@batalabs/virlow-mcp-core 3.116.0 → 3.117.0

package/dist/cjs/signer-file.js

@@ -0,0 +1,117 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fileSignerMemory = fileSignerMemory;
+const node_fs_1 = require("node:fs");
+const node_crypto_1 = require("node:crypto");
+const node_path_1 = __importDefault(require("node:path"));
+const keyring_js_1 = require("./keyring.js");
+const FILE_VERSION = 1;
+/** How long to wait for another process holding the pin file's lock. */
+const LOCK_WAIT_MS = 2_000;
+/** A lock older than this was left by a process that died holding it. */
+const LOCK_STALE_MS = 10_000;
+function readSigners(file) {
+    try {
+        const parsed = JSON.parse((0, node_fs_1.readFileSync)(file, 'utf8'));
+        if (parsed.version === FILE_VERSION && parsed.signers && typeof parsed.signers === 'object') {
+            return Object.fromEntries(Object.entries(parsed.signers).filter((entry) => typeof entry[1] === 'string'));
+        }
+    }
+    catch {
+        // First run, or a file this version cannot read: nothing remembered yet.
+    }
+    return {};
+}
+function sleepSync(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+/** Runs `fn` holding an exclusive lock file next to `file`, or throws if it cannot get one. */
+function withLock(file, fn) {
+    const lock = `${file}.lock`;
+    const deadline = Date.now() + LOCK_WAIT_MS;
+    for (;;) {
+        try {
+            (0, node_fs_1.closeSync)((0, node_fs_1.openSync)(lock, 'wx', 0o600));
+            break;
+        }
+        catch (err) {
+            if (err.code !== 'EEXIST')
+                throw err;
+            try {
+                if (Date.now() - (0, node_fs_1.statSync)(lock).mtimeMs > LOCK_STALE_MS)
+                    (0, node_fs_1.unlinkSync)(lock);
+            }
+            catch {
+                // Gone already: try again.
+            }
+            if (Date.now() > deadline)
+                throw new Error('The signing-key pin file is locked by another process.');
+            sleepSync(20);
+        }
+    }
+    try {
+        return fn();
+    }
+    finally {
+        try {
+            (0, node_fs_1.unlinkSync)(lock);
+        }
+        catch {
+            // Already removed as stale by another process.
+        }
+    }
+}
+/**
+ * Remembered signing keys in a small JSON file per account, for the local
+ * CLI: the connector's counterpart of the web app's `virlow.knownSigners`
+ * localStorage entry. The keys are public, so the file is not encrypted; what
+ * matters is that it outlives the process, so a granter's key that changes
+ * between runs is refused rather than trusted afresh. The file name is a hash
+ * of the account id, not the id itself.
+ *
+ * `get` reads the file each time, so a pin another process (a second CLI)
+ * wrote is seen. `remember` is a compare-and-set under a lock file: it reads
+ * the file again inside the lock and throws KeyChangedError if a different
+ * key is already pinned, never overwriting it.
+ *
+ * A missing or unreadable file starts empty (first use), and a failed write
+ * keeps the key in memory for this run, as the web does in private mode.
+ */
+function fileSignerMemory(opts) {
+    const name = (0, node_crypto_1.createHash)('sha256').update(opts.userId).digest('hex').slice(0, 32);
+    const file = node_path_1.default.join(opts.dir, `known-signers-${name}.json`);
+    /** Pins this process made but could not write; checked like the file's. */
+    const unsaved = new Map();
+    const current = (id) => readSigners(file)[id] ?? unsaved.get(id) ?? null;
+    return {
+        get: current,
+        remember: (id, sign) => {
+            const check = (known) => {
+                if (known !== null && known !== sign)
+                    throw new keyring_js_1.KeyChangedError(id);
+            };
+            check(unsaved.get(id) ?? null);
+            try {
+                (0, node_fs_1.mkdirSync)(opts.dir, { recursive: true, mode: 0o700 });
+                withLock(file, () => {
+                    const signers = readSigners(file);
+                    check(signers[id] ?? null);
+                    if (signers[id] === sign)
+                        return;
+                    const tmp = `${file}.${(0, node_crypto_1.randomUUID)()}.tmp`;
+                    (0, node_fs_1.writeFileSync)(tmp, JSON.stringify({ version: FILE_VERSION, signers: { ...signers, [id]: sign } }), { mode: 0o600 });
+                    (0, node_fs_1.renameSync)(tmp, file);
+                });
+            }
+            catch (err) {
+                if (err instanceof keyring_js_1.KeyChangedError)
+                    throw err;
+                // Remembered for this run only.
+                unsaved.set(id, sign);
+            }
+        },
+    };
+}

package/dist/exposure.d.ts

@@ -1,4 +1,15 @@
-import type { ApiFolder } from './api.js';
+import type { ApiFolder, ApiNote } from './api.js';
+/**
+ * A note in a shared workspace is encrypted under that workspace's key at the
+ * note's version, not the account key. The keyring (keyring.ts) opens that key
+ * from this account's grant; when it cannot (no grant yet, a grant that fails
+ * its checks, a granter whose keys changed) the note is skipped in every scan
+ * and refused by id, never opened or written with the account key.
+ */
+export declare function isSharedNote(row: Pick<ApiNote, 'keyVersion'>): boolean;
+/** The reason is one of a fixed set (keyring.ts, describeKeyFailure), never
+ * the cause's own message, which can be server text or decrypted bytes. */
+export declare function sharedNoteError(id: string, cause?: unknown): Error;
 /**
  * Which folders the user has actually opened to AI tools.
  *
@@ -28,7 +39,29 @@ export interface ExposureOptions {
      * tools, so requiring the user to opt it in would be asking them to
      * authorise a folder they never made for a purpose it already has. */
     memoriesRootId?: string | null;
+    /**
+     * The unlocked account. When given, a folder that belongs to someone else's
+     * shared workspace (its row is not this account's, or its workspace's owner
+     * is someone else) is judged by `mcpEnabledForMember` alone: the row's own
+     * `mcpEnabled` is one value every editor of the workspace can set, so it is
+     * not this member's consent. See `isForeignFolder`.
+     */
+    viewerId?: string;
+    /** Workspace id to its owner, for the folders that carry a workspaceId.
+     * A workspace missing here counts as someone else's. */
+    workspaceOwners?: ReadonlyMap<string, string>;
 }
+/**
+ * Whether a folder is in a shared workspace this account does not own.
+ *
+ * Such a folder is closed to this account's AI tools unless the server reports
+ * it open for this member (`mcpEnabledForMember`). The hosted connector's
+ * folder list carries that per-member value. The local CLI has no per-member
+ * switch yet, so there a workspace shared with this account stays closed to
+ * AI tools; the workspaces this account owns follow their own switch as
+ * before.
+ */
+export declare function isForeignFolder(folder: Pick<ApiFolder, 'userId' | 'workspaceId'>, viewerId: string, workspaceOwners?: ReadonlyMap<string, string>): boolean;
 export declare function computeExposure(folders: ReadonlyArray<ApiFolder>, opts?: ExposureOptions): Exposure;
 /**
  * The sentence appended to any result that was filtered. Never omitted when
@@ -38,5 +71,6 @@ export declare function computeExposure(folders: ReadonlyArray<ApiFolder>, opts?
 export declare function filteredNotice(hidden: {
     inClosedFolders: number;
     unfiled: number;
+    shared?: number;
 }, exposure: Exposure): string;
 //# sourceMappingURL=exposure.d.ts.map

package/dist/exposure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exposure.d.ts","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,QAAQ;IACvB,iDAAiD;IACjD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IACzC,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;oBAEgB;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;;0EAGsE;IACtE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EACjC,IAAI,GAAE,eAAoB,GACzB,QAAQ,CAgDV;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACpD,QAAQ,EAAE,QAAQ,GACjB,MAAM,CA6BR"}
+{"version":3,"file":"exposure.d.ts","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAGnD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,OAAO,CAEtE;AAED;2EAC2E;AAC3E,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,KAAK,CAKlE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,QAAQ;IACvB,iDAAiD;IACjD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IACzC,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;oBAEgB;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;;0EAGsE;IACtE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;4DACwD;IACxD,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,aAAa,CAAC,EACjD,QAAQ,EAAE,MAAM,EAChB,eAAe,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,GACvD,OAAO,CAIT;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EACjC,IAAI,GAAE,eAAoB,GACzB,QAAQ,CA+DV;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EACrE,QAAQ,EAAE,QAAQ,GACjB,MAAM,CAqCR"}

package/dist/exposure.js

@@ -1,6 +1,46 @@
+import { describeKeyFailure } from './keyring.js';
+/**
+ * A note in a shared workspace is encrypted under that workspace's key at the
+ * note's version, not the account key. The keyring (keyring.ts) opens that key
+ * from this account's grant; when it cannot (no grant yet, a grant that fails
+ * its checks, a granter whose keys changed) the note is skipped in every scan
+ * and refused by id, never opened or written with the account key.
+ */
+export function isSharedNote(row) {
+    return row.keyVersion !== undefined && row.keyVersion !== null;
+}
+/** The reason is one of a fixed set (keyring.ts, describeKeyFailure), never
+ * the cause's own message, which can be server text or decrypted bytes. */
+export function sharedNoteError(id, cause) {
+    return new Error(`Note ${id} is in a shared workspace whose key could not be opened here (${describeKeyFailure(cause)}). ` +
+        'Open it in the Virlow app instead.');
+}
+/**
+ * Whether a folder is in a shared workspace this account does not own.
+ *
+ * Such a folder is closed to this account's AI tools unless the server reports
+ * it open for this member (`mcpEnabledForMember`). The hosted connector's
+ * folder list carries that per-member value. The local CLI has no per-member
+ * switch yet, so there a workspace shared with this account stays closed to
+ * AI tools; the workspaces this account owns follow their own switch as
+ * before.
+ */
+export function isForeignFolder(folder, viewerId, workspaceOwners = new Map()) {
+    if (folder.userId !== undefined && folder.userId !== null && folder.userId !== viewerId)
+        return true;
+    if (folder.workspaceId)
+        return workspaceOwners.get(folder.workspaceId) !== viewerId;
+    return false;
+}
 export function computeExposure(folders, opts = {}) {
     const byId = new Map(folders.map((f) => [f.id, f]));
-    const memoriesRootId = opts.memoriesRootId ?? folders.find((f) => f.kind === 'memories')?.id ?? null;
+    const viewerId = opts.viewerId;
+    const foreign = (folder) => viewerId !== undefined && isForeignFolder(folder, viewerId, opts.workspaceOwners);
+    // Memories are never shared: a "memories" folder in someone else's
+    // workspace is not this account's memories root, whatever its kind says.
+    const candidateRootId = opts.memoriesRootId ?? folders.find((f) => f.kind === 'memories' && !foreign(f))?.id ?? null;
+    const candidateRoot = candidateRootId === null ? undefined : byId.get(candidateRootId);
+    const memoriesRootId = candidateRoot !== undefined && foreign(candidateRoot) ? null : candidateRootId;
     const resolved = new Map();
     const isExposed = (folderId) => {
         const cached = resolved.get(folderId);
@@ -13,13 +53,22 @@ export function computeExposure(folders, opts = {}) {
         const seen = new Set();
         let current = folderId;
         let exposed = false;
+        const start = byId.get(folderId);
+        const startForeign = start !== undefined && foreign(start);
         while (current !== null && !seen.has(current)) {
             seen.add(current);
             const folder = byId.get(current);
             if (folder === undefined)
                 break;
+            // A shared workspace is a top-level tree, so a walk never legitimately
+            // crosses between this account's folders and someone else's. One that
+            // would (a parent the server put there) stops, closed, so neither side's
+            // switch can open the other.
+            if (foreign(folder) !== startForeign)
+                break;
             chain.push(folder.id);
-            if (folder.mcpEnabled === true || folder.id === memoriesRootId) {
+            const switchedOn = startForeign ? folder.mcpEnabledForMember === true : folder.mcpEnabled === true;
+            if (switchedOn || folder.id === memoriesRootId) {
                 exposed = true;
                 break;
             }
@@ -69,6 +118,11 @@ export function filteredNotice(hidden, exposure) {
             `${n === 1 ? 'it' : 'them'} into a folder that is exposed to MCP to include ` +
             `${n === 1 ? 'it' : 'them'}.`);
     }
+    if (hidden.shared && hidden.shared > 0) {
+        const n = hidden.shared;
+        parts.push(`${n} note${n === 1 ? '' : 's'} in shared workspaces left out: the workspace key did not ` +
+            'open or did not check out here. Open the workspace in the Virlow app to see them.');
+    }
     return parts.length === 0 ? '' : `\n\n(${parts.join(' ')})`;
 }
 //# sourceMappingURL=exposure.js.map

package/dist/exposure.js.map

@@ -1 +1 @@
-{"version":3,"file":"exposure.js","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAkCA,MAAM,UAAU,eAAe,CAC7B,OAAiC,EACjC,OAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;IAEhF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAW,EAAE;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,yEAAyE;QACzE,uEAAuE;QACvE,kCAAkC;QAClC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,OAAO,GAAkB,QAAQ,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,OAAO,OAAO,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,MAAM,MAAM,GAA0B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;gBAC/D,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;IAED,OAAO;QACL,qEAAqE;QACrE,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvE,iBAAiB;QACjB,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,KAAK,OAAO,CAAC,MAAM;KACtE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAoD,EACpD,QAAkB;IAElB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,SAAS;YAChB,CAAC,CAAC,GAAG,KAAK,iEAAiE;gBACvE,2EAA2E;YAC/E,CAAC,CAAC,GAAG,KAAK,0DAA0D;gBAChE,0EAA0E,CACjF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,mDAAmD;IACnD,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG;YAChF,8DAA8D;YAC9D,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,mDAAmD;YAC7E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAChC,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"exposure.js","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,GAAgC;IAC3D,OAAO,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC;AACjE,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,KAAe;IACzD,OAAO,IAAI,KAAK,CACd,QAAQ,EAAE,iEAAiE,kBAAkB,CAAC,KAAK,CAAC,KAAK;QACvG,oCAAoC,CACvC,CAAC;AACJ,CAAC;AA6CD;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAiD,EACjD,QAAgB,EAChB,kBAA+C,IAAI,GAAG,EAAE;IAExD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrG,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAiC,EACjC,OAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,MAAiB,EAAW,EAAE,CAC7C,QAAQ,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACpF,mEAAmE;IACnE,yEAAyE;IACzE,MAAM,eAAe,GACnB,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;IAC/F,MAAM,aAAa,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvF,MAAM,cAAc,GAAG,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;IAEtG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAW,EAAE;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,yEAAyE;QACzE,uEAAuE;QACvE,kCAAkC;QAClC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,OAAO,GAAkB,QAAQ,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;QAE3D,OAAO,OAAO,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,MAAM,MAAM,GAA0B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,uEAAuE;YACvE,sEAAsE;YACtE,yEAAyE;YACzE,6BAA6B;YAC7B,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,YAAY;gBAAE,MAAM;YAC5C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC;YACnG,IAAI,UAAU,IAAI,MAAM,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;gBAC/C,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;IAED,OAAO;QACL,qEAAqE;QACrE,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvE,iBAAiB;QACjB,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,KAAK,OAAO,CAAC,MAAM;KACtE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAqE,EACrE,QAAkB;IAElB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,SAAS;YAChB,CAAC,CAAC,GAAG,KAAK,iEAAiE;gBACvE,2EAA2E;YAC/E,CAAC,CAAC,GAAG,KAAK,0DAA0D;gBAChE,0EAA0E,CACjF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,mDAAmD;IACnD,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG;YAChF,8DAA8D;YAC9D,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,mDAAmD;YAC7E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAChC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,4DAA4D;YACxF,mFAAmF,CACtF,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9D,CAAC"}

package/dist/index.d.ts

@@ -1,9 +1,12 @@
 export { ApiError, VirlowApi } from './api.js';
-export type { ApiFile, ApiFileWithData, ApiFolder, ApiNote, FileUpload, AuthTokens, LoginResult, NoteWrite, RefreshBody } from './api.js';
+export type { ApiFile, ApiFileWithData, ApiFolder, ApiIdentity, ApiNote, ApiWorkspaceDetail, ApiWorkspaceGrant, ApiWorkspaceSummary, FileUpload, AuthTokens, LoginResult, NoteWrite, RefreshBody, } from './api.js';
 export { LockedError, Vault } from './vault.js';
 export type { UnlockedSession } from './vault.js';
 export { NotesService, SEARCH_SCAN_CAP } from './notes.js';
 export { AttachmentsService } from './attachments.js';
+export { KeyChangedError, NoWorkspaceKeyError, WorkspaceKeyring, memorySignerMemory } from './keyring.js';
+export type { KeyChoice, SignerMemory } from './keyring.js';
+export { fileSignerMemory } from './signer-file.js';
 export type { AttachmentInfo } from './attachments.js';
 export { MemoryStore, SYNC_PAGE_LIMIT } from './memories.js';
 export type { CachedMemory, SimilarMemory, SyncResult } from './memories.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC/C,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC1I,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7D,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,aAAa,EACb,cAAc,EACd,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChE,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EACL,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,UAAU,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,GACT,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC1H,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACnF,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjG;;;;;;;;;;GAUG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC/C,YAAY,EACV,OAAO,EACP,eAAe,EACf,SAAS,EACT,WAAW,EACX,OAAO,EACP,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,WAAW,EACX,SAAS,EACT,WAAW,GACZ,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC1G,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7D,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,aAAa,EACb,cAAc,EACd,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChE,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EACL,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,UAAU,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,GACT,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC1H,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACnF,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjG;;;;;;;;;;GAUG"}

package/dist/index.js

@@ -2,6 +2,8 @@ export { ApiError, VirlowApi } from './api.js';
 export { LockedError, Vault } from './vault.js';
 export { NotesService, SEARCH_SCAN_CAP } from './notes.js';
 export { AttachmentsService } from './attachments.js';
+export { KeyChangedError, NoWorkspaceKeyError, WorkspaceKeyring, memorySignerMemory } from './keyring.js';
+export { fileSignerMemory } from './signer-file.js';
 export { MemoryStore, SYNC_PAGE_LIMIT } from './memories.js';
 export { MEMORY_NOTE_TYPE, mergeMeta, parseMemoryNote, serializeMemoryBody, toCodeEnvelope, } from './memory-note.js';
 export { ENTITY_REGISTRY_NOTE_TYPE, ENTITY_REGISTRY_TITLE, ENTITY_REGISTRY_VERSION, canWriteRegistry, describeInRegistry, describedEntities, emptyRegistry, mergeRegistries, parseRegistry, registryKeyFor, serializeRegistry, } from './entity-registry.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE7D,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,aAAa,EACb,cAAc,EACd,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EACL,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,UAAU,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,GACT,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnF,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC;;;;;;;;;;GAUG"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAgB/C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE1G,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE7D,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,aAAa,EACb,cAAc,EACd,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EACL,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,UAAU,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,GACT,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnF,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC;;;;;;;;;;GAUG"}

package/dist/keyring.d.ts

@@ -0,0 +1,156 @@
+import type { ApiFolder, ApiWorkspaceSummary, VirlowApi } from './api.js';
+import { type Vault } from './vault.js';
+/**
+ * Which key a row in a shared workspace is encrypted under, and the key
+ * itself: the connector's side of the web app's keyring
+ * (src/lib/sharing/keyring.ts in the app, KeyBook.kt on Android;
+ * docs/superpowers/specs/2026-10-14-shared-workspaces-design.md).
+ *
+ * A personal row (no key version) uses the account key. A row in a shared
+ * workspace uses that workspace's key at the row's version, opened from this
+ * account's grant. Before a key is used:
+ *
+ * - the grant must open with this account's identity (whose private halves
+ *   are sealed under the account key), bound to this workspace, version and
+ *   person;
+ * - the granter must be allowed to grant: the workspace's owner, or an owner
+ *   or editor in its member list; a grant this account made itself must carry
+ *   this account's own signing key;
+ * - the signature must check out against the signing key this connector
+ *   first saw for the granter. A key that changed since is refused, because
+ *   that is what a server swapping keys would look like.
+ *
+ * Writes never go under a key version older than one this account has
+ * already seen for the workspace, so a server cannot roll a workspace back to
+ * a key a removed member still holds.
+ *
+ * Everything opened is held for one unlock and dropped when the vault locks,
+ * with the same epoch guard NotesService uses, so a fetch still in flight at
+ * the lock never seeds the next session. The remembered signing keys are
+ * public and are kept across locks (they are what makes trust-on-first-use
+ * mean anything); a host can persist them with `signers`.
+ *
+ * Where the pins live: the local CLI keeps them in a file (signer-file.ts),
+ * so they survive restarts. The hosted connector keeps them in memory, per
+ * process: a restart or another machine starts trusting afresh. That host
+ * already holds the account key in memory, so its pins defend against
+ * nothing it could not do anyway; they are kept for parity, not as a
+ * boundary.
+ */
+/** Signing keys seen for each person, first one wins: the web's `virlow.knownSigners`. */
+export interface SignerMemory {
+    get(userId: string): string | null;
+    /**
+     * Remember `sign` for `userId` unless a key is already remembered. Must be
+     * a compare-and-set: throws KeyChangedError when a different key got there
+     * first, never overwrites it.
+     */
+    remember(userId: string, sign: string): void;
+}
+/** Remembered for as long as the process lives. The default, and what the
+ * hosted connector uses: pins there are per process (see above). */
+export declare function memorySignerMemory(): SignerMemory;
+/**
+ * Why a workspace key did not open, as one of a fixed set. The text an AI
+ * tool sees comes only from here, never from an error's own message: those
+ * can carry server-chosen text, or (a JSON parse error) decrypted bytes.
+ */
+export type KeyFailureReason = 'no-grant' | 'key-changed' | 'signature-rejected' | 'not-authorized' | 'locked';
+export declare class SharedKeyError extends Error {
+    readonly reason: KeyFailureReason;
+    constructor(reason: KeyFailureReason);
+}
+/** Someone's signing key is not the one first seen for them. */
+export declare class KeyChangedError extends SharedKeyError {
+    readonly userId: string;
+    constructor(userId: string);
+}
+/** No key for this workspace and version opens here. */
+export declare class NoWorkspaceKeyError extends SharedKeyError {
+    constructor();
+}
+/** The grant came from someone the workspace does not let grant. */
+export declare class GranterNotAuthorizedError extends SharedKeyError {
+    constructor();
+}
+/** A write refused for a reason this module states itself (a viewer, a
+ * rollback). Its message is fixed text, safe to show as it is. */
+export declare class WriteRefusedError extends Error {
+    constructor(message: string);
+}
+export declare function keyFailureReason(err: unknown): KeyFailureReason;
+/** The fixed sentence for a failure; see KeyFailureReason. */
+export declare function describeKeyFailure(err: unknown): string;
+export interface KeyChoice {
+    key: CryptoKey;
+    /** The version sent with the ciphertext; null = the account key. */
+    keyVersion: number | null;
+    /** The workspace's owner; null for the account key. */
+    ownerId: string | null;
+}
+export declare class WorkspaceKeyring {
+    private readonly api;
+    private readonly vault;
+    /** Where the remembered signing keys live, per account. In memory by default. */
+    private readonly signers;
+    private epoch;
+    private identityPending;
+    private readonly details;
+    private readonly keys;
+    private readonly signerMemories;
+    /** `userId:workspaceId` to the highest key version this account has seen
+     * granted there. Kept across locks: versions only ever go up. */
+    private readonly highestSeen;
+    constructor(api: VirlowApi, vault: Vault, 
+    /** Where the remembered signing keys live, per account. In memory by default. */
+    signers?: (userId: string) => SignerMemory);
+    private handleLock;
+    /** The key to read a row with, from the version it was written under. */
+    forRead(accountKey: CryptoKey, keyVersion: number | null | undefined, workspaceId: string | null | undefined): Promise<CryptoKey>;
+    /**
+     * The key to write into a workspace with: its current version, as the API
+     * requires of every new ciphertext there. Never the account key: a null
+     * workspace is the only way to get that, and it is the caller's to ask.
+     * Asks the server for the current version every time, since a removal
+     * rotates the key and the connector hears no change signal.
+     *
+     * Refuses a version older than `atLeast` (the version the row being
+     * rewritten is already under) or than any this account has been granted
+     * for the workspace: writing under an older key would hand the new text to
+     * whoever a rotation meant to shut out.
+     */
+    forWrite(accountKey: CryptoKey, workspaceId: string | null | undefined, opts?: {
+        atLeast?: number | null;
+    }): Promise<KeyChoice>;
+    /** This account's role and the current key version of one workspace. Not cached. */
+    summary(workspaceId: string): Promise<ApiWorkspaceSummary>;
+    /**
+     * Who owns each workspace these folders belong to, for the exposure rule
+     * (exposure.ts, isForeignFolder). No request when none of them is shared.
+     */
+    workspaceOwners(folders: ReadonlyArray<ApiFolder>): Promise<Map<string, string>>;
+    /** A workspace key version, opened and checked. Kept until the vault locks. */
+    workspaceKey(workspaceId: string, keyVersion: number): Promise<CryptoKey>;
+    private versionKey;
+    private highestVersion;
+    private noteVersion;
+    private openKey;
+    /**
+     * The granter must be allowed to grant (the owner, or an owner or editor in
+     * the member list), and a grant this account made must carry its own
+     * signing key: one the server substituted would otherwise be pinned for
+     * this account itself on first use.
+     */
+    private requireAuthorizedGranter;
+    private detail;
+    /**
+     * This account's identity, opened with the unlocked account key. Never made
+     * here: an account without one has been sealed no workspace keys, and the
+     * app makes it on the next unlock there. Any failure to open it is reported
+     * as "no grant", without its cause: a parse error would quote the bytes it
+     * choked on, and those are decrypted.
+     */
+    private identity;
+    private signerMemory;
+}
+//# sourceMappingURL=keyring.d.ts.map

package/dist/keyring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../src/keyring.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAyC,mBAAmB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACjH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,0FAA0F;AAC1F,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9C;AAED;oEACoE;AACpE,wBAAgB,kBAAkB,IAAI,YAAY,CAUjD;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,aAAa,GAAG,oBAAoB,GAAG,gBAAgB,GAAG,QAAQ,CAAC;AAU/G,qBAAa,cAAe,SAAQ,KAAK;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB;gBAAxB,MAAM,EAAE,gBAAgB;CAI9C;AAED,gEAAgE;AAChE,qBAAa,eAAgB,SAAQ,cAAc;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM;CAK3B;AAED,wDAAwD;AACxD,qBAAa,mBAAoB,SAAQ,cAAc;;CAKtD;AAED,oEAAoE;AACpE,qBAAa,yBAA0B,SAAQ,cAAc;;CAK5D;AAED;kEACkE;AAClE,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAK/D;AAED,8DAA8D;AAC9D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEvD;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,SAAS,CAAC;IACf,oEAAoE;IACpE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,uDAAuD;IACvD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAUD,qBAAa,gBAAgB;IAWzB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,iFAAiF;IACjF,OAAO,CAAC,QAAQ,CAAC,OAAO;IAb1B,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,eAAe,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;IAC1E,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyC;IAC9D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAmC;IAClE;qEACiE;IACjE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;gBAGtC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,KAAK;IAC7B,iFAAiF;IAChE,OAAO,GAAE,CAAC,MAAM,EAAE,MAAM,KAAK,YAAyC;IAMzF,OAAO,CAAC,UAAU;IAOlB,yEAAyE;IACnE,OAAO,CACX,UAAU,EAAE,SAAS,EACrB,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACrC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACrC,OAAO,CAAC,SAAS,CAAC;IAMrB;;;;;;;;;;;OAWG;IACG,QAAQ,CACZ,UAAU,EAAE,SAAS,EACrB,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAO,GACrC,OAAO,CAAC,SAAS,CAAC;IAyBrB,oFAAoF;IAC9E,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAOhE;;;OAGG;IACG,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAMtF,+EAA+E;IAC/E,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAgBzE,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,WAAW;YAKL,OAAO;IAwCrB;;;;;OAKG;YACW,wBAAwB;IA6BtC,OAAO,CAAC,MAAM;IAYd;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAoBhB,OAAO,CAAC,YAAY;CAQrB"}