apple-notes-mcp 2.8.29 → 2.8.31

package/build/index.js

@@ -417,11 +417,11 @@ var require_codegen = __commonJS({
         const rhs = this.rhs === void 0 ? "" : ` = ${this.rhs}`;
         return `${varKind} ${this.name}${rhs};` + _n;
       }
-      optimizeNames(names, constants2) {
+      optimizeNames(names, constants3) {
         if (!names[this.name.str])
           return;
         if (this.rhs)
-          this.rhs = optimizeExpr(this.rhs, names, constants2);
+          this.rhs = optimizeExpr(this.rhs, names, constants3);
         return this;
       }
       get names() {
@@ -438,10 +438,10 @@ var require_codegen = __commonJS({
       render({ _n }) {
         return `${this.lhs} = ${this.rhs};` + _n;
       }
-      optimizeNames(names, constants2) {
+      optimizeNames(names, constants3) {
         if (this.lhs instanceof code_1.Name && !names[this.lhs.str] && !this.sideEffects)
           return;
-        this.rhs = optimizeExpr(this.rhs, names, constants2);
+        this.rhs = optimizeExpr(this.rhs, names, constants3);
         return this;
       }
       get names() {
@@ -502,8 +502,8 @@ var require_codegen = __commonJS({
       optimizeNodes() {
         return `${this.code}` ? this : void 0;
       }
-      optimizeNames(names, constants2) {
-        this.code = optimizeExpr(this.code, names, constants2);
+      optimizeNames(names, constants3) {
+        this.code = optimizeExpr(this.code, names, constants3);
         return this;
       }
       get names() {
@@ -532,12 +532,12 @@ var require_codegen = __commonJS({
         }
         return nodes.length > 0 ? this : void 0;
       }
-      optimizeNames(names, constants2) {
+      optimizeNames(names, constants3) {
         const { nodes } = this;
         let i = nodes.length;
         while (i--) {
           const n = nodes[i];
-          if (n.optimizeNames(names, constants2))
+          if (n.optimizeNames(names, constants3))
             continue;
           subtractNames(names, n.names);
           nodes.splice(i, 1);
@@ -590,12 +590,12 @@ var require_codegen = __commonJS({
           return void 0;
         return this;
       }
-      optimizeNames(names, constants2) {
+      optimizeNames(names, constants3) {
         var _a;
-        this.else = (_a = this.else) === null || _a === void 0 ? void 0 : _a.optimizeNames(names, constants2);
-        if (!(super.optimizeNames(names, constants2) || this.else))
+        this.else = (_a = this.else) === null || _a === void 0 ? void 0 : _a.optimizeNames(names, constants3);
+        if (!(super.optimizeNames(names, constants3) || this.else))
           return;
-        this.condition = optimizeExpr(this.condition, names, constants2);
+        this.condition = optimizeExpr(this.condition, names, constants3);
         return this;
       }
       get names() {
@@ -618,10 +618,10 @@ var require_codegen = __commonJS({
       render(opts) {
         return `for(${this.iteration})` + super.render(opts);
       }
-      optimizeNames(names, constants2) {
-        if (!super.optimizeNames(names, constants2))
+      optimizeNames(names, constants3) {
+        if (!super.optimizeNames(names, constants3))
           return;
-        this.iteration = optimizeExpr(this.iteration, names, constants2);
+        this.iteration = optimizeExpr(this.iteration, names, constants3);
         return this;
       }
       get names() {
@@ -657,10 +657,10 @@ var require_codegen = __commonJS({
       render(opts) {
         return `for(${this.varKind} ${this.name} ${this.loop} ${this.iterable})` + super.render(opts);
       }
-      optimizeNames(names, constants2) {
-        if (!super.optimizeNames(names, constants2))
+      optimizeNames(names, constants3) {
+        if (!super.optimizeNames(names, constants3))
           return;
-        this.iterable = optimizeExpr(this.iterable, names, constants2);
+        this.iterable = optimizeExpr(this.iterable, names, constants3);
         return this;
       }
       get names() {
@@ -702,11 +702,11 @@ var require_codegen = __commonJS({
         (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNodes();
         return this;
       }
-      optimizeNames(names, constants2) {
+      optimizeNames(names, constants3) {
         var _a, _b;
-        super.optimizeNames(names, constants2);
-        (_a = this.catch) === null || _a === void 0 ? void 0 : _a.optimizeNames(names, constants2);
-        (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNames(names, constants2);
+        super.optimizeNames(names, constants3);
+        (_a = this.catch) === null || _a === void 0 ? void 0 : _a.optimizeNames(names, constants3);
+        (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNames(names, constants3);
         return this;
       }
       get names() {
@@ -1007,7 +1007,7 @@ var require_codegen = __commonJS({
     function addExprNames(names, from) {
       return from instanceof code_1._CodeOrName ? addNames(names, from.names) : names;
     }
-    function optimizeExpr(expr, names, constants2) {
+    function optimizeExpr(expr, names, constants3) {
       if (expr instanceof code_1.Name)
         return replaceName(expr);
       if (!canOptimize(expr))
@@ -1022,14 +1022,14 @@ var require_codegen = __commonJS({
         return items;
       }, []));
       function replaceName(n) {
-        const c = constants2[n.str];
+        const c = constants3[n.str];
         if (c === void 0 || names[n.str] !== 1)
           return n;
         delete names[n.str];
         return c;
       }
       function canOptimize(e) {
-        return e instanceof code_1._Code && e._items.some((c) => c instanceof code_1.Name && names[c.str] === 1 && constants2[c.str] !== void 0);
+        return e instanceof code_1._Code && e._items.some((c) => c instanceof code_1.Name && names[c.str] === 1 && constants3[c.str] !== void 0);
       }
     }
     function subtractNames(names, from) {
@@ -7422,7 +7422,7 @@ var require_DOMException = __commonJS({
       "INVALID_NODE_TYPE_ERR (24): the supplied node is invalid or has an invalid ancestor for this operation",
       "DATA_CLONE_ERR (25): the object can not be cloned."
     ];
-    var constants2 = {
+    var constants3 = {
       INDEX_SIZE_ERR,
       DOMSTRING_SIZE_ERR: 2,
       // historical
@@ -7461,8 +7461,8 @@ var require_DOMException = __commonJS({
       this.name = names[code];
     }
     DOMException.prototype.__proto__ = Error.prototype;
-    for (c in constants2) {
-      v = { value: constants2[c] };
+    for (c in constants3) {
+      v = { value: constants3[c] };
       Object.defineProperty(DOMException, c, v);
       Object.defineProperty(DOMException.prototype, c, v);
     }
@@ -9872,9 +9872,9 @@ var require_select = __commonJS({
     var makeSubject = function() {
       var target;
       function subject(el) {
-        var node = el.ownerDocument, scope = node.getElementsByTagName(subject.lname), i = scope.length;
+        var node = el.ownerDocument, scope2 = node.getElementsByTagName(subject.lname), i = scope2.length;
         while (i--) {
-          if (subject.test(scope[i]) && target === el) {
+          if (subject.test(scope2[i]) && target === el) {
             target = null;
             return true;
           }
@@ -9902,16 +9902,16 @@ var require_select = __commonJS({
       };
     };
     var find = function(sel, node) {
-      var results = [], test = compile(sel), scope = node.getElementsByTagName(test.qname), i = 0, el;
-      while (el = scope[i++]) {
+      var results = [], test = compile(sel), scope2 = node.getElementsByTagName(test.qname), i = 0, el;
+      while (el = scope2[i++]) {
         if (test(el)) results.push(el);
       }
       if (test.sel) {
         while (test.sel) {
           test = compile(test.sel);
-          scope = node.getElementsByTagName(test.qname);
+          scope2 = node.getElementsByTagName(test.qname);
           i = 0;
-          while (el = scope[i++]) {
+          while (el = scope2[i++]) {
             if (test(el) && indexOf.call(results, el) === -1) {
               results.push(el);
             }
@@ -24465,14 +24465,14 @@ var require_turndown_cjs = __commonJS({
         } else if (node.nodeType === 1) {
           replacement = replacementForNode.call(self, node);
         }
-        return join15(output, replacement);
+        return join16(output, replacement);
       }, "");
     }
     function postProcess(output) {
       var self = this;
       this.rules.forEach(function(rule) {
         if (typeof rule.append === "function") {
-          output = join15(output, rule.append(self.options));
+          output = join16(output, rule.append(self.options));
         }
       });
       return output.replace(/^[\t\r\n]+/, "").replace(/[\t\r\n\s]+$/, "");
@@ -24484,7 +24484,7 @@ var require_turndown_cjs = __commonJS({
       if (whitespace.leading || whitespace.trailing) content = content.trim();
       return whitespace.leading + rule.replacement(content, node, this.options) + whitespace.trailing;
     }
-    function join15(output, replacement) {
+    function join16(output, replacement) {
       var s1 = trimTrailingNewlines(output);
       var s2 = trimLeadingNewlines(replacement);
       var nls = Math.max(output.length - s1.length, replacement.length - s2.length);
@@ -24777,8 +24777,8 @@ var ZodError = class _ZodError extends Error {
   constructor(issues) {
     super();
     this.issues = [];
-    this.addIssue = (sub3) => {
-      this.issues = [...this.issues, sub3];
+    this.addIssue = (sub4) => {
+      this.issues = [...this.issues, sub4];
     };
     this.addIssues = (subs = []) => {
       this.issues = [...this.issues, ...subs];
@@ -24845,13 +24845,13 @@ var ZodError = class _ZodError extends Error {
   flatten(mapper = (issue2) => issue2.message) {
     const fieldErrors = {};
     const formErrors = [];
-    for (const sub3 of this.issues) {
-      if (sub3.path.length > 0) {
-        const firstEl = sub3.path[0];
+    for (const sub4 of this.issues) {
+      if (sub4.path.length > 0) {
+        const firstEl = sub4.path[0];
         fieldErrors[firstEl] = fieldErrors[firstEl] || [];
-        fieldErrors[firstEl].push(mapper(sub3));
+        fieldErrors[firstEl].push(mapper(sub4));
       } else {
-        formErrors.push(mapper(sub3));
+        formErrors.push(mapper(sub4));
       }
     }
     return { formErrors, fieldErrors };
@@ -29150,12 +29150,12 @@ var $ZodRealError = $constructor("$ZodError", initializer, { Parent: Error });
 function flattenError(error2, mapper = (issue2) => issue2.message) {
   const fieldErrors = {};
   const formErrors = [];
-  for (const sub3 of error2.issues) {
-    if (sub3.path.length > 0) {
-      fieldErrors[sub3.path[0]] = fieldErrors[sub3.path[0]] || [];
-      fieldErrors[sub3.path[0]].push(mapper(sub3));
+  for (const sub4 of error2.issues) {
+    if (sub4.path.length > 0) {
+      fieldErrors[sub4.path[0]] = fieldErrors[sub4.path[0]] || [];
+      fieldErrors[sub4.path[0]].push(mapper(sub4));
     } else {
-      formErrors.push(mapper(sub3));
+      formErrors.push(mapper(sub4));
     }
   }
   return { formErrors, fieldErrors };
@@ -38990,6 +38990,22 @@ var NODE_RUNTIME_TCC_GUIDE_URL = "https://github.com/sweetrb/apple-notes-mcp/blo
 var AUTOMATION_PERMISSION_GUIDE_URL = "https://github.com/sweetrb/apple-notes-mcp#permission-denied";
 var AUTOMATION_REMEDIATION = `Grant automation access in System Settings > Privacy & Security > Automation to the app that launches this server (Claude Desktop / Terminal / iTerm2), then fully quit and relaunch it \u2014 run the doctor tool to verify. See: ${AUTOMATION_PERMISSION_GUIDE_URL}`;
 
+// src/utils/callTimeout.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+var CALL_TIMEOUT_SECONDS = { min: 1, max: 120 };
+var scope = new AsyncLocalStorage();
+function runWithCallTimeout(seconds, fn) {
+  if (seconds === void 0) return fn();
+  if (!Number.isInteger(seconds) || seconds < CALL_TIMEOUT_SECONDS.min || seconds > CALL_TIMEOUT_SECONDS.max)
+    throw new Error(
+      `timeoutSeconds must be a whole number from ${CALL_TIMEOUT_SECONDS.min} to ${CALL_TIMEOUT_SECONDS.max}`
+    );
+  return scope.run(seconds * 1e3, fn);
+}
+function callTimeoutMs() {
+  return scope.getStore();
+}
+
 // src/utils/applescript.ts
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_MAX_BUFFER_BYTES = 64 * 1024 * 1024;
@@ -39146,7 +39162,7 @@ function parseErrorMessage(errorOutput) {
   return coreError.trim() || "Unknown AppleScript error";
 }
 function executeAppleScript(script, options = {}) {
-  const timeoutMs = options.timeoutMs ?? envPositiveNumber("APPLE_NOTES_MCP_TIMEOUT_MS") ?? DEFAULT_TIMEOUT_MS;
+  const timeoutMs = options.timeoutMs ?? callTimeoutMs() ?? envPositiveNumber("APPLE_NOTES_MCP_TIMEOUT_MS") ?? DEFAULT_TIMEOUT_MS;
   const maxRetries = options.maxRetries ?? envPositiveNumber("APPLE_NOTES_MCP_MAX_RETRIES") ?? DEFAULT_MAX_RETRIES;
   const retryDelayMs = options.retryDelayMs ?? envPositiveNumber("APPLE_NOTES_MCP_RETRY_DELAY_MS") ?? DEFAULT_RETRY_DELAY_MS;
   if (!script || !script.trim()) {
@@ -39275,7 +39291,7 @@ function decodeVarint(buf, offset) {
   }
   throw new Error(`Unexpected end of buffer reading varint at offset ${offset}`);
 }
-function decodeMessage(buf) {
+function decodeMessage(buf, options = {}) {
   const fields = [];
   let offset = 0;
   while (offset < buf.length) {
@@ -39296,10 +39312,13 @@ function decodeMessage(buf) {
       const value = buf.slice(offset, offset + length);
       fields.push({ fieldNumber, wireType, value });
       offset += length;
-    } else if (wireType === 5) {
-      offset += 4;
-    } else if (wireType === 1) {
-      offset += 8;
+    } else if (wireType === 5 || wireType === 1) {
+      const width = wireType === 5 ? 4 : 8;
+      if (offset + width > buf.length) break;
+      if (options.keepFixed) {
+        fields.push({ fieldNumber, wireType, value: buf.slice(offset, offset + width) });
+      }
+      offset += width;
     } else {
       break;
     }
@@ -39330,6 +39349,11 @@ function embeddedMessage(field) {
   if (!bytes) return void 0;
   return decodeMessage(bytes);
 }
+function fixed64Double(field) {
+  if (!field || field.wireType !== 1 || !(field.value instanceof Uint8Array)) return void 0;
+  if (field.value.length !== 8) return void 0;
+  return new DataView(field.value.buffer, field.value.byteOffset, 8).getFloat64(0, true);
+}
 var ProtobufDecodeError = class extends Error {
   constructor(message) {
     super(message);
@@ -39901,9 +39925,373 @@ function assertLinkedWrite(rich, content, format, allowLinkChanges = false) {
   }
 }
 
-// src/utils/noteTables.ts
+// src/utils/audioTranscripts.ts
+import { execFileSync as execFileSync4 } from "node:child_process";
+import { homedir as homedir3 } from "node:os";
+import { join as join3 } from "node:path";
 import { gunzipSync as gunzipSync3 } from "node:zlib";
+var NOTES_DB_PATH2 = join3(
+  homedir3(),
+  "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
+);
+var DEFAULT_MAX_SEGMENTS = 2e3;
+var MAX_SEGMENTS_LIMIT = 2e4;
+var AudioTranscriptError = class extends Error {
+  constructor(kind, message) {
+    super(message);
+    this.kind = kind;
+    this.name = "AudioTranscriptError";
+  }
+  kind;
+};
+var decode = (bytes) => decodeMessage(bytes, { keepFixed: true });
 var sub = (f, n) => {
+  const bytes = getField(f, n)?.value;
+  return bytes instanceof Uint8Array ? decode(bytes) : void 0;
+};
+var need = (value, what) => {
+  if (value === void 0) throw new Error(`Missing ${what}`);
+  return value;
+};
+var many = (f, n) => getFields(f, n).map((field) => {
+  if (!(field.value instanceof Uint8Array)) throw new Error("Invalid nested entry");
+  return decode(field.value);
+});
+function parseAudioRecording(data) {
+  const root = decode(data);
+  const entries = many(root, 3);
+  if (entries.length === 0) throw new Error("No mergeable objects");
+  if (entries.length > 2e6) throw new Error("Recording too large");
+  const keys = getFields(root, 4).map((f) => stringValue(f) ?? "");
+  const types = getFields(root, 5).map((f) => stringValue(f) ?? "");
+  const uuids = getFields(root, 6).map(
+    (f) => f.value instanceof Uint8Array ? Buffer.from(f.value).toString("hex") : ""
+  );
+  const uuidSlot = /* @__PURE__ */ new Map();
+  uuids.forEach((uuid2, i) => {
+    if (uuid2 && !uuidSlot.has(uuid2)) uuidSlot.set(uuid2, i);
+  });
+  const entry = (index) => {
+    const value = entries[index];
+    if (!value) throw new Error("Invalid object reference");
+    return value;
+  };
+  const customMap = (e) => {
+    const map = sub(e, 13);
+    if (!map) return void 0;
+    const values = /* @__PURE__ */ new Map();
+    for (const item of many(map, 3)) {
+      const key = keys[need(varintValue(getField(item, 1)), "map key")];
+      const value = sub(item, 2);
+      if (key !== void 0 && value) values.set(key, value);
+    }
+    return { type: types[need(varintValue(getField(map, 1)), "map type")] ?? "", values };
+  };
+  const objectIndex = (id2) => id2 ? varintValue(getField(id2, 6)) : void 0;
+  const registerTarget = (id2) => {
+    const index = objectIndex(id2);
+    if (index === void 0) return void 0;
+    const register = sub(entry(index), 1);
+    if (!register) return void 0;
+    const target = objectIndex(sub(register, 2));
+    return target === void 0 ? void 0 : entry(target);
+  };
+  const registerPrimitive = (id2) => {
+    const target = registerTarget(id2);
+    const map = target && customMap(target);
+    if (!map) return void 0;
+    const self = map.values.get("self");
+    if (self) return stringValue(getField(self, 4));
+    const double = map.values.get("doubleValue");
+    if (double) return fixed64Double(getField(double, 3));
+    const integer2 = map.values.get("integerValue");
+    if (integer2) return varintValue(getField(integer2, 2));
+    return void 0;
+  };
+  const registerNoteText = (id2) => {
+    const target = registerTarget(id2);
+    const note = target && sub(target, 10);
+    const text = note && stringValue(getField(note, 2));
+    return text?.replace(/\n+$/u, "") || void 0;
+  };
+  const recordings = entries.map((e) => customMap(e)).filter((m) => m?.type === "com.apple.notes.ICTTAudioRecording");
+  if (recordings.length !== 1) throw new Error("Expected exactly one audio recording object");
+  const recording = recordings[0];
+  const fragments = [];
+  const fragmentList = objectIndex(recording.values.get("fragments"));
+  if (fragmentList !== void 0) {
+    const list = need(sub(entry(fragmentList), 5), "fragment list");
+    for (const item of many(list, 1)) {
+      const fragment = customMap(entry(need(objectIndex(sub(item, 2)), "fragment reference")));
+      if (fragment?.type !== "com.apple.notes.ICTTAudioRecording.Fragment")
+        throw new Error("Unexpected fragment type");
+      const identity = stringValue(getField(fragment.values.get("identity") ?? [], 4));
+      const segments = [];
+      const transcriptRef = objectIndex(fragment.values.get("transcript"));
+      if (transcriptRef !== void 0) {
+        const set = sub(entry(transcriptRef), 15);
+        if (!set) throw new Error("Unsupported transcript container");
+        const bySlot = /* @__PURE__ */ new Map();
+        for (const element of many(sub(set, 2) ?? [], 1)) {
+          const keyMap = customMap(entry(need(objectIndex(sub(element, 1)), "segment key")));
+          const slot = varintValue(getField(keyMap?.values.get("UUIDIndex") ?? [], 2));
+          const value = objectIndex(sub(element, 2));
+          if (slot === void 0 || value === void 0) throw new Error("Invalid segment key");
+          bySlot.set(slot, value);
+        }
+        const ordering = many(need(sub(set, 1), "transcript ordering"), 2).map((pair) => ({
+          index: need(varintValue(getField(pair, 1)), "segment index"),
+          uuid: getField(pair, 2)?.value
+        })).sort((a, b) => a.index - b.index);
+        for (const { uuid: uuid2 } of ordering) {
+          if (!(uuid2 instanceof Uint8Array)) throw new Error("Invalid segment UUID");
+          const slot = uuidSlot.get(Buffer.from(uuid2).toString("hex"));
+          const segmentIndex = slot === void 0 ? void 0 : bySlot.get(slot);
+          if (segmentIndex === void 0) throw new Error("Unresolved transcript segment");
+          const segment = customMap(entry(segmentIndex));
+          if (segment?.type !== "com.apple.notes.ICTTTranscriptSegment")
+            throw new Error("Unexpected segment type");
+          const text = registerPrimitive(segment.values.get("text"));
+          if (typeof text !== "string") throw new Error("Segment without text");
+          const start = registerPrimitive(segment.values.get("timestamp"));
+          const duration3 = registerPrimitive(segment.values.get("duration"));
+          const speaker = registerPrimitive(segment.values.get("speaker"));
+          segments.push({
+            text,
+            ...typeof start === "number" ? { start } : {},
+            ...typeof duration3 === "number" ? { duration: duration3 } : {},
+            ...typeof speaker === "string" && speaker ? { speaker } : {}
+          });
+        }
+      }
+      fragments.push({ ...identity ? { identity } : {}, segments });
+    }
+  }
+  const summary = registerNoteText(recording.values.get("summary"));
+  const topLineSummary = registerNoteText(recording.values.get("topLineSummary"));
+  return {
+    fragments,
+    ...summary ? { summary } : {},
+    ...topLineSummary ? { topLineSummary } : {}
+  };
+}
+function joinSegments(segments) {
+  let out = "";
+  for (const { text } of segments) {
+    if (!text) continue;
+    const glue = !out || /\s$/u.test(out) || /^\s/u.test(text) || /^[.,!?;:%)\]}…'’]/u.test(text) ? "" : " ";
+    out += glue + text;
+  }
+  return out.trim();
+}
+function parseNoteId(noteId3) {
+  const match = /^x-coredata:\/\/([0-9A-Fa-f-]+)\/ICNote\/p(\d+)$/.exec(noteId3);
+  if (!match) {
+    throw new AudioTranscriptError(
+      "invalid_id",
+      `Invalid note ID format: "${noteId3}". Expected format: x-coredata://UUID/ICNote/pNNN`
+    );
+  }
+  return { store: match[1], pk: match[2] };
+}
+var AUDIO_UTI_SQL = "(a.ZTYPEUTI LIKE '%audio%' OR a.ZTYPEUTI IN ('public.mp3'))";
+function buildTranscriptSql(pk, available) {
+  if (!/^\d+$/.test(pk)) throw new Error("Invalid primary key");
+  const optional2 = (column, key, alias = "a") => available.has(column) ? `, '${key}', ${alias}.${column}` : "";
+  const locked = available.has("ZISPASSWORDPROTECTED") ? "COALESCE(n.ZISPASSWORDPROTECTED, 0)" : "0";
+  return [
+    "BEGIN;",
+    // Every statement yields exactly one row, so output lines stay positional.
+    `SELECT json_object('found', (SELECT count(*) FROM ZICCLOUDSYNCINGOBJECT n WHERE n.Z_PK = ${pk}), 'locked', (SELECT ${locked} FROM ZICCLOUDSYNCINGOBJECT n WHERE n.Z_PK = ${pk}));`,
+    `SELECT COALESCE((SELECT hex(ZDATA) FROM ZICNOTEDATA WHERE ZNOTE = ${pk} LIMIT 1), '');`,
+    "SELECT json_group_array(json_object('pk', a.Z_PK, 'identifier', a.ZIDENTIFIER, 'uti', a.ZTYPEUTI, 'data', hex(a.ZMERGEABLEDATA1)" + optional2("ZDURATION", "duration") + optional2("ZNEEDSTRANSCRIPTION", "needsTranscription") + ", 'fragments', json((SELECT json_group_array(json_object('identifier', c.ZIDENTIFIER" + optional2("ZDURATION", "duration", "c") + `)) FROM ZICCLOUDSYNCINGOBJECT c WHERE c.ZPARENTATTACHMENT = a.Z_PK)))) FROM ZICCLOUDSYNCINGOBJECT a WHERE a.ZNOTE = ${pk} AND a.ZPARENTATTACHMENT IS NULL AND ${AUDIO_UTI_SQL};`,
+    "COMMIT;"
+  ].join("\n");
+}
+var REQUIRED_COLUMNS = [
+  "ZMERGEABLEDATA1",
+  "ZPARENTATTACHMENT",
+  "ZTYPEUTI",
+  "ZNOTE",
+  "ZIDENTIFIER"
+];
+function runSqlite(dbPath2, sql) {
+  return execFileSync4("sqlite3", ["-readonly", dbPath2, sql], {
+    encoding: "utf8",
+    timeout: 1e4,
+    maxBuffer: 256 * 1024 * 1024,
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+}
+function bodyAttachmentOrder(gzipped) {
+  const doc = decodeMessage(gunzipSync3(gzipped, { maxOutputLength: 64 * 1024 * 1024 }));
+  const body = embeddedMessage(getField(embeddedMessage(getField(doc, 2)) ?? [], 3));
+  if (!body) throw new Error("Unsupported Notes document structure");
+  const ids = [];
+  for (const run of getFields(body, 5)) {
+    const attachment = embeddedMessage(getField(embeddedMessage(run) ?? [], 12));
+    const id2 = attachment && stringValue(getField(attachment, 1));
+    if (id2 && !ids.includes(id2)) ids.push(id2);
+  }
+  return ids;
+}
+function readAudioTranscripts(noteId3, options = {}) {
+  const { store, pk } = parseNoteId(noteId3);
+  const dbPath2 = options.dbPath ?? NOTES_DB_PATH2;
+  const maxSegments = Math.min(
+    Math.max(1, Math.floor(options.maxSegments ?? DEFAULT_MAX_SEGMENTS)),
+    MAX_SEGMENTS_LIMIT
+  );
+  let lines;
+  try {
+    const available = new Set(
+      runSqlite(dbPath2, "SELECT name FROM pragma_table_info('ZICCLOUDSYNCINGOBJECT');").split("\n").map((line) => line.trim()).filter(Boolean)
+    );
+    const missing = REQUIRED_COLUMNS.filter((c) => !available.has(c));
+    if (missing.length)
+      throw new AudioTranscriptError(
+        "query_error",
+        `This macOS version's Notes database lacks ${missing.join(", ")}; stored transcripts cannot be read.`
+      );
+    lines = runSqlite(dbPath2, buildTranscriptSql(pk, available)).split("\n");
+  } catch (error2) {
+    if (error2 instanceof AudioTranscriptError) throw error2;
+    const message = error2 instanceof Error ? error2.message : String(error2);
+    if (/authorization denied|unable to open database/i.test(message))
+      throw new AudioTranscriptError(
+        "no_fda",
+        `Full Disk Access is required to read stored transcripts. Grant it to the app that launches this server, then fully quit and relaunch it. Setup guide: ${FULL_DISK_ACCESS_GUIDE_URL}`
+      );
+    throw new AudioTranscriptError("query_error", "Failed to read the Notes database.");
+  }
+  const [noteLine = "{}", bodyLine = "", rowsLine = "[]"] = lines;
+  const note = JSON.parse(noteLine || "{}");
+  if (!note.found)
+    throw new AudioTranscriptError(
+      "not_found",
+      `No note found in the database for ID "${noteId3}".`
+    );
+  if (note.locked)
+    throw new AudioTranscriptError(
+      "locked",
+      "This note is password-protected; its transcripts are encrypted and cannot be read."
+    );
+  const rows = JSON.parse(rowsLine || "[]");
+  let order;
+  try {
+    if (/^[0-9A-F]+$/i.test(bodyLine.trim()))
+      order = bodyAttachmentOrder(Buffer.from(bodyLine.trim(), "hex"));
+  } catch {
+    order = void 0;
+  }
+  const ordered = order ? order.flatMap((id2) => rows.filter((row) => row.identifier === id2)) : [...rows].sort((a, b) => a.pk - b.pk);
+  const attachments = ordered.map((row) => describeRow(row, store, options, maxSegments));
+  return { id: noteId3, attachments, bodyOrder: Boolean(order), truncated: false };
+}
+function describeRow(row, store, options, maxSegments) {
+  const childDurations = (row.fragments ?? []).map((f) => f.duration).filter((d) => typeof d === "number" && d > 0);
+  const durationSeconds = typeof row.duration === "number" && row.duration > 0 ? row.duration : childDurations.length ? childDurations.reduce((a, b) => a + b, 0) : void 0;
+  const base = {
+    attachmentId: `x-coredata://${store}/ICAttachment/p${row.pk}`,
+    identifier: row.identifier,
+    typeUti: row.uti,
+    status: "none",
+    ...durationSeconds !== void 0 ? { durationSeconds } : {},
+    ...typeof row.needsTranscription === "number" ? { needsTranscription: row.needsTranscription === 1 } : {}
+  };
+  if (!row.data) return base;
+  let recording;
+  try {
+    recording = parseAudioRecording(Buffer.from(row.data, "hex"));
+  } catch (error2) {
+    return {
+      ...base,
+      status: "undecodable",
+      reason: error2 instanceof Error ? error2.message : String(error2)
+    };
+  }
+  const multi = recording.fragments.length > 1;
+  const all = recording.fragments.flatMap(
+    (fragment, i) => fragment.segments.map((s) => multi ? { ...s, fragment: i } : s)
+  );
+  const text = recording.fragments.map((f) => joinSegments(f.segments)).filter(Boolean).join("\n\n");
+  const speakers = [...new Set(all.flatMap((s) => s.speaker ? [s.speaker] : []))];
+  return {
+    ...base,
+    status: all.length ? "ok" : "none",
+    fragmentCount: recording.fragments.length,
+    wordCount: all.length,
+    ...text ? { text } : {},
+    ...speakers.length ? { speakers } : {},
+    ...recording.summary ? { summary: recording.summary } : {},
+    ...recording.topLineSummary ? { topLineSummary: recording.topLineSummary } : {},
+    ...options.includeSegments && all.length ? {
+      segments: all.slice(0, maxSegments),
+      ...all.length > maxSegments ? { segmentsTruncated: true } : {}
+    } : {}
+  };
+}
+function fitTranscriptsToBudget(result, maxBytes, measure) {
+  if (measure(result) <= maxBytes) return result;
+  let next = {
+    ...result,
+    truncated: true,
+    attachments: result.attachments.map((a) => {
+      if (!a.segments) return a;
+      const rest = { ...a, segmentsTruncated: true };
+      delete rest.segments;
+      return rest;
+    })
+  };
+  for (let share = 0.5; measure(next) > maxBytes && share > 1e-4; share /= 2) {
+    next = {
+      ...next,
+      attachments: next.attachments.map((a) => {
+        const original = result.attachments.find((o) => o.attachmentId === a.attachmentId);
+        if (!original?.text) return a;
+        const keep = Math.floor(original.text.length * share);
+        return { ...a, text: original.text.slice(0, keep), textTruncated: true };
+      })
+    };
+  }
+  return next;
+}
+var clock = (seconds) => {
+  const total = Math.round(seconds);
+  const h = Math.floor(total / 3600);
+  const m = Math.floor(total % 3600 / 60);
+  const s = total % 60;
+  const mm = h ? String(m).padStart(2, "0") : String(m);
+  return `${h ? `${h}:` : ""}${mm}:${String(s).padStart(2, "0")}`;
+};
+function formatTranscriptsText(result) {
+  const count = result.attachments.length;
+  if (count === 0) return `No audio attachments found in note ${result.id}.`;
+  const lines = [`${count} audio attachment${count === 1 ? "" : "s"} in note ${result.id}:`];
+  result.attachments.forEach((a, i) => {
+    const facts = [
+      `status ${a.status}`,
+      ...a.durationSeconds !== void 0 ? [clock(a.durationSeconds)] : [],
+      ...a.wordCount !== void 0 ? [`${a.wordCount} words`] : [],
+      ...a.fragmentCount && a.fragmentCount > 1 ? [`${a.fragmentCount} fragments`] : [],
+      ...a.speakers?.length ? [`${a.speakers.length} speakers`] : [],
+      ...a.reason ? [`reason: ${a.reason}`] : []
+    ];
+    lines.push("", `[${i + 1}] ${a.attachmentId} (${facts.join(", ")})`);
+    if (a.summary) lines.push(`Summary: ${a.summary}`);
+    if (a.text) lines.push(a.textTruncated ? `${a.text} [truncated]` : a.text);
+  });
+  if (result.truncated)
+    lines.push(
+      "",
+      "Some segments or text were left out to stay under the response size limit (APPLE_NOTES_MCP_EXPORT_MAX_BYTES)."
+    );
+  return lines.join("\n");
+}
+
+// src/utils/noteTables.ts
+import { gunzipSync as gunzipSync4 } from "node:zlib";
+var sub2 = (f, n) => {
   const value = embeddedMessage(getField(f, n));
   if (!value) throw new Error(`Missing table field ${n}`);
   return value;
@@ -39913,7 +40301,7 @@ var num = (f, n) => {
   if (v === void 0) throw new Error(`Missing table index ${n}`);
   return v;
 };
-var many = (f, n) => getFields(f, n).map((v) => {
+var many2 = (f, n) => getFields(f, n).map((v) => {
   const m = embeddedMessage(v);
   if (!m) throw new Error("Invalid table entry");
   return m;
@@ -39930,37 +40318,37 @@ function parseNoteTableCells(compressed) {
   return decodeTable(compressed, false);
 }
 function decodeTable(compressed, strict) {
-  const root = decodeMessage(gunzipSync3(compressed, { maxOutputLength: 16 * 1024 * 1024 }));
-  const data = sub(sub(root, 2), 3), entries = many(data, 3);
+  const root = decodeMessage(gunzipSync4(compressed, { maxOutputLength: 16 * 1024 * 1024 }));
+  const data = sub2(sub2(root, 2), 3), entries = many2(data, 3);
   if (entries.length > 1e5) throw new Error("Table too large");
   const keys = getFields(data, 4).map(stringValue), types = getFields(data, 5).map(stringValue), uuids = getFields(data, 6).map(hex);
   const entry = (index) => {
     if (!entries[index]) throw new Error("Invalid table reference");
     return entries[index];
   };
-  const uuidIndex = (index) => num(sub(many(sub(entry(index), 13), 3)[0], 2), 2);
+  const uuidIndex = (index) => num(sub2(many2(sub2(entry(index), 13), 3)[0], 2), 2);
   const roots = entries.filter((e) => {
     const map = embeddedMessage(getField(e, 13));
     return map && types[num(map, 1)] === "com.apple.notes.ICTable";
   });
   if (roots.length !== 1) throw new Error("Ambiguous native table root");
   const refs = new Map(
-    many(sub(roots[0], 13), 3).filter((m) => ["crRows", "crColumns", "cellColumns"].includes(keys[num(m, 1)] || "")).map((m) => [keys[num(m, 1)], num(sub(m, 2), 6)])
+    many2(sub2(roots[0], 13), 3).filter((m) => ["crRows", "crColumns", "cellColumns"].includes(keys[num(m, 1)] || "")).map((m) => [keys[num(m, 1)], num(sub2(m, 2), 6)])
   );
   const ordered = (key) => {
     const ref = refs.get(key);
     if (ref === void 0) throw new Error("Missing table dimension");
-    const ordering = sub(sub(entry(ref), 16), 1), array2 = sub(ordering, 1);
-    const ids = many(array2, 2).map((a) => hex(getField(a, 2)));
+    const ordering = sub2(sub2(entry(ref), 16), 1), array2 = sub2(ordering, 1);
+    const ids = many2(array2, 2).map((a) => hex(getField(a, 2)));
     const map = /* @__PURE__ */ new Map();
     ids.forEach((id2, i) => {
       const index = uuids.indexOf(id2);
       if (index < 0) throw new Error("Missing dimension UUID");
       map.set(index, i);
     });
-    const aliases = many(sub(ordering, 2), 1).map((pair) => [
-      uuidIndex(num(sub(pair, 1), 6)),
-      uuidIndex(num(sub(pair, 2), 6))
+    const aliases = many2(sub2(ordering, 2), 1).map((pair) => [
+      uuidIndex(num(sub2(pair, 1), 6)),
+      uuidIndex(num(sub2(pair, 2), 6))
     ]);
     for (let pass = 0; pass < aliases.length + 1; pass++) {
       let changed = false;
@@ -39980,13 +40368,13 @@ function decodeTable(compressed, strict) {
   const incomplete = [];
   const cellRef = refs.get("cellColumns");
   if (cellRef === void 0) throw new Error("Missing table cells");
-  for (const column of many(sub(entry(cellRef), 6), 1)) {
-    const ci = columns.map.get(uuidIndex(num(sub(column, 1), 6)));
-    const cells = entry(num(sub(column, 2), 6));
-    for (const row of many(sub(cells, 6), 1)) {
-      const ri = rows.map.get(uuidIndex(num(sub(row, 1), 6)));
+  for (const column of many2(sub2(entry(cellRef), 6), 1)) {
+    const ci = columns.map.get(uuidIndex(num(sub2(column, 1), 6)));
+    const cells = entry(num(sub2(column, 2), 6));
+    for (const row of many2(sub2(cells, 6), 1)) {
+      const ri = rows.map.get(uuidIndex(num(sub2(row, 1), 6)));
       if (ri === void 0 || ci === void 0) continue;
-      const note = sub(entry(num(sub(row, 2), 6)), 10);
+      const note = sub2(entry(num(sub2(row, 2), 6)), 10);
       const text = stringValue(getField(note, 2));
       if (text === void 0 || text.includes("\uFFFC")) {
         if (strict) throw new Error("Embedded or unsupported table cell");
@@ -40003,8 +40391,8 @@ function decodeTable(compressed, strict) {
   }
   const rtl = entries.some((e) => {
     const map = embeddedMessage(getField(e, 13));
-    return map && many(map, 3).some(
-      (m) => stringValue(getField(sub(m, 2), 4)) === "CRTableColumnDirectionRightToLeft"
+    return map && many2(map, 3).some(
+      (m) => stringValue(getField(sub2(m, 2), 4)) === "CRTableColumnDirectionRightToLeft"
     );
   });
   const width = columns.ids.length;
@@ -40081,11 +40469,11 @@ function collectNoteTables(rich, noteId3) {
 }
 
 // src/utils/smartFolders.ts
-import { execFileSync as execFileSync4 } from "child_process";
+import { execFileSync as execFileSync5 } from "child_process";
 import * as fs2 from "fs";
 import * as os2 from "os";
 import * as path2 from "path";
-var NOTES_DB_PATH2 = path2.join(
+var NOTES_DB_PATH3 = path2.join(
   os2.homedir(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
@@ -40376,7 +40764,7 @@ WHERE Z_ENT = (SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = 'ICHashtag')
   AND ZSTANDARDIZEDCONTENT IS NOT NULL
   AND COALESCE(ZMARKEDFORDELETION, 0) = 0;
 COMMIT;`;
-var REQUIRED_COLUMNS = [
+var REQUIRED_COLUMNS2 = [
   "ZIDENTIFIER",
   "ZTITLE2",
   "ZFOLDERTYPE",
@@ -40430,21 +40818,21 @@ function buildSmartFolders(output) {
     (a, b) => (a.account ?? "").localeCompare(b.account ?? "") || (a.name ?? "").localeCompare(b.name ?? "") || a.id.localeCompare(b.id)
   );
 }
-function runSqlite(dbPath2, sql) {
-  return execFileSync4("sqlite3", ["-readonly", dbPath2, sql], {
+function runSqlite2(dbPath2, sql) {
+  return execFileSync5("sqlite3", ["-readonly", dbPath2, sql], {
     encoding: "utf8",
     timeout: 5e3,
     maxBuffer: 16 * 1024 * 1024,
     stdio: ["pipe", "pipe", "pipe"]
   });
 }
-function readSmartFolders(dbPath2 = NOTES_DB_PATH2) {
+function readSmartFolders(dbPath2 = NOTES_DB_PATH3) {
   if (!fs2.existsSync(dbPath2)) return { folders: null, error: "no_fda", message: FDA_MESSAGE };
   try {
     const columns = new Set(
-      runSqlite(dbPath2, "SELECT name FROM pragma_table_info('ZICCLOUDSYNCINGOBJECT');").trim().split("\n")
+      runSqlite2(dbPath2, "SELECT name FROM pragma_table_info('ZICCLOUDSYNCINGOBJECT');").trim().split("\n")
     );
-    const missing = REQUIRED_COLUMNS.filter((column) => !columns.has(column));
+    const missing = REQUIRED_COLUMNS2.filter((column) => !columns.has(column));
     if (missing.length) {
       return {
         folders: null,
@@ -40452,7 +40840,7 @@ function readSmartFolders(dbPath2 = NOTES_DB_PATH2) {
         message: `This Notes database does not have the columns smart folders need (${missing.join(", ")}).`
       };
     }
-    return { folders: buildSmartFolders(runSqlite(dbPath2, SMART_FOLDERS_SQL)) };
+    return { folders: buildSmartFolders(runSqlite2(dbPath2, SMART_FOLDERS_SQL)) };
   } catch (error2) {
     const message = error2 instanceof Error ? error2.message : String(error2);
     if (message.includes("authorization denied") || message.includes("unable to open database")) {
@@ -40465,20 +40853,24 @@ function readSmartFolders(dbPath2 = NOTES_DB_PATH2) {
 
 // src/utils/attachmentFs.ts
 import {
+  closeSync,
+  constants,
   existsSync as existsSync3,
+  fstatSync,
   lstatSync,
   mkdirSync,
   mkdtempSync,
+  openSync,
   readFileSync,
   realpathSync,
   rmSync,
   statSync
 } from "fs";
-import { dirname, isAbsolute, join as join4, relative, resolve, sep } from "path";
-import { homedir as homedir4, tmpdir } from "os";
+import { dirname, isAbsolute, join as join5, relative, resolve, sep } from "path";
+import { homedir as homedir5, tmpdir } from "os";
 function allowedSaveRoots() {
   return [
-    resolve(homedir4()),
+    resolve(homedir5()),
     resolve(tmpdir()),
     "/Volumes",
     "/private/var/folders",
@@ -40552,7 +40944,7 @@ function assertSafeSavePath(p, roots = allowedSaveRoots()) {
   if (suffix.split(sep).includes("..")) {
     throw new Error(`Refusing to write outside allowed locations (home, temp, /Volumes): "${abs}"`);
   }
-  const canonicalDest = suffix ? join4(canonicalAncestor, suffix) : canonicalAncestor;
+  const canonicalDest = suffix ? join5(canonicalAncestor, suffix) : canonicalAncestor;
   const allowed = canonicalRoots(roots);
   if (!isWithinRoots(canonicalAncestor, allowed) || !isWithinRoots(canonicalDest, allowed)) {
     throw new Error(
@@ -40592,6 +40984,48 @@ function fileSize(p) {
 function makeTempDir() {
   return mkdtempSync(resolve(tmpdir(), "apple-notes-att-"));
 }
+function readAllowedTextFile(p, maxBytes, roots = allowedSaveRoots()) {
+  if (!p || !p.trim()) throw new Error("A content file path is required.");
+  if (!isAbsolute(p)) throw new Error(`Content file path must be absolute: "${p}"`);
+  const abs = resolve(p);
+  if (!isWithinRoots(abs, roots))
+    throw new Error(`Refusing to read outside allowed locations (home, temp, /Volumes): "${abs}"`);
+  let canonical;
+  try {
+    canonical = canonicalize(abs);
+  } catch {
+    throw new Error(`Content file does not exist or cannot be resolved: "${abs}"`);
+  }
+  if (!isWithinRoots(canonical, canonicalRoots(roots)))
+    throw new Error(
+      `Refusing to read outside allowed locations (home, temp, /Volumes): "${abs}" resolves to "${canonical}".`
+    );
+  let descriptor;
+  try {
+    descriptor = openSync(abs, constants.O_RDONLY | constants.O_NOFOLLOW);
+  } catch (error2) {
+    if (error2.code === "ELOOP")
+      throw new Error(`Refusing to read the symbolic link "${abs}".`);
+    throw error2;
+  }
+  try {
+    const stat = fstatSync(descriptor);
+    if (!stat.isFile()) throw new Error(`Content file is not a regular file: "${abs}"`);
+    if (stat.size === 0) throw new Error(`Content file is empty: "${abs}"`);
+    if (stat.size > maxBytes)
+      throw new Error(`Content file is ${stat.size} bytes, over the ${maxBytes}-byte limit.`);
+    const bytes = readFileSync(descriptor);
+    if (bytes.length !== stat.size)
+      throw new Error("Content file changed while it was being read; try again");
+    try {
+      return new TextDecoder("utf-8", { fatal: true }).decode(bytes).replace(/^\uFEFF/, "");
+    } catch {
+      throw new Error(`Content file is not valid UTF-8 text: "${abs}"`);
+    }
+  } finally {
+    closeSync(descriptor);
+  }
+}
 function cleanupTempDir(dir) {
   try {
     if (existsSync3(dir)) rmSync(dir, { recursive: true, force: true });
@@ -40602,8 +41036,8 @@ function cleanupTempDir(dir) {
 // src/services/appleNotesManager.ts
 var import_turndown = __toESM(require_turndown_cjs(), 1);
 import { existsSync as existsSync4 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join5 } from "path";
+import { homedir as homedir6 } from "os";
+import { join as join6 } from "path";
 var FIELD_SEP = "";
 var RECORD_SEP = "";
 var AS_FIELD_SEP = "(character id 31)";
@@ -40810,10 +41244,10 @@ function buildAccountResolution(account) {
     if ${AS_ACCOUNT_REF} is missing value then error "${ACCOUNT_RESOLUTION_ERROR} Account \\"${safeAccount}\\" not found"
   `;
 }
-function buildAccountScopedScript(scope, command) {
+function buildAccountScopedScript(scope2, command) {
   return `
     tell application "Notes"
-      ${buildAccountResolution(scope.account)}
+      ${buildAccountResolution(scope2.account)}
       tell ${AS_ACCOUNT_REF}
         ${command}
       end tell
@@ -40831,7 +41265,7 @@ function getNoteLinkFromDB(coreDataId2) {
   const match = coreDataId2.match(/\/p(\d+)$/);
   if (!match) return null;
   const pk = parseInt(match[1], 10);
-  const dbPath2 = join5(homedir5(), "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite");
+  const dbPath2 = join6(homedir6(), "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite");
   if (!existsSync4(dbPath2)) return null;
   try {
     const { DatabaseSync } = __require("node:sqlite");
@@ -41393,11 +41827,20 @@ var AppleNotesManager = class {
     const safeExpectedBody = escapeHtmlForAppleScript(expectedBody);
     const script = buildAppLevelScript(`
       set noteRef to note id "${safeId}"
+      set originalFolder to missing value
+      try
+        set originalFolder to container of noteRef
+      end try
       set currentBody to body of noteRef
       considering case
         if currentBody is not "${safeExpectedBody}" and currentBody is not "${safeExpectedBody}" & linefeed then return "SAFETY_CONFLICT"
         delete noteRef
       end considering
+      if originalFolder is not missing value then
+        try
+          if (id of notes of originalFolder) contains "${safeId}" then return "SAFETY_NOT_DELETED"
+        end try
+      end if
       return "SAFETY_DELETED"
     `);
     const result = executeMutationAppleScript(script);
@@ -41407,6 +41850,7 @@ var AppleNotesManager = class {
     }
     const status = result.output.trim();
     if (status === "SAFETY_CONFLICT") return { status: "conflict" };
+    if (status === "SAFETY_NOT_DELETED") return { status: "not-deleted" };
     return status === "SAFETY_DELETED" ? { status: "deleted" } : { status: "failed" };
   }
   /**
@@ -43140,18 +43584,31 @@ var AppleNotesManager = class {
     }
     return markdown;
   }
+  /**
+   * Reads the transcripts Notes has stored for a note's top-level audio
+   * recordings, one entry per attachment in body order. Read-only: queries the
+   * NoteStore database with `sqlite3 -readonly` and needs Full Disk Access.
+   *
+   * @param id - CoreData URL identifier for the note
+   * @param options - word-level segment inclusion and cap
+   * @throws AudioTranscriptError for an invalid id, a missing or locked note,
+   *   missing Full Disk Access, or a database read failure
+   */
+  getAudioTranscripts(id2, options = {}) {
+    return readAudioTranscripts(id2, options);
+  }
 };
 
 // src/utils/syncDetection.ts
-import { execFileSync as execFileSync5 } from "child_process";
+import { execFileSync as execFileSync6 } from "child_process";
 import * as fs3 from "fs";
 import * as path3 from "path";
 import * as os3 from "os";
-var NOTES_DB_PATH3 = path3.join(
+var NOTES_DB_PATH4 = path3.join(
   os3.homedir(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
-var WAL_PATH = `${NOTES_DB_PATH3}-wal`;
+var WAL_PATH = `${NOTES_DB_PATH4}-wal`;
 var RECENT_ACTIVITY_THRESHOLD_SECONDS = 5;
 var SYNC_STATUS_CACHE_TTL_MS = 2e3;
 var cachedSyncStatus = null;
@@ -43167,7 +43624,7 @@ function getSyncStatus(useCache = true) {
     recentActivity: false
   };
   try {
-    if (!fs3.existsSync(NOTES_DB_PATH3)) {
+    if (!fs3.existsSync(NOTES_DB_PATH4)) {
       status.error = "Notes database not found";
       cachedSyncStatus = status;
       cacheTimestamp = Date.now();
@@ -43188,9 +43645,9 @@ function getSyncStatus(useCache = true) {
         WHERE object.ZCLOUDSTATE = state.Z_PK
       );
     `;
-    const result = execFileSync5(
+    const result = execFileSync6(
       "sqlite3",
-      ["-readonly", NOTES_DB_PATH3, query.replace(/\n/g, " ")],
+      ["-readonly", NOTES_DB_PATH4, query.replace(/\n/g, " ")],
       {
         encoding: "utf8",
         timeout: 5e3,
@@ -43247,11 +43704,11 @@ function withSyncAwarenessSync(operation, fn) {
 }
 
 // src/utils/noteMetadata.ts
-import { execFileSync as execFileSync6 } from "child_process";
+import { execFileSync as execFileSync7 } from "child_process";
 import * as fs4 from "fs";
 import * as path4 from "path";
 import * as os4 from "os";
-var NOTES_DB_PATH4 = path4.join(
+var NOTES_DB_PATH5 = path4.join(
   os4.homedir(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
@@ -43267,15 +43724,15 @@ var COLUMN_MAP = [
   { key: "widgetSnippet", column: "ZWIDGETSNIPPET", type: "text" },
   { key: "smartFolderQuery", column: "ZSMARTFOLDERQUERYJSON", type: "text" }
 ];
-function runSqlite2(query) {
-  return execFileSync6("sqlite3", ["-readonly", NOTES_DB_PATH4, query], {
+function runSqlite3(query) {
+  return execFileSync7("sqlite3", ["-readonly", NOTES_DB_PATH5, query], {
     encoding: "utf8",
     timeout: 5e3,
     stdio: ["pipe", "pipe", "pipe"]
   }).trim();
 }
 function presentColumns() {
-  const out = runSqlite2("PRAGMA table_info(ZICCLOUDSYNCINGOBJECT);");
+  const out = runSqlite3("PRAGMA table_info(ZICCLOUDSYNCINGOBJECT);");
   const cols = /* @__PURE__ */ new Set();
   for (const line of out.split("\n")) {
     const name = line.split("|")[1];
@@ -43293,7 +43750,7 @@ function getNoteMetadata(noteId3) {
     };
   }
   const pk = pkMatch[1];
-  if (!fs4.existsSync(NOTES_DB_PATH4)) {
+  if (!fs4.existsSync(NOTES_DB_PATH5)) {
     return { metadata: null, error: "no_fda", message: FDA_MESSAGE2 };
   }
   try {
@@ -43303,7 +43760,7 @@ function getNoteMetadata(noteId3) {
       return { metadata: {} };
     }
     const pairs = selected.map((c) => `'${c.key}', ${c.column}`).join(", ");
-    const row = runSqlite2(
+    const row = runSqlite3(
       `SELECT json_object(${pairs}) FROM ZICCLOUDSYNCINGOBJECT WHERE Z_PK = ${pk};`
     );
     if (!row) {
@@ -43336,11 +43793,11 @@ function getNoteMetadata(noteId3) {
 }
 
 // src/utils/noteIdentifiers.ts
-import { execFileSync as execFileSync7 } from "child_process";
+import { execFileSync as execFileSync8 } from "child_process";
 import * as fs5 from "fs";
 import * as os5 from "os";
 import * as path5 from "path";
-var NOTES_DB_PATH5 = path5.join(
+var NOTES_DB_PATH6 = path5.join(
   os5.homedir(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
@@ -43418,7 +43875,7 @@ function runJsonQuery(sql, dbPath2) {
   if (!fs5.existsSync(dbPath2)) throw new IdentifierResolutionError("no_fda", NO_FDA_MESSAGE);
   let out;
   try {
-    out = execFileSync7("sqlite3", ["-readonly", dbPath2, sql], {
+    out = execFileSync8("sqlite3", ["-readonly", dbPath2, sql], {
       encoding: "utf8",
       timeout: 5e3,
       stdio: ["pipe", "pipe", "pipe"]
@@ -43438,7 +43895,7 @@ function runJsonQuery(sql, dbPath2) {
 function coreDataId(store, entity2, pk) {
   return `x-coredata://${store}/${entity2}/p${pk}`;
 }
-function resolveIdentifiers(values, entity2, dbPath2 = NOTES_DB_PATH5) {
+function resolveIdentifiers(values, entity2, dbPath2 = NOTES_DB_PATH6) {
   const resolved = /* @__PURE__ */ new Map();
   const keys = [];
   const uuids = [];
@@ -43484,7 +43941,7 @@ function resolveIdentifiers(values, entity2, dbPath2 = NOTES_DB_PATH5) {
   return resolved;
 }
 var COREDATA_PARTS = /^x-coredata:\/\/([0-9A-Fa-f-]+)\/(ICNote|ICFolder|ICAccount)\/p(\d{1,18})$/;
-function lookupStableIdentifiers(ids, entity2, dbPath2 = NOTES_DB_PATH5) {
+function lookupStableIdentifiers(ids, entity2, dbPath2 = NOTES_DB_PATH6) {
   const result = /* @__PURE__ */ new Map();
   const wanted = /* @__PURE__ */ new Map();
   for (const id2 of ids) {
@@ -43520,7 +43977,7 @@ function lookupStableIdentifiers(ids, entity2, dbPath2 = NOTES_DB_PATH5) {
   }
   return result;
 }
-function withStableIdentifiers(items, entity2, dbPath2 = NOTES_DB_PATH5) {
+function withStableIdentifiers(items, entity2, dbPath2 = NOTES_DB_PATH6) {
   const ids = items.map((item) => item.id).filter((id2) => typeof id2 === "string");
   if (ids.length === 0) return items;
   const found = lookupStableIdentifiers(ids, entity2, dbPath2);
@@ -44108,12 +44565,12 @@ function positiveTextTerms(node, negated = false) {
 }
 
 // src/utils/noteQueryStore.ts
-import { execFileSync as execFileSync8 } from "child_process";
+import { execFileSync as execFileSync9 } from "child_process";
 import * as fs6 from "fs";
 import * as os6 from "os";
 import * as path6 from "path";
-import { gunzipSync as gunzipSync4 } from "zlib";
-var NOTES_DB_PATH6 = path6.join(
+import { gunzipSync as gunzipSync5 } from "zlib";
+var NOTES_DB_PATH7 = path6.join(
   os6.homedir(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
@@ -44201,13 +44658,13 @@ function countWords(text) {
   }
   return count;
 }
-var REQUIRED_COLUMNS2 = ["Z_PK", "Z_ENT", "ZTITLE1", "ZFOLDER", "ZMODIFICATIONDATE1"];
+var REQUIRED_COLUMNS3 = ["Z_PK", "Z_ENT", "ZTITLE1", "ZFOLDER", "ZMODIFICATIONDATE1"];
 function col(available, alias, name) {
   return available.has(name) ? `${alias}.${name}` : "NULL";
 }
 var entity = (name) => `(SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME='${name}')`;
 function buildScanSql(available, options) {
-  const missing = REQUIRED_COLUMNS2.filter((c) => !available.has(c));
+  const missing = REQUIRED_COLUMNS3.filter((c) => !available.has(c));
   if (missing.length) {
     throw new NoteQueryStoreError(
       `This macOS version's Notes database lacks columns query-notes needs (${missing.join(", ")}).`,
@@ -44248,8 +44705,8 @@ function buildScanSql(available, options) {
     "COMMIT;"
   ].join(" ");
 }
-function runSqlite3(dbPath2, query) {
-  return execFileSync8("sqlite3", ["-readonly", dbPath2, query], {
+function runSqlite4(dbPath2, query) {
+  return execFileSync9("sqlite3", ["-readonly", dbPath2, query], {
     encoding: "utf8",
     timeout: 3e4,
     maxBuffer: 512 * 1024 * 1024,
@@ -44258,7 +44715,7 @@ function runSqlite3(dbPath2, query) {
 }
 function presentColumns2(dbPath2) {
   const cols = /* @__PURE__ */ new Set();
-  for (const line of runSqlite3(dbPath2, "PRAGMA table_info(ZICCLOUDSYNCINGOBJECT);").split("\n")) {
+  for (const line of runSqlite4(dbPath2, "PRAGMA table_info(ZICCLOUDSYNCINGOBJECT);").split("\n")) {
     const name = line.split("|")[1];
     if (name) cols.add(name);
   }
@@ -44313,12 +44770,12 @@ function queryNotes(expression, options = {}) {
   const includeDeleted = options.includeDeleted ?? false;
   const withBodies = needsContent(ast);
   const withTags = needsTags(ast);
-  const dbPath2 = options.dbPath ?? NOTES_DB_PATH6;
+  const dbPath2 = options.dbPath ?? NOTES_DB_PATH7;
   if (!fs6.existsSync(dbPath2)) throw new NoteQueryStoreError(QUERY_FDA_MESSAGE, "no_fda");
   let output;
   try {
     const available = presentColumns2(dbPath2);
-    output = runSqlite3(
+    output = runSqlite4(
       dbPath2,
       buildScanSql(available, { scanLimit, includeDeleted, withBodies, withTags })
     );
@@ -44363,7 +44820,7 @@ function queryNotes(expression, options = {}) {
     const locked = Boolean(row.locked);
     let decoded;
     let content;
-    const decode = () => {
+    const decode2 = () => {
       if (decoded !== void 0) return decoded;
       decoded = null;
       if (locked) return decoded;
@@ -44374,7 +44831,7 @@ function queryNotes(expression, options = {}) {
       try {
         decoded = decodeNoteBody(
           new Uint8Array(
-            gunzipSync4(Buffer.from(row.data, "hex"), { maxOutputLength: 32 * 1024 * 1024 })
+            gunzipSync5(Buffer.from(row.data, "hex"), { maxOutputLength: 32 * 1024 * 1024 })
           )
         );
       } catch {
@@ -44394,7 +44851,7 @@ function queryNotes(expression, options = {}) {
       modified: coreDataMs(row.modified),
       content: () => {
         if (content !== void 0) return content;
-        const body2 = decode();
+        const body2 = decode2();
         if (!body2) return content = null;
         const text = body2.text;
         const firstBreak = text.indexOf("\n");
@@ -44419,7 +44876,7 @@ function queryNotes(expression, options = {}) {
     if (!evaluateNoteQuery(ast, note)) continue;
     matched++;
     if (hits.length >= limit) continue;
-    const body = locked ? null : decode();
+    const body = locked ? null : decode2();
     hits.push({
       id: `x-coredata://${uuid2}/ICNote/p${row.pk}`,
       title: row.title ?? "",
@@ -44449,10 +44906,10 @@ function queryNotes(expression, options = {}) {
 import { spawnSync } from "child_process";
 
 // src/services/nativeTags.ts
-import { execFileSync as execFileSync9 } from "node:child_process";
+import { execFileSync as execFileSync10 } from "node:child_process";
 import { mkdtempSync as mkdtempSync2, writeFileSync, rmSync as rmSync2 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 
 // src/services/shortcutConsent.ts
 function shortcutConsentHint(shortcut) {
@@ -44528,7 +44985,7 @@ function addNativeTags(request, deps) {
   };
 }
 function listInstalledShortcuts() {
-  return execFileSync9("/usr/bin/shortcuts", ["list", "--show-identifiers"], {
+  return execFileSync10("/usr/bin/shortcuts", ["list", "--show-identifiers"], {
     encoding: "utf8",
     timeout: 15e3,
     maxBuffer: 1024 * 1024,
@@ -44554,11 +45011,11 @@ function runNativeTagsShortcut(input) {
   const status = nativeTagsStatus();
   if (!status.installed)
     throw new Error(`Import the supplied ${status.shortcut}.shortcut in Shortcuts first`);
-  const directory = mkdtempSync2(join10(tmpdir2(), "apple-notes-native-tags-"));
+  const directory = mkdtempSync2(join11(tmpdir2(), "apple-notes-native-tags-"));
   try {
-    const path7 = join10(directory, "request.json");
+    const path7 = join11(directory, "request.json");
     writeFileSync(path7, JSON.stringify(input), { mode: 384 });
-    execFileSync9("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", path7], {
+    execFileSync10("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", path7], {
       encoding: "utf8",
       timeout: 6e4,
       maxBuffer: 1024 * 1024,
@@ -44577,14 +45034,29 @@ function runNativeTagsShortcut(input) {
 }
 
 // src/services/backgroundNotes.ts
-import { execFileSync as execFileSync10 } from "node:child_process";
+import { execFileSync as execFileSync11 } from "node:child_process";
 import { mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync2, rmSync as rmSync3 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 
 // src/utils/appendMarkdown.ts
 var escape2 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-function appendMarkdownHtml(markdown) {
+var TASK_GLYPHS = { open: "\u2610", done: "\u2611" };
+var TASK_ITEM = /^\[([ xX])\][ \t]+(\S.*)$/;
+function stripDuplicateTitleHeading(markdown, title) {
+  const normalized2 = markdown.replace(/^\uFEFF/, "");
+  const lines = normalized2.split(/\r?\n/);
+  if (lines[0] !== `# ${title}`) return { content: markdown, stripped: false };
+  const rest = lines.slice(lines.length > 1 && lines[1] === "" ? 2 : 1);
+  return { content: rest.join("\n"), stripped: true };
+}
+function countTaskItems(markdown) {
+  return markdown.replace(/\r\n/g, "\n").split("\n").filter((line) => {
+    const item = /^[-+*]\s+(.+)$/.exec(line);
+    return item !== null && TASK_ITEM.test(item[1]);
+  }).length;
+}
+function appendMarkdownHtml(markdown, options = {}) {
   if (markdown.includes("\uE000") || markdown.includes("\uE001"))
     throw new Error("Unsupported reserved characters");
   if (Array.from(markdown).some((c) => c.charCodeAt(0) < 32 && !["\n", "\r", "	"].includes(c)))
@@ -44623,7 +45095,8 @@ function appendMarkdownHtml(markdown) {
         list = kind;
         html += `<${kind}>`;
       }
-      html += `<li>${inline(item[2])}</li>`;
+      const task = options.taskGlyphs && item[1] ? TASK_ITEM.exec(item[2]) : null;
+      html += task ? `<li>${task[1] === " " ? TASK_GLYPHS.open : TASK_GLYPHS.done} ${inline(task[2])}</li>` : `<li>${inline(item[2])}</li>`;
       continue;
     }
     close();
@@ -44769,9 +45242,9 @@ function runBackgroundShortcut(input, status = backgroundStatus()) {
     throw new Error(
       `Install the supplied "${status.shortcut}" Shortcut once; Shortcuts must list it exactly once`
     );
-  const directory = mkdtempSync3(join11(tmpdir3(), "apple-notes-background-"));
+  const directory = mkdtempSync3(join12(tmpdir3(), "apple-notes-background-"));
   try {
-    const file = join11(directory, "request.json");
+    const file = join12(directory, "request.json");
     writeFileSync2(
       file,
       JSON.stringify({
@@ -44791,9 +45264,9 @@ function runBackgroundShortcut(input, status = backgroundStatus()) {
       { mode: 384 }
     );
     try {
-      execFileSync10("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", file], {
+      execFileSync11("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", file], {
         encoding: "utf8",
-        timeout: 6e4,
+        timeout: callTimeoutMs() ?? 6e4,
         maxBuffer: 1024 * 1024,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -44808,9 +45281,9 @@ function backgroundDependencies(manager) {
   return {
     read: (id2) => readBackgroundSnapshot(manager, id2),
     run: runBackgroundShortcut,
-    candidates: (title, scope) => manager.listAccounts().flatMap(
+    candidates: (title, scope2) => manager.listAccounts().flatMap(
       (account) => manager.searchNotes(title, false, account.name).filter(
-        (note) => note.title === title && !note.passwordProtected && manager.getNotePlaintextById(note.id).includes(scope)
+        (note) => note.title === title && !note.passwordProtected && manager.getNotePlaintextById(note.id).includes(scope2)
       ).map((note) => note.id)
     )
   };
@@ -45083,7 +45556,7 @@ ${request.content}`
 }
 
 // src/services/capabilityMatrix.ts
-import { execFileSync as execFileSync11 } from "node:child_process";
+import { execFileSync as execFileSync12 } from "node:child_process";
 import { release } from "node:os";
 var MACOS_SHORTCUTS_CLI = "12.0";
 var MACOS_MARKDOWN_IMPORT = "26.0";
@@ -45290,7 +45763,7 @@ function evaluateFeatures(env, features = FEATURES) {
 function readMacOSVersion() {
   if (process.platform !== "darwin") return null;
   try {
-    const out = execFileSync11("/usr/bin/sw_vers", ["-productVersion"], {
+    const out = execFileSync12("/usr/bin/sw_vers", ["-productVersion"], {
       encoding: "utf8",
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
@@ -45444,12 +45917,12 @@ function formatDoctorReport(r) {
 
 // src/services/fileConfig.ts
 import { existsSync as existsSync9, readFileSync as readFileSync2 } from "fs";
-import { join as join12 } from "path";
-import { homedir as homedir10 } from "os";
+import { join as join13 } from "path";
+import { homedir as homedir11 } from "os";
 function fileConfigPath(env = process.env) {
   const override = env.APPLE_NOTES_MCP_CONFIG_FILE;
   if (override && override.trim()) return override.trim();
-  return join12(homedir10(), "Library", "Application Support", "apple-notes-mcp", "config.json");
+  return join13(homedir11(), "Library", "Application Support", "apple-notes-mcp", "config.json");
 }
 function loadFileConfig(env = process.env, path7 = fileConfigPath(env)) {
   const applied = [];
@@ -45752,11 +46225,11 @@ function createShutdown(stream, exit, timeoutMs = SHUTDOWN_DRAIN_TIMEOUT_MS) {
 }
 
 // src/utils/noteBlocks.ts
-import { execFileSync as execFileSync12 } from "node:child_process";
+import { execFileSync as execFileSync13 } from "node:child_process";
 import { existsSync as existsSync10 } from "node:fs";
-import { homedir as homedir11 } from "node:os";
-import { join as join13 } from "node:path";
-import { gunzipSync as gunzipSync5 } from "node:zlib";
+import { homedir as homedir12 } from "node:os";
+import { join as join14 } from "node:path";
+import { gunzipSync as gunzipSync6 } from "node:zlib";
 var NoteBlocksError = class extends Error {
   code;
   constructor(code, message) {
@@ -45805,7 +46278,7 @@ var stringOf = (fields, n) => {
   const b = bytesOf(fields, n);
   return b ? utf8.decode(b) : void 0;
 };
-var sub2 = (fields, n) => {
+var sub3 = (fields, n) => {
   const b = bytesOf(fields, n);
   return b ? decodeWireFields(b) : void 0;
 };
@@ -45838,7 +46311,7 @@ function decodeParagraph(fields, tally) {
     blockQuote: (varintOf(fields, 8) ?? 0) !== 0
   };
   if (attrs.styleType === -1) attrs.styleType = null;
-  const checklist = sub2(fields, 5);
+  const checklist = sub3(fields, 5);
   const checklistId = checklist && bytesOf(checklist, 1);
   if (attrs.styleType === 103 && checklistId)
     attrs.checklist = { id: hex2(checklistId), done: varintOf(checklist, 2) === 1 };
@@ -45848,7 +46321,7 @@ function decodeParagraph(fields, tally) {
 }
 function decodeInline(fields) {
   const inline = {};
-  const font = sub2(fields, 3);
+  const font = sub3(fields, 3);
   const hints = font ? varintOf(font, 3) ?? 0 : 0;
   const weight = varintOf(fields, 5) ?? 0;
   if (weight === 1 || weight === 3 || hints & 1) inline.bold = true;
@@ -45858,7 +46331,7 @@ function decodeInline(fields) {
   const baseline = varintOf(fields, 8) ?? 0;
   if (baseline > 0) inline.superscript = true;
   if (baseline < 0) inline.subscript = true;
-  const color = sub2(fields, 10);
+  const color = sub3(fields, 10);
   const colorValue = color && colorOf(color);
   if (colorValue) inline.color = colorValue;
   const emphasis = varintOf(fields, 14);
@@ -45880,7 +46353,7 @@ function decodeInline(fields) {
         ...size !== void 0 && Number.isFinite(size) ? { size } : {}
       };
   }
-  const attachment = sub2(fields, 12);
+  const attachment = sub3(fields, 12);
   const attachmentId = attachment && stringOf(attachment, 1);
   if (attachmentId)
     inline.attachment = { id: attachmentId, uti: stringOf(attachment, 2) || "unknown" };
@@ -45895,8 +46368,8 @@ function wrap(error2) {
 function decodeNoteBlocks(data) {
   let note;
   try {
-    const document = sub2(decodeWireFields(data), 2);
-    note = document && sub2(document, 3);
+    const document = sub3(decodeWireFields(data), 2);
+    note = document && sub3(document, 3);
   } catch (error2) {
     wrap(error2);
   }
@@ -45921,7 +46394,7 @@ function decodeNoteBlocks(data) {
       runs.push({
         start: position,
         length,
-        paragraph: decodeParagraph(sub2(fields, 2), paragraphTally),
+        paragraph: decodeParagraph(sub3(fields, 2), paragraphTally),
         inline: decodeInline(fields)
       });
       position += length;
@@ -46044,7 +46517,7 @@ function summarize(blocks, attachments) {
 function decodeCompressedNoteBlocks(compressed) {
   let data;
   try {
-    data = gunzipSync5(compressed, { maxOutputLength: 32 * 1024 * 1024 });
+    data = gunzipSync6(compressed, { maxOutputLength: 32 * 1024 * 1024 });
   } catch (error2) {
     throw new NoteBlocksError(
       "decompress-failed",
@@ -46098,11 +46571,11 @@ function pageNoteBlocks(doc, { offset = 0, limit = 500, maxBytes = blocksMaxResp
     undecodedFields: doc.undecodedFields
   };
 }
-var NOTES_DB_PATH7 = join13(
-  homedir11(),
+var NOTES_DB_PATH8 = join14(
+  homedir12(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
-function readNoteBlocks(id2, { dbPath: dbPath2 = NOTES_DB_PATH7 } = {}) {
+function readNoteBlocks(id2, { dbPath: dbPath2 = NOTES_DB_PATH8 } = {}) {
   const pk = /^x-coredata:\/\/[0-9a-f-]+\/ICNote\/p([0-9]{1,18})$/i.exec(id2)?.[1];
   if (!pk)
     throw new NoteBlocksError(
@@ -46114,7 +46587,7 @@ function readNoteBlocks(id2, { dbPath: dbPath2 = NOTES_DB_PATH7 } = {}) {
   const sql = "SELECT json_object('exists', (SELECT count(*) FROM ZICCLOUDSYNCINGOBJECT WHERE Z_PK = @pk AND Z_ENT = (SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = 'ICNote')), 'data', (SELECT hex(ZDATA) FROM ZICNOTEDATA WHERE ZNOTE = @pk), 'encrypted', (SELECT ZCRYPTOINITIALIZATIONVECTOR IS NOT NULL FROM ZICNOTEDATA WHERE ZNOTE = @pk));";
   let output;
   try {
-    output = execFileSync12(
+    output = execFileSync13(
       "/usr/bin/sqlite3",
       ["-readonly", "-cmd", ".parameter init", "-cmd", `.parameter set @pk ${pk}`, dbPath2, sql],
       {
@@ -46265,17 +46738,17 @@ function insertLink(request, deps) {
 // src/tools/directOperations.ts
 import { createHash as createHash2 } from "node:crypto";
 import {
-  closeSync,
-  constants,
-  fstatSync,
+  closeSync as closeSync2,
+  constants as constants2,
+  fstatSync as fstatSync2,
   mkdtempSync as mkdtempSync4,
-  openSync,
+  openSync as openSync2,
   readFileSync as readFileSync3,
   rmSync as rmSync4,
   writeFileSync as writeFileSync3
 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
-import { basename, isAbsolute as isAbsolute2, join as join14 } from "node:path";
+import { basename, isAbsolute as isAbsolute2, join as join15 } from "node:path";
 var noteId = exactIdInput(
   "ICNote",
   /^x-coredata:\/\/[0-9a-f-]+\/ICNote\/p\d+$/i,
@@ -46320,9 +46793,9 @@ function assertExistingContentPreserved(before, after) {
 }
 function localAttachment(path7) {
   if (!isAbsolute2(path7)) throw new Error("An absolute local file path is required");
-  const descriptor = openSync(path7, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const descriptor = openSync2(path7, constants2.O_RDONLY | constants2.O_NOFOLLOW);
   try {
-    const stat = fstatSync(descriptor);
+    const stat = fstatSync2(descriptor);
     if (!stat.isFile() || stat.size === 0 || stat.size > 64 * 1024 * 1024)
       throw new Error("Attachment must be a nonempty regular file of at most 64 MiB");
     const bytes = readFileSync3(descriptor);
@@ -46330,7 +46803,7 @@ function localAttachment(path7) {
       throw new Error("Attachment changed while it was being read; try again");
     return bytes;
   } finally {
-    closeSync(descriptor);
+    closeSync2(descriptor);
   }
 }
 function registerDirectOperations(server2, manager) {
@@ -46389,8 +46862,8 @@ function registerDirectOperations(server2, manager) {
       if (before.hash !== expectedContentHash) throw new Error("Note revision changed");
       const bytes = localAttachment(path7);
       const beforeAttachments = manager.listAttachmentsById(id2);
-      const directory = mkdtempSync4(join14(tmpdir4(), "notes-attachment-add-"));
-      const temporaryFile = join14(directory, basename(path7));
+      const directory = mkdtempSync4(join15(tmpdir4(), "notes-attachment-add-"));
+      const temporaryFile = join15(directory, basename(path7));
       try {
         writeFileSync3(temporaryFile, bytes, { mode: 384 });
         if (readSnapshot(manager, id2).hash !== before.hash)
@@ -46511,9 +46984,9 @@ function registerNativeTagsBridge(server2, manager) {
         { id: id2, expectedContentHash, scopeText, tags, title: initial.title },
         {
           read,
-          candidates: (title, scope) => manager.listAccounts().flatMap(
+          candidates: (title, scope2) => manager.listAccounts().flatMap(
             (account) => manager.searchNotes(title, false, account.name).filter(
-              (note) => !note.passwordProtected && manager.getNotePlaintextById(note.id).toLocaleLowerCase().includes(scope.toLocaleLowerCase())
+              (note) => !note.passwordProtected && manager.getNotePlaintextById(note.id).toLocaleLowerCase().includes(scope2.toLocaleLowerCase())
             ).map((note) => note.id)
           ),
           run: runNativeTagsShortcut
@@ -47052,7 +47525,11 @@ function errorResponse(message, cause) {
 function withErrorHandling(handler, errorPrefix) {
   return async (params) => {
     try {
-      return handler(params);
+      const seconds = params.timeoutSeconds;
+      return runWithCallTimeout(
+        typeof seconds === "number" ? seconds : void 0,
+        () => handler(params)
+      );
     } catch (error2) {
       const message = error2 instanceof Error ? error2.message : "Unknown error";
       return errorResponse(`${errorPrefix}: ${message}`, error2);
@@ -47072,6 +47549,7 @@ var MAX = {
   TAGS: 100,
   BATCH_IDS: 500
 };
+var MAX_CONTENT_FILE_BYTES = 1024 * 1024;
 var noteTitleSchema = {
   title: external_exports.string().min(1, "Note title is required").max(MAX.TITLE),
   account: external_exports.string().max(MAX.ACCOUNT).optional().describe(
@@ -47100,6 +47578,9 @@ function noteIdentifiers(id2) {
 var expectedContentHashInput = external_exports.string().regex(/^sha256:[a-f0-9]{64}$/, "expectedContentHash must come from get-note-content").describe(
   "Revision token returned by get-note-content for this exact ID. The mutation stops if the note changed since that read."
 );
+var timeoutSecondsInput = external_exports.number().int().min(CALL_TIMEOUT_SECONDS.min).max(CALL_TIMEOUT_SECONDS.max).optional().describe(
+  `Per-call timeout in seconds (${CALL_TIMEOUT_SECONDS.min}-${CALL_TIMEOUT_SECONDS.max}) for each Notes.app automation step this call runs, overriding APPLE_NOTES_MCP_TIMEOUT_MS. A timed-out write is uncertain, not failed: read the note by id before any retry.`
+);
 function readExactNoteSnapshot(id2) {
   const note = notesManager.getNoteById(id2);
   if (!note) return { error: `Note with ID "${id2}" not found` };
@@ -47113,6 +47594,7 @@ function readExactNoteSnapshot(id2) {
   const rich = enrichNoteRead(id2, body);
   return { note, body, rich, contentHash: richContentHash(body, rich) };
 }
+var NOT_DELETED_MESSAGE = "Notes.app accepted the delete, but the note is still in its original folder, so it was not moved to Recently Deleted. Nothing was deleted; read the note again before retrying.";
 function revisionConflictMessage(title) {
   return `Note "${title}" changed after it was read. Read it again and review the newer version before retrying.`;
 }
@@ -47136,11 +47618,17 @@ registerTool(
     description: "Use when: the user wants to create a brand-new Apple Note.\nReturns: the new note's title and id \u2014 reuse the id for follow-up reads/edits.\nDo not use when: editing an existing note (use update-note).\nNote: the title is prepended as an <h1>; true Apple Notes checklists cannot be created via AppleScript (see the content field). A 'folder' must already exist \u2014 create-folder first (it is idempotent), since this tool does not create it.",
     inputSchema: {
       title: external_exports.string().min(1, "Title is required").max(MAX.TITLE),
-      content: external_exports.string().min(1, "Content is required").max(MAX.CONTENT).describe(
-        'Note body. AppleScript cannot create true Apple Notes checklists \u2014 `<input type="checkbox">`, checklist CSS classes, and markdown `- [ ]` lines do not render as checkable items. To produce a checklist, create the note with a plain `<ul>` or `- ` list and convert it in Notes.app with \u21E7\u2318L.'
+      content: external_exports.string().min(1, "Content is required").max(MAX.CONTENT).optional().describe(
+        'Note body; required unless contentPath is given (pass exactly one). AppleScript cannot create true Apple Notes checklists \u2014 `<input type="checkbox">`, checklist CSS classes, and markdown `- [ ]` lines do not render as checkable items. To produce a checklist, create the note with a plain `<ul>` or `- ` list and convert it in Notes.app with \u21E7\u2318L.'
+      ),
+      contentPath: external_exports.string().min(1).max(MAX.SAVE_PATH).optional().describe(
+        `Absolute path of a local UTF-8 file to use as the body instead of content (pass exactly one). The same locations save-attachment may write to are allowed (home, temp, /Volumes); symbolic links and non-regular files are refused. Limit ${MAX_CONTENT_FILE_BYTES} bytes.`
       ),
       format: external_exports.enum(["plaintext", "html", "markdown"]).optional().default("plaintext").describe(
-        "Content format: 'plaintext' (default), 'html' for rich formatting, or 'markdown' for real Title/Heading/Subheading styles through the Create Markdown Note Shortcut (iCloud only; see get-capabilities)"
+        "Content format: 'plaintext' (default), 'html' for rich formatting, or 'markdown'. Markdown whose first line is exactly `# <title>` (same case and spacing) has that line and one blank line after it removed, since the title is supplied separately."
+      ),
+      markdownRoute: external_exports.enum(["shortcut", "html"]).optional().default("shortcut").describe(
+        "How format 'markdown' is imported. 'shortcut' (default) uses the Create Markdown Note Shortcut for real Title/Heading/Subheading styles (iCloud only, no tags; see get-capabilities). 'html' is the fallback when that Shortcut is not installed or the note is outside iCloud: it converts the same bounded Markdown subset to HTML and creates the note through AppleScript in any account, rendering `- [ ]` / `- [x]` task items as ordinary list rows that start with a visible \u2610 / \u2611 character \u2014 not native, checkable checklist items."
       ),
       tags: external_exports.array(external_exports.string().max(MAX.TAG)).max(MAX.TAGS).optional().describe(
         "Returned-only metadata \u2014 NOT written to Notes.app. Apple Notes tags can't be set via AppleScript, so any values passed here are echoed back in the response but do not appear on the created note. Use #hashtags in the body for searchable text; this does not create native tag objects. Native tags need the Notes Shortcuts action. Refused with format 'markdown': add tags afterwards with add-native-tags."
@@ -47150,7 +47638,8 @@ registerTool(
       ),
       account: external_exports.string().max(MAX.ACCOUNT).optional().describe(
         "Account name (defaults to the account Notes.app itself reports as default). Matched exactly, or by a unique prefix; an ambiguous prefix is refused. Must be an account Notes.app already has configured \u2014 see list-accounts."
-      )
+      ),
+      timeoutSeconds: timeoutSecondsInput
     },
     outputSchema: {
       ok: external_exports.boolean().optional(),
@@ -47159,10 +47648,66 @@ registerTool(
       folder: external_exports.string().optional(),
       account: external_exports.string().optional(),
       contentHash: external_exports.string().optional(),
-      verified: external_exports.boolean().optional()
+      verified: external_exports.boolean().optional(),
+      strippedDuplicateTitle: external_exports.boolean().optional(),
+      taskItemsRendered: external_exports.number().optional()
     }
   },
-  withErrorHandling(({ title, content, format = "plaintext", tags = [], folder, account }) => {
+  withErrorHandling((params) => {
+    const {
+      title,
+      contentPath,
+      format = "plaintext",
+      markdownRoute = "shortcut",
+      tags = [],
+      folder,
+      account
+    } = params;
+    if (params.content === void 0 === (contentPath === void 0))
+      return errorResponse("Provide exactly one of content or contentPath");
+    let content = params.content ?? readAllowedTextFile(contentPath, MAX_CONTENT_FILE_BYTES);
+    if (format !== "markdown" && markdownRoute !== "shortcut")
+      return errorResponse('markdownRoute applies to format "markdown" only');
+    let strippedDuplicateTitle = false;
+    if (format === "markdown") {
+      const stripped = stripDuplicateTitleHeading(content, title);
+      strippedDuplicateTitle = stripped.stripped;
+      content = stripped.content;
+      if (!content.trim())
+        return errorResponse(
+          "The Markdown holds only the title heading; add body content, or use format 'plaintext' for a title-only note"
+        );
+    }
+    const titleNote = strippedDuplicateTitle ? { strippedDuplicateTitle: true } : {};
+    if (format === "markdown" && markdownRoute === "html") {
+      const taskItemsRendered = countTaskItems(content);
+      const html = appendMarkdownHtml(content, { taskGlyphs: true });
+      const note2 = notesManager.createNote(title, html, tags, folder, account, "html");
+      if (!note2)
+        return errorResponse(
+          `Failed to create note "${title}". Check that the folder and account exist (list-folders, list-accounts) and that this server has Automation access (run the doctor tool).`
+        );
+      const createdBody2 = notesManager.getNoteContentById(note2.id);
+      if (!notesManager.getNoteById(note2.id) || !createdBody2)
+        return errorResponse(
+          `A note may have been created, but its exact ID could not be verified. Do not retry automatically. Returned ID: ${note2.id}`
+        );
+      const glyphNote = taskItemsRendered ? ` ${taskItemsRendered} task item(s) were rendered as visible \u2610 / \u2611 text, not native checklist items.` : "";
+      return successResponse(
+        `Note created from Markdown: "${note2.title}" [id: ${note2.id}]${glyphNote}`,
+        {
+          ok: true,
+          id: note2.id,
+          title: note2.title,
+          folder,
+          account,
+          contentHash: richContentHash(createdBody2, enrichNoteRead(note2.id, createdBody2)),
+          verified: true,
+          taskItemsRendered,
+          ...titleNote
+        }
+      );
+    }
     if (format === "markdown") {
       if (account)
         return errorResponse(
@@ -47174,7 +47719,10 @@ registerTool(
         );
       requireValidated("create-note-markdown");
       const result = createMarkdownNote(notesManager, { title, content, folder });
-      return successResponse(`Note created from Markdown: "${title}" [id: ${result.id}]`, result);
+      return successResponse(`Note created from Markdown: "${title}" [id: ${result.id}]`, {
+        ...result,
+        ...titleNote
+      });
     }
     const note = notesManager.createNote(title, content, tags, folder, account, format);
     if (!note) {
@@ -47320,7 +47868,7 @@ registerTool(
       }
       throw error2;
     }
-    const scope = `scanned ${result.scanned} of ${result.eligible} notes` + (result.scanTruncated ? `, the most recent ${result.scanLimit}; pass a higher scanLimit to include older notes` : "");
+    const scope2 = `scanned ${result.scanned} of ${result.eligible} notes` + (result.scanTruncated ? `, the most recent ${result.scanLimit}; pass a higher scanLimit to include older notes` : "");
     const notes = [];
     if (result.truncated) {
       notes.push(
@@ -47336,7 +47884,7 @@ registerTool(
 
 ${notes.join("\n")}` : "";
     if (result.count === 0) {
-      return successResponse(`No notes matched (${scope}).${footer}`, { ...result });
+      return successResponse(`No notes matched (${scope2}).${footer}`, { ...result });
     }
     const lines = result.notes.map((n) => {
       const where = [n.account, n.folder].filter(Boolean).join(" / ");
@@ -47345,7 +47893,7 @@ ${notes.join("\n")}` : "";
       return `  - ${n.title}${where ? ` (${where})` : ""}${n.locked ? " [locked]" : ""} [id: ${n.id}]${snippet}`;
     }).join("\n");
     return successResponse(
-      `Found ${result.matched} matching notes (${scope}):
+      `Found ${result.matched} matching notes (${scope2}):
 ${lines}${footer}`,
       { ...result }
     );
@@ -47892,7 +48440,8 @@ registerTool(
       newContent: external_exports.string().min(1, "New content is required").max(MAX.CONTENT).describe(
         "New note body. AppleScript cannot produce true Apple Notes checklists; checkbox inputs and `- [ ]` markdown do not render as checkable items. Use a plain list and convert in Notes.app with \u21E7\u2318L."
       ),
-      format: external_exports.enum(["plaintext", "html"]).optional().default("plaintext").describe("Content format: 'plaintext' (default) or 'html' for rich formatting")
+      format: external_exports.enum(["plaintext", "html"]).optional().default("plaintext").describe("Content format: 'plaintext' (default) or 'html' for rich formatting"),
+      timeoutSeconds: timeoutSecondsInput
     },
     outputSchema: {
       ok: external_exports.boolean().optional(),
@@ -48103,10 +48652,11 @@ registerTool(
       content: external_exports.string().min(1, "Content to append is required").max(MAX.CONTENT).describe("Text to append to the note body"),
       scopeText: external_exports.string().min(12).max(500).optional().describe("Existing unique phrase required for native append to protected notes"),
       position: external_exports.enum(["after", "before"]).optional().default("after").describe(
-        "Where to insert: 'after' appends to the end (default), 'before' prepends to the start"
+        "Where to insert: 'after' appends to the end (default); 'before' inserts directly below the note's title line, so the title stays first"
       ),
       separator: external_exports.string().max(20).optional().default("\n\n").describe("String placed between existing content and new content (default: two newlines)"),
-      format: external_exports.enum(["plaintext", "html"]).optional().default("plaintext").describe("Format of the content being appended: 'plaintext' (default) or 'html'")
+      format: external_exports.enum(["plaintext", "html"]).optional().default("plaintext").describe("Format of the content being appended: 'plaintext' (default) or 'html'"),
+      timeoutSeconds: timeoutSecondsInput
     },
     outputSchema: {
       ok: external_exports.boolean().optional(),
@@ -48195,7 +48745,8 @@ registerTool(
     description: "Use when: moving one exact note to Recently Deleted after reading and reviewing it.\nReturns: confirmation with the exact id.\nDo not use when: you only have a title or the note changed since review.\nSafety: requires id and expectedContentHash from get-note-content. The body comparison and delete happen in one AppleScript, so a newer edit is preserved.",
     inputSchema: {
       id: noteIdInput,
-      expectedContentHash: expectedContentHashInput
+      expectedContentHash: expectedContentHashInput,
+      timeoutSeconds: timeoutSecondsInput
     },
     outputSchema: {
       ok: external_exports.boolean().optional(),
@@ -48215,6 +48766,9 @@ registerTool(
     if (result.status === "conflict") {
       return errorResponse(revisionConflictMessage(snapshot.note.title));
     }
+    if (result.status === "not-deleted") {
+      return errorResponse(NOT_DELETED_MESSAGE);
+    }
     if (result.status !== "deleted") {
       return errorResponse(
         `The delete result for note "${snapshot.note.title}" is uncertain. Inspect exact ID ${id2} before retrying.`
@@ -48240,7 +48794,8 @@ registerTool(
     inputSchema: {
       id: noteIdInput,
       folder: external_exports.string().min(1, "Destination folder is required").max(MAX.FOLDER),
-      account: external_exports.string().max(MAX.ACCOUNT).optional().describe("Account containing the note/folder")
+      account: external_exports.string().max(MAX.ACCOUNT).optional().describe("Account containing the note/folder"),
+      timeoutSeconds: timeoutSecondsInput
     },
     outputSchema: {
       ok: external_exports.boolean().optional(),
@@ -48803,6 +49358,8 @@ registerTool(
       if (result.status === "conflict") {
         return { id: id2, success: false, error: revisionConflictMessage(snapshot.note.title) };
       }
+      if (result.status === "not-deleted")
+        return { id: id2, success: false, error: NOT_DELETED_MESSAGE };
       return { id: id2, success: false, error: "Delete result uncertain; inspect this exact ID" };
     });
     const succeeded = results.filter((r) => r.success).length;
@@ -49098,6 +49655,44 @@ ${summary}`,
     );
   }, "Error reading checklist state")
 );
+registerTool(
+  "get-audio-transcripts",
+  {
+    description: "Use when: reading the transcript (and summary, if any) that Notes already computed for the audio recordings in one note, by id.\nReturns: one entry per top-level audio attachment in body order, with attachmentId, durationSeconds, status (ok, none when no transcript is stored, or undecodable with a reason), joined transcript text, wordCount, speakers and summary when stored, and optional word-level segments.\nDo not use when: you need the audio file itself (save-attachment) or the note body (get-note-content). This tool does not transcribe; it only reads what Notes stored.\nSafety: read-only; requires Full Disk Access and reads the NoteStore database. Password-protected notes are refused. Large responses drop segments first, then shorten text, to stay under APPLE_NOTES_MCP_EXPORT_MAX_BYTES.",
+    inputSchema: {
+      id: noteIdInput,
+      includeSegments: external_exports.boolean().optional().describe(
+        "Also return word-level segments (text, start and duration in seconds, speaker). Default false."
+      ),
+      maxSegments: external_exports.number().int().min(1).max(MAX_SEGMENTS_LIMIT).optional().describe(
+        `Cap on segments returned per attachment when includeSegments is true (default ${DEFAULT_MAX_SEGMENTS}).`
+      )
+    },
+    outputSchema: {
+      id: external_exports.string().optional(),
+      attachments: external_exports.array(external_exports.object({}).passthrough()).optional(),
+      bodyOrder: external_exports.boolean().optional(),
+      truncated: external_exports.boolean().optional()
+    },
+    annotations: { readOnlyHint: true }
+  },
+  withErrorHandling(({ id: id2, includeSegments, maxSegments }) => {
+    let result;
+    try {
+      result = notesManager.getAudioTranscripts(id2, { includeSegments, maxSegments });
+    } catch (error2) {
+      if (error2 instanceof AudioTranscriptError) return errorResponse(error2.message);
+      throw error2;
+    }
+    const toResponse = (r) => successResponse(formatTranscriptsText(r), { ...r });
+    const fitted = fitTranscriptsToBudget(
+      result,
+      exportMaxResponseBytes(),
+      (r) => Buffer.byteLength(JSON.stringify(toResponse(r)))
+    );
+    return toResponse(fitted);
+  }, "Error reading audio transcripts")
+);
 registerTool(
   "get-note-metadata",
   {