@hebbianvault/mcp 0.2.0 → 0.3.0

package/README.md

@@ -78,6 +78,7 @@ Write `~/.config/hebbian/mcp-tenant.json`:
 | `HEBBIAN_API_TOKEN` | Your token (required). `HEBBIAN_TOKEN` is also accepted. |
 | `HEBBIAN_API_URL` | Override the API base URL (Enterprise self-host). Defaults to the Hebbian SaaS API. |
 | `HEBBIAN_TENANT` | Optional workspace slug — only needed if your account belongs to more than one workspace. |
+| `HEBBIAN_GRAPH_PAGINATION` | Opt in to paginated workspace graph retrieval (`1`, `true`, `yes`, or `on`). |
 
 ## Token scope
 
@@ -90,6 +91,7 @@ Your token decides what the adapter can see and do — a personal-workspace toke
 | `hebbian_read_node` | Read a single node by UUID (content, metadata, connected edges) |
 | `hebbian_search` | Find nodes in your workspace matching a query |
 | `hebbian_ask` | Ask a question and get an answer backed by source quotes |
+| `hebbian_context` | Describe a task and a token budget, get back a salience-ranked context pack that fits |
 | `hebbian_capture` | Write a note into your workspace |
 | `hebbian_traverse` | Explore nodes connected to a starting node |
 | `hebbian_provenance` | See where a node's knowledge came from |
@@ -98,6 +100,38 @@ Your token decides what the adapter can see and do — a personal-workspace toke
 
 Results only ever include what your token is allowed to see.
 
+## Onboard an agent you already use
+
+Every agent you already run carries its own context: a Claude Code memory directory, CLAUDE.md files, a folder of markdown notes. The `absorb` command brings that accumulated context into Hebbian, so an agent you have used for months arrives with what it already knows instead of a blank slate.
+
+Absorbed files land as seeds in your review lane (they do not write straight into the workspace), attributed to the agent principal you name. You review and promote them like any other proposed knowledge.
+
+First, register the agent and issue it a token from your Hebbian integrations page (AI Tools tab), and note its agent id. Then point `absorb` at the store:
+
+```bash
+# A Claude Code memory directory (MEMORY.md index + CLAUDE.md files + notes)
+HEBBIAN_API_TOKEN=your_agent_token \
+  npx -y @hebbianvault/mcp absorb claude-code ~/.claude/projects/my-project --agent <agent_id>
+
+# Any directory of markdown files
+HEBBIAN_API_TOKEN=your_agent_token \
+  npx -y @hebbianvault/mcp absorb markdown ./docs --agent <agent_id>
+
+# Walk and report what would be uploaded, without uploading
+npx -y @hebbianvault/mcp absorb claude-code ~/.claude/projects/my-project --dry-run
+```
+
+Each `*.md` file becomes one seed. The title is the file's first heading (or its name), and the source identifier is its path relative to the directory you pointed at. Re-running `absorb` on the same directory is safe: a file already absorbed for that agent is reported as a duplicate, not uploaded twice.
+
+### What never leaves your machine
+
+`absorb` excludes secrets before anything is sent:
+
+- Files whose names look like credentials are skipped entirely: `.env*`, anything with `credentials`, `secret`, or `token` in the name, plus `.pem`, `.key`, and SSH key files.
+- Token-shaped strings inside the files it does read are redacted before upload: `sk-...`, `ghp_...`, `hbn_...`, Slack and AWS keys, JWTs, long hex and base64 blobs, and Bearer header values.
+
+Every run prints a summary of how many files were skipped and how many strings were redacted, so you can see exactly what was filtered.
+
 ## Security
 
 - Tokens are bearer credentials — treat like passwords.
@@ -107,7 +141,7 @@ Results only ever include what your token is allowed to see.
 
 ## Python
 
-A Python sibling package is available as `hebbianvault-mcp` on PyPI. Same 8 tools, same configuration.
+A Python sibling package is available as `hebbianvault-mcp` on PyPI. Same 9 tools, same configuration.
 
 ## Development
 

package/dist/absorb/cli.d.ts

@@ -0,0 +1,25 @@
+/**
+ * src/absorb/cli.ts
+ *
+ * The `absorb` command (ADR-055 §4). Onboard an agent you already use by
+ * uploading its existing context store as review-lane seeds.
+ *
+ *   hebbian-mcp absorb claude-code <dir> --agent <agent_id>
+ *   hebbian-mcp absorb markdown    <dir> --agent <agent_id>
+ *
+ * Reads *.md files locally (Claude Code memory dir: MEMORY.md index + CLAUDE.md
+ * files; generic markdown: any *.md), skips credential-named files, redacts
+ * token-shaped strings, then batches the items to
+ * POST /v1/agents/{agent_id}/absorb with the agent token from the existing
+ * config/env convention (config.ts).
+ *
+ * --dry-run walks and reports without uploading. The auth token + API URL come
+ * from HEBBIAN_API_TOKEN / config file exactly like the MCP server.
+ */
+/**
+ * Run the absorb command. Returns the process exit code (0 ok, non-zero error).
+ * Reads the store, prints the skipped/redacted summary, then (unless --dry-run)
+ * uploads in batches and prints the per-batch tally.
+ */
+export declare function runAbsorb(argv: string[]): Promise<number>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/absorb/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/absorb/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA6FH;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAsE/D"}

package/dist/absorb/cli.js

@@ -0,0 +1,140 @@
+/**
+ * src/absorb/cli.ts
+ *
+ * The `absorb` command (ADR-055 §4). Onboard an agent you already use by
+ * uploading its existing context store as review-lane seeds.
+ *
+ *   hebbian-mcp absorb claude-code <dir> --agent <agent_id>
+ *   hebbian-mcp absorb markdown    <dir> --agent <agent_id>
+ *
+ * Reads *.md files locally (Claude Code memory dir: MEMORY.md index + CLAUDE.md
+ * files; generic markdown: any *.md), skips credential-named files, redacts
+ * token-shaped strings, then batches the items to
+ * POST /v1/agents/{agent_id}/absorb with the agent token from the existing
+ * config/env convention (config.ts).
+ *
+ * --dry-run walks and reports without uploading. The auth token + API URL come
+ * from HEBBIAN_API_TOKEN / config file exactly like the MCP server.
+ */
+import { HebbianClient } from "../client.js";
+import { loadConfig } from "../config.js";
+import { isSupportedStore, scanDirectory, supportedStores, } from "./importers.js";
+/** Server-side batch cap (ADR-055 §2). Keep in sync with MAX_BATCH_ITEMS. */
+const BATCH_SIZE = 200;
+function parseFlags(argv) {
+    const positionals = [];
+    let agentId;
+    let dryRun = false;
+    for (let i = 0; i < argv.length; i += 1) {
+        const a = argv[i];
+        if (a === "--agent" || a === "--agent-id") {
+            agentId = argv[i + 1];
+            i += 1;
+        }
+        else if (a.startsWith("--agent=")) {
+            agentId = a.slice("--agent=".length);
+        }
+        else if (a === "--dry-run") {
+            dryRun = true;
+        }
+        else {
+            positionals.push(a);
+        }
+    }
+    return { agentId, dryRun, positionals };
+}
+const USAGE = [
+    "Usage: hebbian-mcp absorb <store> <dir> --agent <agent_id> [--dry-run]",
+    "",
+    `  store    one of: ${supportedStores().join(", ")}`,
+    "  dir      path to the context store directory",
+    "  --agent  the agent principal UUID to absorb into (the agent you already use)",
+    "  --dry-run  walk and report; do not upload",
+    "",
+    "Auth: set HEBBIAN_API_TOKEN to the agent's token (or use the config file).",
+    "Reads *.md files, skips credential-named files, redacts token-shaped strings,",
+    "then uploads each file as a review-lane seed attributed to the agent.",
+].join("\n");
+/** Resolve + validate args. Returns null (after printing usage) on a usage error. */
+function resolveArgs(argv) {
+    const { agentId, dryRun, positionals } = parseFlags(argv);
+    const [store, dir] = positionals;
+    if (!store || !dir) {
+        process.stderr.write(`${USAGE}\n`);
+        return null;
+    }
+    if (!isSupportedStore(store)) {
+        process.stderr.write(`absorb: unsupported store "${store}". Supported: ${supportedStores().join(", ")}\n`);
+        return null;
+    }
+    if (!dryRun && !agentId) {
+        process.stderr.write("absorb: --agent <agent_id> is required (or use --dry-run)\n");
+        return null;
+    }
+    return { store, dir, agentId: agentId ?? "", dryRun };
+}
+function chunk(arr, size) {
+    const out = [];
+    for (let i = 0; i < arr.length; i += size)
+        out.push(arr.slice(i, i + size));
+    return out;
+}
+/**
+ * Run the absorb command. Returns the process exit code (0 ok, non-zero error).
+ * Reads the store, prints the skipped/redacted summary, then (unless --dry-run)
+ * uploads in batches and prints the per-batch tally.
+ */
+export async function runAbsorb(argv) {
+    const args = resolveArgs(argv);
+    if (args === null)
+        return 2;
+    const scan = scanDirectory(args.dir, args.store);
+    // Honest summary line (ADR-055 §4): how many files, skipped secrets, redactions.
+    process.stderr.write(`[absorb] store=${args.store} dir=${args.dir}: ` +
+        `${scan.items.length} file(s) to absorb, ` +
+        `skipped ${scan.skippedSecretFiles.length} credential-named file(s), ` +
+        `redacted ${scan.redactedSecrets} token-shaped string(s) across ${scan.redactedItems} file(s)\n`);
+    if (scan.skippedSecretFiles.length > 0) {
+        for (const f of scan.skippedSecretFiles) {
+            process.stderr.write(`[absorb]   skipped (looks like secrets): ${f}\n`);
+        }
+    }
+    if (scan.items.length === 0) {
+        process.stderr.write("[absorb] nothing to absorb.\n");
+        return 0;
+    }
+    if (args.dryRun) {
+        process.stderr.write(`[absorb] dry-run: would upload ${scan.items.length} item(s) to ` +
+            `/v1/agents/${args.agentId || "<agent_id>"}/absorb in ` +
+            `${chunk(scan.items, BATCH_SIZE).length} batch(es). No upload performed.\n`);
+        return 0;
+    }
+    const config = loadConfig();
+    const client = new HebbianClient(config.apiUrl, config.token, config.tenant, config.graphPagination);
+    let accepted = 0;
+    let duplicates = 0;
+    let errors = 0;
+    const batches = chunk(scan.items, BATCH_SIZE);
+    for (let i = 0; i < batches.length; i += 1) {
+        const batch = batches[i];
+        try {
+            const resp = (await client.post(`/v1/agents/${args.agentId}/absorb`, {
+                items: batch,
+            }));
+            accepted += resp.accepted ?? 0;
+            duplicates += resp.duplicates ?? 0;
+            errors += resp.errors ?? 0;
+            process.stderr.write(`[absorb] batch ${i + 1}/${batches.length}: ` +
+                `accepted ${resp.accepted ?? 0}, duplicate ${resp.duplicates ?? 0}, error ${resp.errors ?? 0}\n`);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`[absorb] batch ${i + 1}/${batches.length} failed: ${message}\n`);
+            return 1;
+        }
+    }
+    process.stderr.write(`[absorb] done: ${accepted} new seed(s), ${duplicates} already absorbed, ${errors} error(s). ` +
+        "New seeds await review in the Hebbian review lane.\n");
+    return errors > 0 ? 1 : 0;
+}
+//# sourceMappingURL=cli.js.map

package/dist/absorb/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/absorb/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,GAEhB,MAAM,gBAAgB,CAAC;AAExB,6EAA6E;AAC7E,MAAM,UAAU,GAAG,GAAG,CAAC;AAevB,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,OAA2B,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;YAC1C,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,KAAK,GAAG;IACZ,wEAAwE;IACxE,EAAE;IACF,sBAAsB,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IACpD,gDAAgD;IAChD,gFAAgF;IAChF,6CAA6C;IAC7C,EAAE;IACF,4EAA4E;IAC5E,+EAA+E;IAC/E,uEAAuE;CACxE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,qFAAqF;AACrF,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,WAAW,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,KAAK,iBAAiB,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACrF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,KAAK,CAAI,GAAQ,EAAE,IAAY;IACtC,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC5E,OAAO,GAAG,CAAC;AACb,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAE5B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAEjD,iFAAiF;IACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kBAAkB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI;QAC9C,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,sBAAsB;QAC1C,WAAW,IAAI,CAAC,kBAAkB,CAAC,MAAM,6BAA6B;QACtE,YAAY,IAAI,CAAC,eAAe,kCAAkC,IAAI,CAAC,aAAa,YAAY,CACnG,CAAC;IACF,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kCAAkC,IAAI,CAAC,KAAK,CAAC,MAAM,cAAc;YAC/D,cAAc,IAAI,CAAC,OAAO,IAAI,YAAY,aAAa;YACvD,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,MAAM,oCAAoC,CAC9E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,eAAe,CACvB,CAAC;IAEF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAiB,OAAO,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,SAAS,EAAE;gBACnE,KAAK,EAAE,KAAK;aACb,CAAC,CAAwB,CAAC;YAC3B,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC/B,UAAU,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kBAAkB,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI;gBAC3C,YAAY,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CACnG,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,YAAY,OAAO,IAAI,CAAC,CAAC;YACvF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kBAAkB,QAAQ,iBAAiB,UAAU,sBAAsB,MAAM,aAAa;QAC5F,sDAAsD,CACzD,CAAC;IACF,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC"}

package/dist/absorb/importers.d.ts

@@ -0,0 +1,53 @@
+/**
+ * src/absorb/importers.ts
+ *
+ * Local importers for the absorb command (ADR-055 §4). An importer walks a
+ * directory, reads the files relevant to one store kind, and turns each into an
+ * AbsorbItem. It NEVER posts anything — the CLI batches the items to the API.
+ *
+ * Two importers ship in this slice:
+ *   claude-code — a Claude Code memory directory: every *.md file, including
+ *                 the MEMORY.md index and any CLAUDE.md files.
+ *   markdown    — generic catch-all: walk a directory tree for every *.md file.
+ *
+ * Both reuse the same secret guards (secrets.ts): a credential-named file is
+ * skipped, and token-shaped strings are redacted from the content before it is
+ * handed back. Each importer reports skipped/redacted counts so the CLI can
+ * print an honest summary.
+ */
+/** One memory item ready to absorb. Matches the API's AbsorbItem shape. */
+export interface AbsorbItem {
+    store_kind: string;
+    /** Stable identifier within the store — the file's path relative to the root. */
+    source_id: string;
+    /** First markdown heading, else the filename. */
+    title: string;
+    /** Redacted file content. */
+    content: string;
+    /** Filesystem birthtime (ISO-8601), best-effort. */
+    created_at?: string;
+    /** Filesystem mtime (ISO-8601). */
+    updated_at?: string;
+}
+/** Outcome of walking a directory: items to upload + what was skipped/redacted. */
+export interface ScanResult {
+    items: AbsorbItem[];
+    skippedSecretFiles: string[];
+    redactedItems: number;
+    redactedSecrets: number;
+}
+declare const SUPPORTED_STORES: readonly ["claude-code", "markdown"];
+export type StoreKind = (typeof SUPPORTED_STORES)[number];
+export declare function isSupportedStore(kind: string): kind is StoreKind;
+export declare function supportedStores(): readonly string[];
+/**
+ * Walk a directory and build absorb items for one store kind.
+ *
+ * Shared by both importers — they differ only in the store_kind tag and (for
+ * documentation) the expectation of what lives in the directory; the file
+ * selection (every *.md, including MEMORY.md and CLAUDE.md) is identical, which
+ * is exactly what a Claude Code memory directory contains.
+ */
+export declare function scanDirectory(root: string, storeKind: string): ScanResult;
+export {};
+//# sourceMappingURL=importers.d.ts.map

package/dist/absorb/importers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"importers.d.ts","sourceRoot":"","sources":["../../src/absorb/importers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB;AAeD,QAAA,MAAM,gBAAgB,sCAAuC,CAAC;AAC9D,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,SAAS,CAEhE;AAED,wBAAgB,eAAe,IAAI,SAAS,MAAM,EAAE,CAEnD;AA4CD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAwCzE"}

package/dist/absorb/importers.js

@@ -0,0 +1,132 @@
+/**
+ * src/absorb/importers.ts
+ *
+ * Local importers for the absorb command (ADR-055 §4). An importer walks a
+ * directory, reads the files relevant to one store kind, and turns each into an
+ * AbsorbItem. It NEVER posts anything — the CLI batches the items to the API.
+ *
+ * Two importers ship in this slice:
+ *   claude-code — a Claude Code memory directory: every *.md file, including
+ *                 the MEMORY.md index and any CLAUDE.md files.
+ *   markdown    — generic catch-all: walk a directory tree for every *.md file.
+ *
+ * Both reuse the same secret guards (secrets.ts): a credential-named file is
+ * skipped, and token-shaped strings are redacted from the content before it is
+ * handed back. Each importer reports skipped/redacted counts so the CLI can
+ * print an honest summary.
+ */
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join, relative, sep } from "node:path";
+import { redactSecrets, shouldSkipFile } from "./secrets.js";
+/** Directories never descended into (noise + secret stores). */
+const SKIP_DIRS = new Set([
+    "node_modules",
+    ".git",
+    ".venv",
+    "venv",
+    "__pycache__",
+    "dist",
+    "build",
+    ".next",
+    ".cache",
+]);
+const SUPPORTED_STORES = ["claude-code", "markdown"];
+export function isSupportedStore(kind) {
+    return SUPPORTED_STORES.includes(kind);
+}
+export function supportedStores() {
+    return SUPPORTED_STORES;
+}
+/** Recursively collect every *.md file under root (relative paths). */
+function collectMarkdownFiles(root) {
+    const out = [];
+    const walk = (dir) => {
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return; // unreadable dir — skip quietly
+        }
+        for (const entry of entries) {
+            const abs = join(dir, entry);
+            let st;
+            try {
+                st = statSync(abs);
+            }
+            catch {
+                continue;
+            }
+            if (st.isDirectory()) {
+                if (!SKIP_DIRS.has(entry))
+                    walk(abs);
+                continue;
+            }
+            if (st.isFile() && entry.toLowerCase().endsWith(".md")) {
+                out.push(relative(root, abs));
+            }
+        }
+    };
+    walk(root);
+    return out.sort();
+}
+/** First markdown heading in the content, else the basename without extension. */
+function deriveTitle(content, relPath) {
+    for (const raw of content.split("\n")) {
+        const line = raw.trim();
+        const m = /^#{1,6}\s+(.+?)\s*#*$/.exec(line);
+        if (m && m[1])
+            return m[1].trim();
+    }
+    const base = relPath.split(/[\\/]/).pop() ?? relPath;
+    return base.replace(/\.md$/i, "");
+}
+/**
+ * Walk a directory and build absorb items for one store kind.
+ *
+ * Shared by both importers — they differ only in the store_kind tag and (for
+ * documentation) the expectation of what lives in the directory; the file
+ * selection (every *.md, including MEMORY.md and CLAUDE.md) is identical, which
+ * is exactly what a Claude Code memory directory contains.
+ */
+export function scanDirectory(root, storeKind) {
+    const rel = collectMarkdownFiles(root);
+    const items = [];
+    const skippedSecretFiles = [];
+    let redactedItems = 0;
+    let redactedSecrets = 0;
+    for (const relPath of rel) {
+        const base = relPath.split(/[\\/]/).pop() ?? relPath;
+        if (shouldSkipFile(base)) {
+            skippedSecretFiles.push(relPath);
+            continue;
+        }
+        const abs = join(root, relPath);
+        let raw;
+        let st;
+        try {
+            raw = readFileSync(abs, "utf-8");
+            st = statSync(abs);
+        }
+        catch {
+            continue;
+        }
+        const { content, redactedCount } = redactSecrets(raw);
+        if (redactedCount > 0) {
+            redactedItems += 1;
+            redactedSecrets += redactedCount;
+        }
+        // Normalise source_id to forward slashes so it is stable across OSes.
+        const sourceId = relPath.split(sep).join("/");
+        items.push({
+            store_kind: storeKind,
+            source_id: sourceId,
+            title: deriveTitle(content, relPath),
+            content,
+            created_at: st.birthtime?.toISOString?.(),
+            updated_at: st.mtime?.toISOString?.(),
+        });
+    }
+    return { items, skippedSecretFiles, redactedItems, redactedSecrets };
+}
+//# sourceMappingURL=importers.js.map

package/dist/absorb/importers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"importers.js","sourceRoot":"","sources":["../../src/absorb/importers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAyB7D,gEAAgE;AAChE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,MAAM;IACN,OAAO;IACP,MAAM;IACN,aAAa;IACb,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,UAAU,CAAU,CAAC;AAG9D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAQ,gBAAsC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,uEAAuE;AACvE,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,gCAAgC;QAC1C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,kFAAkF;AAClF,SAAS,WAAW,CAAC,OAAe,EAAE,OAAe;IACnD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,SAAiB;IAC3D,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;QACrD,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,GAAW,CAAC;QAChB,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,aAAa,IAAI,CAAC,CAAC;YACnB,eAAe,IAAI,aAAa,CAAC;QACnC,CAAC;QACD,sEAAsE;QACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC;YACpC,OAAO;YACP,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE;YACzC,UAAU,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AACvE,CAAC"}

package/dist/absorb/secrets.d.ts

@@ -0,0 +1,34 @@
+/**
+ * src/absorb/secrets.ts
+ *
+ * Secret exclusion + redaction for the absorb importers (ADR-055 §4).
+ *
+ * Two layers, both non-negotiable:
+ *   1. File exclusion — never read a file whose name looks like it holds
+ *      credentials (.env*, *credentials*, *secret*, *token*-named files).
+ *   2. Content redaction — even in a file we DO read, replace token-shaped
+ *      strings (long base64/hex, sk-..., ghp_..., hbn_..., AWS keys, JWTs)
+ *      with a [REDACTED] marker before the content ever leaves the machine.
+ *
+ * Nothing here talks to the network. The importer calls shouldSkipFile() per
+ * file and redactSecrets() on every body it is about to upload.
+ */
+/**
+ * True when a file should be skipped entirely because its NAME indicates it
+ * holds credentials. Matches on the basename only (path is ignored), case-
+ * insensitively.
+ */
+export declare function shouldSkipFile(filename: string): boolean;
+/** Result of redacting a string: the cleaned text + how many secrets were hit. */
+export interface RedactionResult {
+    content: string;
+    redactedCount: number;
+}
+/**
+ * Redact token-shaped strings from content. Returns the cleaned content and the
+ * number of distinct matches replaced. Idempotent on already-clean text
+ * (redactedCount === 0). The Bearer rule keeps the leading "Bearer " word so the
+ * surrounding prose still reads sensibly.
+ */
+export declare function redactSecrets(content: string): RedactionResult;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/absorb/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/absorb/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAqDH;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGxD;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAa9D"}

package/dist/absorb/secrets.js

@@ -0,0 +1,93 @@
+/**
+ * src/absorb/secrets.ts
+ *
+ * Secret exclusion + redaction for the absorb importers (ADR-055 §4).
+ *
+ * Two layers, both non-negotiable:
+ *   1. File exclusion — never read a file whose name looks like it holds
+ *      credentials (.env*, *credentials*, *secret*, *token*-named files).
+ *   2. Content redaction — even in a file we DO read, replace token-shaped
+ *      strings (long base64/hex, sk-..., ghp_..., hbn_..., AWS keys, JWTs)
+ *      with a [REDACTED] marker before the content ever leaves the machine.
+ *
+ * Nothing here talks to the network. The importer calls shouldSkipFile() per
+ * file and redactSecrets() on every body it is about to upload.
+ */
+/** A file basename matches one of these → skip it entirely. */
+const SKIP_NAME_PATTERNS = [
+    /^\.env(\..*)?$/i, // .env, .env.local, .env.production, …
+    /credentials/i, // aws credentials, gcloud credentials, *credentials*.json
+    /secret/i, // secrets.yaml, my-secret.md, *secret*
+    /(^|[._-])tokens?([._-]|$)/i, // token.txt, api-tokens.json, auth_token.md
+    /\.pem$/i, // private keys
+    /\.key$/i,
+    /id_rsa/i, // ssh keys
+    /\.p12$/i,
+    /\.pfx$/i,
+];
+/**
+ * Token-shaped substrings to redact from content. Ordered specific → generic so
+ * a prefixed key (sk-…, ghp_…) is matched by its own rule before the generic
+ * long-base64 catch-all. Each match is replaced with [REDACTED].
+ */
+const REDACT_PATTERNS = [
+    // OpenAI / Anthropic style: sk-… , sk-ant-…
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    // GitHub tokens: ghp_, gho_, ghu_, ghs_, ghr_, github_pat_
+    /\bgh[opusr]_[A-Za-z0-9]{16,}\b/g,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
+    // Hebbian tokens.
+    /\bhbn_[A-Za-z0-9_-]{16,}\b/g,
+    // Slack tokens: xoxb-, xoxp-, xapp-…
+    /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+    // AWS access key id.
+    /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g,
+    // Google API key.
+    /\bAIza[A-Za-z0-9_-]{30,}\b/g,
+    // JWT (three base64url segments).
+    /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g,
+    // Bearer headers — redact the value, keep the word.
+    /\b([Bb]earer\s+)[A-Za-z0-9._-]{20,}\b/g,
+    // URL-embedded credentials: scheme://user:password@host (postgres://, redis://,
+    // amqp://, mongodb://, …). Redact the password, keep scheme/user/host so the
+    // surrounding prose still reads sensibly.
+    /\b([a-zA-Z][a-zA-Z0-9+.-]*:\/\/[^:@\/\s]*:)[^@\s]{3,}(?=@)/g,
+    // Supabase secret / personal-access keys.
+    /\bsb_secret_[A-Za-z0-9_-]{10,}\b/g,
+    /\bsbp_[A-Za-z0-9]{20,}\b/g,
+    // Generic long hex (>= 40 chars) — sha-like / hex secrets.
+    /\b[0-9a-fA-F]{40,}\b/g,
+    // Generic long base64-ish blob (>= 40 chars). Last so prefixed keys win first.
+    /\b[A-Za-z0-9+/]{40,}={0,2}\b/g,
+];
+const REDACTION_MARKER = "[REDACTED]";
+/**
+ * True when a file should be skipped entirely because its NAME indicates it
+ * holds credentials. Matches on the basename only (path is ignored), case-
+ * insensitively.
+ */
+export function shouldSkipFile(filename) {
+    const base = filename.split(/[\\/]/).pop() ?? filename;
+    return SKIP_NAME_PATTERNS.some((re) => re.test(base));
+}
+/**
+ * Redact token-shaped strings from content. Returns the cleaned content and the
+ * number of distinct matches replaced. Idempotent on already-clean text
+ * (redactedCount === 0). The Bearer rule keeps the leading "Bearer " word so the
+ * surrounding prose still reads sensibly.
+ */
+export function redactSecrets(content) {
+    let redactedCount = 0;
+    let out = content;
+    for (const re of REDACT_PATTERNS) {
+        out = out.replace(re, (match, ...groups) => {
+            redactedCount += 1;
+            // Rules with a capture group ("Bearer ", "scheme://user:") keep the prefix
+            // so the surrounding prose still reads sensibly; only the secret is replaced.
+            const prefix = typeof groups[0] === "string" ? groups[0] : "";
+            return `${prefix}${REDACTION_MARKER}`;
+        });
+    }
+    return { content: out, redactedCount };
+}
+//# sourceMappingURL=secrets.js.map

package/dist/absorb/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/absorb/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,+DAA+D;AAC/D,MAAM,kBAAkB,GAAa;IACnC,iBAAiB,EAAE,uCAAuC;IAC1D,cAAc,EAAE,0DAA0D;IAC1E,SAAS,EAAE,uCAAuC;IAClD,4BAA4B,EAAE,4CAA4C;IAC1E,SAAS,EAAE,eAAe;IAC1B,SAAS;IACT,SAAS,EAAE,WAAW;IACtB,SAAS;IACT,SAAS;CACV,CAAC;AAEF;;;;GAIG;AACH,MAAM,eAAe,GAAa;IAChC,4CAA4C;IAC5C,4BAA4B;IAC5B,2DAA2D;IAC3D,iCAAiC;IACjC,mCAAmC;IACnC,kBAAkB;IAClB,6BAA6B;IAC7B,qCAAqC;IACrC,mCAAmC;IACnC,qBAAqB;IACrB,gCAAgC;IAChC,kBAAkB;IAClB,6BAA6B;IAC7B,kCAAkC;IAClC,iEAAiE;IACjE,oDAAoD;IACpD,wCAAwC;IACxC,gFAAgF;IAChF,6EAA6E;IAC7E,0CAA0C;IAC1C,6DAA6D;IAC7D,0CAA0C;IAC1C,mCAAmC;IACnC,2BAA2B;IAC3B,2DAA2D;IAC3D,uBAAuB;IACvB,+EAA+E;IAC/E,+BAA+B;CAChC,CAAC;AAEF,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;IACvD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,EAAE;YACzC,aAAa,IAAI,CAAC,CAAC;YACnB,2EAA2E;YAC3E,8EAA8E;YAC9E,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,GAAG,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC"}

package/dist/client.d.ts

@@ -21,7 +21,9 @@ export declare class HebbianClient {
     private readonly apiUrl;
     private readonly token;
     private readonly tenant?;
-    constructor(apiUrl: string, token: string, tenant?: string);
+    /** Whether graph-derived tools should request UUID-keyset paginated graphs. */
+    readonly graphPagination: boolean;
+    constructor(apiUrl: string, token: string, tenant?: string, graphPagination?: boolean);
     /**
      * Execute a GET request against the Hebbian API.
      * @param path Path relative to apiUrl (must start with "/")
@@ -35,9 +37,8 @@ export declare class HebbianClient {
      */
     post(path: string, body: Record<string, unknown>): Promise<unknown>;
     /** Build an absolute URL from path + optional query params. */
-    private buildUrl;
-    /** Standard request headers including bearer auth. */
     private headers;
+    private buildUrl;
     /**
      * Parse and validate a fetch response.
      * Throws HebbianApiError on non-2xx status codes.

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,2EAA2E;AAC3E,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,UAAU,EAAE,MAAM;aAClB,SAAS,EAAE,MAAM;aAEjB,MAAM,CAAC,EAAE,OAAO;gBAHhB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,OAAO,YAAA;IAMlC,0DAA0D;IAC1D,WAAW,IAAI,MAAM;CAsBtB;AAUD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;gBAErB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAO1D;;;;OAIG;IACG,GAAG,CACP,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAC5D,OAAO,CAAC,OAAO,CAAC;IASnB;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC;IAanB,+DAA+D;IAC/D,OAAO,CAAC,QAAQ;IAehB,sDAAsD;IACtD,OAAO,CAAC,OAAO;IAcf;;;OAGG;YACW,cAAc;CAgC7B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,2EAA2E;AAC3E,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,UAAU,EAAE,MAAM;aAClB,SAAS,EAAE,MAAM;aAEjB,MAAM,CAAC,EAAE,OAAO;gBAHhB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,OAAO,YAAA;IAMlC,0DAA0D;IAC1D,WAAW,IAAI,MAAM;CAsBtB;AA6BD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,+EAA+E;IAC/E,SAAgB,eAAe,EAAE,OAAO,CAAC;gBAE7B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,UAAQ;IAQnF;;;;OAIG;IACG,GAAG,CACP,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAC5D,OAAO,CAAC,OAAO,CAAC;IASnB;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC;IAanB,+DAA+D;IAC/D,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,QAAQ;IAehB;;;OAGG;YACW,cAAc;CAiC7B"}