `name`, and the namespace must match how you authenticate with mcp-publisher. `com.llmnesia/...` requires DNS auth (a TXT record on llmnesia.com) — see docs/MCP_INSTALLER_BOARD.md.",
@@ -39,12 +39,14 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsup",
+    "build": "tsup && npm run build:mcpb",
+    "build:mcpb": "node scripts/build-mcpb.mjs",
     "prepack": "npm run build",
     "dev": "tsx src/cli.ts",
     "mcp": "tsx src/mcp.ts",
     "typecheck": "tsc --noEmit",
-    "test": "vitest run"
+    "test": "vitest run",
+    "test:mcpb": "node scripts/smoke-mcpb.mjs"
   },
   "comment:deps": "This package publishes with ZERO runtime dependencies — everything is bundled into dist by tsup (see noExternal in tsup.config.ts). That is not just an optimisation: `install` copies dist/ to ~/.llmnesia/bin so MCP clients can spawn it by absolute path, and nothing puts a node_modules beside that copy, so any unbundled import would fail there with ERR_MODULE_NOT_FOUND. Listing them as runtime deps would also be false comfort — npm would install them next to the package, not next to the copy that actually runs. The workspace packages additionally must not appear in the install graph at all: shared-types does not exist on the registry, and the published claude-code-host is an older build without the exports this package needs.",
   "devDependencies": {
@@ -52,6 +54,7 @@
     "@llmnesia/shared-types": "*",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@types/node": "^22.13.0",
+    "adm-zip": "^0.5.18",
     "chokidar": "^4.0.3",
     "cross-spawn": "^7.0.6",
     "fast-uri": "^3.1.5",

package/server.json

@@ -3,13 +3,13 @@
   "name": "com.llmnesia/mcp",
   "title": "LLMnesia",
   "description": "Search your AI chat history from Claude, Cursor, Codex, and other MCP clients.",
-  "version": "0.1.3",
+  "version": "0.1.13",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@llmnesia/mcp",
-      "version": "0.1.3",
+      "version": "0.1.13",
       "transport": {
         "type": "stdio"
       }