tracegist-mcp-bridge 1.0.0 → 1.1.0

package/CHANGELOG.md

@@ -2,6 +2,41 @@
 
 All notable changes to `tracegist-mcp-bridge`.
 
+## 1.1.0
+
+> ⚠️ **Update this bridge before updating the extension.** The extension release
+> paired with this version writes package filenames **name-first**, so the
+> `tracegistcom-` token is no longer at the start of the name. A 1.0.x bridge
+> matches that token as a **prefix** and will therefore report
+> `list_tracegist_packages` as empty for every newly exported session — with no
+> error, just an empty list. Nothing is lost; the packages are on disk and become
+> visible again as soon as the bridge is updated.
+>
+> No MCP tool signatures changed, and this bridge still reads packages written by
+> every older extension, which is why this is a minor rather than a major bump.
+
+- **Name-first package filenames.** `isTraceGistPackageFile` now accepts
+  `tracegistcom-` anywhere in the filename instead of requiring it as a prefix, a
+  strict superset of the previous rule. The extension leads the filename with the
+  session-name slug so it stays readable in Finder/Explorer, which truncate the
+  middle of long names:
+
+  ```
+  checkout-crash-2026-07-27-14-32-05-tracegistcom-<id>-session-coding-agent-package.zip
+  ```
+
+  Unnamed sessions lead with the timestamp
+  (`2026-07-27-14-32-05-tracegistcom-<id>-…`). Package filenames are still never
+  parsed positionally, so the variable-length leading segment is safe.
+
+- **Surfaces withheld response images.** In a remote session the extension now
+  declines to transmit a question-response screenshot or highlight capture that
+  was not taken on the recorded tab (a tester can capture on an unrelated tab,
+  switch back, then answer). `question-response-received` and
+  `get_tester_response` report that as `withheldMedia` so an agent can tell a
+  privacy withhold apart from the tester simply not attaching anything, rather
+  than silently re-asking for a picture it will never receive.
+
 ## 1.0.0
 
 > ⚠️ **Breaking Remote Live Session protocol change** (`FRAME_VERSION` → 3):

package/README.md

@@ -69,7 +69,7 @@ Each session ZIP may include:
 Local Whisper is bundled — no Python, no system ffmpeg. The TraceGist extension
 records voice notes as 16 kHz mono wav, which whisper.cpp accepts directly.
 
-### Default — local Whisper (bundled, private, no external calls)
+### Default — local Whisper (private, no external calls after a one-time model download)
 
 `tracegist-mcp-bridge` depends on
 [`nodejs-whisper`](https://www.npmjs.com/package/nodejs-whisper), which compiles

package/bin/lib.mjs

@@ -5,8 +5,16 @@ const PACKAGE_SUFFIX = "-package.zip";
 const HANDOFF_SUFFIXES = ["-coding-agent-handoff.md", "-cursor-handoff.md"];
 
 export function isTraceGistPackageFile(fileName) {
+  // The `tracegistcom-` token can appear anywhere, not only at the start: as of
+  // the name-first filename format (extension >= the release paired with this
+  // bridge version), a session name leads the filename so it survives file-
+  // browser truncation, e.g. `checkout-crash-2026-…-tracegistcom-<id>-…`. This
+  // matcher is a strict superset of the old prefix rule, so a current bridge
+  // still finds packages produced by older extensions. An older bridge, whose
+  // rule required the name to START with `tracegistcom-`, will NOT see
+  // name-first packages — hence the paired version bump.
   return (
-    (fileName.startsWith("tracegistcom-") || fileName.startsWith("tracegist-")) &&
+    (fileName.startsWith("tracegist-") || fileName.includes("tracegistcom-")) &&
     fileName.endsWith(PACKAGE_SUFFIX)
   );
 }
@@ -25,7 +33,7 @@ export function renderPackagesText(
   if (packages.length === 0) {
     return [
       `No TraceGist package zips found in ${directory}.`,
-      "Expected naming pattern: tracegistcom-...-package.zip",
+      "Expected naming pattern: [<session-name>-]<date>-<time>-tracegistcom-<id>-...-package.zip",
     ].join("\n");
   }
   const countLabel =

package/bin/tracegist-mcp-bridge.mjs

@@ -1380,6 +1380,11 @@ function handleExtensionMessage(msg, source = "local") {
         voiceBlobDataUrl: msg.voiceBlobDataUrl || null,
         screenshot: msg.screenshot || null,
         highlightCaptures: msg.highlightCaptures || [],
+        // Present when the extension declined to transmit an image because it
+        // was not captured on the recorded tab. Kept distinct from "the tester
+        // attached nothing" so the agent does not read a privacy withhold as a
+        // deliberate choice and re-ask for the same picture.
+        withheldMedia: msg.withheldMedia || null,
       });
       const rIdx = pendingQuestions.findIndex((q) => q.questionId === msg.questionId);
       if (rIdx >= 0) pendingQuestions.splice(rIdx, 1);
@@ -1389,6 +1394,7 @@ function handleExtensionMessage(msg, source = "local") {
         hasVoice: !!msg.voiceBlobDataUrl,
         hasScreenshot: !!msg.screenshot,
         highlightCount: msg.highlightCaptures?.length || 0,
+        withheldMedia: msg.withheldMedia || undefined,
         hint: "Use get_tester_response to retrieve the full response with transcription and images.",
       });
       // Eagerly transcribe the voice response and log the interaction immediately
@@ -2232,12 +2238,28 @@ server.registerTool(
       hasVoice: !!response.voiceBlobDataUrl,
       hasScreenshot: !!response.screenshot,
       highlightCount: response.highlightCaptures?.length || 0,
+      ...(response.withheldMedia ? { withheldMedia: response.withheldMedia } : {}),
     };
     content.push({
       type: "text",
       text: JSON.stringify(meta, null, 2),
     });
 
+    if (response.withheldMedia) {
+      const parts = [];
+      if (response.withheldMedia.screenshot) parts.push("a screenshot");
+      if (response.withheldMedia.highlightCount > 0) {
+        parts.push(`${response.withheldMedia.highlightCount} highlight capture(s)`);
+      }
+      content.push({
+        type: "text",
+        text:
+          `Note: ${parts.join(" and ")} were withheld because they were ` +
+          `${response.withheldMedia.reason}. The tester did attach them; they were not sent. ` +
+          `Ask them to re-capture on the tab being recorded if you need the image.`,
+      });
+    }
+
     // Include screenshot as image
     if (response.screenshot && response.screenshot.startsWith("data:image/")) {
       const match = response.screenshot.match(/^data:([^;]+);base64,(.+)$/);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tracegist-mcp-bridge",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Local-first MCP bridge for reading and transcribing TraceGist package zips.",
   "type": "module",
   "bin": {