@mysten-incubation/memwal-mcp 0.0.14-dev.1 → 0.0.14-dev.11

package/dist/auto-save.d.ts

@@ -0,0 +1,100 @@
+/** Env var that pins automatic saving on or off for one MCP server process. */
+export declare const AUTO_SAVE_ENV = "MEMWAL_AUTO_SAVE";
+/** Where the answer is stored. Outside every repository, on purpose. */
+export declare function settingsPath(): string;
+/** Where the resolved state is published for the plugin hooks to read. */
+export declare function hookStatePath(): string;
+/**
+ * Parse a human-written boolean. Returns null for "not set" and for anything
+ * unparseable — an unreadable value must not be read as an answer.
+ */
+export declare function parseBooleanSetting(raw: string | undefined | null): boolean | null;
+/** `on`/`off` are answers; `unset` means nobody has been asked yet. */
+export type AutoSaveState = "on" | "off" | "unset";
+export type AutoSaveSource = 
+/** `MEMWAL_AUTO_SAVE` in this process's environment. */
+"env"
+/** An answer written to settings.json. */
+ | "settings"
+/** Unset, on an install that predates the consent prompt — keeps saving. */
+ | "legacy"
+/** Unset, on an install created after it — saves nothing until answered. */
+ | "unanswered";
+export interface AutoSaveStatus {
+    /** Whether this process may save without being asked. */
+    enabled: boolean;
+    /** The stored answer, or `unset`. */
+    state: AutoSaveState;
+    source: AutoSaveSource;
+    /** True while the question is still owed a human answer. */
+    pendingConsent: boolean;
+    /** Where an answer lives (or would be written). */
+    path: string;
+}
+/**
+ * Resolve the current state: environment, then the stored answer, then the
+ * unset rules above.
+ */
+export declare function autoSaveStatus(): AutoSaveStatus;
+/**
+ * True when this process may save without being asked.
+ *
+ * Read at call time, never cached: the answer can be written between calls in
+ * the same process.
+ */
+export declare function isAutoSaveEnabled(): boolean;
+/** True while a human still owes the consent question an answer. */
+export declare function isConsentPending(): boolean;
+/** The file the plugin hooks read. Contains no secret — only the answer. */
+export interface HookAutoSaveState {
+    version: number;
+    enabled: boolean;
+    state: AutoSaveState;
+    source: AutoSaveSource;
+    pendingConsent: boolean;
+    /** The settings file this was resolved from, for diagnosis only. */
+    settingsPath: string;
+    updatedAt: string;
+}
+/**
+ * Publish the resolved state where the plugin hooks can read it.
+ *
+ * This is the whole hook contract: the hooks do no resolution, consult no
+ * project directory and parse no credentials file — they read this one file out
+ * of the trusted state dir, or they fail safe. Called at every point the answer
+ * can change (`setAutoSave`, `markConsentPending`) and once at start-up, so a
+ * hook spawned in the same session as an MCP server sees the current answer.
+ *
+ * Best effort: a read-only or missing home directory must not stop the server
+ * from running, and a hook that finds no file already behaves as "off".
+ */
+export declare function publishHookState(): HookAutoSaveState | null;
+/**
+ * Record the answer, preserving any other keys already in the file. Clears the
+ * pending stamp — the question has been answered and must not be asked again.
+ */
+export declare function setAutoSave(enabled: boolean): {
+    path: string;
+    enabled: boolean;
+};
+/**
+ * Mark this install as created after the consent prompt existed, so an unset
+ * state here is read as "never asked" rather than "long-standing user".
+ *
+ * Called once when a brand-new install first appears — before the signed-out
+ * server boots, and immediately after a first interactive login — so that an
+ * abandoned or headless sign-in cannot mature into automatic saving nobody
+ * agreed to. A no-op once any answer exists.
+ */
+export declare function markConsentPending(): void;
+/** One line for a TTY, naming the state, where it came from, and how to flip it. */
+export declare function autoSaveSummary(): string;
+/**
+ * The single line a non-interactive run prints while consent is outstanding.
+ *
+ * Non-TTY is every MCP client spawn, so this is stderr-only and says what is
+ * happening rather than asking anything — there is no human on the other end of
+ * this stdin, and a prompt here would hang the server forever.
+ */
+export declare function pendingConsentNotice(): string | null;
+//# sourceMappingURL=auto-save.d.ts.map

package/dist/auto-save.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-save.d.ts","sourceRoot":"","sources":["../src/auto-save.ts"],"names":[],"mappings":"AA+EA,+EAA+E;AAC/E,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAqBhD,wEAAwE;AACxE,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAWD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,CAOlF;AA4BD,uEAAuE;AACvE,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,KAAK,GAAG,OAAO,CAAC;AAEnD,MAAM,MAAM,cAAc;AACtB,wDAAwD;AACtD,KAAK;AACP,0CAA0C;GACxC,UAAU;AACZ,4EAA4E;GAC1E,QAAQ;AACV,4EAA4E;GAC1E,YAAY,CAAC;AAEnB,MAAM,WAAW,cAAc;IAC3B,yDAAyD;IACzD,OAAO,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,4DAA4D;IAC5D,cAAc,EAAE,OAAO,CAAC;IACxB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,cAAc,CAgC/C;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,IAAI,iBAAiB,GAAG,IAAI,CAwB3D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAOhF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAOzC;AAED,oFAAoF;AACpF,wBAAgB,eAAe,IAAI,MAAM,CAcxC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,IAAI,CAUpD"}

package/dist/auto-save.js

@@ -0,0 +1,290 @@
+/**
+ * Automatic-save consent (WALM-642).
+ *
+ * Saving a fact the user explicitly asked for has never needed permission and
+ * still does not. What this module governs is the other thing the package does:
+ * saving what it judges durable, without being asked. That is what MemWal is
+ * for — so it is ON — but a person has to have been told what it means first.
+ *
+ * ── Three states, not two ───────────────────────────────────────────────────
+ * `off` and `on` are answers. `unset` is the absence of one, and it is not the
+ * same as `off`:
+ *
+ *   - **Answered** (`autoSave: true|false` in settings.json) — from the login
+ *     prompt or from `memwal-mcp auto-save on|off`. Nothing re-asks.
+ *   - **Unset on an install that predates this change** — no settings file at
+ *     all, but credentials on disk. These users have been auto-saving all
+ *     along; switching them off would be a regression dressed up as caution, so
+ *     saving CONTINUES and the question is put to them at their next
+ *     interactive login.
+ *   - **Unset on a new install** (`autoSaveConsent: "pending"`, stamped the
+ *     moment a post-change install first appears) — nobody has been asked, so
+ *     nothing is saved unprompted until someone answers. Explicit tool calls
+ *     and recall keep working the whole time.
+ *
+ * The stamp is what separates the last two. Without it a headless install could
+ * sign in through the `memwal_login` tool, look indistinguishable from a
+ * long-standing user, and start saving on its own — consent by never having
+ * been asked.
+ *
+ * ── Where the answer lives: the trusted state dir, and nowhere else ─────────
+ * The answer is a decision about the HUMAN, not about a credentials directory.
+ * It used to be stored beside whichever `credentials.json` won resolution,
+ * which had two consequences, both wrong:
+ *
+ *   1. Approving a project's credentials (WALM-639) moved `settingsPath()`
+ *      into the repository. A user who had already answered "off" globally got
+ *      a directory with no answer in it, fell through to the legacy
+ *      "credentials exist, so keep saving" rule, and had automatic memory
+ *      switched back ON by an approval that was only ever about where writes
+ *      go. The recorded "no" was never consulted there.
+ *   2. `setAutoSave` / `markConsentPending` then wrote the consent answer INTO
+ *      the repository, where it could be committed and shipped to everyone
+ *      else who cloned it.
+ *
+ * So consent now lives in the trusted state dir — `MEMWAL_CREDS_DIR` when it is
+ * set, else `~/.memwal` — the same directory auth.ts keeps the project-approval
+ * store in, and for the same reason: a record a repository can write is a
+ * repository approving itself. Project scoping of CREDENTIALS is unchanged;
+ * project scoping of CONSENT is gone.
+ *
+ * The legacy probe reads the trusted directory's own `credentials.json` for the
+ * same reason. "Has this person used MemWal before" must not be answerable by a
+ * file inside a checkout.
+ *
+ * ── How the hooks see it ───────────────────────────────────────────────────
+ * The plugin's hooks are separate processes: a hook is spawned by the client,
+ * not by this package, and inherits none of the MCP server's `env` or argv. The
+ * hooks used to re-derive the whole resolution in plain ESM, and the two
+ * implementations drifted — the hook side kept the pre-WALM-639 presence rule,
+ * so a committed `.memwal/credentials.json` (contents never parsed, only
+ * `existsSync`) turned automatic memory on for anyone who opened the repo.
+ *
+ * Re-deriving is the bug, so the hooks no longer do it. This module publishes
+ * the RESOLVED state to `auto-save-state.json` in the trusted state dir, and
+ * the hooks read only that. A repository cannot write there, the hooks do no
+ * resolution of their own, and a hook that cannot read the file fails safe
+ * (automatic memory off). See `plugin/scripts/lib/auto-save.mjs`.
+ */
+import { dirname, join } from "node:path";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync, } from "node:fs";
+import { projectApprovalsPath } from "./auth.js";
+import { log } from "./logger.js";
+/** Env var that pins automatic saving on or off for one MCP server process. */
+export const AUTO_SAVE_ENV = "MEMWAL_AUTO_SAVE";
+const SETTINGS_FILE = "settings.json";
+const CREDS_FILE = "credentials.json";
+/** Resolved state the plugin hooks read. Never written inside a repository. */
+const HOOK_STATE_FILE = "auto-save-state.json";
+/** Bumped if the hook-facing shape ever changes incompatibly. */
+const HOOK_STATE_VERSION = 1;
+/**
+ * Where records a repository must not be able to write are kept:
+ * `MEMWAL_CREDS_DIR` when set, else `~/.memwal`.
+ *
+ * Derived from `projectApprovalsPath()` rather than recomputed, so this file
+ * and auth.ts cannot drift apart the way the hook copy did. auth.ts owns the
+ * definition; this reads it back.
+ */
+function trustedStateDir() {
+    return dirname(projectApprovalsPath());
+}
+/** Where the answer is stored. Outside every repository, on purpose. */
+export function settingsPath() {
+    return join(trustedStateDir(), SETTINGS_FILE);
+}
+/** Where the resolved state is published for the plugin hooks to read. */
+export function hookStatePath() {
+    return join(trustedStateDir(), HOOK_STATE_FILE);
+}
+/**
+ * Parse a human-written boolean. Returns null for "not set" and for anything
+ * unparseable — an unreadable value must not be read as an answer.
+ */
+export function parseBooleanSetting(raw) {
+    if (raw === undefined || raw === null)
+        return null;
+    const v = raw.trim().toLowerCase();
+    if (v === "")
+        return null;
+    if (["1", "true", "on", "yes", "y", "enable", "enabled"].includes(v))
+        return true;
+    if (["0", "false", "off", "no", "n", "disable", "disabled"].includes(v))
+        return false;
+    return null;
+}
+function readSettings() {
+    const path = settingsPath();
+    if (!existsSync(path))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        // A corrupt settings file is not an answer. Fall through to unset.
+        return {};
+    }
+}
+function writeSettings(next) {
+    const path = settingsPath();
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    writeFileSync(path, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
+    // `writeFileSync`'s `mode` follows POSIX `open()`: the kernel applies it
+    // when it CREATES the inode and ignores it for one that already exists, so
+    // a file left permissive by anything else would keep its old mode forever.
+    // Unlike credentials.json (see `writeSecretFile` in auth.ts) there is no
+    // secret in flight here, so tightening afterwards is enough — no reader can
+    // learn anything from the window, only whether the flag is set.
+    chmodSync(path, 0o600);
+    return path;
+}
+/**
+ * Resolve the current state: environment, then the stored answer, then the
+ * unset rules above.
+ */
+export function autoSaveStatus() {
+    const path = settingsPath();
+    const settings = readSettings();
+    const answered = typeof settings.autoSave === "boolean" ? settings.autoSave : null;
+    const state = answered === null ? "unset" : answered ? "on" : "off";
+    const fromEnv = parseBooleanSetting(process.env[AUTO_SAVE_ENV]);
+    if (fromEnv !== null) {
+        // Overrides the behaviour, and counts as a deliberate configuration
+        // act: someone who set this does not need to be asked as well.
+        return { enabled: fromEnv, state, source: "env", pendingConsent: false, path };
+    }
+    if (answered !== null) {
+        return { enabled: answered, state, source: "settings", pendingConsent: false, path };
+    }
+    // Unset. Which way it falls depends on whether this install was ever in a
+    // position to have been asked — see the module comment. The probe is the
+    // TRUSTED directory's credentials file, never a project one: "has this
+    // person used MemWal before" must not be answerable by a checkout.
+    const stamped = settings.autoSaveConsent === "pending";
+    const preExisting = !stamped && existsSync(join(trustedStateDir(), CREDS_FILE));
+    return {
+        enabled: preExisting,
+        state: "unset",
+        source: preExisting ? "legacy" : "unanswered",
+        pendingConsent: true,
+        path,
+    };
+}
+/**
+ * True when this process may save without being asked.
+ *
+ * Read at call time, never cached: the answer can be written between calls in
+ * the same process.
+ */
+export function isAutoSaveEnabled() {
+    return autoSaveStatus().enabled;
+}
+/** True while a human still owes the consent question an answer. */
+export function isConsentPending() {
+    return autoSaveStatus().pendingConsent;
+}
+/**
+ * Publish the resolved state where the plugin hooks can read it.
+ *
+ * This is the whole hook contract: the hooks do no resolution, consult no
+ * project directory and parse no credentials file — they read this one file out
+ * of the trusted state dir, or they fail safe. Called at every point the answer
+ * can change (`setAutoSave`, `markConsentPending`) and once at start-up, so a
+ * hook spawned in the same session as an MCP server sees the current answer.
+ *
+ * Best effort: a read-only or missing home directory must not stop the server
+ * from running, and a hook that finds no file already behaves as "off".
+ */
+export function publishHookState() {
+    const status = autoSaveStatus();
+    const payload = {
+        version: HOOK_STATE_VERSION,
+        enabled: status.enabled,
+        state: status.state,
+        source: status.source,
+        pendingConsent: status.pendingConsent,
+        settingsPath: status.path,
+        updatedAt: new Date().toISOString(),
+    };
+    const path = hookStatePath();
+    try {
+        mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+        writeFileSync(path, `${JSON.stringify(payload, null, 2)}\n`, { mode: 0o600 });
+        chmodSync(path, 0o600);
+        return payload;
+    }
+    catch (err) {
+        log.warn("autosave.publish_failed", {
+            path,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return null;
+    }
+}
+/**
+ * Record the answer, preserving any other keys already in the file. Clears the
+ * pending stamp — the question has been answered and must not be asked again.
+ */
+export function setAutoSave(enabled) {
+    const next = { ...readSettings(), autoSave: enabled };
+    delete next.autoSaveConsent;
+    const path = writeSettings(next);
+    publishHookState();
+    log.info("autosave.set", { enabled, path });
+    return { path, enabled };
+}
+/**
+ * Mark this install as created after the consent prompt existed, so an unset
+ * state here is read as "never asked" rather than "long-standing user".
+ *
+ * Called once when a brand-new install first appears — before the signed-out
+ * server boots, and immediately after a first interactive login — so that an
+ * abandoned or headless sign-in cannot mature into automatic saving nobody
+ * agreed to. A no-op once any answer exists.
+ */
+export function markConsentPending() {
+    const settings = readSettings();
+    if (typeof settings.autoSave === "boolean")
+        return;
+    if (settings.autoSaveConsent === "pending")
+        return;
+    writeSettings({ ...settings, autoSaveConsent: "pending" });
+    publishHookState();
+    log.info("autosave.consent_pending", { path: settingsPath() });
+}
+/** One line for a TTY, naming the state, where it came from, and how to flip it. */
+export function autoSaveSummary() {
+    const status = autoSaveStatus();
+    const where = status.source === "env"
+        ? `from ${AUTO_SAVE_ENV}`
+        : status.source === "settings"
+            ? `from ${status.path}`
+            : status.source === "legacy"
+                ? "carried over from before this setting existed"
+                : "not answered yet";
+    const how = status.enabled
+        ? "Turn it off with `memwal-mcp auto-save off`."
+        : "Turn it on with `memwal-mcp auto-save on`. Facts you explicitly ask to save are stored either way.";
+    return `Automatic memory: ${status.enabled ? "ON" : "OFF"} (${where}). ${how}`;
+}
+/**
+ * The single line a non-interactive run prints while consent is outstanding.
+ *
+ * Non-TTY is every MCP client spawn, so this is stderr-only and says what is
+ * happening rather than asking anything — there is no human on the other end of
+ * this stdin, and a prompt here would hang the server forever.
+ */
+export function pendingConsentNotice() {
+    const status = autoSaveStatus();
+    if (!status.pendingConsent)
+        return null;
+    return status.enabled
+        ? "Automatic memory is ON, carried over from before this setting existed. " +
+            "Run `memwal-mcp auto-save on|off` in a terminal to confirm or change it."
+        : "Automatic memory is waiting on your answer, so nothing is being saved " +
+            "unprompted yet (facts you explicitly ask to save still are). Run " +
+            "`memwal-mcp login` in a terminal to answer, or set it directly with " +
+            "`memwal-mcp auto-save on|off`.";
+}
+//# sourceMappingURL=auto-save.js.map

package/dist/auto-save.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-save.js","sourceRoot":"","sources":["../src/auto-save.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACH,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEhD,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,+EAA+E;AAC/E,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B;;;;;;;GAOG;AACH,SAAS,eAAe;IACpB,OAAO,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY;IACxB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa;IACzB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,CAAC,CAAC;AACpD,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA8B;IAC9D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,YAAY;IACjB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACL,mEAAmE;QACnE,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,IAAoB;IACvC,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,gEAAgE;IAChE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AAChB,CAAC;AA2BD;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC1B,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,QAAQ,GACV,OAAO,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,KAAK,GACP,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAE1D,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,oEAAoE;QACpE,+DAA+D;QAC/D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzF,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,eAAe,KAAK,SAAS,CAAC;IACvD,MAAM,WAAW,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IAChF,OAAO;QACH,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY;QAC7C,cAAc,EAAE,IAAI;QACpB,IAAI;KACP,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC7B,OAAO,cAAc,EAAE,CAAC,OAAO,CAAC;AACpC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB;IAC5B,OAAO,cAAc,EAAE,CAAC,cAAc,CAAC;AAC3C,CAAC;AAcD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB;IAC5B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,MAAM,OAAO,GAAsB;QAC/B,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,YAAY,EAAE,MAAM,CAAC,IAAI;QACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAChC,IAAI;YACJ,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAgB;IACxC,MAAM,IAAI,GAAmB,EAAE,GAAG,YAAY,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACtE,OAAO,IAAI,CAAC,eAAe,CAAC;IAC5B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,gBAAgB,EAAE,CAAC;IACnB,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB;IAC9B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnD,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO;IACnD,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,gBAAgB,EAAE,CAAC;IACnB,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe;IAC3B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,MAAM,KAAK,GACP,MAAM,CAAC,MAAM,KAAK,KAAK;QACnB,CAAC,CAAC,QAAQ,aAAa,EAAE;QACzB,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;YAC5B,CAAC,CAAC,QAAQ,MAAM,CAAC,IAAI,EAAE;YACvB,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAC1B,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,kBAAkB,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO;QACtB,CAAC,CAAC,8CAA8C;QAChD,CAAC,CAAC,oGAAoG,CAAC;IAC3G,OAAO,qBAAqB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,MAAM,GAAG,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB;IAChC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,MAAM,CAAC,OAAO;QACjB,CAAC,CAAC,yEAAyE;YACrE,0EAA0E;QAChF,CAAC,CAAC,wEAAwE;YACpE,mEAAmE;YACnE,sEAAsE;YACtE,gCAAgC,CAAC;AAC/C,CAAC"}

package/dist/bridge.d.ts

@@ -41,7 +41,8 @@ export interface BridgeConfig {
  *     per-call namespace always wins over the configured default.
  */
 /**
- * Name the relayer this process dialled in a `memwal_health` result.
+ * Name the destination this process is bound to in a `memwal_health` result:
+ * the relayer it dialled, and the account it signs for.
  *
  * The relayer-side text can only report an origin its deployment published, and
  * stays silent on a self-hosted or local one, where the sidecar knows nothing
@@ -53,11 +54,18 @@ export interface BridgeConfig {
  * Rewrites an existing `relayer=` field rather than appending a second one: when
  * both sides know the origin they describe the same session, and two
  * conflicting fields would be worse than neither.
+ *
+ * `account=` rides along for the same reason (WALM-639). A project-local
+ * credentials file can point this process at a different account than the one
+ * the user signed in with, and "which account am I writing to" was otherwise
+ * only visible in stderr the MCP host usually hides — so the half of the
+ * destination that decides WHOSE memory this is now shows up beside the half
+ * that decides where it is stored.
  */
 export declare function annotateHealthResult(result: {
     content?: unknown;
     isError?: unknown;
-}, relayerUrl: string): void;
+}, relayerUrl: string, accountId?: string): void;
 export declare function applyDefaultNamespace(msg: RpcMessage, namespace?: string): RpcMessage;
 /** Reply for a `tools/call` naming a tool the connected relayer does not
  * serve. Names what IS on offer, because the agent's next move is to pick one

package/dist/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAanD,OAAO,EAIH,KAAK,gBAAgB,EACxB,MAAM,eAAe,CAAC;AAIvB;;gFAEgF;AAChF,MAAM,WAAW,YAAY;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;;8BAG0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAeD;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAChC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAChD,UAAU,EAAE,MAAM,GACnB,IAAI,CAaN;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,CAerF;AA6FD;;qEAEqE;AACrE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAOzE;AAsOD,UAAU,UAAU;IAChB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAokBD,oEAAoE;AACpE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAEpE;AA8BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,SAAS,CAC3B,YAAY,EAAE,iBAAiB,EAC/B,MAAM,EAAE,YAAY;AACpB;;;;yEAIyE;AACzE,YAAY,GAAE,MAAM,EAAO,GAC5B,OAAO,CAAC,IAAI,CAAC,CA4lDf"}
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAmBnD,OAAO,EAIH,KAAK,gBAAgB,EACxB,MAAM,eAAe,CAAC;AAIvB;;gFAEgF;AAChF,MAAM,WAAW,YAAY;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;;8BAG0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAeD;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,oBAAoB,CAChC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAChD,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACnB,IAAI,CAkBN;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,CAerF;AAwGD;;qEAEqE;AACrE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAOzE;AA2OD,UAAU,UAAU;IAChB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AA0lBD,oEAAoE;AACpE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAEpE;AA8BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,SAAS,CAC3B,YAAY,EAAE,iBAAiB,EAC/B,MAAM,EAAE,YAAY;AACpB;;;;yEAIyE;AACzE,YAAY,GAAE,MAAM,EAAO,GAC5B,OAAO,CAAC,IAAI,CAAC,CAosDf"}