ver 1.3 and 1.3.1

echo-memory.plugin.src/skills/echo-memory/references/api-reference.md

@@ -1,8 +1,8 @@
 # ECHO — Obsidian Local REST API Reference
 
-Server: `https://echoapi.alwisp.com` (reverse proxy → backend Obsidian Local REST API)
-Auth header: `Authorization: Bearer $ECHO_KEY` — `export ECHO_KEY=<token>` before running these recipes (`echo.py` resolves it automatically: `ECHO_KEY` → `~/.echo-memory/credentials` → deprecated baked-in fallback). The literal key is never stored in docs.
-The endpoint has a **valid TLS certificate** — `-k` is not required. Paths address the vault at its **root**.
+Server: the configured endpoint — the `endpoint` from `~/.claude/echo-memory/config.json` (overridable with `ECHO_BASE`), a reverse proxy → backend Obsidian Local REST API. Examples below use `$ECHO_BASE` (or the neutral placeholder `https://obsidian.example.com`).
+Auth header: `Authorization: Bearer $ECHO_KEY` — `export ECHO_KEY=<token>` before running these recipes, or let `echo.py` resolve it automatically (per-field, first wins: env override `ECHO_KEY` → the `key` in `~/.claude/echo-memory/config.json`, resolved via the `echo_config` module). The literal key is never stored in docs.
+A configured endpoint should present a **valid TLS certificate** — `-k` is not required. Paths address the vault at its **root**.
 
 > **Prefer `scripts/echo.py` over the raw recipes below.** It wraps every verb with auth, status checking, retry, idempotent append, and frontmatter patches, and runs on any platform with a Python interpreter. The `curl` recipes here are the underlying mechanics and a **\*nix/bash fallback** (they use heredocs and `--data-binary`); on Windows, prefer `echo.py` or an equivalent. **If you call `curl` directly, check the HTTP status** — add `-o /dev/null -w "%{http_code}"` and branch on it. A `PATCH` to a non-existent heading returns `400 invalid-target` (errorCode 40080) and the write is *silently lost*; a bare `curl` that ignores status will report success anyway. `GET` returns `404` for a missing file. Treat any `>= 400` as a failed operation, surface it, and do not continue as if it succeeded.
 
@@ -29,7 +29,7 @@ For a vault large enough that even the concurrent pass approaches the tool timeo
 # Read any file by vault path
 curl -s \
   -H "Authorization: Bearer $ECHO_KEY" \
-  "https://echoapi.alwisp.com/vault/_agent/context/current-context.md"
+  "$ECHO_BASE/vault/_agent/context/current-context.md"
 ```
 
 Returns raw file content (text/markdown). On 404, the file does not exist.
@@ -38,7 +38,7 @@ Returns raw file content (text/markdown). On 404, the file does not exist.
 # Read a specific heading's content only
 curl -s \
   -H "Authorization: Bearer $ECHO_KEY" \
-  "https://echoapi.alwisp.com/vault/_agent/memory/semantic/operator-preferences.md/heading/Operator"
+  "$ECHO_BASE/vault/_agent/memory/semantic/operator-preferences.md/heading/Operator"
 ```
 
 Nested headings: separate levels with `::` (URL-encode spaces as `%20`):
@@ -54,7 +54,7 @@ Nested headings: separate levels with `::` (URL-encode spaces as `%20`):
 # List contents of a directory (trailing slash required)
 curl -s \
   -H "Authorization: Bearer $ECHO_KEY" \
-  "https://echoapi.alwisp.com/vault/_agent/sessions/"
+  "$ECHO_BASE/vault/_agent/sessions/"
 ```
 
 Returns JSON: `{ "files": [...], "folders": [...] }`.
@@ -74,7 +74,7 @@ curl -s -X POST \
   -H "Authorization: Bearer $ECHO_KEY" \
   -H "Content-Type: text/markdown" \
   --data-binary @/tmp/obs_entry.md \
-  "https://echoapi.alwisp.com/vault/inbox/captures/inbox.md"
+  "$ECHO_BASE/vault/inbox/captures/inbox.md"
 ```
 
 ---
@@ -105,7 +105,7 @@ curl -s -X PUT \
   -H "Authorization: Bearer $ECHO_KEY" \
   -H "Content-Type: text/markdown" \
   --data-binary @/tmp/obs_file.md \
-  "https://echoapi.alwisp.com/vault/_agent/sessions/2026-06-05-1430-my-session.md"
+  "$ECHO_BASE/vault/_agent/sessions/2026-06-05-1430-my-session.md"
 ```
 
 ---
@@ -120,7 +120,7 @@ curl -s -X PUT \
 
 ```bash
 cat > /tmp/obs_patch.md << 'OBSEOF'
-Jason prefers concise status updates — lead with the decision.
+The operator prefers concise status updates — lead with the decision.
 OBSEOF
 
 curl -s -X PATCH \
@@ -130,7 +130,7 @@ curl -s -X PATCH \
   -H "Target: Operator Preferences::Fact / Pattern" \
   -H "Content-Type: text/markdown" \
   --data-binary @/tmp/obs_patch.md \
-  "https://echoapi.alwisp.com/vault/_agent/memory/semantic/operator-preferences.md"
+  "$ECHO_BASE/vault/_agent/memory/semantic/operator-preferences.md"
 ```
 
 ### Discover heading / block / frontmatter targets
@@ -141,7 +141,7 @@ When unsure of the exact heading path, GET the note with the document-map Accept
 curl -s \
   -H "Authorization: Bearer $ECHO_KEY" \
   -H "Accept: application/vnd.olrapi.document-map+json" \
-  "https://echoapi.alwisp.com/vault/_agent/memory/semantic/operator-preferences.md"
+  "$ECHO_BASE/vault/_agent/memory/semantic/operator-preferences.md"
 ```
 
 Returns `{ "headings": [...], "blocks": [...], "frontmatterFields": [...] }`. Copy the heading string verbatim into `Target`.
@@ -164,7 +164,7 @@ curl -s -X PATCH \
   -H "Target: updated" \
   -H "Content-Type: application/json" \
   --data '"2026-06-05"' \
-  "https://echoapi.alwisp.com/vault/projects/active/vault-foundation.md"
+  "$ECHO_BASE/vault/projects/active/vault-foundation.md"
 ```
 
 ---
@@ -174,7 +174,7 @@ curl -s -X PATCH \
 ```bash
 curl -s -X POST \
   -H "Authorization: Bearer $ECHO_KEY" \
-  "https://echoapi.alwisp.com/search/simple/?query=weekly+review"
+  "$ECHO_BASE/search/simple/?query=weekly+review"
 ```
 
 Returns an array of `{ filename, score, matches: [{ context, match }] }`.
@@ -186,7 +186,7 @@ Returns an array of `{ filename, score, matches: [{ context, match }] }`.
 ```bash
 curl -s -X DELETE \
   -H "Authorization: Bearer $ECHO_KEY" \
-  "https://echoapi.alwisp.com/vault/inbox/imports/old-note.md"
+  "$ECHO_BASE/vault/inbox/imports/old-note.md"
 ```
 
 Only on explicit operator request. Deletion is destructive.