@batalabs/virlow-mcp-core 3.11.4 → 3.11.6

package/dist/cjs/memory-tree.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MEMORIES_ROOT_NAME = void 0;
+exports.resolveMemoryTree = resolveMemoryTree;
+exports.ensureNamespace = ensureNamespace;
+const api_js_1 = require("./api.js");
+/** Name given to the memories root when the server has to create it. The root
+ * is identified by `kind`, never by this name — the user is free to rename it. */
+exports.MEMORIES_ROOT_NAME = 'Memories';
+function buildTree(rootId, folders) {
+    const namespaces = new Map();
+    const byFolderId = new Map();
+    const attach = (folderId, name) => {
+        byFolderId.set(folderId, name);
+        // Two subfolders may share a name — that is the user's organising choice.
+        // Both count as that namespace; writes go to the first.
+        if (!namespaces.has(name))
+            namespaces.set(name, folderId);
+    };
+    // Only direct children of the root are namespaces. Anything deeper is an
+    // ordinary folder the user nested for their own reasons; its notes are not
+    // memories, so it never reaches byFolderId and the sync walk skips it.
+    for (const folder of folders) {
+        if (folder.parentId === rootId)
+            attach(folder.id, folder.name);
+    }
+    return {
+        rootId,
+        namespaces,
+        namespaceOf: (folderId) => byFolderId.get(folderId),
+        folderIds: () => [rootId, ...byFolderId.keys()],
+        attach,
+    };
+}
+/**
+ * Resolve the memories folder tree, creating the root if the user has none.
+ * The root is whichever folder carries `kind: 'memories'` — the API allows
+ * only one per user.
+ */
+async function resolveMemoryTree(api) {
+    const { folders } = await api.listFolders();
+    const existing = folders.find((f) => f.kind === 'memories');
+    if (existing)
+        return buildTree(existing.id, folders);
+    try {
+        const created = await api.createFolder(exports.MEMORIES_ROOT_NAME, null, 'memories');
+        return buildTree(created.id, [...folders, created]);
+    }
+    catch (err) {
+        // 409 MEMORIES_FOLDER_EXISTS: another client created the root between our
+        // listing and our POST. Re-list and use the winner.
+        if (!(err instanceof api_js_1.ApiError) || err.status !== 409)
+            throw err;
+        const retry = await api.listFolders();
+        const winner = retry.folders.find((f) => f.kind === 'memories');
+        if (!winner)
+            throw err;
+        return buildTree(winner.id, retry.folders);
+    }
+}
+/**
+ * Folder id for `name`, creating the namespace subfolder if it does not exist
+ * yet. Mutates `tree` so a later call in the same session is a cache hit.
+ */
+async function ensureNamespace(api, tree, name) {
+    const existing = tree.namespaces.get(name);
+    if (existing)
+        return existing;
+    const created = await api.createFolder(name, tree.rootId);
+    tree.attach(created.id, name);
+    return created.id;
+}

package/dist/cjs/notes.d.ts

@@ -0,0 +1,108 @@
+import { type Exposure } from './exposure.js';
+import type { VirlowApi } from './api.js';
+import type { Vault } from './vault.js';
+/** Hard ceiling on how many notes searchNotes() will decrypt+scan in a
+ * single call. Keeps a single search bounded even for very large accounts;
+ * `truncated` tells the caller when the account holds more than this. */
+export declare const SEARCH_SCAN_CAP = 500;
+export declare class NotesService {
+    private readonly api;
+    private readonly vault;
+    /** Per-unlock cache of decrypted (title, content) keyed by `id:updatedAt`
+     * so re-reading/re-scanning the same note twice in one unlock doesn't
+     * re-run AES-GCM decryption. Cleared whenever the vault locks. */
+    private readonly decryptCache;
+    /** Bumped every time the vault locks (see handleLock()). decryptRow()
+     * captures this before its await on decryptNoteFields() and re-checks it
+     * afterward, so a decrypt that was still in flight when the vault locked
+     * never writes decrypted plaintext into the cache after the lock. */
+    private epoch;
+    /** Serializes updateNote() calls so two overlapping partial edits to the
+     * same note (e.g. one changing title, one changing content) never race
+     * their read-merge-encrypt-write cycle — without this, both could read
+     * the same pre-edit row and the second write would silently clobber the
+     * first's change. Mirrors MemoryStore's enqueue()/mutationChain pattern. */
+    private mutationChain;
+    constructor(api: VirlowApi, vault: Vault);
+    private handleLock;
+    listNotes(params: {
+        folderId?: string;
+        starred?: boolean;
+        archived?: boolean;
+        page?: number;
+        limit?: number;
+    }): Promise<{
+        notes: Array<{
+            id: string;
+            title: string;
+            folderId: string | null;
+            starred: boolean;
+            updatedAt: string;
+        }>;
+        pagination: {
+            page: number;
+            limit: number;
+            total: number;
+            pages: number;
+        };
+        /** How many otherwise-visible notes were withheld, split by why — the
+         * remedy differs. Reported so a filtered list can never be mistaken for an
+         * empty one. */
+        withheld: {
+            inClosedFolders: number;
+            unfiled: number;
+        };
+        exposure: Exposure;
+    }>;
+    readNote(id: string): Promise<{
+        id: string;
+        title: string;
+        content: string;
+        folderId: string | null;
+    }>;
+    createNote(title: string, content: string, folderId?: string | null, type?: string): Promise<{
+        id: string;
+    }>;
+    updateNote(id: string, changes: {
+        title?: string;
+        content?: string;
+    }): Promise<void>;
+    searchNotes(query: string, limit?: number): Promise<{
+        results: Array<{
+            id: string;
+            title: string;
+            snippet: string;
+        }>;
+        scanned: number;
+        truncated: boolean;
+    }>;
+    moveNote(id: string, folderId: string | null): Promise<void>;
+    setStar(id: string, starred: boolean): Promise<void>;
+    archiveNote(id: string, archived: boolean): Promise<void>;
+    trashNote(id: string): Promise<void>;
+    listFolders(): Promise<{
+        folders: Array<{
+            id: string;
+            name: string;
+            parentId: string | null;
+        }>;
+        withheld: number;
+    }>;
+    /** Folder exposure for this request. Not cached across calls: the user can
+     * flip the switch in the app at any moment and the next tool call must
+     * respect it. */
+    private exposure;
+    createFolder(name: string, parentId?: string | null): Promise<{
+        id: string;
+    }>;
+    /** Decrypt (with per-unlock caching) or pass through a legacy plaintext
+     * row. Legacy rows (no encryptedTitle) carry their real content directly
+     * in the plaintext title/content columns. */
+    private decryptRow;
+    private buildSnippet;
+    private requireSession;
+    /** Chains `fn` onto the mutation queue so overlapping calls run one at a
+     * time; the `.catch(() => {})` guard keeps the internal chain alive after
+     * a rejection while the promise returned to the caller still carries it. */
+    private enqueue;
+}

package/dist/cjs/notes.js

@@ -0,0 +1,237 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotesService = exports.SEARCH_SCAN_CAP = void 0;
+const virlow_crypto_1 = require("@batalabs/virlow-crypto");
+const exposure_js_1 = require("./exposure.js");
+/** Hard ceiling on how many notes searchNotes() will decrypt+scan in a
+ * single call. Keeps a single search bounded even for very large accounts;
+ * `truncated` tells the caller when the account holds more than this. */
+exports.SEARCH_SCAN_CAP = 500;
+const SEARCH_PAGE_LIMIT = 50;
+/** Window radius (chars) either side of the match start when building a
+ * content snippet; total window is up to 2*SNIPPET_RADIUS. */
+const SNIPPET_RADIUS = 80;
+class NotesService {
+    api;
+    vault;
+    /** Per-unlock cache of decrypted (title, content) keyed by `id:updatedAt`
+     * so re-reading/re-scanning the same note twice in one unlock doesn't
+     * re-run AES-GCM decryption. Cleared whenever the vault locks. */
+    decryptCache = new Map();
+    /** Bumped every time the vault locks (see handleLock()). decryptRow()
+     * captures this before its await on decryptNoteFields() and re-checks it
+     * afterward, so a decrypt that was still in flight when the vault locked
+     * never writes decrypted plaintext into the cache after the lock. */
+    epoch = 0;
+    /** Serializes updateNote() calls so two overlapping partial edits to the
+     * same note (e.g. one changing title, one changing content) never race
+     * their read-merge-encrypt-write cycle — without this, both could read
+     * the same pre-edit row and the second write would silently clobber the
+     * first's change. Mirrors MemoryStore's enqueue()/mutationChain pattern. */
+    mutationChain = Promise.resolve();
+    constructor(api, vault) {
+        this.api = api;
+        this.vault = vault;
+        this.vault.onLock = () => this.handleLock();
+    }
+    handleLock() {
+        this.decryptCache.clear();
+        this.epoch++;
+    }
+    async listNotes(params) {
+        const key = this.requireSession();
+        const { notes, pagination } = await this.api.listNotes({ ...params, deleted: false });
+        // Hidden notes are segregated client-side by the web app (see ApiNote's
+        // `hidden` doc comment); the MCP server mirrors that here so they never
+        // surface in list/search results. readNote() still allows fetching one
+        // by exact id — that's a deliberate, explicit request.
+        const exposure = await this.exposure();
+        const notHidden = notes.filter((row) => row.hidden !== true);
+        // Folders the user has not opened to AI tools are filtered here rather
+        // than at the API, so the count of what was withheld can be reported.
+        const visible = notHidden.filter((row) => exposure.allows(row.folderId));
+        const withheld = {
+            inClosedFolders: notHidden.filter((row) => row.folderId !== null && !exposure.allows(row.folderId)).length,
+            unfiled: notHidden.filter((row) => row.folderId === null).length,
+        };
+        const mapped = await Promise.all(visible.map(async (row) => {
+            const { title } = await this.decryptRow(key, row);
+            return {
+                id: row.id,
+                title,
+                folderId: row.folderId,
+                starred: row.starred === true,
+                updatedAt: row.updatedAt,
+            };
+        }));
+        return { notes: mapped, pagination, withheld, exposure };
+    }
+    async readNote(id) {
+        const key = this.requireSession();
+        const row = await this.api.getNote(id);
+        // Reading by exact id is still a read: the switch says the assistant may
+        // not read this folder, and knowing the id does not change that.
+        const exposure = await this.exposure();
+        if (!exposure.allows(row.folderId)) {
+            throw new Error(`Note ${id} is in a folder that is not exposed to MCP. Turn on "Expose to MCP" in that folder's settings in the Virlow app to read it here.`);
+        }
+        const { title, content } = await this.decryptRow(key, row);
+        return { id: row.id, title, content, folderId: row.folderId };
+    }
+    async createNote(title, content, folderId, type) {
+        const key = this.requireSession();
+        const salt = (0, virlow_crypto_1.bytesToBase64)(crypto.getRandomValues(new Uint8Array(32)));
+        const { encryptedTitle, encryptedContent, iv } = await (0, virlow_crypto_1.encryptNoteFields)(key, title, content);
+        const body = {
+            title: '[ENCRYPTED]',
+            content: '[ENCRYPTED]',
+            encryptedTitle,
+            encryptedContent,
+            iv,
+            salt,
+        };
+        if (folderId !== undefined)
+            body.folderId = folderId;
+        if (type !== undefined)
+            body.type = type;
+        const row = await this.api.createNote(body);
+        return { id: row.id };
+    }
+    updateNote(id, changes) {
+        return this.enqueue(async () => {
+            const key = this.requireSession();
+            const existingRow = await this.api.getNote(id);
+            const current = await this.decryptRow(key, existingRow);
+            const title = changes.title ?? current.title;
+            const content = changes.content ?? current.content;
+            const salt = (0, virlow_crypto_1.bytesToBase64)(crypto.getRandomValues(new Uint8Array(32)));
+            const { encryptedTitle, encryptedContent, iv } = await (0, virlow_crypto_1.encryptNoteFields)(key, title, content);
+            await this.api.updateNote(id, {
+                title: '[ENCRYPTED]',
+                content: '[ENCRYPTED]',
+                encryptedTitle,
+                encryptedContent,
+                iv,
+                salt,
+            });
+        });
+    }
+    async searchNotes(query, limit = 20) {
+        const key = this.requireSession();
+        const q = query.toLowerCase();
+        const results = [];
+        let scanned = 0;
+        let total = 0;
+        let page = 1;
+        scan: for (;;) {
+            const { notes, pagination } = await this.api.listNotes({ page, limit: SEARCH_PAGE_LIMIT, deleted: false });
+            total = pagination.total;
+            for (const row of notes) {
+                if (row.hidden === true)
+                    continue;
+                if (scanned >= exports.SEARCH_SCAN_CAP)
+                    break scan;
+                scanned++;
+                const { title, content } = await this.decryptRow(key, row);
+                const contentIdx = content.toLowerCase().indexOf(q);
+                const titleMatch = title.toLowerCase().includes(q);
+                if (titleMatch || contentIdx !== -1) {
+                    results.push({ id: row.id, title, snippet: this.buildSnippet(title, content, contentIdx) });
+                }
+            }
+            if (scanned >= exports.SEARCH_SCAN_CAP)
+                break;
+            if (notes.length === 0 || page >= pagination.pages)
+                break;
+            page++;
+        }
+        return { results: results.slice(0, limit), scanned, truncated: total > exports.SEARCH_SCAN_CAP };
+    }
+    async moveNote(id, folderId) {
+        this.requireSession();
+        await this.api.updateNote(id, { folderId });
+    }
+    async setStar(id, starred) {
+        this.requireSession();
+        await this.api.updateNote(id, { starred });
+    }
+    async archiveNote(id, archived) {
+        this.requireSession();
+        await this.api.updateNote(id, { archived });
+    }
+    async trashNote(id) {
+        this.requireSession();
+        await this.api.updateNote(id, { deleted: true });
+    }
+    async listFolders() {
+        this.requireSession();
+        const { folders } = await this.api.listFolders();
+        const exposure = (0, exposure_js_1.computeExposure)(folders);
+        const visible = folders.filter((f) => exposure.allows(f.id));
+        return {
+            // Names are withheld along with contents: a folder the user has not
+            // opened should not be inventoried either, only counted.
+            folders: visible.map((f) => ({ id: f.id, name: f.name, parentId: f.parentId })),
+            withheld: folders.length - visible.length,
+        };
+    }
+    /** Folder exposure for this request. Not cached across calls: the user can
+     * flip the switch in the app at any moment and the next tool call must
+     * respect it. */
+    async exposure() {
+        const { folders } = await this.api.listFolders();
+        return (0, exposure_js_1.computeExposure)(folders);
+    }
+    async createFolder(name, parentId) {
+        this.requireSession();
+        const folder = await this.api.createFolder(name, parentId);
+        return { id: folder.id };
+    }
+    /** Decrypt (with per-unlock caching) or pass through a legacy plaintext
+     * row. Legacy rows (no encryptedTitle) carry their real content directly
+     * in the plaintext title/content columns. */
+    async decryptRow(key, row) {
+        if (!row.encryptedTitle) {
+            return { title: row.title, content: row.content };
+        }
+        const cacheKey = `${row.id}:${row.updatedAt}`;
+        const cached = this.decryptCache.get(cacheKey);
+        if (cached)
+            return cached;
+        const startEpoch = this.epoch;
+        const fields = await (0, virlow_crypto_1.decryptNoteFields)(key, row.encryptedTitle, row.encryptedContent ?? '', row.iv ?? '');
+        // If the vault locked while this decrypt was in flight, the epoch moved
+        // on and decryptCache was already cleared — don't write plaintext back
+        // into it after the fact.
+        if (this.epoch === startEpoch) {
+            this.decryptCache.set(cacheKey, fields);
+        }
+        return fields;
+    }
+    buildSnippet(title, content, contentMatchIndex) {
+        if (contentMatchIndex === -1) {
+            return title;
+        }
+        const windowSize = SNIPPET_RADIUS * 2;
+        let start = Math.max(0, contentMatchIndex - SNIPPET_RADIUS);
+        const end = Math.min(content.length, start + windowSize);
+        if (end - start < windowSize) {
+            start = Math.max(0, end - windowSize);
+        }
+        return content.slice(start, end);
+    }
+    requireSession() {
+        const key = this.vault.session.key;
+        this.vault.touch();
+        return key;
+    }
+    /** Chains `fn` onto the mutation queue so overlapping calls run one at a
+     * time; the `.catch(() => {})` guard keeps the internal chain alive after
+     * a rejection while the promise returned to the caller still carries it. */
+    enqueue(fn) {
+        const next = this.mutationChain.then(fn, fn);
+        this.mutationChain = next.catch(() => { });
+        return next;
+    }
+}
+exports.NotesService = NotesService;

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/cjs/vault.d.ts

@@ -0,0 +1,34 @@
+export declare class LockedError extends Error {
+}
+export interface UnlockedSession {
+    key: CryptoKey;
+    userId: string;
+    email: string;
+}
+export declare class Vault {
+    private readonly autoLockMs;
+    private _session;
+    private _timerHandle;
+    /** Listeners registered via `onLock =` or `addLockListener()`. Multiple
+     * consumers (MemoryStore, NotesService, ...) each need their cache cleared
+     * on lock; a single-slot callback would let the second registration
+     * silently clobber the first. */
+    private lockListeners;
+    constructor(autoLockMs?: number);
+    /** Alias for `addLockListener` kept for call-site brevity (`vault.onLock = fn`).
+     * Assigning multiple times ADDS a listener each time — it does not replace
+     * a previous one. */
+    set onLock(fn: () => void);
+    addLockListener(fn: () => void): void;
+    setUnlocked(session: UnlockedSession): void;
+    lock(): void;
+    isUnlocked(): boolean;
+    status(): {
+        locked: boolean;
+        email?: string;
+    };
+    touch(): void;
+    get session(): UnlockedSession;
+    private _scheduleAutoLock;
+    private _clearTimer;
+}

package/dist/cjs/vault.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Vault = exports.LockedError = void 0;
+class LockedError extends Error {
+}
+exports.LockedError = LockedError;
+class Vault {
+    autoLockMs;
+    _session = null;
+    _timerHandle = null;
+    /** Listeners registered via `onLock =` or `addLockListener()`. Multiple
+     * consumers (MemoryStore, NotesService, ...) each need their cache cleared
+     * on lock; a single-slot callback would let the second registration
+     * silently clobber the first. */
+    lockListeners = [];
+    constructor(autoLockMs = 4 * 60 * 60 * 1000) {
+        this.autoLockMs = autoLockMs;
+    }
+    /** Alias for `addLockListener` kept for call-site brevity (`vault.onLock = fn`).
+     * Assigning multiple times ADDS a listener each time — it does not replace
+     * a previous one. */
+    set onLock(fn) {
+        this.addLockListener(fn);
+    }
+    addLockListener(fn) {
+        this.lockListeners.push(fn);
+    }
+    setUnlocked(session) {
+        this._session = session;
+        this._scheduleAutoLock();
+    }
+    lock() {
+        if (this._session === null) {
+            return; // Already locked, idempotent
+        }
+        this._clearTimer();
+        this._session = null;
+        for (const listener of this.lockListeners) {
+            listener();
+        }
+    }
+    isUnlocked() {
+        return this._session !== null;
+    }
+    status() {
+        if (this._session === null) {
+            return { locked: true };
+        }
+        return { locked: false, email: this._session.email };
+    }
+    touch() {
+        if (this._session === null) {
+            return; // Already locked, ignore
+        }
+        this._clearTimer();
+        this._scheduleAutoLock();
+    }
+    get session() {
+        if (this._session === null) {
+            throw new LockedError('Vault is locked. Ask the user to run the unlock tool to sign in and unlock their Virlow vault.');
+        }
+        return this._session;
+    }
+    _scheduleAutoLock() {
+        this._timerHandle = setTimeout(() => {
+            this.lock();
+        }, this.autoLockMs);
+        this._timerHandle.unref?.();
+    }
+    _clearTimer() {
+        if (this._timerHandle !== null) {
+            clearTimeout(this._timerHandle);
+            this._timerHandle = null;
+        }
+    }
+}
+exports.Vault = Vault;

package/dist/exposure.d.ts

@@ -1,4 +1,4 @@
-import type { ApiFolder } from './api';
+import type { ApiFolder } from './api.js';
 /**
  * Which folders the user has actually opened to AI tools.
  *

package/dist/exposure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exposure.d.ts","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,QAAQ;IACvB,iDAAiD;IACjD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IACzC,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;oBAEgB;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;;0EAGsE;IACtE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EACjC,IAAI,GAAE,eAAoB,GACzB,QAAQ,CAgDV;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACpD,QAAQ,EAAE,QAAQ,GACjB,MAAM,CA6BR"}
+{"version":3,"file":"exposure.d.ts","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,QAAQ;IACvB,iDAAiD;IACjD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IACzC,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;oBAEgB;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;;0EAGsE;IACtE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EACjC,IAAI,GAAE,eAAoB,GACzB,QAAQ,CAgDV;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACpD,QAAQ,EAAE,QAAQ,GACjB,MAAM,CA6BR"}

package/dist/index.d.ts

@@ -1,16 +1,16 @@
-export { ApiError, VirlowApi } from './api';
-export type { ApiFolder, ApiNote, AuthTokens, LoginResult, NoteWrite } from './api';
-export { LockedError, Vault } from './vault';
-export type { UnlockedSession } from './vault';
-export { NotesService, SEARCH_SCAN_CAP } from './notes';
-export { MemoryStore, SYNC_PAGE_LIMIT } from './memories';
-export type { CachedMemory, SimilarMemory, SyncResult } from './memories';
-export { mergeMeta, parseMemoryNote, serializeMemoryBody, toCodeEnvelope, } from './memory-note';
-export type { MemoryMeta, ParsedMemoryNote } from './memory-note';
-export { MEMORIES_ROOT_NAME, ensureNamespace, resolveMemoryTree, } from './memory-tree';
-export type { MemoryTree } from './memory-tree';
-export { computeExposure, filteredNotice } from './exposure';
-export type { Exposure } from './exposure';
-export { EmbeddingCache } from './embedding-cache';
-export { MEMORIES_DISABLED_MESSAGE, memoriesAllowed } from './memories-enabled';
+export { ApiError, VirlowApi } from './api.js';
+export type { ApiFolder, ApiNote, AuthTokens, LoginResult, NoteWrite } from './api.js';
+export { LockedError, Vault } from './vault.js';
+export type { UnlockedSession } from './vault.js';
+export { NotesService, SEARCH_SCAN_CAP } from './notes.js';
+export { MemoryStore, SYNC_PAGE_LIMIT } from './memories.js';
+export type { CachedMemory, SimilarMemory, SyncResult } from './memories.js';
+export { mergeMeta, parseMemoryNote, serializeMemoryBody, toCodeEnvelope, } from './memory-note.js';
+export type { MemoryMeta, ParsedMemoryNote } from './memory-note.js';
+export { MEMORIES_ROOT_NAME, ensureNamespace, resolveMemoryTree, } from './memory-tree.js';
+export type { MemoryTree } from './memory-tree.js';
+export { computeExposure, filteredNotice } from './exposure.js';
+export type { Exposure } from './exposure.js';
+export { EmbeddingCache } from './embedding-cache.js';
+export { MEMORIES_DISABLED_MESSAGE, memoriesAllowed } from './memories-enabled.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAC5C,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAC7C,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1D,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC7D,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7D,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EACL,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChE,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -1,10 +1,10 @@
-export { ApiError, VirlowApi } from './api';
-export { LockedError, Vault } from './vault';
-export { NotesService, SEARCH_SCAN_CAP } from './notes';
-export { MemoryStore, SYNC_PAGE_LIMIT } from './memories';
-export { mergeMeta, parseMemoryNote, serializeMemoryBody, toCodeEnvelope, } from './memory-note';
-export { MEMORIES_ROOT_NAME, ensureNamespace, resolveMemoryTree, } from './memory-tree';
-export { computeExposure, filteredNotice } from './exposure';
-export { EmbeddingCache } from './embedding-cache';
-export { MEMORIES_DISABLED_MESSAGE, memoriesAllowed } from './memories-enabled';
+export { ApiError, VirlowApi } from './api.js';
+export { LockedError, Vault } from './vault.js';
+export { NotesService, SEARCH_SCAN_CAP } from './notes.js';
+export { MemoryStore, SYNC_PAGE_LIMIT } from './memories.js';
+export { mergeMeta, parseMemoryNote, serializeMemoryBody, toCodeEnvelope, } from './memory-note.js';
+export { MEMORIES_ROOT_NAME, ensureNamespace, resolveMemoryTree, } from './memory-tree.js';
+export { computeExposure, filteredNotice } from './exposure.js';
+export { EmbeddingCache } from './embedding-cache.js';
+export { MEMORIES_DISABLED_MESSAGE, memoriesAllowed } from './memories-enabled.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE1D,OAAO,EACL,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE7D,OAAO,EACL,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/memories-enabled.d.ts

@@ -1,4 +1,4 @@
-import type { VirlowApi } from './api';
+import type { VirlowApi } from './api.js';
 /**
  * Whether the user has switched AI memories on, read fresh from the account.
  *

package/dist/memories-enabled.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memories-enabled.d.ts","sourceRoot":"","sources":["../src/memories-enabled.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAYtE;AAED,eAAO,MAAM,yBAAyB,QAEqB,CAAC"}
+{"version":3,"file":"memories-enabled.d.ts","sourceRoot":"","sources":["../src/memories-enabled.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAYtE;AAED,eAAO,MAAM,yBAAyB,QAEqB,CAAC"}

package/dist/memories.d.ts

@@ -1,8 +1,8 @@
 import { type Embedder } from '@batalabs/virlow-memory';
-import { type VirlowApi } from './api';
-import type { EmbeddingCache } from './embedding-cache';
-import { type MemoryMeta } from './memory-note';
-import type { Vault } from './vault';
+import { type VirlowApi } from './api.js';
+import type { EmbeddingCache } from './embedding-cache.js';
+import { type MemoryMeta } from './memory-note.js';
+import type { Vault } from './vault.js';
 export declare const SYNC_PAGE_LIMIT = 100;
 export interface CachedMemory {
     id: string;

package/dist/memories.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memories.d.ts","sourceRoot":"","sources":["../src/memories.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA0C,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,YAAY,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAIF,qBAAa,WAAW;IAepB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAjB/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;IACzD,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,YAAY,CAAoC;IACxD,OAAO,CAAC,aAAa,CAAuC;IAE5D;;;sEAGkE;IAClE,OAAO,CAAC,KAAK,CAAK;gBAGC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,cAAc;IAKnE,KAAK,IAAI,IAAI;IAQb,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;uEACmE;IACnE,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;YAOb,MAAM;IA+FpB,GAAG,CACD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC;QAAE,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IAwE5E,MAAM,CACV,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,SAAK,GACT,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAkBtG,8EAA8E;IAC9E,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAOxC,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,UAAU,CAAA;KAAE,GAC5D,OAAO,CAAC,IAAI,CAAC;IAyBhB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYjC,8EAA8E;IAC9E,OAAO,CAAC,aAAa;IAYrB;6CACyC;YAC3B,SAAS;YAiCT,UAAU;YAWV,WAAW;YAKX,iBAAiB;IAS/B,yEAAyE;YAC3D,cAAc;IAK5B,OAAO,CAAC,cAAc;IAMtB;;;oDAGgD;IAChD,OAAO,CAAC,OAAO;CAKhB"}
+{"version":3,"file":"memories.d.ts","sourceRoot":"","sources":["../src/memories.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA0C,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,YAAY,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAIF,qBAAa,WAAW;IAepB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAjB/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;IACzD,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,YAAY,CAAoC;IACxD,OAAO,CAAC,aAAa,CAAuC;IAE5D;;;sEAGkE;IAClE,OAAO,CAAC,KAAK,CAAK;gBAGC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,cAAc;IAKnE,KAAK,IAAI,IAAI;IAQb,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;uEACmE;IACnE,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;YAOb,MAAM;IA+FpB,GAAG,CACD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC;QAAE,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IAwE5E,MAAM,CACV,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,SAAK,GACT,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAkBtG,8EAA8E;IAC9E,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAOxC,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,UAAU,CAAA;KAAE,GAC5D,OAAO,CAAC,IAAI,CAAC;IAyBhB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYjC,8EAA8E;IAC9E,OAAO,CAAC,aAAa;IAYrB;6CACyC;YAC3B,SAAS;YAiCT,UAAU;YAWV,WAAW;YAKX,iBAAiB;IAS/B,yEAAyE;YAC3D,cAAc;IAK5B,OAAO,CAAC,cAAc;IAMtB;;;oDAGgD;IAChD,OAAO,CAAC,OAAO;CAKhB"}