@astrosheep/pi-context 0.20.0 → 0.22.0

package/dist/src/history-tools.js

@@ -1,6 +1,6 @@
 import { Type } from "@earendil-works/pi-ai";
 import { defineTool } from "@earendil-works/pi-coding-agent";
-import { output, outputRaw, page, middleTruncate, prefixFit, earliestMatchOffsetChars, readCharacterWindow, characterWindowHeader, withinTextBudget } from "./tool-output.js";
+import { output, outputRaw, page, middleTruncate, prefixFit, earliestMatchOffsetChars, readCharacterWindow, characterWindowHeader, withinTextBudget, DEFAULT_READ_WINDOW_CHARS, HISTORY_PREVIEW_CHARS, MAX_READ_WINDOW_CHARS } from "./tool-output.js";
 import { positiveInteger, recentFirst, nullableString, role, cursor, searchQuery, searchQueries } from "./tool-schema.js";
 import { historyFromSession, filteredItems, visibleItem, allItems, vacuousRoleToolCombo, unknownWindowId } from "./history.js";
 /**
@@ -57,7 +57,7 @@ export function registerHistoryTools(pi) {
             const badWindow = unknownWindowId(ctx, params);
             if (badWindow)
                 return output({ error: badWindow.message, window_id: params.window_id, known_windows: badWindow.known });
-            const items = filteredItems(ctx, params).map((item) => visibleItem(item, params.max_chars_per_item ?? 1200));
+            const items = filteredItems(ctx, params).map((item) => visibleItem(item, params.max_chars_per_item ?? HISTORY_PREVIEW_CHARS));
             return output(page(items, params.cursor ?? 0, "items", params.limit, truncateHistoryItem));
         },
     }));
@@ -65,7 +65,7 @@ export function registerHistoryTools(pi) {
         name: "history_read",
         label: "History read item",
         description: "Read a bounded character range from one session item. Each response delivers the longest contiguous prefix of the requested window that fits the wire budget: follow the resume cursor to reconstruct the item exactly. A negative offset_chars counts back from the item's end. Offsets and counts are code points (an emoji or CJK character counts as one). The response is the raw item text behind a one-line [bracketed] header naming the item, the resolved offset, the delivered char range, and the resume cursor (continue at offset_chars=N, or end).",
-        parameters: Type.Object({ item_id: Type.String(), offset_chars: Type.Optional(Type.Integer({ description: "Code-point offset to start from. A negative value counts back from the end; the response echoes the resolved absolute offset. Pass the previous next_offset_chars back unchanged to continue." })), limit_chars: Type.Optional(Type.Integer({ minimum: 1, maximum: 50000, description: "Largest requested window in code points (default 12000). A window too large for the wire budget is cut short; next_offset_chars names where the next read resumes." })), window_id: Type.String() }, { additionalProperties: false }),
+        parameters: Type.Object({ item_id: Type.String(), offset_chars: Type.Optional(Type.Integer({ description: "Code-point offset to start from. A negative value counts back from the end; the response echoes the resolved absolute offset. Pass the previous next_offset_chars back unchanged to continue." })), limit_chars: Type.Optional(Type.Integer({ minimum: 1, maximum: MAX_READ_WINDOW_CHARS, description: `Largest requested window in code points (default ${DEFAULT_READ_WINDOW_CHARS}). A window too large for the wire budget is cut short; next_offset_chars names where the next read resumes.` })), window_id: Type.String() }, { additionalProperties: false }),
         async execute(_id, params, _signal, _update, ctx) {
             const item = allItems(ctx).find((candidate) => candidate.windowId === params.window_id && candidate.itemId === params.item_id);
             if (!item)
@@ -76,7 +76,7 @@ export function registerHistoryTools(pi) {
             if (typeof params.offset_chars === "number" && params.offset_chars > totalChars) {
                 return output({ error: `offset_chars ${params.offset_chars} is past the end: the item has ${totalChars} chars; the largest legal offset is ${totalChars} (an empty end-read)`, window_id: item.windowId, item_id: item.itemId, offset_chars: params.offset_chars, total_chars: totalChars });
             }
-            const limit_chars = Math.min(params.limit_chars ?? 12000, 50000);
+            const limit_chars = Math.min(params.limit_chars ?? DEFAULT_READ_WINDOW_CHARS, MAX_READ_WINDOW_CHARS);
             return readCharacterWindow(item.content, params.offset_chars, params.limit_chars, (window) => {
                 const { content, ...cursor } = window;
                 return outputRaw(characterWindowHeader(`${item.windowId} · item ${item.itemId}`, window), content, { window_id: item.windowId, item_id: item.itemId, ...cursor, limit_chars });
@@ -98,7 +98,7 @@ export function registerHistoryTools(pi) {
             const queries = searchQueries(params.query);
             const matching = filteredItems(ctx, params)
                 .filter((item) => queries.some((query) => item.content.includes(query)))
-                .map((item) => ({ ...visibleItem(item, params.max_chars_per_item ?? 1200), match_offset_chars: earliestMatchOffsetChars(item.content, queries) }));
+                .map((item) => ({ ...visibleItem(item, params.max_chars_per_item ?? HISTORY_PREVIEW_CHARS), match_offset_chars: earliestMatchOffsetChars(item.content, queries) }));
             return output(page(matching, params.cursor ?? 0, "items", params.limit, truncateHistoryItem));
         },
     }));

package/dist/src/history.js

@@ -1,11 +1,12 @@
 import { RESET_V2 } from "./protocol.js";
+import { HISTORY_PREVIEW_CHARS } from "./tool-output.js";
 function isTextContent(part) {
     return typeof part === "object" && part !== null && part.type === "text" && typeof part.text === "string";
 }
-function contentText(content) {
+export function contentText(content) {
     if (typeof content === "string")
         return content;
-    return content.filter(isTextContent).map((part) => part.text).join("\n");
+    return Array.isArray(content) ? content.filter(isTextContent).map((part) => part.text).join("\n") : "";
 }
 function mapRole(role) {
     if (role === "user" || role === "assistant")
@@ -78,13 +79,17 @@ export function resetV2WindowId(details) {
     return candidate.windowId;
 }
 /** A compaction entry's window id: the extension-minted id for reset-v2, else Pi's entry id. */
-function windowIdOf(sessionId, entry) {
+export function windowIdOf(sessionId, entry) {
     return resetV2WindowId(entry.details) ?? `pcw:${sessionId.slice(0, 8)}:${entry.id}`;
 }
+/** Mint the durable identity of a session's root history window. */
+export function rootWindowId(sessionId) {
+    return `pcw:${sessionId.slice(0, 8)}:root`;
+}
 /** Build durable, on-demand history directly from every entry on the current session branch. */
 export function historyFromSession(ctx) {
     const sessionId = ctx.sessionManager.getSessionId();
-    let window = { windowId: `pcw:${sessionId.slice(0, 8)}:root`, items: [] };
+    let window = { windowId: rootWindowId(sessionId), items: [] };
     const windows = [window];
     for (const entry of ctx.sessionManager.getBranch()) {
         if (entry.type === "compaction") {
@@ -128,7 +133,7 @@ export function historyFromSession(ctx) {
     }
     return windows;
 }
-export function visibleItem(item, maxChars = 1200) {
+export function visibleItem(item, maxChars = HISTORY_PREVIEW_CHARS) {
     const characters = Array.from(item.content);
     const truncated = characters.length > maxChars;
     return {
@@ -206,5 +211,5 @@ export function currentWindowId(ctx) {
         if (entry?.type === "compaction")
             return windowIdOf(sessionId, entry);
     }
-    return `pcw:${sessionId.slice(0, 8)}:root`;
+    return rootWindowId(sessionId);
 }

package/dist/src/index.js

@@ -1,14 +1,14 @@
 import { registerHistoryTools } from "./history-tools.js";
-import { registerMemoryTools } from "./memory/tools.js";
-import { registerBudget, deriveThresholds, mergePiContextSettings } from "./budget.js";
+import { registerNotesTools } from "./notes/tools.js";
+import { registerBudget } from "./budget.js";
 import { output } from "./tool-output.js";
-export { deriveThresholds, mergePiContextSettings };
+import { deriveThresholds, mergePiContextSettings } from "./thresholds.js";
 import { STATE_TYPE, NOTE_TYPE, BOOT_TYPE, GUIDANCE_TYPE, WARNING_TYPE, RESET_MARKER_TYPE, CONTINUATION_TYPE, RESET_V2, MAX_NOTE_BYTES, CONTEXT_WINDOW_OPEN_TAG, CONTEXT_WINDOW_CLOSE_TAG, CONTEXT_WINDOW_PROTOCOL_OPEN_TAG, CONTEXT_WINDOW_PROTOCOL_CLOSE_TAG, GUIDANCE_OPEN_TAG, PI_CONTEXT_SETTINGS_KEY, DEFAULT_RESERVE_TOKENS, DEFAULT_REMINDER_MARGIN_TOKENS, WARNING_RUNWAY_TOKENS, RESET_SUMMARY, CONTINUATION, WARNING_PROMPT } from "./protocol.js";
-import { historyFromSession, hasWindowMessage, currentWindowId, resetV2WindowId } from "./history.js";
-import { assertVirtualPath } from "./notes.js";
+import { historyFromSession, hasWindowMessage, currentWindowId, resetV2WindowId, rootWindowId, windowIdOf } from "./history.js";
+import { assertVirtualPath } from "./notes/model.js";
 import { bootBlock } from "./prompts.js";
 export { historyFromSession } from "./history.js";
-export { notesFromSession } from "./notes.js";
+export { notesFromSession } from "./notes/model.js";
 import { registerResetLifecycle } from "./reset-lifecycle.js";
 import { registerWarning } from "./warning.js";
 import { randomUUID } from "node:crypto";
@@ -24,8 +24,7 @@ export default function piContext(pi) {
         // The root window has no compaction entry to carry the boot block, so persist
         // it once as a hidden custom message. Reset windows already carry theirs at
         // position 0 in the compaction summary, so a resumed session adds nothing.
-        const sessionId = ctx.sessionManager.getSessionId();
-        const rootId = `pcw:${sessionId.slice(0, 8)}:root`;
+        const rootId = rootWindowId(ctx.sessionManager.getSessionId());
         if (currentWindowId(ctx) !== rootId || hasWindowMessage(ctx, BOOT_TYPE))
             return;
         pi.sendMessage({ customType: BOOT_TYPE, content: bootBlock(ctx, rootId, undefined, false), display: false }, { triggerTurn: false });
@@ -49,7 +48,7 @@ export default function piContext(pi) {
         },
     });
     registerHistoryTools(pi);
-    registerMemoryTools(pi);
+    registerNotesTools(pi);
     pi.registerTool(defineTool({
         name: "new_context",
         label: "New context",
@@ -70,16 +69,16 @@ export default function piContext(pi) {
         },
         onReset: (entryId) => pi.appendEntry(STATE_TYPE, { version: 1, lastResetEntryId: entryId }),
         buildReset: (event, ctx, explicit) => {
-            const session8 = ctx.sessionManager.getSessionId().slice(0, 8);
+            const sessionId = ctx.sessionManager.getSessionId();
             // Window IDs are independent of Pi entry IDs. Avoid reusing a window
             // identity already present on this branch.
             const windows = historyFromSession(ctx);
             const usedIds = new Set(windows.map((window) => window.windowId));
-            let minted = randomUUID().slice(0, 8);
-            while (usedIds.has(`pcw:${session8}:${minted}`))
-                minted = randomUUID().slice(0, 8);
-            const windowId = `pcw:${session8}:${minted}`;
-            const previousId = windows[windows.length - 1]?.windowId ?? `pcw:${session8}:root`;
+            let minted = { id: randomUUID().slice(0, 8) };
+            while (usedIds.has(windowIdOf(sessionId, minted)))
+                minted = { id: randomUUID().slice(0, 8) };
+            const windowId = windowIdOf(sessionId, minted);
+            const previousId = windows[windows.length - 1]?.windowId ?? rootWindowId(sessionId);
             // The reset marker stays as firstKeptEntryId; it no longer names the window.
             pi.appendEntry(RESET_MARKER_TYPE, { version: 1, reason: event.reason, requested: explicit });
             const markerId = ctx.sessionManager.getLeafId();

package/dist/src/notes/address.js

@@ -0,0 +1,31 @@
+import { assertVirtualPath } from "./model.js";
+const ADDRESS_FORMS = "legal prefixes are @project/ and @personal/; bare names are the session home";
+/**
+ * Decode the one public note address into its physical home and virtual path. This is a
+ * tool-boundary rule: replay paths keep using assertVirtualPath directly and are untouched.
+ */
+export function assertAddress(value) {
+    if (typeof value !== "string")
+        throw new Error(`invalid note address: ${ADDRESS_FORMS}`);
+    let scope = "session";
+    let path = value;
+    if (value.startsWith("@project/")) {
+        scope = "project";
+        path = value.slice("@project/".length);
+    }
+    else if (value.startsWith("@personal/")) {
+        scope = "personal";
+        path = value.slice("@personal/".length);
+    }
+    else if (value.startsWith("@")) {
+        throw new Error(`invalid note address: ${ADDRESS_FORMS}`);
+    }
+    if (path.includes("@"))
+        throw new Error(`invalid note address: ${ADDRESS_FORMS}`);
+    assertVirtualPath(path);
+    return { scope, path };
+}
+/** Render a virtual path in its one unambiguous public address form. */
+export function addressFor(scope, path) {
+    return scope === "session" ? path : `@${scope}/${path}`;
+}

package/dist/src/{memory → notes}/frontmatter.js

@@ -1,10 +1,10 @@
-import { localIso } from "../notes.js";
-const SCOPES = ["session", "project", "global"];
+import { localIso } from "./model.js";
+const SCOPES = ["session", "project", "personal"];
 const ORIGINS = ["user", "self", "external"];
 const STATUSES = ["active", "superseded", "pending", "archived"];
 const TIMESTAMP_KEYS = ["created_at", "updated_at", "last_accessed"];
 /** Emission order, exactly the Design's key list. */
-const KNOWN_KEYS = ["scope", "origin", "status", "stale", "created_at", "updated_at", "last_accessed", "access_count", "source_window", "supersedes", "recurrence_count", "recurrence_windows"];
+const KNOWN_KEYS = ["origin", "status", "stale", "created_at", "updated_at", "last_accessed", "access_count", "source_window", "supersedes", "recurrence_count", "recurrence_windows"];
 export function isScope(value) {
     return typeof value === "string" && SCOPES.includes(value);
 }
@@ -89,7 +89,7 @@ function parseFrontmatter(raw) {
 export function parseNote(raw, now = Date.now()) {
     const { fields, body } = parseFrontmatter(raw);
     const meta = { ...fields };
-    meta.scope = isScope(meta.scope) ? meta.scope : "global";
+    meta.scope = isScope(meta.scope) ? meta.scope : "personal";
     meta.origin = isOrigin(meta.origin) ? meta.origin : "self";
     meta.status = isStatus(meta.status) ? meta.status : "active";
     meta.stale = meta.stale === true;
@@ -120,7 +120,9 @@ export function serializeNote(meta, body) {
             lines.push(`${key}: ${yamlScalar(value)}`);
     }
     for (const key of Object.keys(meta)) {
-        if (KNOWN_KEYS.includes(key))
+        // scope is a legacy on-disk field. Store callers derive it from the home's location,
+        // but serialization intentionally drops it on the next write.
+        if (key === "scope" || KNOWN_KEYS.includes(key))
             continue;
         if (meta[key] === undefined)
             continue;

package/dist/src/{notes.js → notes/model.js}

@@ -1,4 +1,4 @@
-import { MAX_NOTE_BYTES, NOTE_TYPE } from "./protocol.js";
+import { MAX_NOTE_BYTES, NOTE_TYPE } from "../protocol.js";
 export function assertVirtualPath(value) {
     if (typeof value !== "string" || value.length === 0)
         throw new Error("path must be a non-empty virtual relative path");

package/dist/src/{memory → notes}/paths.js

@@ -7,6 +7,10 @@ export function notesRoot() {
     const override = process.env.PI_NOTES_HOME;
     return override && override.length > 0 ? resolve(override) : join(homedir(), ".agents", "notes");
 }
+/** Absolute directory holding the per-session note homes. */
+export function sessionHomesRoot(home = notesRoot()) {
+    return join(home, "pi", "session");
+}
 /**
  * Absolute git root for `cwd`, walking upward until a directory holds a `.git` entry.
  * No git root yields undefined, which projectKey then replaces with the cwd itself.
@@ -35,11 +39,11 @@ function sessionId(ctx) {
 }
 /** Absolute directory holding every note of one scope. */
 export function scopeDir(scope, ctx) {
-    if (scope === "global")
-        return join(notesRoot(), "global");
+    if (scope === "personal")
+        return join(notesRoot(), "personal");
     if (scope === "project")
         return join(notesRoot(), "project", projectKey(ctx.cwd));
-    return join(notesRoot(), "pi", "session", sessionId(ctx));
+    return join(sessionHomesRoot(), sessionId(ctx));
 }
 /**
  * Notes are markdown files: a virtual path without an `.md` suffix gains one, an explicit

package/dist/src/{memory → notes}/store.js

@@ -2,10 +2,12 @@ import { randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
 import { generateDiffString } from "@earendil-works/pi-coding-agent";
-import { assertGlobPattern, assertVirtualPath, globToRegExp } from "../notes.js";
+import { assertGlobPattern, assertVirtualPath, globToRegExp } from "./model.js";
 import { MAX_NOTE_BYTES, MAX_NOTE_PATH_BYTES } from "../protocol.js";
 import { isOrigin, isScope, parseNote, serializeNote, stripLeadingFrontmatter } from "./frontmatter.js";
+import { addressFor } from "./address.js";
 import { physicalPath, scopeDir } from "./paths.js";
+import { earliestMatchOffsetChars } from "../tool-output.js";
 /** Typed store refusal. `line_numbers` and `edit_index` are the edit error's addressing fields. */
 export class NoteError extends Error {
     code;
@@ -19,10 +21,10 @@ export class NoteError extends Error {
         this.edit_index = extra.edit_index;
     }
 }
-const SCOPE_ORDER = ["session", "project", "global"];
+const SCOPE_ORDER = ["session", "project", "personal"];
 function assertScope(value) {
     if (!isScope(value))
-        throw new NoteError("invalid_scope", `scope must be one of session, project, global (got ${JSON.stringify(value)})`);
+        throw new NoteError("invalid_scope", `scope must be one of session, project, personal (got ${JSON.stringify(value)})`);
     return value;
 }
 function assertOrigin(value) {
@@ -30,20 +32,6 @@ function assertOrigin(value) {
         throw new NoteError("invalid_origin", `origin must be one of user, self, external (got ${JSON.stringify(value)})`);
     return value;
 }
-function scopeList(scope) {
-    if (scope === undefined || scope === null)
-        return [...SCOPE_ORDER];
-    return [assertScope(scope)];
-}
-/** First existing file by precedence session → project → global, or only `scope` when given. */
-function resolve(ctx, vpath, scope) {
-    for (const candidate of scopeList(scope)) {
-        const path = physicalPath(candidate, vpath, ctx);
-        if (existsSync(path))
-            return { scope: candidate, path, raw: readFileSync(path, "utf8") };
-    }
-    return undefined;
-}
 /** Recursively list `.md` files under `dir` as forward-slash virtual paths relative to `base`. */
 function walkMarkdown(dir, base = dir) {
     let entries;
@@ -157,18 +145,20 @@ export function updateNoteMeta(ctx, vpath, scope, mutate) {
     atomicWrite(path, serialized);
     return { meta, body: parsed.body };
 }
-/** Apply body-only edits against one snapshot, then optionally move via the scope/origin/stale setters. */
-export function editNote(ctx, vpath, edits, opts = {}) {
+/** Apply body-only edits against one explicit home; origin and stale are its metadata setters. */
+export function editNote(ctx, vpath, scope, edits, opts = {}) {
     assertVirtualPath(vpath);
     assertWritablePath(vpath);
     const operations = edits ?? [];
-    if (operations.length === 0 && opts.scope === undefined && opts.origin === undefined && opts.stale === undefined) {
-        throw new NoteError("nothing_to_do", "nothing to do: provide edits or at least one of scope, origin, stale");
+    if (operations.length === 0 && opts.origin === undefined && opts.stale === undefined) {
+        throw new NoteError("nothing_to_do", "nothing to do: provide edits or at least one of origin, stale");
     }
-    const found = resolve(ctx, vpath);
-    if (!found)
+    const path = physicalPath(scope, vpath, ctx);
+    if (!existsSync(path))
         throw new NoteError("not_found", "note not found");
-    const { meta, body } = parseNote(found.raw);
+    const raw = readFileSync(path, "utf8");
+    const { meta, body } = parseNote(raw);
+    meta.scope = scope;
     // Snapshot the pre-edit frontmatter so the diff can name exactly what the setters changed.
     const beforeMeta = { ...meta };
     // Every edit runs against this one snapshot; nothing is written until all of them succeed,
@@ -187,90 +177,79 @@ export function editNote(ctx, vpath, edits, opts = {}) {
         if (lines.length > 1 && !opts.replaceAll) {
             throw new NoteError("ambiguous_edit", `edit ${index}: oldText occurs ${lines.length} times (lines ${lines.join(", ")}); pass replace_all to replace every occurrence`, { line_numbers: lines, edit_index: index });
         }
-        next = opts.replaceAll ? next.split(oldText).join(newText) : next.replace(oldText, newText);
+        // Single replacement is positional splicing, never String.replace: user text must be
+        // inserted byte-for-byte, without $-pattern substitution ($&, $`, $', $1, $$).
+        if (opts.replaceAll) {
+            next = next.split(oldText).join(newText);
+        }
+        else {
+            const matchIndex = next.indexOf(oldText);
+            next = next.substring(0, matchIndex) + newText + next.substring(matchIndex + oldText.length);
+        }
     });
-    const destScope = opts.scope === undefined ? found.scope : assertScope(opts.scope);
     if (opts.origin !== undefined)
         meta.origin = assertOrigin(opts.origin);
     if (opts.stale !== undefined)
         meta.stale = opts.stale;
-    meta.scope = destScope;
     meta.updated_at = Date.now();
-    const dest = physicalPath(destScope, vpath, ctx);
-    const moving = dest !== found.path;
-    if (moving && existsSync(dest)) {
-        throw new NoteError("target_exists", `a note already exists at ${vpath} in scope ${destScope}; the move was refused and both files are unchanged`);
-    }
     const serialized = serializeNote(meta, next);
     assertSerializedSize(serialized);
     // pi-edit-style diff: body only for a content edit, frontmatter only for a metadata-only
-    // update, one combined file diff when both moved.
+    // update, one combined file diff when both change.
     const bodyChanged = body !== next;
-    const metadataChanged = beforeMeta.scope !== meta.scope || beforeMeta.origin !== meta.origin || beforeMeta.stale !== meta.stale;
+    const metadataChanged = beforeMeta.origin !== meta.origin || beforeMeta.stale !== meta.stale;
     const diff = bodyChanged && metadataChanged
-        ? generateDiffString(found.raw, serialized).diff
+        ? generateDiffString(raw, serialized).diff
         : bodyChanged
             ? generateDiffString(body, next).diff
             : metadataChanged
                 ? generateDiffString(frontmatterOf(beforeMeta), frontmatterOf(meta)).diff
                 : "";
-    atomicWrite(dest, serialized);
-    if (moving)
-        rmSync(found.path);
-    return { meta, applied: operations.length, resolved_scope: found.scope, diff };
+    atomicWrite(path, serialized);
+    return { meta, applied: operations.length, resolved_scope: scope, diff };
 }
 /** Read a note and, as a side effect, bump last_accessed/access_count in the file. */
-export function readNote(ctx, vpath, opts = {}) {
+export function readNote(ctx, vpath, scope) {
     assertVirtualPath(vpath);
-    const found = resolve(ctx, vpath, opts.scope);
-    if (!found)
+    const path = physicalPath(scope, vpath, ctx);
+    if (!existsSync(path))
         return undefined;
     const now = Date.now();
-    const { meta, body } = parseNote(found.raw, now);
-    meta.scope = found.scope;
+    const { meta, body } = parseNote(readFileSync(path, "utf8"), now);
+    meta.scope = scope;
     // Only the two access keys move; updated_at and every other key keep their bytes.
     meta.last_accessed = now;
     meta.access_count = (typeof meta.access_count === "number" ? meta.access_count : 0) + 1;
-    atomicWrite(found.path, serializeNote(meta, body));
-    return { meta, body, resolvedScope: found.scope };
-}
-/** The scope that holds `vpath` first by precedence, without reading or mutating the file. */
-export function resolveNoteScope(ctx, vpath, scope) {
-    const found = resolve(ctx, vpath, scope);
-    return found ? { scope: found.scope, path: found.path } : undefined;
-}
-/** Read a note's meta and body without the read side effect (used by the boot index). */
-export function peekNote(ctx, scope, vpath) {
-    const path = physicalPath(scope, vpath, ctx);
-    const { meta, body } = parseNote(readFileSync(path, "utf8"));
-    meta.scope = scope;
-    return { meta, body };
+    atomicWrite(path, serializeNote(meta, body));
+    return { meta, body, resolvedScope: scope };
 }
-/** Merged rows across scopes, most recently updated first (path then scope break ties). */
+/** Merged rows across homes, most recently updated first (address breaks ties). */
 export function listNotes(ctx, opts = {}) {
     const matcher = matcherFor(opts.pattern);
     const rows = [];
-    for (const scope of scopeList(opts.scope)) {
+    for (const scope of opts.scope === undefined ? SCOPE_ORDER : [opts.scope]) {
         const root = scopeDir(scope, ctx);
         for (const path of walkMarkdown(root)) {
-            if (matcher && !matcher.test(path))
+            const address = addressFor(scope, path);
+            if (matcher && !matcher.test(address))
                 continue;
             const { meta, body } = parseNote(readFileSync(`${root}/${path}`, "utf8"));
             meta.scope = scope;
-            rows.push({ path, meta, sizeBytes: Buffer.byteLength(body, "utf8") });
+            rows.push({ address, scope, path, meta, body, sizeBytes: Buffer.byteLength(body, "utf8") });
         }
     }
-    rows.sort((a, b) => b.meta.updated_at - a.meta.updated_at || a.path.localeCompare(b.path) || a.meta.scope.localeCompare(b.meta.scope));
+    rows.sort((a, b) => b.meta.updated_at - a.meta.updated_at || a.address.localeCompare(b.address));
     return rows;
 }
 /** Case-sensitive literal substring search over note bodies, with a match address per line. */
 export function searchNotes(ctx, queries, opts = {}) {
     const matcher = matcherFor(opts.pattern);
     const rows = [];
-    for (const scope of scopeList(opts.scope)) {
+    for (const scope of opts.scope === undefined ? SCOPE_ORDER : [opts.scope]) {
         const root = scopeDir(scope, ctx);
         for (const path of walkMarkdown(root)) {
-            if (matcher && !matcher.test(path))
+            const address = addressFor(scope, path);
+            if (matcher && !matcher.test(address))
                 continue;
             const { meta, body } = parseNote(readFileSync(`${root}/${path}`, "utf8"));
             meta.scope = scope;
@@ -278,20 +257,14 @@ export function searchNotes(ctx, queries, opts = {}) {
             const matches = [];
             for (const [index, line] of body.split("\n").entries()) {
                 if (queries.some((query) => line.includes(query))) {
-                    let earliest = -1;
-                    for (const query of queries) {
-                        const found = line.indexOf(query);
-                        if (found >= 0 && (earliest < 0 || found < earliest))
-                            earliest = found;
-                    }
-                    matches.push({ line: index + 1, text: line, offsetChars: baseChars + (earliest <= 0 ? 0 : Array.from(line.slice(0, earliest)).length) });
+                    matches.push({ line: index + 1, text: line, offsetChars: baseChars + earliestMatchOffsetChars(line, queries) });
                 }
                 baseChars += Array.from(line).length + 1;
             }
             if (matches.length > 0)
-                rows.push({ path, scope, meta, matches });
+                rows.push({ address, path, scope, meta, matches });
         }
     }
-    rows.sort((a, b) => a.path.localeCompare(b.path) || a.scope.localeCompare(b.scope));
+    rows.sort((a, b) => a.address.localeCompare(b.address));
     return rows;
 }

package/dist/src/notes/tools.js

@@ -0,0 +1,153 @@
+import { Type } from "@earendil-works/pi-ai";
+import { defineTool } from "@earendil-works/pi-coding-agent";
+import { localIso } from "./model.js";
+import { characterWindowHeader, DEFAULT_READ_WINDOW_CHARS, MAX_READ_WINDOW_CHARS, middleTruncate, output, outputRaw, page, prefixFit, readCharacterWindow, withinTextBudget } from "../tool-output.js";
+import { cursor, nullableString, positiveInteger, searchQueries, searchQuery } from "../tool-schema.js";
+import { assertAddress } from "./address.js";
+import { serializeNote, stripLeadingFrontmatter } from "./frontmatter.js";
+import { NoteError, editNote, listNotes, readNote, searchNotes, writeNote } from "./store.js";
+const ORIGIN = Type.Optional(Type.Union([Type.Literal("user"), Type.Literal("self"), Type.Literal("external")], {
+    description: "Where the note's content came from. user: written or dictated by the human. self: written by you, the agent (default). external: anything else — third-party text, tool output, fetched material.",
+}));
+const ADDRESS_DESCRIPTION = "Address forms are bare `<vpath>` for this session, `@project/<vpath>` for this project's home, and `@personal/<vpath>` for the human's cross-project home. `@` means leaving home. Any other `@` prefix, or `@` inside a vpath, is a hard error: legal prefixes are `@project/` and `@personal/`; bare names are the session home. There is no cross-home fallback. Paths reject `..`, absolute paths, and backslashes.";
+function wireMeta(meta) {
+    return { ...meta, created_at: localIso(meta.created_at), updated_at: localIso(meta.updated_at), last_accessed: localIso(meta.last_accessed) };
+}
+function failure(error) {
+    if (error instanceof NoteError) {
+        const payload = { error: error.message };
+        if (error.line_numbers)
+            payload.line_numbers = error.line_numbers;
+        if (error.edit_index !== undefined)
+            payload.edit_index = error.edit_index;
+        return output(payload);
+    }
+    throw error;
+}
+export function registerNotesTools(pi) {
+    pi.registerTool(defineTool({
+        name: "notes_write", label: "Notes write",
+        description: `Create or replace a note as a real markdown file, and name it for what it holds: a fresh window sees only an index entry, never the note itself. ${ADDRESS_DESCRIPTION} Keep notes small and split by topic — by what the note is about, never by who said it (authorship is origin's job); a rewrite replaces the body whole while preserving created_at and every other frontmatter key. stale: true marks the note closed so it leaves the boot index but stays readable and searchable.`,
+        parameters: Type.Object({ address: Type.String(), content: Type.String(), origin: ORIGIN, stale: Type.Optional(Type.Boolean()) }, { additionalProperties: false }), executionMode: "sequential",
+        async execute(_id, params, _signal, _update, ctx) {
+            const content = params.content;
+            try {
+                const destination = assertAddress(params.address);
+                const { meta } = writeNote(ctx, destination.path, content, { scope: destination.scope, origin: (params.origin ?? "self"), stale: params.stale });
+                return output({ address: params.address, scope: meta.scope, size_bytes: Buffer.byteLength(stripLeadingFrontmatter(content), "utf8"), meta: wireMeta(meta) });
+            }
+            catch (error) {
+                return failure(error);
+            }
+        },
+    }));
+    pi.registerTool(defineTool({
+        name: "notes_edit", label: "Notes edit",
+        description: `Edit a note body by exact-text replacement; frontmatter is never editable this way. ${ADDRESS_DESCRIPTION} Each oldText must occur exactly once unless replace_all is set; a multi-match anchor fails with its match line numbers and a zero-match anchor names the failing edit index. edits may be omitted (or empty) for a metadata-only update, which requires at least one of origin/stale. Moving while awake means notes_write at a new address and notes_edit at the old address with stale=true. The success return carries resolved_scope and a diff of what changed.`,
+        parameters: Type.Object({ address: Type.String(), edits: Type.Optional(Type.Array(Type.Object({ oldText: Type.String(), newText: Type.String() }, { additionalProperties: false }))), origin: ORIGIN, stale: Type.Optional(Type.Boolean()), replace_all: Type.Optional(Type.Boolean()) }, { additionalProperties: false }), executionMode: "sequential",
+        async execute(_id, params, _signal, _update, ctx) {
+            try {
+                const destination = assertAddress(params.address);
+                const { meta, applied, resolved_scope, diff } = editNote(ctx, destination.path, destination.scope, params.edits, { origin: params.origin, stale: params.stale, replaceAll: params.replace_all });
+                return output({ address: params.address, applied, resolved_scope, diff, meta: wireMeta(meta) });
+            }
+            catch (error) {
+                return failure(error);
+            }
+        },
+    }));
+    pi.registerTool(defineTool({
+        name: "notes_read", label: "Notes read",
+        description: `Read a character window of a note file, frontmatter included. ${ADDRESS_DESCRIPTION} offset_chars is the code-point offset to start from (default 0) — a negative value counts back from the end — and limit_chars caps the window (default ${DEFAULT_READ_WINDOW_CHARS}, max ${MAX_READ_WINDOW_CHARS}). Each response delivers the longest fitting prefix of that window: concatenate pages in order to reconstruct the note. The response is the raw frontmatter + body behind a one-line [bracketed] header naming the address, the resolved offset, the delivered char range, and the resume cursor.`,
+        parameters: Type.Object({ address: Type.String(), offset_chars: Type.Optional(Type.Integer({ description: "Code-point offset to start from (default 0). A negative value counts back from the end; the response echoes the resolved absolute offset. Pass the previous next_offset_chars back unchanged to continue." })), limit_chars: Type.Optional(Type.Integer({ minimum: 1, maximum: MAX_READ_WINDOW_CHARS, description: `Largest requested window in code points (default ${DEFAULT_READ_WINDOW_CHARS}). A window too large for the wire budget is cut short; next_offset_chars names where the next read resumes.` })) }, { additionalProperties: false }),
+        async execute(_id, params, _signal, _update, ctx) {
+            let note;
+            try {
+                const destination = assertAddress(params.address);
+                note = readNote(ctx, destination.path, destination.scope);
+            }
+            catch (error) {
+                return failure(error);
+            }
+            if (!note)
+                return output({ error: "note not found", address: params.address });
+            const text = serializeNote(note.meta, note.body);
+            const totalChars = Array.from(text).length;
+            if (typeof params.offset_chars === "number" && params.offset_chars > totalChars)
+                return output({ error: `offset_chars ${params.offset_chars} is past the end: the note has ${totalChars} chars; the largest legal offset is ${totalChars} (an empty end-read)`, address: params.address, offset_chars: params.offset_chars, total_chars: totalChars });
+            const created_at = localIso(note.meta.created_at);
+            const updated_at = localIso(note.meta.updated_at);
+            const limit_chars = Math.min(params.limit_chars ?? DEFAULT_READ_WINDOW_CHARS, MAX_READ_WINDOW_CHARS);
+            return readCharacterWindow(text, params.offset_chars, params.limit_chars, (window) => {
+                const { content, ...rest } = window;
+                return outputRaw(characterWindowHeader(params.address, window, ` · ${note.resolvedScope} · created ${created_at} · updated ${updated_at}`), content, { address: params.address, scope: note.resolvedScope, ...rest, limit_chars, created_at, updated_at });
+            }, (result) => withinTextBudget(result.content[0].text));
+        },
+    }));
+    pi.registerTool(defineTool({
+        name: "notes_list", label: "Notes list",
+        description: `List note files as rows carrying address, scope, origin, status, stale, size_bytes, created_at, and updated_at, most recently updated first. ${ADDRESS_DESCRIPTION} All three homes are merged. A glob pattern (* within a path segment, ** across segments) filters full address strings: *.md is session-only, @project/** is project-only, and ** covers every home.`,
+        parameters: Type.Object({ pattern: nullableString(), cursor: cursor(), max_results: positiveInteger() }, { additionalProperties: false }),
+        async execute(_id, params, _signal, _update, ctx) {
+            let rows;
+            try {
+                rows = listNotes(ctx, { pattern: params.pattern ?? undefined });
+            }
+            catch (error) {
+                return failure(error);
+            }
+            const files = rows.map((row) => ({ address: row.address, scope: row.scope, origin: row.meta.origin, status: row.meta.status, stale: row.meta.stale, size_bytes: row.sizeBytes, created_at: localIso(row.meta.created_at), updated_at: localIso(row.meta.updated_at) }));
+            return output(page(files, params.cursor ?? 0, "files", params.max_results, (file, fits) => {
+                if (fits(file))
+                    return file;
+                const address = middleTruncate(file.address, (candidate) => fits({ ...file, address: candidate, address_truncated: true }));
+                return { ...file, address, address_truncated: true };
+            }));
+        },
+    }));
+    pi.registerTool(defineTool({
+        name: "notes_search", label: "Notes search",
+        description: `Case-sensitive literal substring search over note bodies; query is one string or several (OR), each matched line appears once. ${ADDRESS_DESCRIPTION} All three homes are merged and every entry carries its full address and derived scope. Patterns glob over full address strings. Each file entry carries matches_total, its full match count before capping. Each match carries line, text, offset_chars (the body-absolute code-point offset of the earliest match).`,
+        parameters: Type.Object({ query: searchQuery(), pattern: nullableString(), cursor: cursor(), max_matches_per_file: positiveInteger(), max_files: positiveInteger() }, { additionalProperties: false }),
+        async execute(_id, params, _signal, _update, ctx) {
+            const queries = searchQueries(params.query);
+            let rows;
+            try {
+                rows = searchNotes(ctx, queries, { pattern: params.pattern ?? undefined });
+            }
+            catch (error) {
+                return failure(error);
+            }
+            const maxPerFile = params.max_matches_per_file ?? Number.POSITIVE_INFINITY;
+            const result = rows.map((row) => {
+                const matches = row.matches.map((match) => ({ line: match.line, text: match.text, truncated: false, total_chars: Array.from(match.text).length, offset_chars: match.offsetChars }));
+                return { address: row.address, scope: row.scope, created_at: localIso(row.meta.created_at), updated_at: localIso(row.meta.updated_at), matches_total: matches.length, matches: matches.slice(0, maxPerFile) };
+            });
+            const fitFile = (file, fits) => {
+                if (fits(file))
+                    return file;
+                const matches = file.matches;
+                let low = 0;
+                let high = matches.length;
+                while (low < high) {
+                    const mid = Math.ceil((low + high) / 2);
+                    if (mid >= 1 && fits({ ...file, matches: matches.slice(0, mid) }))
+                        low = mid;
+                    else
+                        high = mid - 1;
+                }
+                if (low >= 1)
+                    return { ...file, matches: matches.slice(0, low) };
+                const first = matches[0];
+                const fitted = (text) => ({ ...file, matches: [{ ...first, text, truncated: true }] });
+                const text = prefixFit(first.text, (candidate) => fits(fitted(candidate)));
+                const prefix = fitted(text);
+                if (fits(prefix))
+                    return prefix;
+                const address = middleTruncate(prefix.address, (candidate) => fits({ ...prefix, address: candidate, address_truncated: true }));
+                return { ...prefix, address, address_truncated: true };
+            };
+            return output(page(result, params.cursor ?? 0, "files", params.max_files, fitFile));
+        },
+    }));
+}