@batalabs/virlow-mcp-core 3.11.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Typelets Secure Notes
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,15 @@
+# @batalabs/virlow-mcp-core
+
+The connector core behind [Virlow](https://virlow.com)'s MCP integration:
+encrypted note and memory access, folder exposure, and the memories opt-in.
+
+Shared deliberately. The local `virlow-mcp` CLI and the hosted connector both
+decide what an AI tool may read, and those rules — `folders.mcpEnabled` and the
+account's memories setting — must have one implementation. Two copies of the
+code that decides who can read what would drift, and drift there is a security
+bug rather than an inconsistency.
+
+What it does *not* contain: transports, the CLI, and the unlock user interface.
+Those differ between local and hosted and belong to their hosts.
+
+Published from [batalabs/virlow-app](https://github.com/batalabs/virlow-app).

package/dist/api.d.ts

@@ -0,0 +1,118 @@
+export declare class ApiError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+export interface AuthTokens {
+    accessToken: string;
+    refreshToken: string;
+}
+export type LoginResult = {
+    mfaRequired: true;
+    mfaToken: string;
+} | {
+    mfaRequired?: false;
+    user: {
+        id: string;
+        email: string;
+    };
+    accessToken: string;
+    refreshToken: string;
+};
+export interface ApiNote {
+    id: string;
+    folderId: string | null;
+    type: string;
+    /** Plaintext columns: the real content for legacy (unencrypted) notes,
+     * or the literal "[ENCRYPTED]" placeholder once a note carries ciphertext. */
+    title: string;
+    content: string;
+    encryptedTitle: string | null;
+    encryptedContent: string | null;
+    iv: string | null;
+    salt: string | null;
+    starred: boolean | null;
+    archived: boolean | null;
+    deleted: boolean | null;
+    /** The web app segregates hidden notes client-side; virlow-mcp filters
+     * them out of listNotes/searchNotes for the same reason (see notes.ts). */
+    hidden: boolean | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface NoteWrite {
+    title: string;
+    content: string;
+    encryptedTitle: string;
+    encryptedContent: string;
+    iv: string;
+    salt: string;
+    folderId?: string | null;
+    type?: string;
+    tags?: string[];
+    starred?: boolean;
+    archived?: boolean;
+    deleted?: boolean;
+}
+export interface ApiFolder {
+    id: string;
+    name: string;
+    parentId: string | null;
+    /** Marks the single root folder whose notes are AI memories; null for every
+     * ordinary folder, including the namespace subfolders under that root. */
+    kind: 'memories' | null;
+    /** The user's "Expose to MCP" switch. False by default — nothing in this
+     * folder is shown to AI tools until they turn it on. */
+    mcpEnabled: boolean;
+}
+export declare class VirlowApi {
+    private readonly baseUrl;
+    private tokens;
+    private refreshInFlight;
+    onTokensRotated?: (tokens: AuthTokens) => void;
+    constructor(baseUrl: string);
+    setTokens(tokens: AuthTokens | null): void;
+    private request;
+    private refresh;
+    private doRefresh;
+    login(email: string, password: string): Promise<LoginResult>;
+    verify2fa(mfaToken: string, codeOrRecovery: {
+        code?: string;
+        recoveryCode?: string;
+    }): Promise<AuthTokens>;
+    me(): Promise<{
+        id: string;
+        email: string;
+        memoriesEnabled?: boolean;
+    }>;
+    encryptionStatus(): Promise<{
+        verifier: {
+            ciphertext: string;
+            iv: string;
+            salt: string;
+        } | null;
+    }>;
+    listNotes(params: {
+        page?: number;
+        limit?: number;
+        folderId?: string;
+        starred?: boolean;
+        archived?: boolean;
+        deleted?: boolean;
+    }): Promise<{
+        notes: ApiNote[];
+        pagination: {
+            page: number;
+            limit: number;
+            total: number;
+            pages: number;
+        };
+    }>;
+    getNote(id: string): Promise<ApiNote>;
+    createNote(body: NoteWrite): Promise<ApiNote>;
+    updateNote(id: string, body: Partial<NoteWrite>): Promise<ApiNote>;
+    listFolders(): Promise<{
+        folders: ApiFolder[];
+    }>;
+    createFolder(name: string, parentId?: string | null, kind?: 'memories'): Promise<ApiFolder>;
+}
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,qBAAa,QAAS,SAAQ,KAAK;aAEf,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,WAAW,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,WAAW,CAAC,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5G,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb;kFAC8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB;+EAC2E;IAC3E,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;8EAC0E;IAC1E,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IACxB;4DACwD;IACxD,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,qBAAa,SAAS;IAKR,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,eAAe,CAA8B;IACrD,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;gBAElB,OAAO,EAAE,MAAM;IAE5C,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,IAAI;YAI5B,OAAO;IA6BrB,OAAO,CAAC,OAAO;YAOD,SAAS;IAYvB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAI5D,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAS1G,EAAE,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAOvE,gBAAgB,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC;IAOlG,SAAS,CAAC,MAAM,EAAE;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAe5G,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrC,UAAU,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAI7C,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAIlE,WAAW,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,CAAA;KAAE,CAAC;IAIhD,YAAY,CACV,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,EACxB,IAAI,CAAC,EAAE,UAAU,GAChB,OAAO,CAAC,SAAS,CAAC;CAUtB"}

package/dist/api.js

@@ -0,0 +1,109 @@
+export class ApiError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'ApiError';
+    }
+}
+export class VirlowApi {
+    baseUrl;
+    tokens = null;
+    refreshInFlight = null;
+    onTokensRotated;
+    constructor(baseUrl) {
+        this.baseUrl = baseUrl;
+    }
+    setTokens(tokens) {
+        this.tokens = tokens;
+    }
+    async request(method, path, body, opts = {}) {
+        const { auth = true, retryOn401 = true } = opts;
+        const headers = { 'content-type': 'application/json' };
+        if (auth && this.tokens)
+            headers.authorization = `Bearer ${this.tokens.accessToken}`;
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method,
+            headers,
+            ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+        });
+        if (res.status === 401 && auth && retryOn401 && this.tokens) {
+            await this.refresh();
+            return this.request(method, path, body, { auth, retryOn401: false });
+        }
+        if (res.status === 204)
+            return undefined;
+        const data = await res.json().catch(() => ({}));
+        if (!res.ok) {
+            const d = data;
+            throw new ApiError(res.status, d.error ?? d.message ?? res.statusText);
+        }
+        return data;
+    }
+    refresh() {
+        this.refreshInFlight ??= this.doRefresh().finally(() => {
+            this.refreshInFlight = null;
+        });
+        return this.refreshInFlight;
+    }
+    async doRefresh() {
+        if (!this.tokens)
+            throw new ApiError(401, 'Not authenticated');
+        const rotated = await this.request('POST', '/api/auth/refresh', { refreshToken: this.tokens.refreshToken }, { auth: false, retryOn401: false });
+        this.tokens = { accessToken: rotated.accessToken, refreshToken: rotated.refreshToken };
+        this.onTokensRotated?.(this.tokens);
+    }
+    login(email, password) {
+        return this.request('POST', '/api/auth/login', { email, password }, { auth: false });
+    }
+    verify2fa(mfaToken, codeOrRecovery) {
+        return this.request('POST', '/api/auth/2fa/verify', { mfaToken, ...codeOrRecovery }, { auth: false });
+    }
+    me() {
+        return this.request('GET', '/api/users/me');
+    }
+    encryptionStatus() {
+        return this.request('GET', '/api/users/me/encryption');
+    }
+    listNotes(params) {
+        const query = new URLSearchParams();
+        if (params.page !== undefined)
+            query.set('page', String(params.page));
+        if (params.limit !== undefined)
+            query.set('limit', String(params.limit));
+        if (params.folderId !== undefined)
+            query.set('folderId', params.folderId);
+        if (params.starred !== undefined)
+            query.set('starred', String(params.starred));
+        if (params.archived !== undefined)
+            query.set('archived', String(params.archived));
+        if (params.deleted !== undefined)
+            query.set('deleted', String(params.deleted));
+        const qs = query.toString();
+        return this.request('GET', `/api/notes${qs ? `?${qs}` : ''}`);
+    }
+    getNote(id) {
+        return this.request('GET', `/api/notes/${id}`);
+    }
+    createNote(body) {
+        return this.request('POST', '/api/notes', body);
+    }
+    updateNote(id, body) {
+        return this.request('PUT', `/api/notes/${id}`, body);
+    }
+    listFolders() {
+        return this.request('GET', '/api/folders');
+    }
+    createFolder(name, parentId, kind) {
+        // `kind` is omitted rather than sent as null: the API rejects unknown kinds
+        // and a namespace subfolder is an ordinary folder.
+        const body = {
+            name,
+            parentId,
+        };
+        if (kind !== undefined)
+            body.kind = kind;
+        return this.request('POST', '/api/folders', body);
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEf;IADlB,YACkB,MAAc,EAC9B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QAI9B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AA4DD,MAAM,OAAO,SAAS;IAKS;IAJrB,MAAM,GAAsB,IAAI,CAAC;IACjC,eAAe,GAAyB,IAAI,CAAC;IACrD,eAAe,CAAgC;IAE/C,YAA6B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;IAEhD,SAAS,CAAC,MAAyB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,OAAiD,EAAE;QAEnD,MAAM,EAAE,IAAI,GAAG,IAAI,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAChD,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAErF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM;YACN,OAAO;YACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5D,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,IAAI,GAAY,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,IAA4C,CAAC;YACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACrD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,MAAM,EACN,mBAAmB,EACnB,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAC1C,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CACnC,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACvF,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,QAAgB;QACnC,OAAO,IAAI,CAAC,OAAO,CAAc,MAAM,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,cAAwD;QAClF,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,sBAAsB,EACtB,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,EAC/B,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,EAAE;QACA,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,MAOT;QACC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAGhB,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,OAAO,CAAU,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,UAAU,CAAC,IAAe;QACxB,OAAO,IAAI,CAAC,OAAO,CAAU,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,UAAU,CAAC,EAAU,EAAE,IAAwB;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAU,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,OAAO,CAA2B,KAAK,EAAE,cAAc,CAAC,CAAC;IACvE,CAAC;IAED,YAAY,CACV,IAAY,EACZ,QAAwB,EACxB,IAAiB;QAEjB,4EAA4E;QAC5E,mDAAmD;QACnD,MAAM,IAAI,GAAkE;YAC1E,IAAI;YACJ,QAAQ;SACT,CAAC;QACF,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAY,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/embedding-cache.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Embedding vectors cached on disk, encrypted under the master key.
+ *
+ * Embedding a few hundred memories takes long enough to be felt at the start
+ * of every session, so the vectors are kept between runs. They are derived
+ * from plaintext memories, so the file is AES-GCM ciphertext and nothing —
+ * not the note ids, not the timestamps — is readable without the key.
+ *
+ * Every failure mode is a silent miss: a missing file, a file written under a
+ * different master password, a different embedding model, or corrupt bytes all
+ * yield an empty cache that gets rebuilt. The cache is an optimisation, never
+ * a source of truth.
+ */
+export declare class EmbeddingCache {
+    private readonly file;
+    private readonly embeddingModel;
+    private readonly dir;
+    private records;
+    private dirty;
+    constructor(opts: {
+        dir: string;
+        userId: string;
+        embeddingModel: string;
+    });
+    load(key: CryptoKey): Promise<void>;
+    /** The cached vector, but only if the note has not been edited since. */
+    get(noteId: string, updatedAt: string): Float32Array | undefined;
+    set(noteId: string, updatedAt: string, vector: Float32Array): void;
+    delete(noteId: string): void;
+    clear(): void;
+    save(key: CryptoKey): Promise<void>;
+    get size(): number;
+}
+//# sourceMappingURL=embedding-cache.d.ts.map

package/dist/embedding-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedding-cache.d.ts","sourceRoot":"","sources":["../src/embedding-cache.ts"],"names":[],"mappings":"AA0BA;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAkE;IACjF,OAAO,CAAC,KAAK,CAAS;gBAEV,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;IAQnE,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BzC,yEAAyE;IACzE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAKhE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI;IAKlE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI5B,KAAK,IAAI,IAAI;IAKP,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BzC,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/embedding-cache.js

@@ -0,0 +1,108 @@
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { createHash, randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { bytesToBase64, base64ToBytes, decryptBytesBlob, encryptBytesBlob, } from '@batalabs/virlow-crypto';
+/** Bumped if the on-disk record shape ever changes; a mismatch is a cache miss. */
+const CACHE_VERSION = 1;
+/**
+ * Embedding vectors cached on disk, encrypted under the master key.
+ *
+ * Embedding a few hundred memories takes long enough to be felt at the start
+ * of every session, so the vectors are kept between runs. They are derived
+ * from plaintext memories, so the file is AES-GCM ciphertext and nothing —
+ * not the note ids, not the timestamps — is readable without the key.
+ *
+ * Every failure mode is a silent miss: a missing file, a file written under a
+ * different master password, a different embedding model, or corrupt bytes all
+ * yield an empty cache that gets rebuilt. The cache is an optimisation, never
+ * a source of truth.
+ */
+export class EmbeddingCache {
+    file;
+    embeddingModel;
+    dir;
+    records = new Map();
+    dirty = false;
+    constructor(opts) {
+        this.dir = opts.dir;
+        this.embeddingModel = opts.embeddingModel;
+        // The user id is hashed so the filename itself identifies nobody.
+        const name = createHash('sha256').update(opts.userId).digest('hex');
+        this.file = path.join(opts.dir, `${name}.bin`);
+    }
+    async load(key) {
+        let parsed;
+        try {
+            const blob = await readFile(this.file, 'utf8');
+            const bytes = await decryptBytesBlob(key, blob);
+            parsed = JSON.parse(new TextDecoder().decode(bytes));
+        }
+        catch {
+            // Missing, undecryptable, or malformed — all just a cold cache.
+            return;
+        }
+        if (parsed.version !== CACHE_VERSION)
+            return;
+        // Vectors from another model are meaningless against current ones: mixing
+        // them would produce similarity scores that silently misrank.
+        if (parsed.embeddingModel !== this.embeddingModel)
+            return;
+        if (!parsed.records || typeof parsed.records !== 'object')
+            return;
+        for (const [noteId, record] of Object.entries(parsed.records)) {
+            if (!record || typeof record.v !== 'string' || typeof record.u !== 'string') {
+                continue;
+            }
+            const bytes = base64ToBytes(record.v);
+            if (bytes.byteLength % 4 !== 0)
+                continue;
+            const vector = new Float32Array(bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength));
+            this.records.set(noteId, { vector, updatedAt: record.u });
+        }
+        this.dirty = false;
+    }
+    /** The cached vector, but only if the note has not been edited since. */
+    get(noteId, updatedAt) {
+        const record = this.records.get(noteId);
+        return record && record.updatedAt === updatedAt ? record.vector : undefined;
+    }
+    set(noteId, updatedAt, vector) {
+        this.records.set(noteId, { vector, updatedAt });
+        this.dirty = true;
+    }
+    delete(noteId) {
+        if (this.records.delete(noteId))
+            this.dirty = true;
+    }
+    clear() {
+        if (this.records.size > 0)
+            this.dirty = true;
+        this.records.clear();
+    }
+    async save(key) {
+        if (!this.dirty)
+            return;
+        const records = {};
+        for (const [noteId, { vector, updatedAt }] of this.records) {
+            const bytes = new Uint8Array(vector.buffer.slice(vector.byteOffset, vector.byteOffset + vector.byteLength));
+            records[noteId] = { v: bytesToBase64(bytes), u: updatedAt };
+        }
+        const payload = {
+            version: CACHE_VERSION,
+            embeddingModel: this.embeddingModel,
+            records,
+        };
+        const blob = await encryptBytesBlob(key, new TextEncoder().encode(JSON.stringify(payload)));
+        await mkdir(this.dir, { recursive: true, mode: 0o700 });
+        // Write-then-rename so an interrupted save cannot leave a half-written file
+        // where the next load expects ciphertext.
+        const tmp = `${this.file}.${randomUUID()}.tmp`;
+        await writeFile(tmp, blob, { mode: 0o600 });
+        await rename(tmp, this.file);
+        this.dirty = false;
+    }
+    get size() {
+        return this.records.size;
+    }
+}
+//# sourceMappingURL=embedding-cache.js.map

package/dist/embedding-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedding-cache.js","sourceRoot":"","sources":["../src/embedding-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,mFAAmF;AACnF,MAAM,aAAa,GAAG,CAAC,CAAC;AAexB;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,cAAc;IACR,IAAI,CAAS;IACb,cAAc,CAAS;IACvB,GAAG,CAAS;IACrB,OAAO,GAAG,IAAI,GAAG,EAAuD,CAAC;IACzE,KAAK,GAAG,KAAK,CAAC;IAEtB,YAAY,IAA6D;QACvE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,kEAAkE;QAClE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAc;QACvB,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAc,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;YAChE,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa;YAAE,OAAO;QAC7C,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;YAAE,OAAO;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO;QAElE,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACzC,MAAM,MAAM,GAAG,IAAI,YAAY,CAC7B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAC1E,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,yEAAyE;IACzE,GAAG,CAAC,MAAc,EAAE,SAAiB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAED,GAAG,CAAC,MAAc,EAAE,SAAiB,EAAE,MAAoB;QACzD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACrD,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAc;QACvB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QAExB,MAAM,OAAO,GAAgC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,UAAU,CAC1B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAC9E,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,OAAO,GAAc;YACzB,OAAO,EAAE,aAAa;YACtB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO;SACR,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CACjC,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAClD,CAAC;QAEF,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;QAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/exposure.d.ts

@@ -0,0 +1,42 @@
+import type { ApiFolder } from './api';
+/**
+ * Which folders the user has actually opened to AI tools.
+ *
+ * Every folder carries an "Expose to MCP" switch — *"Let the local AI
+ * assistant read & edit this folder and its subfolders. Off by default."* —
+ * and until now nothing read it, so the app was telling users something untrue
+ * about who could see their notes. This is the thing that makes it true.
+ *
+ * The rule follows the switch's own wording: a folder is exposed when it, or
+ * any ancestor, is switched on. Turning a parent on therefore opens everything
+ * beneath it, and a child cannot opt back out — matching what the label
+ * promises rather than inventing a precedence rule the UI never mentions.
+ */
+export interface Exposure {
+    /** Whether notes in this folder may be shown. */
+    allows(folderId: string | null): boolean;
+    /** Folders the user has not opened, for reporting how much is hidden. */
+    hiddenFolderCount: number;
+    /** True when nothing at all is exposed — worth saying differently, since
+     * "no results" and "you have not opened anything yet" look identical
+     * otherwise. */
+    allHidden: boolean;
+}
+export interface ExposureOptions {
+    /** The memories root, if one exists. It and its namespace subfolders are
+     * exempt: the MCP server creates that tree and it exists solely for AI
+     * tools, so requiring the user to opt it in would be asking them to
+     * authorise a folder they never made for a purpose it already has. */
+    memoriesRootId?: string | null;
+}
+export declare function computeExposure(folders: ReadonlyArray<ApiFolder>, opts?: ExposureOptions): Exposure;
+/**
+ * The sentence appended to any result that was filtered. Never omitted when
+ * something was withheld: a quietly shortened list is indistinguishable from
+ * an empty vault, and the user would have no reason to suspect a setting.
+ */
+export declare function filteredNotice(hidden: {
+    inClosedFolders: number;
+    unfiled: number;
+}, exposure: Exposure): string;
+//# sourceMappingURL=exposure.d.ts.map

package/dist/exposure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposure.d.ts","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,QAAQ;IACvB,iDAAiD;IACjD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IACzC,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;oBAEgB;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;;0EAGsE;IACtE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EACjC,IAAI,GAAE,eAAoB,GACzB,QAAQ,CAgDV;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACpD,QAAQ,EAAE,QAAQ,GACjB,MAAM,CA6BR"}

package/dist/exposure.js

@@ -0,0 +1,74 @@
+export function computeExposure(folders, opts = {}) {
+    const byId = new Map(folders.map((f) => [f.id, f]));
+    const memoriesRootId = opts.memoriesRootId ?? folders.find((f) => f.kind === 'memories')?.id ?? null;
+    const resolved = new Map();
+    const isExposed = (folderId) => {
+        const cached = resolved.get(folderId);
+        if (cached !== undefined)
+            return cached;
+        // Walk to the root, stopping at the first switched-on ancestor. The seen
+        // set keeps a corrupt parent cycle from hanging the server rather than
+        // trusting the data to be a tree.
+        const chain = [];
+        const seen = new Set();
+        let current = folderId;
+        let exposed = false;
+        while (current !== null && !seen.has(current)) {
+            seen.add(current);
+            const folder = byId.get(current);
+            if (folder === undefined)
+                break;
+            chain.push(folder.id);
+            if (folder.mcpEnabled === true || folder.id === memoriesRootId) {
+                exposed = true;
+                break;
+            }
+            current = folder.parentId;
+        }
+        for (const id of chain)
+            resolved.set(id, exposed);
+        return exposed;
+    };
+    let hiddenFolderCount = 0;
+    for (const folder of folders) {
+        if (!isExposed(folder.id))
+            hiddenFolderCount++;
+    }
+    return {
+        // A note in no folder is in nothing the user has opened, so it stays
+        // hidden. That is consistent with off-by-default, and the tools say so
+        // rather than letting it look like the note is gone.
+        allows: (folderId) => (folderId === null ? false : isExposed(folderId)),
+        hiddenFolderCount,
+        allHidden: folders.length > 0 && hiddenFolderCount === folders.length,
+    };
+}
+/**
+ * The sentence appended to any result that was filtered. Never omitted when
+ * something was withheld: a quietly shortened list is indistinguishable from
+ * an empty vault, and the user would have no reason to suspect a setting.
+ */
+export function filteredNotice(hidden, exposure) {
+    const parts = [];
+    if (hidden.inClosedFolders > 0) {
+        const n = hidden.inClosedFolders;
+        const notes = `${n} note${n === 1 ? '' : 's'}`;
+        parts.push(exposure.allHidden
+            ? `${notes} hidden: no folder is exposed to MCP yet. Open a folder in the ` +
+                'Virlow app, edit it, and turn on "Expose to MCP" to let AI tools read it.'
+            : `${notes} hidden in folders that are not exposed to MCP. Turn on ` +
+                '"Expose to MCP" in a folder\'s settings in the Virlow app to include it.');
+    }
+    // Worth saying separately: the remedy is different. There is no switch on a
+    // note that lives in no folder, so "turn on the folder" is useless advice —
+    // it has to be filed into an exposed folder first.
+    if (hidden.unfiled > 0) {
+        const n = hidden.unfiled;
+        parts.push(`${n} note${n === 1 ? '' : 's'} hidden because ${n === 1 ? 'it is' : 'they are'} ` +
+            'not in any folder, and exposure is granted per folder. Move ' +
+            `${n === 1 ? 'it' : 'them'} into a folder that is exposed to MCP to include ` +
+            `${n === 1 ? 'it' : 'them'}.`);
+    }
+    return parts.length === 0 ? '' : `\n\n(${parts.join(' ')})`;
+}
+//# sourceMappingURL=exposure.js.map

package/dist/exposure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposure.js","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAkCA,MAAM,UAAU,eAAe,CAC7B,OAAiC,EACjC,OAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;IAEhF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAW,EAAE;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,yEAAyE;QACzE,uEAAuE;QACvE,kCAAkC;QAClC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,OAAO,GAAkB,QAAQ,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,OAAO,OAAO,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,MAAM,MAAM,GAA0B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;gBAC/D,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;IAED,OAAO;QACL,qEAAqE;QACrE,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvE,iBAAiB;QACjB,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,KAAK,OAAO,CAAC,MAAM;KACtE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAoD,EACpD,QAAkB;IAElB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,SAAS;YAChB,CAAC,CAAC,GAAG,KAAK,iEAAiE;gBACvE,2EAA2E;YAC/E,CAAC,CAAC,GAAG,KAAK,0DAA0D;gBAChE,0EAA0E,CACjF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,mDAAmD;IACnD,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG;YAChF,8DAA8D;YAC9D,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,mDAAmD;YAC7E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAChC,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export { ApiError, VirlowApi } from './api';
+export type { ApiFolder, ApiNote, AuthTokens, LoginResult, NoteWrite } from './api';
+export { LockedError, Vault } from './vault';
+export type { UnlockedSession } from './vault';
+export { NotesService, SEARCH_SCAN_CAP } from './notes';
+export { MemoryStore, SYNC_PAGE_LIMIT } from './memories';
+export type { CachedMemory, SimilarMemory, SyncResult } from './memories';
+export { mergeMeta, parseMemoryNote, serializeMemoryBody, toCodeEnvelope, } from './memory-note';
+export type { MemoryMeta, ParsedMemoryNote } from './memory-note';
+export { MEMORIES_ROOT_NAME, ensureNamespace, resolveMemoryTree, } from './memory-tree';
+export type { MemoryTree } from './memory-tree';
+export { computeExposure, filteredNotice } from './exposure';
+export type { Exposure } from './exposure';
+export { EmbeddingCache } from './embedding-cache';
+export { MEMORIES_DISABLED_MESSAGE, memoriesAllowed } from './memories-enabled';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAC5C,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAC7C,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1D,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC7D,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export { ApiError, VirlowApi } from './api';
+export { LockedError, Vault } from './vault';
+export { NotesService, SEARCH_SCAN_CAP } from './notes';
+export { MemoryStore, SYNC_PAGE_LIMIT } from './memories';
+export { mergeMeta, parseMemoryNote, serializeMemoryBody, toCodeEnvelope, } from './memory-note';
+export { MEMORIES_ROOT_NAME, ensureNamespace, resolveMemoryTree, } from './memory-tree';
+export { computeExposure, filteredNotice } from './exposure';
+export { EmbeddingCache } from './embedding-cache';
+export { MEMORIES_DISABLED_MESSAGE, memoriesAllowed } from './memories-enabled';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE1D,OAAO,EACL,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/memories-enabled.d.ts

@@ -0,0 +1,16 @@
+import type { VirlowApi } from './api';
+/**
+ * Whether the user has switched AI memories on, read fresh from the account.
+ *
+ * Deliberately not cached for the session. Turning the switch *on* being slow
+ * is an inconvenience; turning it *off* being slow is a privacy control that
+ * does not work. A user who switches memories off in the app expects the next
+ * tool call to respect it, not the next time they happen to restart their
+ * editor — and they would have no way to discover the difference.
+ *
+ * The cost is one GET alongside operations that already list folders, page
+ * through notes, decrypt, and embed.
+ */
+export declare function memoriesAllowed(api: VirlowApi): Promise<boolean>;
+export declare const MEMORIES_DISABLED_MESSAGE: string;
+//# sourceMappingURL=memories-enabled.d.ts.map

package/dist/memories-enabled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memories-enabled.d.ts","sourceRoot":"","sources":["../src/memories-enabled.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAYtE;AAED,eAAO,MAAM,yBAAyB,QAEqB,CAAC"}