chat-recall 0.5.32 → 0.6.1

package/README.md

@@ -12,9 +12,17 @@
 
 **[chatrecall.dev](https://chatrecall.dev)** · [How it works](https://chatrecall.dev/how-it-works/) · [MCP tools](https://chatrecall.dev/mcp/) · [Pricing](https://chatrecall.dev/pricing/) · [Self-host](https://chatrecall.dev/self-hosting/) · [Security](https://chatrecall.dev/security/)
 
-> One memory across every AI coding tool you use. Claude Code, Gemini CLI, Codex, OpenCode, Antigravity and Cursor share a single searchable history — and the agent can search it itself.
+> Memory, secret scanning and code findings across every AI coding tool you use. They all share a single searchable history — and the agent works it itself.
 
-Your coding agents each keep their own transcripts, in their own format, in their own directory, and none of them can read another's. `chat-recall` indexes all of them into one place, redacts secrets on the way, and exposes the result to your agent through **61 MCP tools** so it can recall its own past work instead of you re-explaining it.
+Your coding agents each keep their own transcripts, in their own format, in their own directory, and none of them can read another's. `chat-recall` indexes all of them into one place, redacts secrets on the way, and exposes the result to your agent through **61 MCP tools**.
+
+Memory is the foundation, not the whole product. One index, read three ways:
+
+| | What it does | Tools |
+|---|---|---|
+| **Recall** | Resume a session, search what you actually typed, read the diffs and commits it produced, recall a decision and why it was made | 37 |
+| **Security** | Flag credentials pasted into past conversations, per session, and track each one until it is rotated or dismissed | 4 |
+| **Code findings** | Rank what is worth fixing in a project and turn it into actionable tasks, with code intelligence over the repo itself | 12 |
 
 That cross-tool part is the point. A single tool's built-in history stops at its own boundary; this does not.
 
@@ -61,6 +69,24 @@ It only touches a config whose tool is on this machine, it never overwrites an e
 /plugin install chat-recall@chat-recall
 ```
 
+Any other MCP client (Claude Desktop, Windsurf, Zed, Cline, or a tool `init` does
+not know) takes the same server as a JSON entry. The bin is `chat-recall-mcp`,
+which is why the package name alone is not enough — `npx -y chat-recall` starts
+the CLI, not the server:
+
+```json
+{
+  "mcpServers": {
+    "chat-recall": {
+      "command": "npx",
+      "args": ["-y", "-p", "chat-recall", "chat-recall-mcp"]
+    }
+  }
+}
+```
+
+The same command as one line, for a `claude mcp add`-style client: `npx -y -p chat-recall chat-recall-mcp`.
+
 Then:
 
 ```bash
@@ -163,6 +189,23 @@ any of it. Secrets are masked client-side before anything leaves the machine.
 }
 ```
 
+`chat-recall-mcp` is a relay, not the server. It finds the background daemon for
+your tool profile, starts one if there is none, and passes bytes to it. Every
+session on a machine therefore shares one loaded engine instead of carrying its
+own: a session costs about 50 MB rather than 87 MB, against a single shared
+daemon, and background sync runs in one process instead of racing a lock in all
+of them. The daemon exits 15 minutes after the last session closes.
+
+Two knobs, both optional:
+
+```bash
+CHAT_RECALL_NO_DAEMON=1          # load the whole server in each session instead
+CHAT_RECALL_DAEMON_IDLE_SECS=0   # keep the daemon resident (default 900)
+```
+
+If the daemon cannot be reached for any reason, the session loads the server
+itself and works exactly as it did before — slower, never broken.
+
 Then install the hooks (one command sets up auto-save, pre-compact backup, and the resume-hint that warns when you're about to redo work):
 
 ```bash

package/dist/cli.js

@@ -19742,7 +19742,7 @@ var init_http = __esm({
       CLI_VERSION = JSON.parse(readFileSync33(new URL("../package.json", import.meta.url), "utf-8")).version || CLI_VERSION;
     } catch {
       try {
-        if (true) CLI_VERSION = "0.5.32";
+        if (true) CLI_VERSION = "0.6.1";
       } catch {
       }
     }
@@ -20262,7 +20262,7 @@ var init_telemetry = __esm({
     init_sync_client();
     cliVersion2 = () => {
       try {
-        return true ? "0.5.32" : "dev";
+        return true ? "0.6.1" : "dev";
       } catch {
         return "dev";
       }
@@ -22352,7 +22352,7 @@ var init_sync_client = __esm({
       ownVersion = JSON.parse(readFileSync37(join44(dir, "../package.json"), "utf-8")).version || ownVersion;
     } catch {
       try {
-        if (true) ownVersion = "0.5.32";
+        if (true) ownVersion = "0.6.1";
       } catch {
       }
     }
@@ -22387,12 +22387,17 @@ var init_sync_client = __esm({
 // src/update-notice.ts
 var update_notice_exports = {};
 __export(update_notice_exports, {
+  newestKnown: () => newestKnown,
   printUpdateNotice: () => printUpdateNotice,
   refreshUpdateCheck: () => refreshUpdateCheck,
   updateNotice: () => updateNotice
 });
 import { readFileSync as readFileSync38, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join45 } from "node:path";
+function newestKnown(c) {
+  const npm = c.npmVersion ?? "0.0.0";
+  return compareVersions(npm, c.serverVersion) > 0 ? { version: npm, source: "npm" } : { version: c.serverVersion, source: "server" };
+}
 function readCheck() {
   try {
     const c = JSON.parse(readFileSync38(checkPath(), "utf-8"));
@@ -22411,8 +22416,24 @@ function updateNotice() {
   const c = readCheck();
   if (!c) return null;
   const own = cliVersion();
-  if (compareVersions(c.serverVersion, own) <= 0) return null;
-  return `chat-recall ${c.serverVersion} is available (you have ${own}). Auto-update should apply it; force it now with: chat-recall update`;
+  const { version: version2, source } = newestKnown(c);
+  if (compareVersions(version2, own) <= 0) return null;
+  const how = source === "npm" ? "The server you sync to has not rolled it yet \u2014 install it with: npm install -g chat-recall@latest" : "Auto-update should apply it; force it now with: chat-recall update";
+  return `chat-recall ${version2} is available (you have ${own}). ${how}`;
+}
+async function fetchNpmLatest() {
+  if (process.env.CHAT_RECALL_NO_NPM_CHECK === "1") return null;
+  try {
+    const res = await fetchWithTimeout(NPM_LATEST_URL, {
+      headers: { accept: "application/vnd.npm.install-v1+json" }
+    }, 5e3);
+    if (!res.ok) return null;
+    const body = await res.json();
+    const v = body["dist-tags"]?.latest;
+    return typeof v === "string" && v ? v : null;
+  } catch {
+    return null;
+  }
 }
 async function refreshUpdateCheck(force = false) {
   const prev = readCheck();
@@ -22437,8 +22458,14 @@ async function refreshUpdateCheck(force = false) {
   } catch {
     return prev;
   }
-  if (newest === "0.0.0") return prev;
-  const next = { serverVersion: newest, checkedAt: Date.now() };
+  const npmVersion = await fetchNpmLatest();
+  if (newest === "0.0.0" && !npmVersion) return prev;
+  const next = {
+    // A server that answered nothing must not erase what we last knew from one.
+    serverVersion: newest !== "0.0.0" ? newest : prev?.serverVersion ?? "0.0.0",
+    checkedAt: Date.now()
+  };
+  if (npmVersion) next.npmVersion = npmVersion;
   writeCheck(next);
   return next;
 }
@@ -22458,7 +22485,7 @@ function printUpdateNotice() {
   } catch {
   }
 }
-var CHECK_TTL_MS, checkPath, printed;
+var CHECK_TTL_MS, NPM_LATEST_URL, checkPath, printed;
 var init_update_notice = __esm({
   "src/update-notice.ts"() {
     "use strict";
@@ -22466,6 +22493,7 @@ var init_update_notice = __esm({
     init_auto_update();
     init_http();
     CHECK_TTL_MS = 6 * 3600 * 1e3;
+    NPM_LATEST_URL = "https://registry.npmjs.org/chat-recall";
     checkPath = () => join45(getDataDir(), "update-check.json");
     printed = false;
   }
@@ -26116,7 +26144,7 @@ var init_intent_drain = __esm({
       ownVersion2 = JSON.parse(readFileSync46(join55(dir, "../package.json"), "utf-8")).version || ownVersion2;
     } catch {
       try {
-        if (true) ownVersion2 = "0.5.32";
+        if (true) ownVersion2 = "0.6.1";
       } catch {
       }
     }
@@ -28149,7 +28177,7 @@ program.command("init").description("Set up chat-recall: connect to your server,
       const projectRoot = join60(import.meta.dirname, "..");
       let mcpBinOnPath = false;
       mcpBinOnPath = isOnPath("chat-recall-mcp");
-      const launch = mcpBinOnPath ? { command: "chat-recall-mcp" } : { command: "node", args: [join60(projectRoot, "dist", "mcp.js")] };
+      const launch = mcpBinOnPath ? { command: "chat-recall-mcp" } : { command: "node", args: [join60(projectRoot, "dist", "mcp-relay.js")] };
       const MCP_ENV = { NODE_OPTIONS: "--max-old-space-size=1024" };
       const { registerMcpEverywhere: registerMcpEverywhere2 } = await Promise.resolve().then(() => (init_mcp_clients(), mcp_clients_exports));
       const MCP_CLIENT_FOR_BIN = {
@@ -30773,9 +30801,9 @@ program.command("reconcile").description("Reconcile DERIVED FIELDS (e.g. native
     process.exit(1);
   }
 });
-program.command("update").description("Update this CLI now from the server you sync to (same-origin, checksum-pinned) and report exactly why if it cannot").action(async () => {
-  const { runAutoUpdate: runAutoUpdate2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
-  const { refreshUpdateCheck: refreshUpdateCheck2 } = await Promise.resolve().then(() => (init_update_notice(), update_notice_exports));
+program.command("update").description("Update this CLI now from the server you sync to (same-origin, checksum-pinned) and report exactly why if it cannot. Use --from-npm when the server has not rolled the newest release yet.").option("--from-npm", "Install the newest published release straight from the npm registry instead of the server tarball").action(async (opts) => {
+  const { runAutoUpdate: runAutoUpdate2, compareVersions: compareVersions2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
+  const { refreshUpdateCheck: refreshUpdateCheck2, newestKnown: newestKnown2 } = await Promise.resolve().then(() => (init_update_notice(), update_notice_exports));
   const { cliVersion: cliVersion3 } = await Promise.resolve().then(() => (init_http(), http_exports));
   const targets = loadAllCredentials();
   if (!targets.length) {
@@ -30795,11 +30823,43 @@ program.command("update").description("Update this CLI now from the server you s
     if (/install failed|download failed|checksum/.test(r.reason)) installFailed = true;
     console.log((benign ? chalk2.dim("\u2022 ") : chalk2.red("\u2717 ")) + r.reason + chalk2.dim(` (${base3})`));
   }
-  await refreshUpdateCheck2(true);
+  const check = await refreshUpdateCheck2(true);
   if (installFailed) {
     console.log(chalk2.dim("\nThe update was available but did not install \u2014 usually npm cannot write the global prefix. Retry with:"));
     console.log(chalk2.dim(`  npm install -g chat-recall   (or re-run the installer: curl -fsSL ${targets[0].serverUrl.replace(/\/+$/, "")}/install | sh)`));
   }
+  if (check) {
+    const own = cliVersion3();
+    const { version: version2, source } = newestKnown2(check);
+    const behind = source === "npm" && compareVersions2(version2, own) > 0;
+    if (behind && !opts.fromNpm) {
+      console.log(chalk2.yellow(`
+npm has ${version2}; the server you sync to still serves ${check.serverVersion}.`));
+      console.log(chalk2.dim("The server tarball cannot deliver it until that deployment rolls. Get it now with:"));
+      console.log(chalk2.dim("  chat-recall update --from-npm"));
+    } else if (behind && opts.fromNpm) {
+      console.log(chalk2.dim(`
+Installing ${version2} from npm\u2026`));
+      try {
+        const { execFileSync: execFileSync4 } = await import("node:child_process");
+        execFileSync4("npm", ["install", "-g", `chat-recall@${version2}`], { stdio: "inherit" });
+        const { installedVersion: installedVersion2 } = await Promise.resolve().then(() => (init_auto_update(), auto_update_exports));
+        const landed = installedVersion2();
+        if (landed && compareVersions2(landed, version2) >= 0) {
+          console.log(chalk2.green(`\u2713 updated to ${landed} from npm`));
+        } else {
+          console.error(chalk2.red(`\u2717 npm reported success but ${landed ?? "an unknown version"} is still on disk \u2014 the package that runs is not the one npm wrote.`));
+          process.exit(1);
+        }
+      } catch (e) {
+        console.error(chalk2.red(`\u2717 npm install failed: ${e instanceof Error ? e.message : e}`));
+        process.exit(1);
+      }
+    } else if (opts.fromNpm) {
+      console.log(chalk2.dim(`
+npm has nothing newer than ${own} \u2014 nothing to do.`));
+    }
+  }
 });
 program.hook("preAction", () => {
   printUpdateNotice();