@mysten-incubation/memwal-mcp 0.0.14-dev.1 → 0.0.14-dev.10

package/dist/consent.d.ts

@@ -0,0 +1,36 @@
+import type { Readable, Writable } from "node:stream";
+/** The prompt body, everything above the input line. */
+export declare const CONSENT_PROMPT: string;
+/** The input line. Enter alone takes the recommended option. */
+export declare const CONSENT_QUESTION = "Your choice [1/2]: ";
+/** What to say when the answer is neither 1 nor 2. */
+export declare const CONSENT_REPROMPT = "Please answer 1 or 2 (or press Enter for 1).";
+/**
+ * Map one line of input to an answer.
+ *
+ * Empty (a bare Enter) accepts option 1. Anything that is not 1 or 2 returns
+ * `null`, which means re-ask — never "assume the recommended one", because a
+ * typo is not an answer to a question about permanent storage.
+ */
+export declare function interpretConsentAnswer(raw: string): boolean | null;
+/**
+ * Ask the question on a terminal and resolve to the answer.
+ *
+ * Resolves `null` — meaning "no answer given" — if the input stream ends first
+ * (Ctrl-D, a closed pipe, a killed terminal). The caller leaves the state unset
+ * in that case and asks again next time rather than recording a choice the user
+ * never made.
+ *
+ * Streams are injected so this is testable without a pty; `main()` passes the
+ * real stdin and stderr. Output goes to stderr because stdout belongs to the
+ * MCP protocol on every other path in this package.
+ */
+export declare function askAutoSaveConsent(opts: {
+    input: Readable;
+    output: Writable;
+    /** Guard against an accidental headless call. Defaults to requiring a TTY. */
+    isTTY?: boolean;
+}): Promise<boolean | null>;
+/** What is printed once the answer is in. */
+export declare function consentOutcomeNotice(enabled: boolean, path: string): string;
+//# sourceMappingURL=consent.d.ts.map

package/dist/consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.d.ts","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEtD,wDAAwD;AACxD,eAAO,MAAM,cAAc,QAyBf,CAAC;AAEb,gEAAgE;AAChE,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,iDACqB,CAAC;AAEnD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAMlE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC3C,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,QAAQ,CAAC;IACjB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA4B1B;AAED,6CAA6C;AAC7C,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAO3E"}

package/dist/consent.js

@@ -0,0 +1,129 @@
+/**
+ * The automatic-memory consent question (WALM-642).
+ *
+ * Asked at interactive login and NOWHERE else. Deliberately not an MCP tool,
+ * not a tool description, not an instruction, and not anything a model can
+ * reach: a model answering on the user's behalf is not consent, and an
+ * agent-shaped surface for this question would be exactly that. The only caller
+ * is `main()` in index.ts, behind `process.stdin.isTTY`.
+ *
+ * Login is the gate because MemWal is unusable without it, so every real user
+ * passes through it once, and it is already a moment that requires a terminal.
+ *
+ * On the wording — it is the substance of this change, not decoration:
+ *
+ *   - It names the consequence ("writes it to your memory without asking each
+ *     time"), not the feature. Someone should be able to picture what happens
+ *     to them, in their own session, from reading it.
+ *   - Permanence leads, because it is the fact that changes the answer. Walrus
+ *     is immutable: you can stop saving new memories but you cannot take back
+ *     one already saved. Burying that under "we value your privacy" would make
+ *     this a cookie banner, which it is not.
+ *   - The redaction claim is deliberately hedged. `redaction.ts` documents real
+ *     residual gaps — an unlabelled hex secret, a bare BIP-39 word run — so
+ *     "safety net, not a guarantee" is the accurate claim and must stay. Saying
+ *     more would be selling a promise the code does not make.
+ *   - Declining is free and is stated as a normal choice, not a warning. A "no"
+ *     is recorded once and never asked again.
+ */
+import { createInterface } from "node:readline";
+/** The prompt body, everything above the input line. */
+export const CONSENT_PROMPT = [
+    "",
+    "MemWal can save things about you automatically.",
+    "",
+    "What that means: when you state a preference, a decision, or a setting in",
+    'chat — "I prefer pnpm", "we deploy from dev", "the relayer is at X" —',
+    "MemWal writes it to your memory without asking each time, so it is there",
+    "in your next session and in every other client you use.",
+    "",
+    "Before you choose:",
+    "",
+    "  - Saved memories are permanent. They go to Walrus, which is immutable",
+    "    storage. You can stop saving new ones at any time, but you cannot",
+    "    delete one that is already saved.",
+    "  - They are encrypted to your account. Only your delegate key reads them.",
+    "  - MemWal strips obvious credentials — API keys, tokens, passwords,",
+    "    private keys — before saving. Treat that as a safety net, not a",
+    "    guarantee: do not paste secrets into a session with this on.",
+    "",
+    "  [1] Save automatically      recommended, this is what MemWal is for",
+    '  [2] Only save when I ask    nothing is saved unless you say "remember this"',
+    "",
+    "Change this any time with `memwal-mcp auto-save on|off`.",
+    "See what is stored with `memwal_recall`.",
+    "",
+].join("\n");
+/** The input line. Enter alone takes the recommended option. */
+export const CONSENT_QUESTION = "Your choice [1/2]: ";
+/** What to say when the answer is neither 1 nor 2. */
+export const CONSENT_REPROMPT = "Please answer 1 or 2 (or press Enter for 1).";
+/**
+ * Map one line of input to an answer.
+ *
+ * Empty (a bare Enter) accepts option 1. Anything that is not 1 or 2 returns
+ * `null`, which means re-ask — never "assume the recommended one", because a
+ * typo is not an answer to a question about permanent storage.
+ */
+export function interpretConsentAnswer(raw) {
+    const v = raw.trim().toLowerCase();
+    if (v === "")
+        return true;
+    if (v === "1")
+        return true;
+    if (v === "2")
+        return false;
+    return null;
+}
+/**
+ * Ask the question on a terminal and resolve to the answer.
+ *
+ * Resolves `null` — meaning "no answer given" — if the input stream ends first
+ * (Ctrl-D, a closed pipe, a killed terminal). The caller leaves the state unset
+ * in that case and asks again next time rather than recording a choice the user
+ * never made.
+ *
+ * Streams are injected so this is testable without a pty; `main()` passes the
+ * real stdin and stderr. Output goes to stderr because stdout belongs to the
+ * MCP protocol on every other path in this package.
+ */
+export async function askAutoSaveConsent(opts) {
+    // A prompt with nobody in front of it is a hang, not a question. The
+    // caller already checks this; the second check is here because the cost of
+    // getting it wrong is an MCP server that never finishes starting.
+    if (opts.isTTY === false)
+        return null;
+    opts.output.write(`${CONSENT_PROMPT}\n`);
+    const rl = createInterface({ input: opts.input, terminal: false });
+    try {
+        opts.output.write(CONSENT_QUESTION);
+        // The interface's async iterator, rather than a promise per `line`
+        // event: attaching a fresh listener after each answer drops any line
+        // that arrived while nothing was listening, which deadlocks the re-ask
+        // path the moment input is buffered rather than typed.
+        for await (const line of rl) {
+            const answer = interpretConsentAnswer(line);
+            if (answer !== null)
+                return answer;
+            opts.output.write(`${CONSENT_REPROMPT}\n`);
+            opts.output.write(CONSENT_QUESTION);
+        }
+        // Exhausted without an answer: Ctrl-D, a closed pipe, a killed
+        // terminal. Not a choice, and not recorded as one.
+        opts.output.write("\n");
+        return null;
+    }
+    finally {
+        rl.close();
+    }
+}
+/** What is printed once the answer is in. */
+export function consentOutcomeNotice(enabled, path) {
+    return enabled
+        ? "Automatic memory is ON. MemWal will save durable facts as you state them. " +
+            `Turn it off any time with \`memwal-mcp auto-save off\`. (${path})`
+        : "Automatic memory is OFF. Nothing is saved unless you ask for it — " +
+            '"remember this" still works, and so does recall. ' +
+            `Turn it on any time with \`memwal-mcp auto-save on\`. (${path})`;
+}
+//# sourceMappingURL=consent.js.map

package/dist/consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,wDAAwD;AACxD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,EAAE;IACF,iDAAiD;IACjD,EAAE;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,yDAAyD;IACzD,EAAE;IACF,oBAAoB;IACpB,EAAE;IACF,yEAAyE;IACzE,uEAAuE;IACvE,uCAAuC;IACvC,4EAA4E;IAC5E,sEAAsE;IACtE,qEAAqE;IACrE,kEAAkE;IAClE,EAAE;IACF,uEAAuE;IACvE,+EAA+E;IAC/E,EAAE;IACF,0DAA0D;IAC1D,0CAA0C;IAC1C,EAAE;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,gEAAgE;AAChE,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,sDAAsD;AACtD,MAAM,CAAC,MAAM,gBAAgB,GACzB,8CAA8C,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAKxC;IACG,qEAAqE;IACrE,2EAA2E;IAC3E,kEAAkE;IAClE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,IAAI,CAAC,CAAC;IAEzC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,uDAAuD;QACvD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,gBAAgB,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxC,CAAC;QACD,+DAA+D;QAC/D,mDAAmD;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IAChB,CAAC;YAAS,CAAC;QACP,EAAE,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACL,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,IAAY;IAC/D,OAAO,OAAO;QACV,CAAC,CAAC,4EAA4E;YACxE,4DAA4D,IAAI,GAAG;QACzE,CAAC,CAAC,oEAAoE;YAChE,mDAAmD;YACnD,0DAA0D,IAAI,GAAG,CAAC;AAChF,CAAC"}

package/dist/health-probe.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Ask the relayer's public `/health` why a call went unanswered: down,
+ * unreachable from this machine, configured wrong, or up with one call stuck.
+ * Each wants a different next step, so the bridge probes before it answers.
+ */
+export type HealthProbe = {
+    kind: "ok";
+    ms: number;
+    version?: string;
+    writesUnavailable?: boolean;
+} | {
+    kind: "http";
+    ms: number;
+    status: number;
+} | {
+    kind: "unreachable";
+    ms: number;
+    code: string;
+} | {
+    kind: "timeout";
+    ms: number;
+};
+/** Override via `MEMWAL_MCP_HEALTH_PROBE_MS`, mostly for tests. */
+export declare function resolveHealthProbeMs(): number;
+/** `GET {baseUrl}/health`, bounded by `timeoutMs`. Never rejects: a probe
+ * that fails is itself the answer. */
+export declare function probeRelayerHealth(baseUrl: string, timeoutMs: number): Promise<HealthProbe>;
+/** `health` is the value for a `Relayer health:` line; `verdict` says what
+ * it means for the call; `reachable` is whether a plain retry can help. */
+export declare function describeHealthProbe(probe: HealthProbe, relayerUrl: string): {
+    health: string;
+    verdict: string;
+    reachable: boolean;
+};
+//# sourceMappingURL=health-probe.d.ts.map

package/dist/health-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-probe.d.ts","sourceRoot":"","sources":["../src/health-probe.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,WAAW,GACjB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAQtC,mEAAmE;AACnE,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED;sCACsC;AACtC,wBAAsB,kBAAkB,CACpC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC,CA6BtB;AAKD;2EAC2E;AAC3E,wBAAgB,mBAAmB,CAC/B,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,MAAM,GACnB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAiCzD"}

package/dist/health-probe.js

@@ -0,0 +1,87 @@
+/**
+ * Ask the relayer's public `/health` why a call went unanswered: down,
+ * unreachable from this machine, configured wrong, or up with one call stuck.
+ * Each wants a different next step, so the bridge probes before it answers.
+ */
+const DEFAULT_HEALTH_PROBE_MS = 3_000;
+const MIN_HEALTH_PROBE_MS = 100;
+/** A diagnosis nobody waits a minute for. Also keeps the value inside what
+ * `AbortSignal.timeout` accepts. */
+const MAX_HEALTH_PROBE_MS = 60_000;
+/** Override via `MEMWAL_MCP_HEALTH_PROBE_MS`, mostly for tests. */
+export function resolveHealthProbeMs() {
+    const raw = process.env.MEMWAL_MCP_HEALTH_PROBE_MS;
+    if (!raw)
+        return DEFAULT_HEALTH_PROBE_MS;
+    const n = Math.floor(Number(raw));
+    if (!Number.isFinite(n) || n < MIN_HEALTH_PROBE_MS)
+        return DEFAULT_HEALTH_PROBE_MS;
+    return Math.min(n, MAX_HEALTH_PROBE_MS);
+}
+/** `GET {baseUrl}/health`, bounded by `timeoutMs`. Never rejects: a probe
+ * that fails is itself the answer. */
+export async function probeRelayerHealth(baseUrl, timeoutMs) {
+    const started = Date.now();
+    let signal;
+    try {
+        // Inside the `try`: `AbortSignal.timeout` throws on a value it
+        // cannot take, and this function must not reject.
+        signal = AbortSignal.timeout(timeoutMs);
+        const res = await fetch(`${baseUrl.replace(/\/+$/, "")}/health`, { signal });
+        const ms = Date.now() - started;
+        if (!res.ok) {
+            await res.body?.cancel();
+            return { kind: "http", ms, status: res.status };
+        }
+        const body = (await res.json().catch(() => null));
+        const version = typeof body?.version === "string" ? body.version : undefined;
+        // `/health` answers 200 while writes are paused or Postgres is
+        // full; "ok" alone would hide the cause of a failed write.
+        const writesUnavailable = body?.write_ready === false || body?.writes === "paused";
+        return { kind: "ok", ms, version, ...(writesUnavailable ? { writesUnavailable } : {}) };
+    }
+    catch (err) {
+        const ms = Date.now() - started;
+        if (signal?.aborted)
+            return { kind: "timeout", ms };
+        const code = err?.cause?.code;
+        return { kind: "unreachable", ms, code: typeof code === "string" ? code : "unknown" };
+    }
+}
+/** DNS could not find the host: the one cause a user fixes on their side. */
+const UNRESOLVED_CODES = new Set(["ENOTFOUND", "EAI_AGAIN"]);
+/** `health` is the value for a `Relayer health:` line; `verdict` says what
+ * it means for the call; `reachable` is whether a plain retry can help. */
+export function describeHealthProbe(probe, relayerUrl) {
+    switch (probe.kind) {
+        case "ok":
+            return {
+                health: `ok (${probe.ms}ms${probe.version ? `, v${probe.version}` : ""}` +
+                    `${probe.writesUnavailable ? ", writes unavailable" : ""})`,
+                verdict: "The relayer is up, so this call stalled inside it or its reply was lost on the way back.",
+                reachable: true,
+            };
+        case "http":
+            return {
+                health: `HTTP ${probe.status} (${probe.ms}ms)`,
+                verdict: "The relayer answered but is not healthy.",
+                reachable: false,
+            };
+        case "timeout":
+            return {
+                health: `no answer within ${(probe.ms / 1000).toFixed(1)}s`,
+                verdict: `The relayer at ${relayerUrl} is down, overloaded, or not reachable from this machine.`,
+                reachable: false,
+            };
+        case "unreachable":
+            return {
+                health: `unreachable (${probe.code})`,
+                verdict: UNRESOLVED_CODES.has(probe.code)
+                    ? `The relayer host in ${relayerUrl} could not be resolved. Check the relayer URL ` +
+                        "(MEMWAL_SERVER_URL or --relayer) and this machine's network."
+                    : `The relayer at ${relayerUrl} is down or not reachable from this machine.`,
+                reachable: false,
+            };
+    }
+}
+//# sourceMappingURL=health-probe.js.map

package/dist/health-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-probe.js","sourceRoot":"","sources":["../src/health-probe.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC;oCACoC;AACpC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,mEAAmE;AACnE,MAAM,UAAU,oBAAoB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,uBAAuB,CAAC;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,mBAAmB;QAAE,OAAO,uBAAuB,CAAC;IACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAC5C,CAAC;AAED;sCACsC;AACtC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,OAAe,EACf,SAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACD,+DAA+D;QAC/D,kDAAkD;QAClD,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAIxC,CAAC;QACT,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,+DAA+D;QAC/D,2DAA2D;QAC3D,MAAM,iBAAiB,GAAG,IAAI,EAAE,WAAW,KAAK,KAAK,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC;QACnF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAChC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,GAAI,GAA6C,EAAE,KAAK,EAAE,IAAI,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC1F,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAE7D;2EAC2E;AAC3E,MAAM,UAAU,mBAAmB,CAC/B,KAAkB,EAClB,UAAkB;IAElB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,IAAI;YACL,OAAO;gBACH,MAAM,EACF,OAAO,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;oBAChE,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,GAAG;gBAC/D,OAAO,EACH,0FAA0F;gBAC9F,SAAS,EAAE,IAAI;aAClB,CAAC;QACN,KAAK,MAAM;YACP,OAAO;gBACH,MAAM,EAAE,QAAQ,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,EAAE,KAAK;gBAC9C,OAAO,EAAE,0CAA0C;gBACnD,SAAS,EAAE,KAAK;aACnB,CAAC;QACN,KAAK,SAAS;YACV,OAAO;gBACH,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;gBAC3D,OAAO,EAAE,kBAAkB,UAAU,2DAA2D;gBAChG,SAAS,EAAE,KAAK;aACnB,CAAC;QACN,KAAK,aAAa;YACd,OAAO;gBACH,MAAM,EAAE,gBAAgB,KAAK,CAAC,IAAI,GAAG;gBACrC,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBACrC,CAAC,CAAC,uBAAuB,UAAU,gDAAgD;wBACjF,8DAA8D;oBAChE,CAAC,CAAC,kBAAkB,UAAU,8CAA8C;gBAChF,SAAS,EAAE,KAAK;aACnB,CAAC;IACV,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -7,10 +7,17 @@ interface ParsedArgs {
     help: boolean;
     logout: boolean;
     forceLogin: boolean;
+    /** Approve the project-local credentials found from the working directory
+     * (WALM-639). A repo file is inert until this has been run for it. */
+    approveProject: boolean;
+    /** Withdraw that approval again. */
+    revokeProject: boolean;
     relayerUrl?: string;
     webUrl?: string;
     label?: string;
     namespace?: string;
+    /** `auto-save on|off|status` — the automatic-memory opt-in (WALM-642). */
+    autoSave?: "on" | "off" | "status";
     /** Args parseArgs did not recognise, in the order seen. For a flag
      *  written `--key=value`, only `--key` is recorded — see parseArgs. */
     unknown: string[];
@@ -20,8 +27,10 @@ export declare function main(argv?: string[]): Promise<void>;
 /** The `--help` body. Exported so tests can assert it stays in step with the
  *  flags parseArgs actually accepts. */
 export declare function helpText(): string;
-export { loadCreds, saveCreds, clearCreds, credsPath } from "./auth.js";
+export { loadCreds, saveCreds, clearCreds, credsPath, resolveCreds, approveProjectCreds, revokeProjectCredsApproval, formatProjectCredsNotice, formatProjectCredsStorageWarning, } from "./auth.js";
+export { isAutoSaveEnabled, isConsentPending, autoSaveStatus, setAutoSave, markConsentPending, publishHookState, settingsPath, hookStatePath, } from "./auto-save.js";
+export { askAutoSaveConsent, interpretConsentAnswer, CONSENT_PROMPT } from "./consent.js";
 export { loginFlow } from "./login.js";
 export { runBridge } from "./bridge.js";
-export type { MemWalCredentials } from "./auth.js";
+export type { MemWalCredentials, CredsResolution, ProjectCredsDecision } from "./auth.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkBA;;;;GAIG;AACH,UAAU,UAAU;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;2EACuE;IACvE,OAAO,EAAE,MAAM,EAAE,CAAC;CACrB;AAeD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAiFpD;AAED,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CA6MhF;AAMD;wCACwC;AACxC,wBAAgB,QAAQ,IAAI,MAAM,CA4FjC;AAGD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsCA;;;;GAIG;AACH,UAAU,UAAU;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB;0EACsE;IACtE,cAAc,EAAE,OAAO,CAAC;IACxB,oCAAoC;IACpC,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,GAAG,QAAQ,CAAC;IACnC;2EACuE;IACvE,OAAO,EAAE,MAAM,EAAE,CAAC;CACrB;AAeD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA8GpD;AAED,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CA0YhF;AAkCD;wCACwC;AACxC,wBAAgB,QAAQ,IAAI,MAAM,CAgIjC;AAGD,OAAO,EACH,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,gCAAgC,GACnC,MAAM,WAAW,CAAC;AACnB,OAAO,EACH,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,aAAa,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC"}