apple-notes-mcp 2.8.34 → 2.8.36

package/build/index.js

@@ -108,7 +108,7 @@ var require_code = __commonJS({
     }
     exports._ = _;
     var plus = new _Code("+");
-    function str(strs, ...args) {
+    function str2(strs, ...args) {
       const expr = [safeStringify(strs[0])];
       let i = 0;
       while (i < args.length) {
@@ -119,7 +119,7 @@ var require_code = __commonJS({
       optimize(expr);
       return new _Code(expr);
     }
-    exports.str = str;
+    exports.str = str2;
     function addCodeArg(code, arg) {
       if (arg instanceof _Code)
         code.push(...arg._items);
@@ -162,7 +162,7 @@ var require_code = __commonJS({
       return;
     }
     function strConcat(c1, c2) {
-      return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str`${c1}${c2}`;
+      return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str2`${c1}${c2}`;
     }
     exports.strConcat = strConcat;
     function interpolate(x) {
@@ -417,11 +417,11 @@ var require_codegen = __commonJS({
         const rhs = this.rhs === void 0 ? "" : ` = ${this.rhs}`;
         return `${varKind} ${this.name}${rhs};` + _n;
       }
-      optimizeNames(names, constants4) {
+      optimizeNames(names, constants5) {
         if (!names[this.name.str])
           return;
         if (this.rhs)
-          this.rhs = optimizeExpr(this.rhs, names, constants4);
+          this.rhs = optimizeExpr(this.rhs, names, constants5);
         return this;
       }
       get names() {
@@ -438,10 +438,10 @@ var require_codegen = __commonJS({
       render({ _n }) {
         return `${this.lhs} = ${this.rhs};` + _n;
       }
-      optimizeNames(names, constants4) {
+      optimizeNames(names, constants5) {
         if (this.lhs instanceof code_1.Name && !names[this.lhs.str] && !this.sideEffects)
           return;
-        this.rhs = optimizeExpr(this.rhs, names, constants4);
+        this.rhs = optimizeExpr(this.rhs, names, constants5);
         return this;
       }
       get names() {
@@ -502,8 +502,8 @@ var require_codegen = __commonJS({
       optimizeNodes() {
         return `${this.code}` ? this : void 0;
       }
-      optimizeNames(names, constants4) {
-        this.code = optimizeExpr(this.code, names, constants4);
+      optimizeNames(names, constants5) {
+        this.code = optimizeExpr(this.code, names, constants5);
         return this;
       }
       get names() {
@@ -532,12 +532,12 @@ var require_codegen = __commonJS({
         }
         return nodes.length > 0 ? this : void 0;
       }
-      optimizeNames(names, constants4) {
+      optimizeNames(names, constants5) {
         const { nodes } = this;
         let i = nodes.length;
         while (i--) {
           const n = nodes[i];
-          if (n.optimizeNames(names, constants4))
+          if (n.optimizeNames(names, constants5))
             continue;
           subtractNames(names, n.names);
           nodes.splice(i, 1);
@@ -590,12 +590,12 @@ var require_codegen = __commonJS({
           return void 0;
         return this;
       }
-      optimizeNames(names, constants4) {
+      optimizeNames(names, constants5) {
         var _a;
-        this.else = (_a = this.else) === null || _a === void 0 ? void 0 : _a.optimizeNames(names, constants4);
-        if (!(super.optimizeNames(names, constants4) || this.else))
+        this.else = (_a = this.else) === null || _a === void 0 ? void 0 : _a.optimizeNames(names, constants5);
+        if (!(super.optimizeNames(names, constants5) || this.else))
           return;
-        this.condition = optimizeExpr(this.condition, names, constants4);
+        this.condition = optimizeExpr(this.condition, names, constants5);
         return this;
       }
       get names() {
@@ -618,10 +618,10 @@ var require_codegen = __commonJS({
       render(opts) {
         return `for(${this.iteration})` + super.render(opts);
       }
-      optimizeNames(names, constants4) {
-        if (!super.optimizeNames(names, constants4))
+      optimizeNames(names, constants5) {
+        if (!super.optimizeNames(names, constants5))
           return;
-        this.iteration = optimizeExpr(this.iteration, names, constants4);
+        this.iteration = optimizeExpr(this.iteration, names, constants5);
         return this;
       }
       get names() {
@@ -657,10 +657,10 @@ var require_codegen = __commonJS({
       render(opts) {
         return `for(${this.varKind} ${this.name} ${this.loop} ${this.iterable})` + super.render(opts);
       }
-      optimizeNames(names, constants4) {
-        if (!super.optimizeNames(names, constants4))
+      optimizeNames(names, constants5) {
+        if (!super.optimizeNames(names, constants5))
           return;
-        this.iterable = optimizeExpr(this.iterable, names, constants4);
+        this.iterable = optimizeExpr(this.iterable, names, constants5);
         return this;
       }
       get names() {
@@ -702,11 +702,11 @@ var require_codegen = __commonJS({
         (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNodes();
         return this;
       }
-      optimizeNames(names, constants4) {
+      optimizeNames(names, constants5) {
         var _a, _b;
-        super.optimizeNames(names, constants4);
-        (_a = this.catch) === null || _a === void 0 ? void 0 : _a.optimizeNames(names, constants4);
-        (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNames(names, constants4);
+        super.optimizeNames(names, constants5);
+        (_a = this.catch) === null || _a === void 0 ? void 0 : _a.optimizeNames(names, constants5);
+        (_b = this.finally) === null || _b === void 0 ? void 0 : _b.optimizeNames(names, constants5);
         return this;
       }
       get names() {
@@ -1007,7 +1007,7 @@ var require_codegen = __commonJS({
     function addExprNames(names, from) {
       return from instanceof code_1._CodeOrName ? addNames(names, from.names) : names;
     }
-    function optimizeExpr(expr, names, constants4) {
+    function optimizeExpr(expr, names, constants5) {
       if (expr instanceof code_1.Name)
         return replaceName(expr);
       if (!canOptimize(expr))
@@ -1022,14 +1022,14 @@ var require_codegen = __commonJS({
         return items;
       }, []));
       function replaceName(n) {
-        const c = constants4[n.str];
+        const c = constants5[n.str];
         if (c === void 0 || names[n.str] !== 1)
           return n;
         delete names[n.str];
         return c;
       }
       function canOptimize(e) {
-        return e instanceof code_1._Code && e._items.some((c) => c instanceof code_1.Name && names[c.str] === 1 && constants4[c.str] !== void 0);
+        return e instanceof code_1._Code && e._items.some((c) => c instanceof code_1.Name && names[c.str] === 1 && constants5[c.str] !== void 0);
       }
     }
     function subtractNames(names, from) {
@@ -1124,22 +1124,22 @@ var require_util = __commonJS({
       return (0, codegen_1._)`${topSchemaRef}${schemaPath}${(0, codegen_1.getProperty)(keyword)}`;
     }
     exports.schemaRefOrVal = schemaRefOrVal;
-    function unescapeFragment(str) {
-      return unescapeJsonPointer(decodeURIComponent(str));
+    function unescapeFragment(str2) {
+      return unescapeJsonPointer(decodeURIComponent(str2));
     }
     exports.unescapeFragment = unescapeFragment;
-    function escapeFragment(str) {
-      return encodeURIComponent(escapeJsonPointer(str));
+    function escapeFragment(str2) {
+      return encodeURIComponent(escapeJsonPointer(str2));
     }
     exports.escapeFragment = escapeFragment;
-    function escapeJsonPointer(str) {
-      if (typeof str == "number")
-        return `${str}`;
-      return str.replace(/~/g, "~0").replace(/\//g, "~1");
+    function escapeJsonPointer(str2) {
+      if (typeof str2 == "number")
+        return `${str2}`;
+      return str2.replace(/~/g, "~0").replace(/\//g, "~1");
     }
     exports.escapeJsonPointer = escapeJsonPointer;
-    function unescapeJsonPointer(str) {
-      return str.replace(/~1/g, "/").replace(/~0/g, "~");
+    function unescapeJsonPointer(str2) {
+      return str2.replace(/~1/g, "/").replace(/~0/g, "~");
     }
     exports.unescapeJsonPointer = unescapeJsonPointer;
     function eachItem(xs, f) {
@@ -2164,8 +2164,8 @@ var require_json_schema_traverse = __commonJS({
         post(schema, jsonPtr, rootSchema, parentJsonPtr, parentKeyword, parentSchema, keyIndex);
       }
     }
-    function escapeJsonPtr(str) {
-      return str.replace(/~/g, "~0").replace(/\//g, "~1");
+    function escapeJsonPtr(str2) {
+      return str2.replace(/~/g, "~0").replace(/\//g, "~1");
     }
   }
 });
@@ -3261,15 +3261,15 @@ var require_utils = __commonJS({
         isIPV6: true
       };
     }
-    function findToken(str, token) {
+    function findToken(str2, token) {
       let ind = 0;
-      for (let i = 0; i < str.length; i++) {
-        if (str[i] === token) ind++;
+      for (let i = 0; i < str2.length; i++) {
+        if (str2[i] === token) ind++;
       }
       return ind;
     }
-    function removeDotSegments(path7) {
-      let input = path7;
+    function removeDotSegments(path8) {
+      let input = path8;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -3674,8 +3674,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path7 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path7 && path7 !== "/" ? path7 : void 0;
+        const path8 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path8 && path8 !== "/" ? path8 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -4267,7 +4267,7 @@ var require_core = __commonJS({
     var util_1 = require_util();
     var $dataRefSchema = require_data();
     var uri_1 = require_uri();
-    var defaultRegExp = (str, flags) => new RegExp(str, flags);
+    var defaultRegExp = (str2, flags) => new RegExp(str2, flags);
     defaultRegExp.code = "new RegExp";
     var META_IGNORE_OPTIONS = ["removeAdditional", "useDefaults", "coerceTypes"];
     var EXT_SCOPE_NAMES = /* @__PURE__ */ new Set([
@@ -5062,16 +5062,16 @@ var require_ucs2length = __commonJS({
   "node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/runtime/ucs2length.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    function ucs2length(str) {
-      const len = str.length;
+    function ucs2length(str2) {
+      const len = str2.length;
       let length = 0;
       let pos = 0;
       let value;
       while (pos < len) {
         length++;
-        value = str.charCodeAt(pos++);
+        value = str2.charCodeAt(pos++);
         if (value >= 55296 && value <= 56319 && pos < len) {
-          value = str.charCodeAt(pos);
+          value = str2.charCodeAt(pos);
           if ((value & 64512) === 56320)
             pos++;
         }
@@ -6954,8 +6954,8 @@ var require_formats = __commonJS({
     }
     var DATE = /^(\d\d\d\d)-(\d\d)-(\d\d)$/;
     var DAYS = [0, 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
-    function date3(str) {
-      const matches = DATE.exec(str);
+    function date3(str2) {
+      const matches = DATE.exec(str2);
       if (!matches)
         return false;
       const year = +matches[1];
@@ -6974,8 +6974,8 @@ var require_formats = __commonJS({
     }
     var TIME = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
     function getTime(strictTimeZone) {
-      return function time3(str) {
-        const matches = TIME.exec(str);
+      return function time3(str2) {
+        const matches = TIME.exec(str2);
         if (!matches)
           return false;
         const hr = +matches[1];
@@ -7021,8 +7021,8 @@ var require_formats = __commonJS({
     var DATE_TIME_SEPARATOR = /t|\s/i;
     function getDateTime(strictTimeZone) {
       const time3 = getTime(strictTimeZone);
-      return function date_time(str) {
-        const dateTime = str.split(DATE_TIME_SEPARATOR);
+      return function date_time(str2) {
+        const dateTime = str2.split(DATE_TIME_SEPARATOR);
         return dateTime.length === 2 && date3(dateTime[0]) && time3(dateTime[1]);
       };
     }
@@ -7047,13 +7047,13 @@ var require_formats = __commonJS({
     }
     var NOT_URI_FRAGMENT = /\/|:/;
     var URI = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
-    function uri(str) {
-      return NOT_URI_FRAGMENT.test(str) && URI.test(str);
+    function uri(str2) {
+      return NOT_URI_FRAGMENT.test(str2) && URI.test(str2);
     }
     var BYTE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
-    function byte(str) {
+    function byte(str2) {
       BYTE.lastIndex = 0;
-      return BYTE.test(str);
+      return BYTE.test(str2);
     }
     var MIN_INT32 = -(2 ** 31);
     var MAX_INT32 = 2 ** 31 - 1;
@@ -7067,11 +7067,11 @@ var require_formats = __commonJS({
       return true;
     }
     var Z_ANCHOR = /[^\\]\\Z/;
-    function regex(str) {
-      if (Z_ANCHOR.test(str))
+    function regex(str2) {
+      if (Z_ANCHOR.test(str2))
         return false;
       try {
-        new RegExp(str);
+        new RegExp(str2);
         return true;
       } catch (e) {
         return false;
@@ -7181,12 +7181,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs7, exportName) {
+    function addFormats(ajv, list, fs8, exportName) {
       var _a;
       var _b;
       (_a = (_b = ajv.opts.code).formats) !== null && _a !== void 0 ? _a : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs7[f]);
+        ajv.addFormat(f, fs8[f]);
     }
     module.exports = exports = formatsPlugin;
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -7422,7 +7422,7 @@ var require_DOMException = __commonJS({
       "INVALID_NODE_TYPE_ERR (24): the supplied node is invalid or has an invalid ancestor for this operation",
       "DATA_CLONE_ERR (25): the object can not be cloned."
     ];
-    var constants4 = {
+    var constants5 = {
       INDEX_SIZE_ERR,
       DOMSTRING_SIZE_ERR: 2,
       // historical
@@ -7461,8 +7461,8 @@ var require_DOMException = __commonJS({
       this.name = names[code];
     }
     DOMException.prototype.__proto__ = Error.prototype;
-    for (c in constants4) {
-      v = { value: constants4[c] };
+    for (c in constants5) {
+      v = { value: constants5[c] };
       Object.defineProperty(DOMException, c, v);
       Object.defineProperty(DOMException.prototype, c, v);
     }
@@ -9206,12 +9206,12 @@ var require_DOMTokenList = __commonJS({
       if (strProp === clist._lastStringValue) {
         return toArray(clist);
       }
-      var str = strProp.replace(/(^[ \t\r\n\f]+)|([ \t\r\n\f]+$)/g, "");
-      if (str === "") {
+      var str2 = strProp.replace(/(^[ \t\r\n\f]+)|([ \t\r\n\f]+$)/g, "");
+      if (str2 === "") {
         return [];
       } else {
         var seen = /* @__PURE__ */ Object.create(null);
-        return str.split(/[ \t\r\n\f]+/g).filter(function(n) {
+        return str2.split(/[ \t\r\n\f]+/g).filter(function(n) {
           var key = "$" + n;
           if (seen[key]) {
             return false;
@@ -9266,16 +9266,16 @@ var require_select = __commonJS({
       var nodeType = n.parentNode.nodeType;
       return nodeType === 1 || nodeType === 9;
     };
-    var unquote = function(str) {
-      if (!str) return str;
-      var ch = str[0];
+    var unquote = function(str2) {
+      if (!str2) return str2;
+      var ch = str2[0];
       if (ch === '"' || ch === "'") {
-        if (str[str.length - 1] === ch) {
-          str = str.slice(1, -1);
+        if (str2[str2.length - 1] === ch) {
+          str2 = str2.slice(1, -1);
         } else {
-          str = str.slice(1);
+          str2 = str2.slice(1);
         }
-        return str.replace(rules.str_escape, function(s) {
+        return str2.replace(rules.str_escape, function(s) {
           var m = /^\\(?:([0-9A-Fa-f]+)|([\r\n\f]+))/.exec(s);
           if (!m) {
             return s.slice(1);
@@ -9289,14 +9289,14 @@ var require_select = __commonJS({
             String.fromCharCode(cp)
           );
         });
-      } else if (rules.ident.test(str)) {
-        return decodeid(str);
+      } else if (rules.ident.test(str2)) {
+        return decodeid(str2);
       } else {
-        return str;
+        return str2;
       }
     };
-    var decodeid = function(str) {
-      return str.replace(rules.escape, function(s) {
+    var decodeid = function(str2) {
+      return str2.replace(rules.escape, function(s) {
         var m = /^\\([0-9A-Fa-f]+)/.exec(s);
         if (!m) {
           return s[1];
@@ -12238,32 +12238,32 @@ var require_URL = __commonJS({
           else
             return basepath.substring(0, lastslash + 1) + refpath;
         }
-        function remove_dot_segments(path7) {
-          if (!path7) return path7;
+        function remove_dot_segments(path8) {
+          if (!path8) return path8;
           var output = "";
-          while (path7.length > 0) {
-            if (path7 === "." || path7 === "..") {
-              path7 = "";
+          while (path8.length > 0) {
+            if (path8 === "." || path8 === "..") {
+              path8 = "";
               break;
             }
-            var twochars = path7.substring(0, 2);
-            var threechars = path7.substring(0, 3);
-            var fourchars = path7.substring(0, 4);
+            var twochars = path8.substring(0, 2);
+            var threechars = path8.substring(0, 3);
+            var fourchars = path8.substring(0, 4);
             if (threechars === "../") {
-              path7 = path7.substring(3);
+              path8 = path8.substring(3);
             } else if (twochars === "./") {
-              path7 = path7.substring(2);
+              path8 = path8.substring(2);
             } else if (threechars === "/./") {
-              path7 = "/" + path7.substring(3);
-            } else if (twochars === "/." && path7.length === 2) {
-              path7 = "/";
-            } else if (fourchars === "/../" || threechars === "/.." && path7.length === 3) {
-              path7 = "/" + path7.substring(4);
+              path8 = "/" + path8.substring(3);
+            } else if (twochars === "/." && path8.length === 2) {
+              path8 = "/";
+            } else if (fourchars === "/../" || threechars === "/.." && path8.length === 3) {
+              path8 = "/" + path8.substring(4);
               output = output.replace(/\/?[^\/]*$/, "");
             } else {
-              var segment = path7.match(/(\/?([^\/]*))/)[0];
+              var segment = path8.match(/(\/?([^\/]*))/)[0];
               output += segment;
-              path7 = path7.substring(segment.length);
+              path8 = path8.substring(segment.length);
             }
           }
           return output;
@@ -24465,14 +24465,14 @@ var require_turndown_cjs = __commonJS({
         } else if (node.nodeType === 1) {
           replacement = replacementForNode.call(self, node);
         }
-        return join17(output, replacement);
+        return join19(output, replacement);
       }, "");
     }
     function postProcess(output) {
       var self = this;
       this.rules.forEach(function(rule) {
         if (typeof rule.append === "function") {
-          output = join17(output, rule.append(self.options));
+          output = join19(output, rule.append(self.options));
         }
       });
       return output.replace(/^[\t\r\n]+/, "").replace(/[\t\r\n\s]+$/, "");
@@ -24484,7 +24484,7 @@ var require_turndown_cjs = __commonJS({
       if (whitespace.leading || whitespace.trailing) content = content.trim();
       return whitespace.leading + rule.replacement(content, node, this.options) + whitespace.trailing;
     }
-    function join17(output, replacement) {
+    function join19(output, replacement) {
       var s1 = trimTrailingNewlines(output);
       var s2 = trimLeadingNewlines(replacement);
       var nls = Math.max(output.length - s1.length, replacement.length - s2.length);
@@ -24979,8 +24979,8 @@ function getErrorMap() {
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path7, errorMaps, issueData } = params;
-  const fullPath = [...path7, ...issueData.path || []];
+  const { data, path: path8, errorMaps, issueData } = params;
+  const fullPath = [...path8, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -25096,11 +25096,11 @@ var errorUtil;
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path7, key) {
+  constructor(parent, value, path8, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path7;
+    this._path = path8;
     this._key = key;
   }
   get path() {
@@ -28667,9 +28667,9 @@ function assertNever(_x) {
 }
 function assert(_) {
 }
-function getEnumValues(entries) {
-  const numericValues = Object.values(entries).filter((v) => typeof v === "number");
-  const values = Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
+function getEnumValues(entries2) {
+  const numericValues = Object.values(entries2).filter((v) => typeof v === "number");
+  const values = Object.entries(entries2).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
   return values;
 }
 function joinValues(array2, separator = "|") {
@@ -28737,10 +28737,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj, path7) {
-  if (!path7)
+function getElementAtPath(obj, path8) {
+  if (!path8)
     return obj;
-  return path7.reduce((acc, key) => acc?.[key], obj);
+  return path8.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -28755,14 +28755,14 @@ function promiseAllObject(promisesObj) {
 }
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
-  let str = "";
+  let str2 = "";
   for (let i = 0; i < length; i++) {
-    str += chars[Math.floor(Math.random() * chars.length)];
+    str2 += chars[Math.floor(Math.random() * chars.length)];
   }
-  return str;
+  return str2;
 }
-function esc(str) {
-  return JSON.stringify(str);
+function esc(str2) {
+  return JSON.stringify(str2);
 }
 var captureStackTrace = Error.captureStackTrace ? Error.captureStackTrace : (..._args) => {
 };
@@ -28850,8 +28850,8 @@ var getParsedType2 = (data) => {
 };
 var propertyKeyTypes = /* @__PURE__ */ new Set(["string", "number", "symbol"]);
 var primitiveTypes = /* @__PURE__ */ new Set(["string", "number", "bigint", "boolean", "symbol", "undefined"]);
-function escapeRegex(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str2) {
+  return str2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
   const cl = new inst._zod.constr(def ?? inst._zod.def);
@@ -29060,11 +29060,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path7, issues) {
+function prefixIssues(path8, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path7);
+    iss.path.unshift(path8);
     return iss;
   });
 }
@@ -32475,11 +32475,11 @@ function normalizeObjectSchema(schema) {
   }
   return void 0;
 }
-function getDotPath(path7) {
-  if (path7.length === 0) {
+function getDotPath(path8) {
+  if (path8.length === 0) {
     return "object root";
   }
-  return path7.reduce((acc, seg, index) => {
+  return path8.reduce((acc, seg, index) => {
     if (index === 0) {
       return String(seg);
     }
@@ -33039,10 +33039,10 @@ var ZodEnum2 = /* @__PURE__ */ $constructor("ZodEnum", (inst, def) => {
   };
 });
 function _enum(values, params) {
-  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v) => [v, v])) : values;
+  const entries2 = Array.isArray(values) ? Object.fromEntries(values.map((v) => [v, v])) : values;
   return new ZodEnum2({
     type: "enum",
-    entries,
+    entries: entries2,
     ...util_exports.normalizeParams(params)
   });
 }
@@ -37774,12 +37774,12 @@ var UriTemplate = class _UriTemplate {
    * A template expression is a sequence of characters enclosed in curly braces,
    * like {foo} or {?bar}.
    */
-  static isTemplate(str) {
-    return /\{[^}\s]+\}/.test(str);
+  static isTemplate(str2) {
+    return /\{[^}\s]+\}/.test(str2);
   }
-  static validateLength(str, max, context) {
-    if (str.length > max) {
-      throw new Error(`${context} exceeds maximum length of ${max} characters (got ${str.length})`);
+  static validateLength(str2, max, context) {
+    if (str2.length > max) {
+      throw new Error(`${context} exceeds maximum length of ${max} characters (got ${str2.length})`);
     }
   }
   get variableNames() {
@@ -37908,8 +37908,8 @@ var UriTemplate = class _UriTemplate {
     }
     return result;
   }
-  escapeRegExp(str) {
-    return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  escapeRegExp(str2) {
+    return str2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   }
   partToRegExp(part) {
     const patterns = [];
@@ -39962,9 +39962,9 @@ var many = (f, n) => getFields(f, n).map((field) => {
 });
 function parseAudioRecording(data) {
   const root = decode(data);
-  const entries = many(root, 3);
-  if (entries.length === 0) throw new Error("No mergeable objects");
-  if (entries.length > 2e6) throw new Error("Recording too large");
+  const entries2 = many(root, 3);
+  if (entries2.length === 0) throw new Error("No mergeable objects");
+  if (entries2.length > 2e6) throw new Error("Recording too large");
   const keys = getFields(root, 4).map((f) => stringValue(f) ?? "");
   const types = getFields(root, 5).map((f) => stringValue(f) ?? "");
   const uuids = getFields(root, 6).map(
@@ -39975,7 +39975,7 @@ function parseAudioRecording(data) {
     if (uuid2 && !uuidSlot.has(uuid2)) uuidSlot.set(uuid2, i);
   });
   const entry = (index) => {
-    const value = entries[index];
+    const value = entries2[index];
     if (!value) throw new Error("Invalid object reference");
     return value;
   };
@@ -40017,7 +40017,7 @@ function parseAudioRecording(data) {
     const text = note && stringValue(getField(note, 2));
     return text?.replace(/\n+$/u, "") || void 0;
   };
-  const recordings = entries.map((e) => customMap(e)).filter((m) => m?.type === "com.apple.notes.ICTTAudioRecording");
+  const recordings = entries2.map((e) => customMap(e)).filter((m) => m?.type === "com.apple.notes.ICTTAudioRecording");
   if (recordings.length !== 1) throw new Error("Expected exactly one audio recording object");
   const recording = recordings[0];
   const fragments = [];
@@ -40322,15 +40322,15 @@ function parseNoteTableCells(compressed) {
 }
 function decodeTable(compressed, strict) {
   const root = decodeMessage(gunzipSync4(compressed, { maxOutputLength: 16 * 1024 * 1024 }));
-  const data = sub2(sub2(root, 2), 3), entries = many2(data, 3);
-  if (entries.length > 1e5) throw new Error("Table too large");
+  const data = sub2(sub2(root, 2), 3), entries2 = many2(data, 3);
+  if (entries2.length > 1e5) throw new Error("Table too large");
   const keys = getFields(data, 4).map(stringValue), types = getFields(data, 5).map(stringValue), uuids = getFields(data, 6).map(hex);
   const entry = (index) => {
-    if (!entries[index]) throw new Error("Invalid table reference");
-    return entries[index];
+    if (!entries2[index]) throw new Error("Invalid table reference");
+    return entries2[index];
   };
   const uuidIndex = (index) => num(sub2(many2(sub2(entry(index), 13), 3)[0], 2), 2);
-  const roots = entries.filter((e) => {
+  const roots = entries2.filter((e) => {
     const map = embeddedMessage(getField(e, 13));
     return map && types[num(map, 1)] === "com.apple.notes.ICTable";
   });
@@ -40392,7 +40392,7 @@ function decodeTable(compressed, strict) {
       values[ri][ci] = text.replace(/\n$/u, "");
     }
   }
-  const rtl = entries.some((e) => {
+  const rtl = entries2.some((e) => {
     const map = embeddedMessage(getField(e, 13));
     return map && many2(map, 3).some(
       (m) => stringValue(getField(sub2(m, 2), 4)) === "CRTableColumnDirectionRightToLeft"
@@ -40582,7 +40582,7 @@ var Decoder = class {
    * positively and negated by the caller.
    */
   leaf(key, value, excluded) {
-    const flag = (description, negative) => typeof value === "boolean" ? {
+    const flag2 = (description, negative) => typeof value === "boolean" ? {
       type: key,
       value,
       ...excluded ? { excluded: true } : {},
@@ -40590,25 +40590,25 @@ var Decoder = class {
     } : null;
     switch (key) {
       case "checklist":
-        return flag("has a checklist", "has no checklist");
+        return flag2("has a checklist", "has no checklist");
       case "checklistInProgress":
-        return flag("has an unfinished checklist", "has no unfinished checklist");
+        return flag2("has an unfinished checklist", "has no unfinished checklist");
       case "checklistCompleted":
-        return flag("has a completed checklist", "has no completed checklist");
+        return flag2("has a completed checklist", "has no completed checklist");
       case "attachment":
-        return flag("has attachments", "has no attachments");
+        return flag2("has attachments", "has no attachments");
       case "pinned":
-        return flag("is pinned", "is not pinned");
+        return flag2("is pinned", "is not pinned");
       case "systemPaper":
-        return flag("is a Quick Note", "is not a Quick Note");
+        return flag2("is a Quick Note", "is not a Quick Note");
       case "passwordProtected":
-        return flag("is locked", "is not locked");
+        return flag2("is locked", "is not locked");
       case "shared":
-        return flag("is shared", "is not shared");
+        return flag2("is shared", "is not shared");
       case "mention":
-        return flag("mentions anyone", "mentions no one");
+        return flag2("mentions anyone", "mentions no one");
       case "tagged":
-        return flag("has any tag", "has no tags");
+        return flag2("has any tag", "has no tags");
       case "attachmentSection": {
         if (typeof value !== "number" || !ATTACHMENT_SECTIONS[value]) return null;
         return {
@@ -40784,7 +40784,7 @@ function buildSmartFolders(output) {
   if (lines.length < 4) throw new Error("Unexpected smart folder query output");
   const [storeUuid, rowsJson, foldersJson, tagsJson] = lines;
   if (!/^[0-9A-F-]+$/i.test(storeUuid)) throw new Error("Unexpected Notes store identifier");
-  const coreDataId2 = (entity2, pk) => `x-coredata://${storeUuid}/${entity2}/p${pk}`;
+  const coreDataId2 = (entity3, pk) => `x-coredata://${storeUuid}/${entity3}/p${pk}`;
   const rows = JSON.parse(rowsJson);
   const folderRows = JSON.parse(foldersJson || "{}");
   const tagRows = JSON.parse(tagsJson || "[]");
@@ -40881,8 +40881,8 @@ function allowedSaveRoots() {
     "/private/tmp"
   ];
 }
-function canonicalize(path7) {
-  return realpathSync.native(path7);
+function canonicalize(path8) {
+  return realpathSync.native(path8);
 }
 function isWithinRoots(candidate, roots) {
   return roots.some((root) => {
@@ -40904,9 +40904,9 @@ function canonicalRoots(roots) {
   }
   return canonical;
 }
-function entryExists(path7) {
+function entryExists(path8) {
   try {
-    lstatSync(path7);
+    lstatSync(path8);
     return true;
   } catch (e) {
     const code = e.code;
@@ -41036,6 +41036,22 @@ function cleanupTempDir(dir) {
   }
 }
 
+// src/utils/paperAttachments.ts
+import { execFileSync as execFileSync7 } from "node:child_process";
+import {
+  closeSync as closeSync3,
+  constants as constants3,
+  fstatSync as fstatSync3,
+  lstatSync as lstatSync3,
+  mkdirSync as mkdirSync3,
+  openSync as openSync3,
+  readdirSync as readdirSync2,
+  readSync as readSync2,
+  unlinkSync as unlinkSync2,
+  writeSync as writeSync2
+} from "node:fs";
+import { basename as basename2, dirname as dirname3, extname as extname2, join as join7 } from "node:path";
+
 // src/utils/attachmentAssets.ts
 import { execFileSync as execFileSync6 } from "node:child_process";
 import {
@@ -41120,7 +41136,7 @@ function attachmentCoreDataId(noteId3, pk) {
 }
 function buildAttachmentRowsSql(notePk, columns) {
   if (!Number.isSafeInteger(notePk) || notePk < 0) throw new Error("Invalid note primary key");
-  const col2 = (alias, name) => columns.has(name) ? `${alias}.${name}` : "NULL";
+  const col3 = (alias, name) => columns.has(name) ? `${alias}.${name}` : "NULL";
   const firstOf = (alias, names) => {
     const present = names.filter((n) => columns.has(n)).map((n) => `${alias}.${n}`);
     if (present.length === 0) return "NULL";
@@ -41133,19 +41149,19 @@ function buildAttachmentRowsSql(notePk, columns) {
   ].join(", ");
   const account = accountCols.length ? `(SELECT acc.ZIDENTIFIER FROM ZICCLOUDSYNCINGOBJECT acc WHERE acc.Z_ENT = (SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = 'ICAccount') AND acc.Z_PK IN (${accountRefs}) LIMIT 1)` : "NULL";
   const noteLink = columns.has("ZNOTE") ? "a.ZNOTE" : "NULL";
-  const parent = col2("a", "ZPARENTATTACHMENT");
+  const parent = col3("a", "ZPARENTATTACHMENT");
   const deleted = columns.has("ZMARKEDFORDELETION") ? " AND COALESCE(a.ZMARKEDFORDELETION, 0) = 0" : "";
   const fields = [
     `'pk', a.Z_PK`,
     `'identifier', a.ZIDENTIFIER`,
-    `'uti', ${col2("a", "ZTYPEUTI")}`,
+    `'uti', ${col3("a", "ZTYPEUTI")}`,
     `'parentPk', ${parent}`,
-    `'filename', ${col2("a", "ZFILENAME")}`,
+    `'filename', ${col3("a", "ZFILENAME")}`,
     `'mediaIdentifier', m.ZIDENTIFIER`,
-    `'mediaFilename', ${col2("m", "ZFILENAME")}`,
+    `'mediaFilename', ${col3("m", "ZFILENAME")}`,
     `'mediaGeneration', ${firstOf("m", ["ZGENERATION1", "ZGENERATION"])}`,
-    `'fallbackImageGeneration', ${col2("a", "ZFALLBACKIMAGEGENERATION")}`,
-    `'fallbackPdfGeneration', ${col2("a", "ZFALLBACKPDFGENERATION")}`,
+    `'fallbackImageGeneration', ${col3("a", "ZFALLBACKIMAGEGENERATION")}`,
+    `'fallbackPdfGeneration', ${col3("a", "ZFALLBACKPDFGENERATION")}`,
     `'accountIdentifier', ${account}`
   ].join(", ");
   const mediaJoin = columns.has("ZMEDIA") ? "LEFT JOIN ZICCLOUDSYNCINGOBJECT m ON m.Z_PK = a.ZMEDIA" : "LEFT JOIN ZICCLOUDSYNCINGOBJECT m ON 0";
@@ -41258,32 +41274,32 @@ function safeComponent(value) {
   if (value === "." || value === ".." || value.includes("/") || value.includes("\0")) return null;
   return value;
 }
-function realInside(path7, rootReal) {
+function realInside(path8, rootReal) {
   try {
-    const real = realpathSync2.native(path7);
+    const real = realpathSync2.native(path8);
     return real === rootReal || real.startsWith(rootReal + sep2) ? real : null;
   } catch {
     return null;
   }
 }
-function isRegularFile(path7) {
+function isRegularFile(path8) {
   try {
-    return lstatSync2(path7).isFile();
+    return lstatSync2(path8).isFile();
   } catch {
     return false;
   }
 }
-function isDirectory(path7) {
+function isDirectory(path8) {
   try {
-    return lstatSync2(path7).isDirectory();
+    return lstatSync2(path8).isDirectory();
   } catch {
     return false;
   }
 }
 function boundedEntries(dir, limit) {
   try {
-    const entries = readdirSync(dir);
-    return entries.length > limit ? null : entries.sort();
+    const entries2 = readdirSync(dir);
+    return entries2.length > limit ? null : entries2.sort();
   } catch {
     return null;
   }
@@ -41301,19 +41317,19 @@ function resolveAccountDir(containerDir, accountIdentifier) {
     const dir = realInside(join6(accountsReal, account), accountsReal);
     if (dir && isDirectory(dir)) return dir;
   }
-  const entries = (boundedEntries(accountsReal, 64) ?? []).filter(
+  const entries2 = (boundedEntries(accountsReal, 64) ?? []).filter(
     (e) => isDirectory(join6(accountsReal, e))
   );
-  if (entries.length !== 1) return null;
-  return realInside(join6(accountsReal, entries[0]), accountsReal);
+  if (entries2.length !== 1) return null;
+  return realInside(join6(accountsReal, entries2[0]), accountsReal);
 }
 function generationRank(name) {
   const m = /^(\d+)_/.exec(name);
   return m ? Number(m[1]) : 0;
 }
 function generationDirs(base, accountDir) {
-  const entries = boundedEntries(base, MAX_GENERATION_DIRS) ?? [];
-  return entries.map((e) => realInside(join6(base, e), accountDir)).filter((p) => p !== null && isDirectory(p)).sort((a, b) => generationRank(basename(b)) - generationRank(basename(a)));
+  const entries2 = boundedEntries(base, MAX_GENERATION_DIRS) ?? [];
+  return entries2.map((e) => realInside(join6(base, e), accountDir)).filter((p) => p !== null && isDirectory(p)).sort((a, b) => generationRank(basename(b)) - generationRank(basename(a)));
 }
 function fallbackFiles(accountDir, rootName, identifier, generation, names) {
   const base = join6(accountDir, rootName, identifier);
@@ -41358,11 +41374,11 @@ function previewFileInBundle(bundle, accountDir) {
 function listPreviewEntries(accountDir) {
   return boundedEntries(join6(accountDir, "Previews"), MAX_PREVIEW_DIR_ENTRIES) ?? [];
 }
-function previewPaths(accountDir, identifier, entries) {
+function previewPaths(accountDir, identifier, entries2) {
   const id2 = safeComponent(identifier);
   if (!id2) return [];
   const prefix = `${id2}-`.toLowerCase();
-  const candidates = entries.filter((name) => name.toLowerCase().startsWith(prefix)).filter((name) => {
+  const candidates = entries2.filter((name) => name.toLowerCase().startsWith(prefix)).filter((name) => {
     const ext = extname(name).toLowerCase();
     return !ext || PREVIEW_IMAGE_SUFFIXES.has(ext) || /^\.\d+$/.test(ext);
   }).sort((a, b) => previewPixelArea(b) - previewPixelArea(a) || a.localeCompare(b));
@@ -41611,11 +41627,348 @@ function exportAttachmentAssets(assets, exportDir, options = {}) {
   return { exportDir: dir, results };
 }
 
+// src/utils/paperAttachments.ts
+var MAX_AXIS = 32768;
+var MAX_PREVIEW_DIR_ENTRIES2 = 1e5;
+var MAX_DIR_ENTRIES = 64;
+var HEADER_BYTES = 64 * 1024;
+var PNG_MAGIC = Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]);
+var IMAGE_SUFFIXES = /* @__PURE__ */ new Set([".png", ".jpg", ".jpeg"]);
+var axisOk = (n) => Number.isInteger(n) && n > 0 && n <= MAX_AXIS;
+function parseImageHeader(buf) {
+  if (buf.length >= 24 && buf.subarray(0, 8).equals(PNG_MAGIC)) {
+    if (buf.readUInt32BE(8) !== 13 || buf.toString("latin1", 12, 16) !== "IHDR") return null;
+    const width = buf.readUInt32BE(16);
+    const height = buf.readUInt32BE(20);
+    return axisOk(width) && axisOk(height) ? { format: "png", width, height } : null;
+  }
+  if (buf.length >= 4 && buf[0] === 255 && buf[1] === 216 && buf[2] === 255) {
+    let offset = 2;
+    while (offset + 4 <= buf.length) {
+      if (buf[offset] !== 255) return null;
+      const marker = buf[offset + 1];
+      if (marker === 255) {
+        offset++;
+        continue;
+      }
+      const length = buf.readUInt16BE(offset + 2);
+      if (length < 2) return null;
+      const isFrame = marker >= 192 && marker <= 207 && marker !== 196 && marker !== 200 && marker !== 204;
+      if (isFrame) {
+        if (offset + 9 > buf.length) return null;
+        const height = buf.readUInt16BE(offset + 5);
+        const width = buf.readUInt16BE(offset + 7);
+        return axisOk(width) && axisOk(height) ? { format: "jpeg", width, height } : null;
+      }
+      offset += 2 + length;
+    }
+  }
+  return null;
+}
+function readImageInfoFd(fd) {
+  if (!fstatSync3(fd).isFile()) return null;
+  const buf = Buffer.alloc(HEADER_BYTES);
+  const read = readSync2(fd, buf, 0, buf.length, 0);
+  return parseImageHeader(buf.subarray(0, read));
+}
+function readImageInfo(path8) {
+  let fd;
+  try {
+    fd = openSync3(path8, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+  } catch {
+    return null;
+  }
+  try {
+    return readImageInfoFd(fd);
+  } finally {
+    closeSync3(fd);
+  }
+}
+function buildDrawingRowsSql(notePk, columns) {
+  if (!Number.isSafeInteger(notePk) || notePk < 0) throw new Error("Invalid note primary key");
+  const col3 = (name) => columns.has(name) ? `a.${name}` : "NULL";
+  const accountCols = [...columns].filter((c) => /^ZACCOUNT\d*$/.test(c)).sort();
+  const account = accountCols.length ? `(SELECT acc.ZIDENTIFIER FROM ZICCLOUDSYNCINGOBJECT acc WHERE acc.Z_ENT = (SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = 'ICAccount') AND acc.Z_PK IN (${[
+    ...accountCols.map((c) => `a.${c}`),
+    ...accountCols.map((c) => `n.${c}`)
+  ].join(", ")}) LIMIT 1)` : "NULL";
+  const deleted = columns.has("ZMARKEDFORDELETION") ? " AND COALESCE(a.ZMARKEDFORDELETION, 0) = 0" : "";
+  const fields = [
+    `'pk', a.Z_PK`,
+    `'identifier', a.ZIDENTIFIER`,
+    `'uti', a.ZTYPEUTI`,
+    `'handwritingSummary', ${col3("ZHANDWRITINGSUMMARY")}`,
+    `'fallbackImageGeneration', ${col3("ZFALLBACKIMAGEGENERATION")}`,
+    `'accountIdentifier', ${account}`
+  ].join(", ");
+  return [
+    "BEGIN;",
+    `SELECT count(*) FROM ZICCLOUDSYNCINGOBJECT WHERE Z_PK = ${notePk} AND Z_ENT = (SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = 'ICNote');`,
+    `SELECT json_group_array(json_object(${fields})) FROM ZICCLOUDSYNCINGOBJECT a LEFT JOIN ZICCLOUDSYNCINGOBJECT n ON n.Z_PK = a.ZNOTE WHERE a.Z_ENT = (SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = 'ICAttachment') AND a.ZNOTE = ${notePk} AND (a.ZTYPEUTI = 'com.apple.paper' OR a.ZTYPEUTI = 'com.apple.drawing' OR a.ZTYPEUTI LIKE 'com.apple.drawing.%')${deleted};`,
+    "COMMIT;"
+  ].join(" ");
+}
+function runSqlite4(dbPath2, sql) {
+  try {
+    return execFileSync7("/usr/bin/sqlite3", ["-readonly", dbPath2, sql], {
+      encoding: "utf8",
+      timeout: 1e4,
+      maxBuffer: 16 * 1024 * 1024,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+  } catch (error2) {
+    const message = error2 instanceof Error ? error2.message : String(error2);
+    if (/authorization denied|unable to open database/i.test(message)) {
+      throw new AttachmentStoreError(
+        "Full Disk Access is required to read drawing attachments. Grant it to the app that launches this server, then relaunch it (run the doctor tool to verify).",
+        "no_fda"
+      );
+    }
+    throw new AttachmentStoreError(`Failed to read drawing attachments: ${message}`, "query_error");
+  }
+}
+var str = (v) => typeof v === "string" && v.length > 0 ? v : null;
+function parseDrawingRows(json2) {
+  const raw = JSON.parse(json2 || "[]");
+  if (!Array.isArray(raw)) throw new Error("Invalid drawing rows");
+  const rows = [];
+  for (const item of raw) {
+    if (!item || typeof item !== "object") continue;
+    const r = item;
+    const identifier = str(r.identifier);
+    const uti = str(r.uti);
+    if (!Number.isSafeInteger(r.pk) || !identifier || !uti) continue;
+    const summary = str(r.handwritingSummary);
+    rows.push({
+      pk: r.pk,
+      identifier,
+      uti,
+      handwritingSummary: summary && summary.trim() ? summary : null,
+      fallbackImageGeneration: str(r.fallbackImageGeneration),
+      accountIdentifier: str(r.accountIdentifier)
+    });
+  }
+  return rows.sort((a, b) => a.pk - b.pk);
+}
+function readDrawingRows(noteId3, dbPath2 = join7(NOTES_CONTAINER_DIR, "NoteStore.sqlite")) {
+  const { pk } = parseNoteId2(noteId3);
+  const columns = new Set(
+    runSqlite4(
+      dbPath2,
+      "SELECT group_concat(name, ',') FROM pragma_table_info('ZICCLOUDSYNCINGOBJECT');"
+    ).trim().split(",").filter(Boolean)
+  );
+  if (!columns.has("ZIDENTIFIER") || !columns.has("ZTYPEUTI") || !columns.has("ZNOTE")) {
+    throw new AttachmentStoreError("Unsupported Notes database schema", "query_error");
+  }
+  const lines = runSqlite4(dbPath2, buildDrawingRowsSql(pk, columns)).split("\n");
+  if (lines[0]?.trim() !== "1") {
+    throw new AttachmentStoreError(
+      `No note found in the database for ID "${noteId3}".`,
+      "not_found"
+    );
+  }
+  try {
+    return parseDrawingRows(lines[1] ?? "[]");
+  } catch {
+    throw new AttachmentStoreError("Drawing rows could not be parsed", "query_error");
+  }
+}
+function kindOf(path8) {
+  try {
+    const st = lstatSync3(path8);
+    return st.isFile() ? "file" : st.isDirectory() ? "dir" : null;
+  } catch {
+    return null;
+  }
+}
+function entries(dir, limit) {
+  try {
+    const list = readdirSync2(dir);
+    return list.length > limit ? [] : list.sort();
+  } catch {
+    return [];
+  }
+}
+var byGenerationDesc = (a, b) => generationRank(basename2(b)) - generationRank(basename2(a));
+function findFallbackImage(accountDir, identifier, generation) {
+  const id2 = safeComponent(identifier);
+  if (!id2) return null;
+  const base = join7(accountDir, "FallbackImages", id2);
+  const names = ["FallbackImage.png", "FallbackImage.jpg"];
+  const candidates = [];
+  const gen = safeComponent(generation);
+  if (gen) for (const n of names) candidates.push(join7(base, gen, n));
+  const gens = entries(base, MAX_DIR_ENTRIES).map((e) => join7(base, e)).sort(byGenerationDesc);
+  for (const g of gens) for (const n of names) candidates.push(join7(g, n));
+  for (const n of names) candidates.push(join7(base, n));
+  candidates.push(join7(accountDir, "FallbackImages", `${id2}.png`));
+  candidates.push(join7(accountDir, "FallbackImages", `${id2}.jpg`));
+  for (const c of candidates) {
+    const real = realInside(c, accountDir);
+    if (real && kindOf(real) === "file") return real;
+  }
+  return null;
+}
+function findLargestPreview(accountDir, identifier) {
+  const id2 = safeComponent(identifier);
+  if (!id2) return null;
+  const dir = join7(accountDir, "Previews");
+  const prefix = `${id2}-`.toLowerCase();
+  const names = entries(dir, MAX_PREVIEW_DIR_ENTRIES2).filter((n) => n.toLowerCase().startsWith(prefix)).filter((n) => {
+    const ext = extname2(n).toLowerCase();
+    return !ext || IMAGE_SUFFIXES.has(ext) || /^\.\d+$/.test(ext);
+  }).sort((a, b) => previewPixelArea(b) - previewPixelArea(a) || a.localeCompare(b));
+  for (const name of names) {
+    const real = realInside(join7(dir, name), accountDir);
+    if (!real) continue;
+    const kind = kindOf(real);
+    if (kind === "file") return real;
+    if (kind !== "dir") continue;
+    const gens = entries(real, MAX_DIR_ENTRIES).map((e) => realInside(join7(real, e), accountDir)).filter((p) => p !== null && kindOf(p) === "dir").sort(byGenerationDesc);
+    for (const g of [...gens, real]) {
+      const file = realInside(join7(g, "Preview.png"), accountDir);
+      if (file && kindOf(file) === "file") return file;
+    }
+  }
+  return null;
+}
+function describeDrawings(rows, containerDir = NOTES_CONTAINER_DIR) {
+  return rows.map((row) => {
+    const accountDir = resolveAccountDir(containerDir, row.accountIdentifier);
+    const kind = row.uti === "com.apple.paper" ? "paper" : "drawing";
+    const id2 = safeComponent(row.identifier);
+    const fallbackImagePath = accountDir ? findFallbackImage(accountDir, row.identifier, row.fallbackImageGeneration) : null;
+    const previewPath = accountDir ? findLargestPreview(accountDir, row.identifier) : null;
+    const bundle = accountDir && id2 && kind === "paper" ? realInside(join7(accountDir, "Paper", "Bundles", `${id2}.bundle`), accountDir) : null;
+    let raster = null;
+    for (const [path8, source] of [
+      [fallbackImagePath, "fallback"],
+      [previewPath, "preview"]
+    ]) {
+      const info = path8 ? readImageInfo(path8) : null;
+      if (path8 && info) {
+        raster = { path: path8, source, ...info };
+        break;
+      }
+    }
+    return {
+      pk: row.pk,
+      identifier: row.identifier,
+      uti: row.uti,
+      kind,
+      handwritingSummary: row.handwritingSummary,
+      bundlePresent: bundle !== null && kindOf(bundle) === "dir",
+      fallbackImagePath,
+      previewPath,
+      raster
+    };
+  });
+}
+function verifyWrittenImage(fd, path8, expected) {
+  const check2 = readImageInfoFd(fd);
+  if (!check2 || check2.format !== expected.format || check2.width !== expected.width || check2.height !== expected.height) {
+    unlinkSync2(path8);
+    throw new Error("The exported image failed validation and was removed.");
+  }
+  return check2;
+}
+function selectDrawing(drawings, noteId3, attachmentId) {
+  if (attachmentId) {
+    const wanted = attachmentId.toLowerCase();
+    const found = drawings.find(
+      (d) => d.identifier.toLowerCase() === wanted || attachmentCoreDataId(noteId3, d.pk).toLowerCase() === wanted
+    );
+    if (!found) throw new Error(`No Paper or drawing attachment "${attachmentId}" in this note.`);
+    return found;
+  }
+  if (drawings.length === 0) throw new Error("This note has no Paper or drawing attachment.");
+  if (drawings.length > 1) {
+    throw new Error(
+      `This note has ${drawings.length} Paper or drawing attachments; pass attachmentId (from list-paper-attachments) to choose one.`
+    );
+  }
+  return drawings[0];
+}
+function exportDrawingRaster(drawing, savePath, containerDir = NOTES_CONTAINER_DIR) {
+  if (!drawing.raster) {
+    throw new Error(
+      "Notes has no rendered image for this drawing on disk yet (open the note in Notes.app to let it render, then retry)."
+    );
+  }
+  const abs = assertSafeSavePath(savePath);
+  if (isInsideNotesContainer(abs, containerDir)) {
+    throw new Error(`Refusing to write inside the Notes data container: "${abs}"`);
+  }
+  const ext = extname2(abs).toLowerCase();
+  const expected = drawing.raster.format === "png" ? [".png"] : [".jpg", ".jpeg"];
+  if (!expected.includes(ext)) {
+    throw new Error(
+      `The rendered image is ${drawing.raster.format.toUpperCase()}; savePath must end in ${expected.join(" or ")}.`
+    );
+  }
+  mkdirSync3(dirname3(abs), { recursive: true });
+  assertSafeSavePath(abs);
+  if (isInsideNotesContainer(abs, containerDir)) {
+    throw new Error(`Refusing to write inside the Notes data container: "${abs}"`);
+  }
+  const input = openSync3(drawing.raster.path, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+  let bytes = 0;
+  try {
+    if (!fstatSync3(input).isFile()) throw new Error("The rendered image is not a regular file");
+    const header = Buffer.alloc(HEADER_BYTES);
+    const headerLength = readSync2(input, header, 0, header.length, 0);
+    const info = parseImageHeader(header.subarray(0, headerLength));
+    if (!info || info.format !== drawing.raster.format) {
+      throw new Error(
+        "The rendered image changed or is not a valid PNG/JPEG; nothing was written."
+      );
+    }
+    let output;
+    try {
+      output = openSync3(
+        abs,
+        constants3.O_RDWR | constants3.O_CREAT | constants3.O_EXCL | constants3.O_NOFOLLOW,
+        384
+      );
+    } catch (error2) {
+      if (error2.code === "EEXIST") {
+        throw new Error(`"${abs}" already exists; choose a new savePath.`);
+      }
+      throw error2;
+    }
+    try {
+      const buffer = Buffer.allocUnsafe(1024 * 1024);
+      let position = 0;
+      for (; ; ) {
+        const read = readSync2(input, buffer, 0, buffer.length, position);
+        if (read === 0) break;
+        position += read;
+        let written = 0;
+        while (written < read) written += writeSync2(output, buffer, written, read - written);
+      }
+      bytes = position;
+      const check2 = verifyWrittenImage(output, abs, info);
+      return { savedPath: abs, bytes, source: drawing.raster.source, ...check2 };
+    } catch (error2) {
+      try {
+        unlinkSync2(abs);
+      } catch {
+      }
+      throw error2;
+    } finally {
+      closeSync3(output);
+    }
+  } finally {
+    closeSync3(input);
+  }
+}
+
 // src/services/appleNotesManager.ts
 var import_turndown = __toESM(require_turndown_cjs(), 1);
 import { existsSync as existsSync4 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 var FIELD_SEP = "";
 var RECORD_SEP = "";
 var AS_FIELD_SEP = "(character id 31)";
@@ -41843,7 +42196,7 @@ function getNoteLinkFromDB(coreDataId2) {
   const match = coreDataId2.match(/\/p(\d+)$/);
   if (!match) return null;
   const pk = parseInt(match[1], 10);
-  const dbPath2 = join7(homedir7(), "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite");
+  const dbPath2 = join8(homedir7(), "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite");
   if (!existsSync4(dbPath2)) return null;
   try {
     const { DatabaseSync } = __require("node:sqlite");
@@ -42840,7 +43193,7 @@ var AppleNotesManager = class {
       return [];
     }
     const recordSeparator = result.output.includes(RECORD_SEP) ? RECORD_SEP : "\n";
-    const entries = result.output.split(recordSeparator).map((line) => {
+    const entries2 = result.output.split(recordSeparator).map((line) => {
       const parts = line.includes(FIELD_SEP) ? line.split(FIELD_SEP) : line.split("	");
       return {
         id: (parts[0] || "").trim(),
@@ -42853,7 +43206,7 @@ var AppleNotesManager = class {
         account: (parts[4] || "").trim()
       };
     });
-    const byId = new Map(entries.map((e) => [e.id, e]));
+    const byId = new Map(entries2.map((e) => [e.id, e]));
     const buildPath = (entry) => {
       const safeName = escapeFolderName(entry.name);
       if (!entry.parentId) return safeName;
@@ -42863,7 +43216,7 @@ var AppleNotesManager = class {
       }
       return safeName;
     };
-    return entries.map((entry) => ({
+    return entries2.map((entry) => ({
       id: entry.id,
       name: buildPath(entry),
       account: entry.account || targetAccount || "",
@@ -43765,6 +44118,24 @@ var AppleNotesManager = class {
       cleanupTempDir(dir);
     }
   }
+  /**
+   * Lists a note's Paper (`com.apple.paper`) and classic drawing attachments
+   * with Notes' rendered raster, read-only from NoteStore and the Notes group
+   * container. Requires Full Disk Access.
+   *
+   * @throws PaperStoreError (`no_fda`, `invalid_id`, `not_found`, `query_error`)
+   */
+  listPaperAttachmentsById(noteId3) {
+    return describeDrawings(readDrawingRows(noteId3));
+  }
+  /**
+   * Copies Notes' rendered raster of one drawing to a new file. `attachmentId`
+   * (identifier or AppleScript id) is required when the note has more than one.
+   */
+  exportPaperImageById(noteId3, savePath, attachmentId) {
+    const drawing = selectDrawing(this.listPaperAttachmentsById(noteId3), noteId3, attachmentId);
+    return { drawing, ...exportDrawingRaster(drawing, savePath) };
+  }
   /**
    * Reads one note's attachments with their on-disk asset and preview paths,
    * in body order, from the NoteStore database and the Notes group container
@@ -44209,7 +44580,7 @@ var AppleNotesManager = class {
 };
 
 // src/utils/syncDetection.ts
-import { execFileSync as execFileSync7 } from "child_process";
+import { execFileSync as execFileSync8 } from "child_process";
 import * as fs3 from "fs";
 import * as path3 from "path";
 import * as os3 from "os";
@@ -44254,7 +44625,7 @@ function getSyncStatus(useCache = true) {
         WHERE object.ZCLOUDSTATE = state.Z_PK
       );
     `;
-    const result = execFileSync7(
+    const result = execFileSync8(
       "sqlite3",
       ["-readonly", NOTES_DB_PATH4, query.replace(/\n/g, " ")],
       {
@@ -44313,7 +44684,7 @@ function withSyncAwarenessSync(operation, fn) {
 }
 
 // src/utils/noteMetadata.ts
-import { execFileSync as execFileSync8 } from "child_process";
+import { execFileSync as execFileSync9 } from "child_process";
 import * as fs4 from "fs";
 import * as path4 from "path";
 import * as os4 from "os";
@@ -44333,15 +44704,15 @@ var COLUMN_MAP = [
   { key: "widgetSnippet", column: "ZWIDGETSNIPPET", type: "text" },
   { key: "smartFolderQuery", column: "ZSMARTFOLDERQUERYJSON", type: "text" }
 ];
-function runSqlite4(query) {
-  return execFileSync8("sqlite3", ["-readonly", NOTES_DB_PATH5, query], {
+function runSqlite5(query) {
+  return execFileSync9("sqlite3", ["-readonly", NOTES_DB_PATH5, query], {
     encoding: "utf8",
     timeout: 5e3,
     stdio: ["pipe", "pipe", "pipe"]
   }).trim();
 }
 function presentColumns() {
-  const out = runSqlite4("PRAGMA table_info(ZICCLOUDSYNCINGOBJECT);");
+  const out = runSqlite5("PRAGMA table_info(ZICCLOUDSYNCINGOBJECT);");
   const cols = /* @__PURE__ */ new Set();
   for (const line of out.split("\n")) {
     const name = line.split("|")[1];
@@ -44369,7 +44740,7 @@ function getNoteMetadata(noteId3) {
       return { metadata: {} };
     }
     const pairs = selected.map((c) => `'${c.key}', ${c.column}`).join(", ");
-    const row = runSqlite4(
+    const row = runSqlite5(
       `SELECT json_object(${pairs}) FROM ZICCLOUDSYNCINGOBJECT WHERE Z_PK = ${pk};`
     );
     if (!row) {
@@ -44401,8 +44772,11 @@ function getNoteMetadata(noteId3) {
   }
 }
 
-// src/utils/noteIdentifiers.ts
-import { execFileSync as execFileSync9 } from "child_process";
+// src/utils/noteListings.ts
+import { gunzipSync as gunzipSync6 } from "zlib";
+
+// src/utils/noteStoreSql.ts
+import { execFileSync as execFileSync10 } from "child_process";
 import * as fs5 from "fs";
 import * as os5 from "os";
 import * as path5 from "path";
@@ -44410,6 +44784,407 @@ var NOTES_DB_PATH6 = path5.join(
   os5.homedir(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
+var CORE_DATA_EPOCH_MS = Date.UTC(2001, 0, 1);
+var STORE_FDA_MESSAGE = `Full Disk Access is required to read the Notes database. In System Settings > Privacy & Security > Full Disk Access, grant access to the app that launches this server (Claude Desktop / Terminal / iTerm2), then fully quit and relaunch it. Setup guide: ${FULL_DISK_ACCESS_GUIDE_URL} \u2014 run the doctor tool to verify.`;
+var NoteStoreError = class extends Error {
+  constructor(message, kind) {
+    super(message);
+    this.kind = kind;
+    this.name = "NoteStoreError";
+  }
+  kind;
+};
+function doubleToHex(value) {
+  if (!Number.isFinite(value)) throw new NoteStoreError("Not a finite number", "invalid_input");
+  const buffer = Buffer.alloc(8);
+  buffer.writeDoubleBE(value);
+  return buffer.toString("hex");
+}
+function hexToDouble(hex3) {
+  if (!/^[0-9a-f]{16}$/i.test(hex3))
+    throw new NoteStoreError("Invalid double bits", "invalid_input");
+  const value = Buffer.from(hex3, "hex").readDoubleBE();
+  if (!Number.isFinite(value)) throw new NoteStoreError("Invalid double bits", "invalid_input");
+  return value;
+}
+function renderValue(value) {
+  if ("int" in value) {
+    if (!Number.isSafeInteger(value.int)) {
+      throw new NoteStoreError("Bound integer out of range", "invalid_input");
+    }
+    return String(value.int);
+  }
+  if ("blob" in value) return `x'${Buffer.from(value.blob).toString("hex")}'`;
+  const double = "double" in value ? value.double : hexToDouble(value.doubleBits);
+  return `ieee754_from_blob(x'${doubleToHex(double)}')`;
+}
+function runReadOnlySql(dbPath2, sql, params = {}) {
+  if (!fs5.existsSync(dbPath2)) throw new NoteStoreError(STORE_FDA_MESSAGE, "no_fda");
+  const args = ["-readonly"];
+  const names = Object.keys(params);
+  if (names.length) args.push("-cmd", ".parameter init");
+  for (const name of names) {
+    if (!/^[a-z][a-z0-9_]*$/i.test(name)) {
+      throw new NoteStoreError(`Invalid parameter name ${name}`, "invalid_input");
+    }
+    args.push("-cmd", `.parameter set @${name} ${renderValue(params[name])}`);
+  }
+  args.push(dbPath2, sql);
+  try {
+    return execFileSync10("sqlite3", args, {
+      encoding: "utf8",
+      timeout: 3e4,
+      maxBuffer: 512 * 1024 * 1024,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+  } catch (error2) {
+    const message = error2 instanceof Error ? error2.message : String(error2);
+    if (/authorization denied|unable to open database/i.test(message)) {
+      throw new NoteStoreError(STORE_FDA_MESSAGE, "no_fda");
+    }
+    console.error(`Notes database query failed: ${message}`);
+    throw new NoteStoreError("Failed to query the Notes database.", "query_error");
+  }
+}
+function parseJsonLines(output) {
+  const rows = [];
+  for (const line of output.split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      rows.push(JSON.parse(line));
+    } catch {
+      throw new NoteStoreError("Unexpected Notes database response.", "query_error");
+    }
+  }
+  return rows;
+}
+function readColumns(dbPath2) {
+  const out = runReadOnlySql(
+    dbPath2,
+    "SELECT json_object('name', name) FROM pragma_table_info('ZICCLOUDSYNCINGOBJECT');"
+  );
+  return new Set(parseJsonLines(out).map((row) => row.name));
+}
+function requireColumns(columns, required2, tool) {
+  const missing = required2.filter((column) => !columns.has(column));
+  if (missing.length) {
+    throw new NoteStoreError(
+      `This macOS version's Notes database lacks columns ${tool} needs (${missing.join(", ")}).`,
+      "schema"
+    );
+  }
+}
+function col(columns, alias, name, fallback = "NULL") {
+  return columns.has(name) ? `${alias}.${name}` : fallback;
+}
+function entity(name) {
+  return `(SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME='${name}')`;
+}
+function accountRef(columns, alias) {
+  const refs = [...columns].filter((name) => /^ZACCOUNT\d*$/.test(name)).sort().map((name) => `${alias}.${name}`);
+  if (!refs.length) return "NULL";
+  return refs.length === 1 ? refs[0] : `COALESCE(${refs.join(", ")})`;
+}
+function trashFolderSql(columns, f) {
+  const parts = [];
+  if (columns.has("ZFOLDERTYPE")) parts.push(`COALESCE(${f}.ZFOLDERTYPE, 0) = 1`);
+  if (columns.has("ZIDENTIFIER")) parts.push(`COALESCE(${f}.ZIDENTIFIER, '') LIKE 'TrashFolder%'`);
+  return parts.length ? `(${parts.join(" OR ")})` : "0";
+}
+function notTombstonedSql(columns, alias) {
+  return columns.has("ZMARKEDFORDELETION") ? `COALESCE(${alias}.ZMARKEDFORDELETION, 0) = 0` : "1";
+}
+function activeNoteSql(columns, n, f) {
+  return [
+    `${n}.ZFOLDER IS NOT NULL`,
+    `${f}.Z_PK IS NOT NULL`,
+    notTombstonedSql(columns, n),
+    notTombstonedSql(columns, f),
+    `NOT ${trashFolderSql(columns, f)}`
+  ].join(" AND ");
+}
+function coreDataToIso(seconds) {
+  if (typeof seconds !== "number" || !Number.isFinite(seconds)) return null;
+  const date3 = new Date(CORE_DATA_EPOCH_MS + seconds * 1e3);
+  return Number.isNaN(date3.getTime()) ? null : date3.toISOString();
+}
+function noteIdFor(storeUuid, pk) {
+  return `x-coredata://${storeUuid}/ICNote/p${pk}`;
+}
+function readStoreContext(dbPath2, columns) {
+  const sql = [
+    "BEGIN;",
+    "SELECT json_object('k', 'meta', 'uuid', (SELECT Z_UUID FROM Z_METADATA LIMIT 1));",
+    `SELECT json_object('k', 'account', 'pk', a.Z_PK, 'name', ${col(columns, "a", "ZNAME")}, 'identifier', ${col(columns, "a", "ZIDENTIFIER")}) FROM ZICCLOUDSYNCINGOBJECT a WHERE a.Z_ENT = ${entity("ICAccount")} AND ${notTombstonedSql(columns, "a")};`,
+    `SELECT json_object('k', 'folder', 'pk', f.Z_PK, 'name', ${col(columns, "f", "ZTITLE2")}, 'identifier', ${col(columns, "f", "ZIDENTIFIER")}, 'parent', ${col(columns, "f", "ZPARENT")}, 'account', ${col(columns, "f", "ZOWNER", accountRef(columns, "f"))}, 'folderType', ${col(columns, "f", "ZFOLDERTYPE")}, 'trash', ${trashFolderSql(columns, "f")}, 'tombstoned', NOT ${notTombstonedSql(columns, "f")}) FROM ZICCLOUDSYNCINGOBJECT f WHERE f.Z_ENT = ${entity("ICFolder")};`,
+    "COMMIT;"
+  ].join(" ");
+  const rows = parseJsonLines(runReadOnlySql(dbPath2, sql));
+  const meta = rows.find((row) => row.k === "meta");
+  if (typeof meta?.uuid !== "string" || !meta.uuid) {
+    throw new NoteStoreError("The Notes database has no store identifier.", "schema");
+  }
+  return {
+    uuid: meta.uuid,
+    accounts: rows.filter((row) => row.k === "account").map((row) => ({
+      pk: row.pk,
+      name: typeof row.name === "string" ? row.name : "",
+      identifier: row.identifier ?? null
+    })),
+    folders: rows.filter((row) => row.k === "folder").map((row) => ({
+      pk: row.pk,
+      name: row.name ?? null,
+      identifier: row.identifier ?? null,
+      parent: row.parent ?? null,
+      account: row.account ?? null,
+      folderType: row.folderType ?? null,
+      trash: row.trash ? 1 : 0,
+      tombstoned: row.tombstoned ? 1 : 0
+    }))
+  };
+}
+function folderPaths(folders) {
+  const byPk = new Map(folders.map((folder) => [folder.pk, folder]));
+  const paths = /* @__PURE__ */ new Map();
+  for (const folder of folders) {
+    const segments = [];
+    const seen = /* @__PURE__ */ new Set();
+    let current = folder;
+    while (current && !seen.has(current.pk)) {
+      seen.add(current.pk);
+      segments.unshift(escapeFolderName(current.name ?? ""));
+      current = current.parent !== null ? byPk.get(current.parent) : void 0;
+    }
+    paths.set(folder.pk, segments.join("/"));
+  }
+  return paths;
+}
+function resolveAccountName(accounts, name) {
+  const wanted = name.trim().toLocaleLowerCase();
+  const exact = accounts.filter((account) => account.name.toLocaleLowerCase() === wanted);
+  if (exact.length === 1) return exact[0];
+  const prefix = accounts.filter((account) => account.name.toLocaleLowerCase().startsWith(wanted));
+  if (exact.length === 0 && prefix.length === 1) return prefix[0];
+  const names = accounts.map((account) => account.name).join(", ");
+  throw new NoteStoreError(
+    exact.length > 1 || prefix.length > 1 ? `Account "${name}" is ambiguous. Accounts: ${names}.` : `No account named "${name}". Accounts: ${names}.`,
+    "invalid_input"
+  );
+}
+
+// src/utils/noteListings.ts
+var SPECIAL_LIMIT = { DEFAULT: 100, MAX: 1e3 };
+var HASHTAG_UTI = "com.apple.notes.inlinetextattachment.hashtag";
+var KIND_COLUMN = {
+  pinned: ["ZISPINNED"],
+  "quick-notes": ["ZISSYSTEMPAPER"],
+  "recently-deleted": ["ZFOLDERTYPE", "ZIDENTIFIER"],
+  locked: ["ZISPASSWORDPROTECTED"]
+};
+function kindSupported(columns, kind) {
+  return KIND_COLUMN[kind].some((name) => columns.has(name));
+}
+var flag = (columns, alias, name) => columns.has(name) ? `COALESCE(${alias}.${name}, 0)` : "0";
+function kindPredicate(columns, kind) {
+  switch (kind) {
+    case "pinned":
+      return `${flag(columns, "n", "ZISPINNED")} = 1 AND ${activeNoteSql(columns, "n", "f")}`;
+    case "quick-notes":
+      return `${flag(columns, "n", "ZISSYSTEMPAPER")} = 1 AND ${activeNoteSql(columns, "n", "f")}`;
+    case "recently-deleted":
+      return `f.Z_PK IS NOT NULL AND ${trashFolderSql(columns, "f")} AND ${notTombstonedSql(columns, "n")}`;
+    case "locked":
+      return `${flag(columns, "n", "ZISPASSWORDPROTECTED")} = 1`;
+  }
+}
+function folderAccountJoins(columns) {
+  const owner = col(columns, "f", "ZOWNER");
+  const account = owner === "NULL" ? accountRef(columns, "n") : `COALESCE(${owner}, ${accountRef(columns, "n")})`;
+  return `LEFT JOIN ZICCLOUDSYNCINGOBJECT f ON f.Z_PK = n.ZFOLDER AND f.Z_ENT = ${entity("ICFolder")} LEFT JOIN ZICCLOUDSYNCINGOBJECT a ON a.Z_PK = ${account} AND a.Z_ENT = ${entity("ICAccount")}`;
+}
+function noteFrom(columns) {
+  return `FROM ZICCLOUDSYNCINGOBJECT n ${folderAccountJoins(columns)}`;
+}
+var REQUIRED = ["Z_PK", "Z_ENT", "ZFOLDER", "ZTITLE1"];
+function buildSpecialNotesSql(columns, kind, scoped) {
+  requireColumns(columns, REQUIRED, "list-special-notes");
+  const created = ["ZCREATIONDATE3", "ZCREATIONDATE1", "ZCREATIONDATE"].filter((name) => columns.has(name)).map((name) => `n.${name}`).join(", ") || "NULL";
+  const createdExpr = created.includes(",") ? `COALESCE(${created})` : created;
+  const modified = col(columns, "n", "ZMODIFICATIONDATE1");
+  const locked = flag(columns, "n", "ZISPASSWORDPROTECTED");
+  const where = `WHERE n.Z_ENT = ${entity("ICNote")} AND ${kindPredicate(columns, kind)}` + (scoped ? " AND a.Z_PK = @account" : "");
+  const snippet = `CASE WHEN ${locked} = 1 THEN NULL ELSE ${col(columns, "n", "ZSNIPPET")} END`;
+  const hint = kind === "locked" ? col(columns, "n", "ZPASSWORDHINT") : "NULL";
+  const row = `SELECT json_object('k', 'note', 'pk', n.Z_PK, 'identifier', ${col(columns, "n", "ZIDENTIFIER")}, 'title', n.ZTITLE1, 'folder', f.Z_PK, 'account', a.Z_PK, 'created', ${createdExpr}, 'modified', ${modified}, 'pinned', ${flag(columns, "n", "ZISPINNED")}, 'locked', ${locked}, 'quick', ${flag(columns, "n", "ZISSYSTEMPAPER")}, 'trash', f.Z_PK IS NOT NULL AND ${trashFolderSql(columns, "f")}, 'tombstoned', NOT ${notTombstonedSql(columns, "n")}, 'snippet', ${snippet}, 'hint', ${hint}) ${noteFrom(columns)} ${where} ORDER BY ${modified} DESC, n.Z_PK DESC LIMIT @limit;`;
+  return [
+    "BEGIN;",
+    `SELECT json_object('k', 'total', 'n', COUNT(*)) ${noteFrom(columns)} ${where};`,
+    row,
+    "COMMIT;"
+  ].join(" ");
+}
+function listSpecialNotes(options) {
+  const dbPath2 = options.dbPath ?? NOTES_DB_PATH6;
+  const limit = Math.min(
+    Math.max(1, Math.trunc(options.limit ?? SPECIAL_LIMIT.DEFAULT)),
+    SPECIAL_LIMIT.MAX
+  );
+  const columns = readColumns(dbPath2);
+  const empty = {
+    kind: options.kind,
+    notes: [],
+    count: 0,
+    total: 0,
+    limit,
+    supported: false
+  };
+  if (!kindSupported(columns, options.kind)) return empty;
+  const context = readStoreContext(dbPath2, columns);
+  const scope2 = options.account ? resolveAccountName(context.accounts, options.account) : void 0;
+  const params = { limit: { int: limit } };
+  if (scope2) params.account = { int: scope2.pk };
+  const rows = parseJsonLines(
+    runReadOnlySql(dbPath2, buildSpecialNotesSql(columns, options.kind, Boolean(scope2)), params)
+  );
+  const paths = folderPaths(context.folders);
+  const accountNames = new Map(context.accounts.map((account) => [account.pk, account.name]));
+  const notes = rows.filter((row) => row.k === "note").map((row) => toSpecialRow(row, context.uuid, paths, accountNames, options.kind));
+  return {
+    kind: options.kind,
+    notes,
+    count: notes.length,
+    total: rows.find((row) => row.k === "total")?.n ?? notes.length,
+    limit,
+    supported: true,
+    ...scope2 ? { account: scope2.name } : {}
+  };
+}
+function toSpecialRow(row, uuid2, paths, accountNames, kind) {
+  const locked = Boolean(row.locked);
+  const note = {
+    id: noteIdFor(uuid2, row.pk),
+    identifier: row.identifier ?? null,
+    title: row.title ?? null,
+    folder: row.folder !== null ? paths.get(row.folder) ?? null : null,
+    account: row.account !== null ? accountNames.get(row.account) ?? null : null,
+    created: coreDataToIso(row.created),
+    modified: coreDataToIso(row.modified),
+    pinned: Boolean(row.pinned),
+    locked,
+    quickNote: Boolean(row.quick),
+    inRecentlyDeleted: Boolean(row.trash),
+    markedForDeletion: Boolean(row.tombstoned)
+  };
+  if (!locked) note.snippet = row.snippet ?? null;
+  if (kind === "locked" && row.hint) note.passwordHint = row.hint;
+  return note;
+}
+var TAG_REQUIRED = ["Z_PK", "Z_ENT", "ZFOLDER", "ZNOTE1", "ZTYPEUTI1", "ZALTTEXT", "ZIDENTIFIER"];
+function buildTagInventorySql(columns, scoped) {
+  requireColumns(columns, TAG_REQUIRED, "list-native-tags");
+  const accountFilter = scoped ? " AND a.Z_PK = @account" : "";
+  const uses = `FROM ZICCLOUDSYNCINGOBJECT i JOIN ZICCLOUDSYNCINGOBJECT n ON n.Z_PK = i.ZNOTE1 AND n.Z_ENT = ${entity("ICNote")} ${folderAccountJoins(columns)} WHERE i.ZTYPEUTI1 = '${HASHTAG_UTI}' AND ${notTombstonedSql(columns, "i")} AND ${activeNoteSql(columns, "n", "f")}${accountFilter}`;
+  const tagAccount = accountRef(columns, "t");
+  const display = ["ZDISPLAYTEXT", "ZSTANDARDIZEDCONTENT", "ZNAME"].filter((name) => columns.has(name)).map((name) => `t.${name}`);
+  const displayExpr = display.length > 1 ? `COALESCE(${display.join(", ")})` : display[0] || "NULL";
+  return [
+    "BEGIN;",
+    `SELECT json_object('k', 'tag', 'text', ${displayExpr}, 'account', ta.Z_PK) FROM ZICCLOUDSYNCINGOBJECT t LEFT JOIN ZICCLOUDSYNCINGOBJECT ta ON ta.Z_PK = ${tagAccount} AND ta.Z_ENT = ${entity("ICAccount")} WHERE t.Z_ENT = ${entity("ICHashtag")} AND ${notTombstonedSql(columns, "t")}${scoped ? " AND ta.Z_PK = @account" : ""};`,
+    `SELECT json_object('k', 'use', 'note', n.Z_PK, 'object', i.ZIDENTIFIER, 'text', i.ZALTTEXT, 'account', a.Z_PK, 'locked', ${flag(columns, "n", "ZISPASSWORDPROTECTED")}) ${uses};`,
+    `SELECT json_object('k', 'body', 'note', b.Z_PK, 'data', (SELECT hex(d.ZDATA) FROM ZICNOTEDATA d WHERE d.ZNOTE = b.Z_PK ORDER BY d.Z_PK DESC LIMIT 1)) FROM ZICCLOUDSYNCINGOBJECT b WHERE b.Z_PK IN (SELECT n.Z_PK ${uses}) AND ${flag(columns, "b", "ZISPASSWORDPROTECTED")} = 0;`,
+    "COMMIT;"
+  ].join(" ");
+}
+var bareTag = (text) => text.replace(/^#/, "").trim();
+function referencedObjects(hex3) {
+  if (!hex3 || !/^[0-9a-f]+$/i.test(hex3)) return null;
+  try {
+    const data = gunzipSync6(Buffer.from(hex3, "hex"), { maxOutputLength: 32 * 1024 * 1024 });
+    const wrapper = embeddedMessage(getField(decodeMessage(data), 2));
+    const body = wrapper && embeddedMessage(getField(wrapper, 3));
+    if (!body) return null;
+    const ids = /* @__PURE__ */ new Set();
+    for (const run of getFields(body, 5)) {
+      const attachment = embeddedMessage(getField(embeddedMessage(run) ?? [], 12));
+      const id2 = attachment && stringValue(getField(attachment, 1));
+      if (id2) ids.add(id2);
+    }
+    return ids;
+  } catch {
+    return null;
+  }
+}
+function nativeTagInventory(options = {}) {
+  const dbPath2 = options.dbPath ?? NOTES_DB_PATH6;
+  const columns = readColumns(dbPath2);
+  const context = readStoreContext(dbPath2, columns);
+  const scope2 = options.account ? resolveAccountName(context.accounts, options.account) : void 0;
+  const rows = parseJsonLines(
+    runReadOnlySql(
+      dbPath2,
+      buildTagInventorySql(columns, Boolean(scope2)),
+      scope2 ? { account: { int: scope2.pk } } : {}
+    )
+  );
+  return assembleInventory(rows, context.accounts, scope2);
+}
+function assembleInventory(rows, accounts, scope2) {
+  const accountNames = new Map(accounts.map((account) => [account.pk, account.name]));
+  const bodies = /* @__PURE__ */ new Map();
+  for (const row of rows) if (row.k === "body") bodies.set(row.note, referencedObjects(row.data));
+  const groups = /* @__PURE__ */ new Map();
+  const group = (text, weight) => {
+    const key = text.toLocaleLowerCase();
+    let found = groups.get(key);
+    if (!found) groups.set(key, found = { spellings: /* @__PURE__ */ new Map(), notes: /* @__PURE__ */ new Map() });
+    found.spellings.set(text, (found.spellings.get(text) ?? 0) + weight);
+    return found;
+  };
+  const unverified = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    if (row.k === "tag" && row.text && bareTag(row.text)) group(bareTag(row.text), 0);
+    if (row.k !== "use" || !row.text || !bareTag(row.text)) continue;
+    const referenced = row.locked ? null : bodies.get(row.note) ?? null;
+    if (referenced && !(row.object && referenced.has(row.object))) continue;
+    if (!referenced) unverified.add(row.note);
+    group(bareTag(row.text), 1).notes.set(row.note, row.account);
+  }
+  const inventory = [...groups.values()].map((entry) => {
+    const spellings = [...entry.spellings.entries()].sort(
+      (a, b) => b[1] - a[1] || a[0].localeCompare(b[0])
+    );
+    const perAccount = {};
+    for (const accountPk of entry.notes.values()) {
+      const name = accountPk !== null && accountNames.get(accountPk) || "unknown";
+      perAccount[name] = (perAccount[name] ?? 0) + 1;
+    }
+    const result = {
+      tag: spellings[0][0],
+      noteCount: entry.notes.size,
+      accounts: perAccount
+    };
+    if (spellings.length > 1) result.spellings = spellings.slice(1).map(([text]) => text);
+    return result;
+  });
+  inventory.sort((a, b) => b.noteCount - a.noteCount || a.tag.localeCompare(b.tag));
+  return {
+    inventory,
+    tagCount: inventory.length,
+    complete: unverified.size === 0,
+    unverifiedNotes: unverified.size,
+    ...scope2 ? { account: scope2.name } : {}
+  };
+}
+
+// src/utils/noteIdentifiers.ts
+import { execFileSync as execFileSync11 } from "child_process";
+import * as fs6 from "fs";
+import * as os6 from "os";
+import * as path6 from "path";
+var NOTES_DB_PATH7 = path6.join(
+  os6.homedir(),
+  "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
+);
 var UUID_PATTERN = /^[0-9A-Fa-f]{8}(?:-[0-9A-Fa-f]{4}){3}-[0-9A-Fa-f]{12}$/;
 var NUMERIC_KEY_PATTERN = /^\d{1,18}$/;
 var NOTE_ID_MESSAGE = "A canonical Apple Note ID is required (x-coredata://.../ICNote/p...), or the note's Notes UUID or numeric key";
@@ -44443,10 +45218,10 @@ function assertAll(values, pattern, label) {
     if (!pattern.test(value)) throw new Error(`Refusing to query with an invalid ${label}`);
   }
 }
-function entityClause(entity2) {
-  return `(SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = '${entity2}')`;
+function entityClause(entity3) {
+  return `(SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = '${entity3}')`;
 }
-function buildResolveSql(entity2, keys, uuids) {
+function buildResolveSql(entity3, keys, uuids) {
   assertAll(keys, NUMERIC_KEY_PATTERN, "numeric key");
   assertAll(uuids, UUID_PATTERN, "UUID");
   const matches = [];
@@ -44463,28 +45238,28 @@ function buildResolveSql(entity2, keys, uuids) {
     matches.push(`o.ZIDENTIFIER IN (${[...variants].map((v) => `'${v}'`).join(", ")})`);
   }
   const where = matches.length > 0 ? matches.join(" OR ") : "0";
-  return `SELECT json_object('store', (SELECT Z_UUID FROM Z_METADATA LIMIT 1), 'rows', (SELECT json_group_array(json_object('pk', o.Z_PK, 'identifier', o.ZIDENTIFIER)) FROM ZICCLOUDSYNCINGOBJECT o WHERE o.Z_ENT = ${entityClause(entity2)} AND (${where})));`;
+  return `SELECT json_object('store', (SELECT Z_UUID FROM Z_METADATA LIMIT 1), 'rows', (SELECT json_group_array(json_object('pk', o.Z_PK, 'identifier', o.ZIDENTIFIER)) FROM ZICCLOUDSYNCINGOBJECT o WHERE o.Z_ENT = ${entityClause(entity3)} AND (${where})));`;
 }
-function buildLookupSql(entity2, keys) {
+function buildLookupSql(entity3, keys) {
   assertAll(keys, NUMERIC_KEY_PATTERN, "numeric key");
   const pks = [...new Set(keys.map(canonicalKey))];
   const inList = pks.length > 0 ? pks.join(", ") : "NULL";
   let fields = "'pk', o.Z_PK, 'identifier', o.ZIDENTIFIER";
   let joins = "";
-  if (entity2 === "ICNote") {
+  if (entity3 === "ICNote") {
     fields += ", 'folderIdentifier', f.ZIDENTIFIER, 'accountIdentifier', a.ZIDENTIFIER";
     joins = "LEFT JOIN ZICCLOUDSYNCINGOBJECT f ON f.Z_PK = o.ZFOLDER LEFT JOIN ZICCLOUDSYNCINGOBJECT a ON a.Z_PK = f.ZOWNER ";
-  } else if (entity2 === "ICFolder") {
+  } else if (entity3 === "ICFolder") {
     fields += ", 'parentIdentifier', p.ZIDENTIFIER, 'accountIdentifier', a.ZIDENTIFIER";
     joins = "LEFT JOIN ZICCLOUDSYNCINGOBJECT p ON p.Z_PK = o.ZPARENT LEFT JOIN ZICCLOUDSYNCINGOBJECT a ON a.Z_PK = o.ZOWNER ";
   }
-  return `SELECT json_object('store', (SELECT Z_UUID FROM Z_METADATA LIMIT 1), 'rows', (SELECT json_group_array(json_object(${fields})) FROM ZICCLOUDSYNCINGOBJECT o ${joins}WHERE o.Z_ENT = ${entityClause(entity2)} AND o.Z_PK IN (${inList})));`;
+  return `SELECT json_object('store', (SELECT Z_UUID FROM Z_METADATA LIMIT 1), 'rows', (SELECT json_group_array(json_object(${fields})) FROM ZICCLOUDSYNCINGOBJECT o ${joins}WHERE o.Z_ENT = ${entityClause(entity3)} AND o.Z_PK IN (${inList})));`;
 }
 function runJsonQuery(sql, dbPath2) {
-  if (!fs5.existsSync(dbPath2)) throw new IdentifierResolutionError("no_fda", NO_FDA_MESSAGE);
+  if (!fs6.existsSync(dbPath2)) throw new IdentifierResolutionError("no_fda", NO_FDA_MESSAGE);
   let out;
   try {
-    out = execFileSync9("sqlite3", ["-readonly", dbPath2, sql], {
+    out = execFileSync11("sqlite3", ["-readonly", dbPath2, sql], {
       encoding: "utf8",
       timeout: 5e3,
       stdio: ["pipe", "pipe", "pipe"]
@@ -44501,10 +45276,10 @@ function runJsonQuery(sql, dbPath2) {
   const rows = typeof parsed.rows === "string" ? JSON.parse(parsed.rows) : parsed.rows;
   return { store: parsed.store ?? null, rows: rows ?? [] };
 }
-function coreDataId(store, entity2, pk) {
-  return `x-coredata://${store}/${entity2}/p${pk}`;
+function coreDataId(store, entity3, pk) {
+  return `x-coredata://${store}/${entity3}/p${pk}`;
 }
-function resolveIdentifiers(values, entity2, dbPath2 = NOTES_DB_PATH6) {
+function resolveIdentifiers(values, entity3, dbPath2 = NOTES_DB_PATH7) {
   const resolved = /* @__PURE__ */ new Map();
   const keys = [];
   const uuids = [];
@@ -44516,7 +45291,7 @@ function resolveIdentifiers(values, entity2, dbPath2 = NOTES_DB_PATH6) {
   }
   if (keys.length === 0 && uuids.length === 0) return resolved;
   const { store, rows } = runJsonQuery(
-    buildResolveSql(entity2, keys, uuids),
+    buildResolveSql(entity3, keys, uuids),
     dbPath2
   );
   if (!store) {
@@ -44529,16 +45304,16 @@ function resolveIdentifiers(values, entity2, dbPath2 = NOTES_DB_PATH6) {
   const byUuid = new Map(
     rows.filter((row) => row.identifier).map((row) => [String(row.identifier).toUpperCase(), row])
   );
-  const label = ENTITY_LABEL[entity2];
+  const label = ENTITY_LABEL[entity3];
   const missing = [];
   for (const key of keys) {
     const row = byKey.get(canonicalKey(key));
-    if (row) resolved.set(key, coreDataId(store, entity2, row.pk));
+    if (row) resolved.set(key, coreDataId(store, entity3, row.pk));
     else missing.push(`numeric key ${key}`);
   }
   for (const uuid2 of uuids) {
     const row = byUuid.get(uuid2.toUpperCase());
-    if (row) resolved.set(uuid2, coreDataId(store, entity2, row.pk));
+    if (row) resolved.set(uuid2, coreDataId(store, entity3, row.pk));
     else missing.push(`identifier ${uuid2}`);
   }
   if (missing.length > 0) {
@@ -44550,12 +45325,12 @@ function resolveIdentifiers(values, entity2, dbPath2 = NOTES_DB_PATH6) {
   return resolved;
 }
 var COREDATA_PARTS = /^x-coredata:\/\/([0-9A-Fa-f-]+)\/(ICNote|ICFolder|ICAccount)\/p(\d{1,18})$/;
-function lookupStableIdentifiers(ids, entity2, dbPath2 = NOTES_DB_PATH6) {
+function lookupStableIdentifiers(ids, entity3, dbPath2 = NOTES_DB_PATH7) {
   const result = /* @__PURE__ */ new Map();
   const wanted = /* @__PURE__ */ new Map();
   for (const id2 of ids) {
     const match = COREDATA_PARTS.exec(id2);
-    if (!match || match[2] !== entity2) continue;
+    if (!match || match[2] !== entity3) continue;
     const pk = canonicalKey(match[3]);
     const list = wanted.get(pk) ?? [];
     list.push({ id: id2, store: match[1] });
@@ -44564,7 +45339,7 @@ function lookupStableIdentifiers(ids, entity2, dbPath2 = NOTES_DB_PATH6) {
   if (wanted.size === 0) return result;
   let query;
   try {
-    query = runJsonQuery(buildLookupSql(entity2, [...wanted.keys()]), dbPath2);
+    query = runJsonQuery(buildLookupSql(entity3, [...wanted.keys()]), dbPath2);
   } catch {
     return result;
   }
@@ -44586,16 +45361,16 @@ function lookupStableIdentifiers(ids, entity2, dbPath2 = NOTES_DB_PATH6) {
   }
   return result;
 }
-function withStableIdentifiers(items, entity2, dbPath2 = NOTES_DB_PATH6) {
+function withStableIdentifiers(items, entity3, dbPath2 = NOTES_DB_PATH7) {
   const ids = items.map((item) => item.id).filter((id2) => typeof id2 === "string");
   if (ids.length === 0) return items;
-  const found = lookupStableIdentifiers(ids, entity2, dbPath2);
+  const found = lookupStableIdentifiers(ids, entity3, dbPath2);
   if (found.size === 0) return items;
   return items.map(
     (item) => item.id && found.has(item.id) ? { ...item, ...found.get(item.id) } : item
   );
 }
-var defaultResolver = (values, entity2) => resolveIdentifiers(values, entity2);
+var defaultResolver = (values, entity3) => resolveIdentifiers(values, entity3);
 var DEFAULT_MAX_ID_LENGTH = 2e3;
 function acceptAlternateForms(pattern) {
   return new RegExp(
@@ -44603,10 +45378,10 @@ function acceptAlternateForms(pattern) {
     pattern.flags
   );
 }
-function resolveInSchema(values, entity2, ctx, resolver) {
+function resolveInSchema(values, entity3, ctx, resolver) {
   if (!values.some(isAlternateIdentifier)) return new Map(values.map((v) => [v, v]));
   try {
-    return resolver(values, entity2);
+    return resolver(values, entity3);
   } catch (error2) {
     ctx.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -44615,26 +45390,26 @@ function resolveInSchema(values, entity2, ctx, resolver) {
     return null;
   }
 }
-function exactIdInput(entity2, pattern, message, options = {}) {
+function exactIdInput(entity3, pattern, message, options = {}) {
   const resolver = options.resolver ?? defaultResolver;
   return external_exports.string().max(options.maxLength ?? DEFAULT_MAX_ID_LENGTH).regex(acceptAlternateForms(pattern), message).transform((value, ctx) => {
-    const map = resolveInSchema([value], entity2, ctx, resolver);
+    const map = resolveInSchema([value], entity3, ctx, resolver);
     return map ? map.get(value) ?? value : external_exports.NEVER;
   });
 }
-function exactIdArrayInput(entity2, pattern, message, options = {}) {
+function exactIdArrayInput(entity3, pattern, message, options = {}) {
   const resolver = options.resolver ?? defaultResolver;
   const item = external_exports.string().max(options.maxLength ?? DEFAULT_MAX_ID_LENGTH).regex(acceptAlternateForms(pattern), message);
   const array2 = options.maxItems === void 0 ? external_exports.array(item) : external_exports.array(item).max(options.maxItems);
   return array2.transform((values, ctx) => {
-    const map = resolveInSchema(values, entity2, ctx, resolver);
+    const map = resolveInSchema(values, entity3, ctx, resolver);
     return map ? values.map((value) => map.get(value) ?? value) : external_exports.NEVER;
   });
 }
-function looseIdTransform(entity2, resolver = defaultResolver) {
+function looseIdTransform(entity3, resolver = defaultResolver) {
   return (value, ctx) => {
     if (!isAlternateIdentifier(value)) return value;
-    const map = resolveInSchema([value], entity2, ctx, resolver);
+    const map = resolveInSchema([value], entity3, ctx, resolver);
     return map ? map.get(value) ?? value : external_exports.NEVER;
   };
 }
@@ -45174,18 +45949,18 @@ function positiveTextTerms(node, negated = false) {
 }
 
 // src/utils/noteQueryStore.ts
-import { execFileSync as execFileSync10 } from "child_process";
-import * as fs6 from "fs";
-import * as os6 from "os";
-import * as path6 from "path";
-import { gunzipSync as gunzipSync6 } from "zlib";
-var NOTES_DB_PATH7 = path6.join(
-  os6.homedir(),
+import { execFileSync as execFileSync12 } from "child_process";
+import * as fs7 from "fs";
+import * as os7 from "os";
+import * as path7 from "path";
+import { gunzipSync as gunzipSync7 } from "zlib";
+var NOTES_DB_PATH8 = path7.join(
+  os7.homedir(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
 var QUERY_SCAN = { DEFAULT: 500, MAX: 5e3 };
 var QUERY_RESULTS = { DEFAULT: 50, MAX: 500 };
-var CORE_DATA_EPOCH_MS = Date.UTC(2001, 0, 1);
+var CORE_DATA_EPOCH_MS2 = Date.UTC(2001, 0, 1);
 var SNIPPET_BEFORE = 60;
 var SNIPPET_LENGTH = 180;
 var QUERY_FDA_MESSAGE = `Full Disk Access is required to query notes. In System Settings > Privacy & Security > Full Disk Access, grant access to the app that launches this server (Claude Desktop / Terminal / iTerm2), then fully quit and relaunch it. Setup guide: ${FULL_DISK_ACCESS_GUIDE_URL} \u2014 run the doctor tool to verify.`;
@@ -45268,10 +46043,10 @@ function countWords(text) {
   return count;
 }
 var REQUIRED_COLUMNS3 = ["Z_PK", "Z_ENT", "ZTITLE1", "ZFOLDER", "ZMODIFICATIONDATE1"];
-function col(available, alias, name) {
+function col2(available, alias, name) {
   return available.has(name) ? `${alias}.${name}` : "NULL";
 }
-var entity = (name) => `(SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME='${name}')`;
+var entity2 = (name) => `(SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME='${name}')`;
 function buildScanSql(available, options) {
   const missing = REQUIRED_COLUMNS3.filter((c) => !available.has(c));
   if (missing.length) {
@@ -45289,21 +46064,21 @@ function buildScanSql(available, options) {
   const bool = (name) => available.has(name) ? `COALESCE(n.${name}, 0)` : "0";
   const notNull = (alias, name) => available.has(name) ? `${alias}.${name} IS NOT NULL` : "0";
   const tagsExpr = options.withTags && ["ZNOTE1", "ZTYPEUTI1", "ZALTTEXT", "ZIDENTIFIER"].every((c) => available.has(c)) ? `(SELECT json_group_array(json_array(t.ZIDENTIFIER, t.ZALTTEXT)) FROM ZICCLOUDSYNCINGOBJECT t WHERE t.ZNOTE1 = n.Z_PK AND t.ZTYPEUTI1 = 'com.apple.notes.inlinetextattachment.hashtag')` : "NULL";
-  const where = [`n.Z_ENT = ${entity("ICNote")}`];
+  const where = [`n.Z_ENT = ${entity2("ICNote")}`];
   if (!options.includeDeleted) {
     where.push("n.ZFOLDER IS NOT NULL");
     if (available.has("ZMARKEDFORDELETION")) where.push("COALESCE(n.ZMARKEDFORDELETION, 0) = 0");
     if (available.has("ZFOLDERTYPE")) {
       where.push(
-        `n.ZFOLDER NOT IN (SELECT Z_PK FROM ZICCLOUDSYNCINGOBJECT WHERE Z_ENT = ${entity("ICFolder")} AND ZFOLDERTYPE = 1)`
+        `n.ZFOLDER NOT IN (SELECT Z_PK FROM ZICCLOUDSYNCINGOBJECT WHERE Z_ENT = ${entity2("ICFolder")} AND ZFOLDERTYPE = 1)`
       );
     }
   }
   const whereSql = where.join(" AND ");
-  const folderRow = `SELECT json_object('k', 'folder', 'pk', f.Z_PK, 'name', ${col(available, "f", "ZTITLE2")}, 'parent', ${col(available, "f", "ZPARENT")}, 'type', ${col(available, "f", "ZFOLDERTYPE")}, 'owner', ${col(available, "f", "ZOWNER")}, 'shared', ${notNull("f", "ZSERVERSHAREDATA")}) FROM ZICCLOUDSYNCINGOBJECT f WHERE f.Z_ENT = ${entity("ICFolder")};`;
-  const accountRow = `SELECT json_object('k', 'account', 'pk', a.Z_PK, 'name', ${col(available, "a", "ZNAME")}) FROM ZICCLOUDSYNCINGOBJECT a WHERE a.Z_ENT = ${entity("ICAccount")};`;
+  const folderRow = `SELECT json_object('k', 'folder', 'pk', f.Z_PK, 'name', ${col2(available, "f", "ZTITLE2")}, 'parent', ${col2(available, "f", "ZPARENT")}, 'type', ${col2(available, "f", "ZFOLDERTYPE")}, 'owner', ${col2(available, "f", "ZOWNER")}, 'shared', ${notNull("f", "ZSERVERSHAREDATA")}) FROM ZICCLOUDSYNCINGOBJECT f WHERE f.Z_ENT = ${entity2("ICFolder")};`;
+  const accountRow = `SELECT json_object('k', 'account', 'pk', a.Z_PK, 'name', ${col2(available, "a", "ZNAME")}) FROM ZICCLOUDSYNCINGOBJECT a WHERE a.Z_ENT = ${entity2("ICAccount")};`;
   const dataExpr = options.withBodies ? "(SELECT hex(d.ZDATA) FROM ZICNOTEDATA d WHERE d.ZNOTE = n.Z_PK ORDER BY d.Z_PK DESC LIMIT 1)" : "NULL";
-  const noteRow = `SELECT json_object('k', 'note', 'pk', n.Z_PK, 'title', n.ZTITLE1, 'folder', n.ZFOLDER, 'created', ${createdExpr}, 'modified', n.ZMODIFICATIONDATE1, 'pinned', ${bool("ZISPINNED")}, 'locked', ${bool("ZISPASSWORDPROTECTED")}, 'shared', ${notNull("n", "ZSERVERSHAREDATA")}, 'snippet', ${col(available, "n", "ZSNIPPET")}, 'data', ${dataExpr}, 'tags', ${tagsExpr}) FROM ZICCLOUDSYNCINGOBJECT n WHERE ${whereSql} ORDER BY n.ZMODIFICATIONDATE1 DESC, n.Z_PK DESC LIMIT ${scan};`;
+  const noteRow = `SELECT json_object('k', 'note', 'pk', n.Z_PK, 'title', n.ZTITLE1, 'folder', n.ZFOLDER, 'created', ${createdExpr}, 'modified', n.ZMODIFICATIONDATE1, 'pinned', ${bool("ZISPINNED")}, 'locked', ${bool("ZISPASSWORDPROTECTED")}, 'shared', ${notNull("n", "ZSERVERSHAREDATA")}, 'snippet', ${col2(available, "n", "ZSNIPPET")}, 'data', ${dataExpr}, 'tags', ${tagsExpr}) FROM ZICCLOUDSYNCINGOBJECT n WHERE ${whereSql} ORDER BY n.ZMODIFICATIONDATE1 DESC, n.Z_PK DESC LIMIT ${scan};`;
   return [
     "BEGIN;",
     "SELECT json_object('k', 'meta', 'uuid', (SELECT Z_UUID FROM Z_METADATA LIMIT 1));",
@@ -45314,8 +46089,8 @@ function buildScanSql(available, options) {
     "COMMIT;"
   ].join(" ");
 }
-function runSqlite5(dbPath2, query) {
-  return execFileSync10("sqlite3", ["-readonly", dbPath2, query], {
+function runSqlite6(dbPath2, query) {
+  return execFileSync12("sqlite3", ["-readonly", dbPath2, query], {
     encoding: "utf8",
     timeout: 3e4,
     maxBuffer: 512 * 1024 * 1024,
@@ -45324,7 +46099,7 @@ function runSqlite5(dbPath2, query) {
 }
 function presentColumns2(dbPath2) {
   const cols = /* @__PURE__ */ new Set();
-  for (const line of runSqlite5(dbPath2, "PRAGMA table_info(ZICCLOUDSYNCINGOBJECT);").split("\n")) {
+  for (const line of runSqlite6(dbPath2, "PRAGMA table_info(ZICCLOUDSYNCINGOBJECT);").split("\n")) {
     const name = line.split("|")[1];
     if (name) cols.add(name);
   }
@@ -45342,12 +46117,12 @@ function resolveFolders(rows) {
     seen.add(pk);
     const parent = row.parent !== null ? resolve4(row.parent, seen) : void 0;
     const name = row.name ?? "";
-    const path7 = parent ? `${parent.path}/${escapeSegment(name)}` : escapeSegment(name);
+    const path8 = parent ? `${parent.path}/${escapeSegment(name)}` : escapeSegment(name);
     const plainPath = parent ? `${parent.plainPath}/${name}` : name;
     const info = {
-      path: path7,
+      path: path8,
       plainPath,
-      keys: [...new Set([name, plainPath, path7].map(normalizeForMatch))],
+      keys: [...new Set([name, plainPath, path8].map(normalizeForMatch))],
       accountPk: row.owner ?? parent?.accountPk ?? null,
       shared: Boolean(row.shared) || Boolean(parent?.shared)
     };
@@ -45357,7 +46132,7 @@ function resolveFolders(rows) {
   for (const row of rows) resolve4(row.pk, /* @__PURE__ */ new Set());
   return resolved;
 }
-var coreDataMs = (seconds) => seconds === null || !Number.isFinite(seconds) ? void 0 : CORE_DATA_EPOCH_MS + seconds * 1e3;
+var coreDataMs = (seconds) => seconds === null || !Number.isFinite(seconds) ? void 0 : CORE_DATA_EPOCH_MS2 + seconds * 1e3;
 function buildSnippet(text, terms) {
   const clean = text.replace(/\ufffc/gu, " ");
   const firstBreak = clean.indexOf("\n");
@@ -45379,12 +46154,12 @@ function queryNotes(expression, options = {}) {
   const includeDeleted = options.includeDeleted ?? false;
   const withBodies = needsContent(ast);
   const withTags = needsTags(ast);
-  const dbPath2 = options.dbPath ?? NOTES_DB_PATH7;
-  if (!fs6.existsSync(dbPath2)) throw new NoteQueryStoreError(QUERY_FDA_MESSAGE, "no_fda");
+  const dbPath2 = options.dbPath ?? NOTES_DB_PATH8;
+  if (!fs7.existsSync(dbPath2)) throw new NoteQueryStoreError(QUERY_FDA_MESSAGE, "no_fda");
   let output;
   try {
     const available = presentColumns2(dbPath2);
-    output = runSqlite5(
+    output = runSqlite6(
       dbPath2,
       buildScanSql(available, { scanLimit, includeDeleted, withBodies, withTags })
     );
@@ -45440,7 +46215,7 @@ function queryNotes(expression, options = {}) {
       try {
         decoded = decodeNoteBody(
           new Uint8Array(
-            gunzipSync6(Buffer.from(row.data, "hex"), { maxOutputLength: 32 * 1024 * 1024 })
+            gunzipSync7(Buffer.from(row.data, "hex"), { maxOutputLength: 32 * 1024 * 1024 })
           )
         );
       } catch {
@@ -45515,10 +46290,10 @@ function queryNotes(expression, options = {}) {
 import { spawnSync } from "child_process";
 
 // src/services/nativeTags.ts
-import { execFileSync as execFileSync11 } from "node:child_process";
+import { execFileSync as execFileSync13 } from "node:child_process";
 import { mkdtempSync as mkdtempSync2, writeFileSync, rmSync as rmSync2 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join12 } from "node:path";
+import { join as join14 } from "node:path";
 
 // src/services/shortcutConsent.ts
 function shortcutConsentHint(shortcut) {
@@ -45594,7 +46369,7 @@ function addNativeTags(request, deps) {
   };
 }
 function listInstalledShortcuts() {
-  return execFileSync11("/usr/bin/shortcuts", ["list", "--show-identifiers"], {
+  return execFileSync13("/usr/bin/shortcuts", ["list", "--show-identifiers"], {
     encoding: "utf8",
     timeout: 15e3,
     maxBuffer: 1024 * 1024,
@@ -45620,11 +46395,11 @@ function runNativeTagsShortcut(input) {
   const status = nativeTagsStatus();
   if (!status.installed)
     throw new Error(`Import the supplied ${status.shortcut}.shortcut in Shortcuts first`);
-  const directory = mkdtempSync2(join12(tmpdir2(), "apple-notes-native-tags-"));
+  const directory = mkdtempSync2(join14(tmpdir2(), "apple-notes-native-tags-"));
   try {
-    const path7 = join12(directory, "request.json");
-    writeFileSync(path7, JSON.stringify(input), { mode: 384 });
-    execFileSync11("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", path7], {
+    const path8 = join14(directory, "request.json");
+    writeFileSync(path8, JSON.stringify(input), { mode: 384 });
+    execFileSync13("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", path8], {
       encoding: "utf8",
       timeout: 6e4,
       maxBuffer: 1024 * 1024,
@@ -45643,10 +46418,10 @@ function runNativeTagsShortcut(input) {
 }
 
 // src/services/backgroundNotes.ts
-import { execFileSync as execFileSync12 } from "node:child_process";
+import { execFileSync as execFileSync14 } from "node:child_process";
 import { mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync2, rmSync as rmSync3 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join13 } from "node:path";
+import { join as join15 } from "node:path";
 
 // src/utils/appendMarkdown.ts
 var escape2 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
@@ -45971,9 +46746,9 @@ function runBackgroundShortcut(input, status = backgroundStatus()) {
     throw new Error(
       `Install the supplied "${status.shortcut}" Shortcut once; Shortcuts must list it exactly once`
     );
-  const directory = mkdtempSync3(join13(tmpdir3(), "apple-notes-background-"));
+  const directory = mkdtempSync3(join15(tmpdir3(), "apple-notes-background-"));
   try {
-    const file = join13(directory, "request.json");
+    const file = join15(directory, "request.json");
     writeFileSync2(
       file,
       JSON.stringify({
@@ -45993,7 +46768,7 @@ function runBackgroundShortcut(input, status = backgroundStatus()) {
       { mode: 384 }
     );
     try {
-      execFileSync12("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", file], {
+      execFileSync14("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", file], {
         encoding: "utf8",
         timeout: callTimeoutMs() ?? 6e4,
         maxBuffer: 1024 * 1024,
@@ -46228,7 +47003,7 @@ function createMarkdownNote(manager, request, run = runBackgroundShortcut) {
     throw new Error(
       `Install the supplied "${status.shortcut}" Shortcut once; Shortcuts must list it exactly once`
     );
-  const segments = (path7) => JSON.stringify(splitFolderPath(path7).map((part) => part.toLocaleLowerCase()));
+  const segments = (path8) => JSON.stringify(splitFolderPath(path8).map((part) => part.toLocaleLowerCase()));
   if (request.folder) {
     const wanted = segments(request.folder);
     if (!manager.listAccounts().some(
@@ -46318,7 +47093,7 @@ ${request.content}`
 }
 
 // src/services/capabilityMatrix.ts
-import { execFileSync as execFileSync13 } from "node:child_process";
+import { execFileSync as execFileSync15 } from "node:child_process";
 import { release } from "node:os";
 var MACOS_SHORTCUTS_CLI = "12.0";
 var MACOS_MARKDOWN_IMPORT = "26.0";
@@ -46525,7 +47300,7 @@ function evaluateFeatures(env, features = FEATURES) {
 function readMacOSVersion() {
   if (process.platform !== "darwin") return null;
   try {
-    const out = execFileSync13("/usr/bin/sw_vers", ["-productVersion"], {
+    const out = execFileSync15("/usr/bin/sw_vers", ["-productVersion"], {
       encoding: "utf8",
       timeout: 3e3,
       stdio: ["ignore", "pipe", "ignore"]
@@ -46558,9 +47333,9 @@ function getCapabilityMatrix(probe = probeCapabilityEnvironment) {
   return evaluateFeatures(probe());
 }
 function formatCapabilityMatrix(matrix) {
-  const os7 = matrix.runtimeOS;
+  const os8 = matrix.runtimeOS;
   const lines = [
-    `Feature matrix (macOS ${os7.macOSVersion ?? "unknown"}, Darwin ${os7.darwinRelease}):`
+    `Feature matrix (macOS ${os8.macOSVersion ?? "unknown"}, Darwin ${os8.darwinRelease}):`
   ];
   for (const [name, status] of Object.entries(matrix.features)) {
     lines.push(
@@ -46678,19 +47453,19 @@ function formatDoctorReport(r) {
 }
 
 // src/services/fileConfig.ts
-import { existsSync as existsSync9, readFileSync as readFileSync2 } from "fs";
-import { join as join14 } from "path";
-import { homedir as homedir12 } from "os";
+import { existsSync as existsSync10, readFileSync as readFileSync2 } from "fs";
+import { join as join16 } from "path";
+import { homedir as homedir13 } from "os";
 function fileConfigPath(env = process.env) {
   const override = env.APPLE_NOTES_MCP_CONFIG_FILE;
   if (override && override.trim()) return override.trim();
-  return join14(homedir12(), "Library", "Application Support", "apple-notes-mcp", "config.json");
+  return join16(homedir13(), "Library", "Application Support", "apple-notes-mcp", "config.json");
 }
-function loadFileConfig(env = process.env, path7 = fileConfigPath(env)) {
+function loadFileConfig(env = process.env, path8 = fileConfigPath(env)) {
   const applied = [];
   try {
-    if (!existsSync9(path7)) return applied;
-    const parsed = JSON.parse(readFileSync2(path7, "utf8"));
+    if (!existsSync10(path8)) return applied;
+    const parsed = JSON.parse(readFileSync2(path8, "utf8"));
     if (!parsed || typeof parsed !== "object") return applied;
     for (const [k, v] of Object.entries(parsed)) {
       if (typeof v !== "string") continue;
@@ -46700,7 +47475,7 @@ function loadFileConfig(env = process.env, path7 = fileConfigPath(env)) {
       }
     }
   } catch (e) {
-    console.error(`Failed to load apple-notes-mcp config file ${path7}: ${String(e)}`);
+    console.error(`Failed to load apple-notes-mcp config file ${path8}: ${String(e)}`);
   }
   return applied;
 }
@@ -46987,11 +47762,11 @@ function createShutdown(stream, exit, timeoutMs = SHUTDOWN_DRAIN_TIMEOUT_MS) {
 }
 
 // src/utils/noteBlocks.ts
-import { execFileSync as execFileSync14 } from "node:child_process";
-import { existsSync as existsSync10 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { join as join15 } from "node:path";
-import { gunzipSync as gunzipSync7 } from "node:zlib";
+import { execFileSync as execFileSync16 } from "node:child_process";
+import { existsSync as existsSync11 } from "node:fs";
+import { homedir as homedir14 } from "node:os";
+import { join as join17 } from "node:path";
+import { gunzipSync as gunzipSync8 } from "node:zlib";
 var NoteBlocksError = class extends Error {
   code;
   constructor(code, message) {
@@ -47279,7 +48054,7 @@ function summarize(blocks, attachments) {
 function decodeCompressedNoteBlocks(compressed) {
   let data;
   try {
-    data = gunzipSync7(compressed, { maxOutputLength: 32 * 1024 * 1024 });
+    data = gunzipSync8(compressed, { maxOutputLength: 32 * 1024 * 1024 });
   } catch (error2) {
     throw new NoteBlocksError(
       "decompress-failed",
@@ -47333,23 +48108,23 @@ function pageNoteBlocks(doc, { offset = 0, limit = 500, maxBytes = blocksMaxResp
     undecodedFields: doc.undecodedFields
   };
 }
-var NOTES_DB_PATH8 = join15(
-  homedir13(),
+var NOTES_DB_PATH9 = join17(
+  homedir14(),
   "Library/Group Containers/group.com.apple.notes/NoteStore.sqlite"
 );
-function readNoteBlocks(id2, { dbPath: dbPath2 = NOTES_DB_PATH8 } = {}) {
+function readNoteBlocks(id2, { dbPath: dbPath2 = NOTES_DB_PATH9 } = {}) {
   const pk = /^x-coredata:\/\/[0-9a-f-]+\/ICNote\/p([0-9]{1,18})$/i.exec(id2)?.[1];
   if (!pk)
     throw new NoteBlocksError(
       "invalid-id",
       `Invalid note ID: expected x-coredata://<store>/ICNote/p<number>`
     );
-  if (!existsSync10(dbPath2))
+  if (!existsSync11(dbPath2))
     throw new NoteBlocksError("no-full-disk-access", "The Notes database is not readable");
   const sql = "SELECT json_object('exists', (SELECT count(*) FROM ZICCLOUDSYNCINGOBJECT WHERE Z_PK = @pk AND Z_ENT = (SELECT Z_ENT FROM Z_PRIMARYKEY WHERE Z_NAME = 'ICNote')), 'data', (SELECT hex(ZDATA) FROM ZICNOTEDATA WHERE ZNOTE = @pk), 'encrypted', (SELECT ZCRYPTOINITIALIZATIONVECTOR IS NOT NULL FROM ZICNOTEDATA WHERE ZNOTE = @pk));";
   let output;
   try {
-    output = execFileSync14(
+    output = execFileSync16(
       "/usr/bin/sqlite3",
       ["-readonly", "-cmd", ".parameter init", "-cmd", `.parameter set @pk ${pk}`, dbPath2, sql],
       {
@@ -47500,17 +48275,17 @@ function insertLink(request, deps) {
 // src/tools/directOperations.ts
 import { createHash as createHash2 } from "node:crypto";
 import {
-  closeSync as closeSync3,
-  constants as constants3,
-  fstatSync as fstatSync3,
+  closeSync as closeSync4,
+  constants as constants4,
+  fstatSync as fstatSync4,
   mkdtempSync as mkdtempSync4,
-  openSync as openSync3,
+  openSync as openSync4,
   readFileSync as readFileSync3,
   rmSync as rmSync4,
   writeFileSync as writeFileSync3
 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
-import { basename as basename2, extname as extname2, isAbsolute as isAbsolute3, join as join16 } from "node:path";
+import { basename as basename3, extname as extname3, isAbsolute as isAbsolute3, join as join18 } from "node:path";
 var noteId = exactIdInput(
   "ICNote",
   /^x-coredata:\/\/[0-9a-f-]+\/ICNote\/p\d+$/i,
@@ -47553,11 +48328,11 @@ function assertExistingContentPreserved(before, after) {
       throw new Error("Existing native object content or presentation changed");
   }
 }
-function localAttachment(path7) {
-  if (!isAbsolute3(path7)) throw new Error("An absolute local file path is required");
-  const descriptor = openSync3(path7, constants3.O_RDONLY | constants3.O_NOFOLLOW);
+function localAttachment(path8) {
+  if (!isAbsolute3(path8)) throw new Error("An absolute local file path is required");
+  const descriptor = openSync4(path8, constants4.O_RDONLY | constants4.O_NOFOLLOW);
   try {
-    const stat = fstatSync3(descriptor);
+    const stat = fstatSync4(descriptor);
     if (!stat.isFile() || stat.size === 0 || stat.size > 64 * 1024 * 1024)
       throw new Error("Attachment must be a nonempty regular file of at most 64 MiB");
     const bytes = readFileSync3(descriptor);
@@ -47565,7 +48340,7 @@ function localAttachment(path7) {
       throw new Error("Attachment changed while it was being read; try again");
     return bytes;
   } finally {
-    closeSync3(descriptor);
+    closeSync4(descriptor);
   }
 }
 function registerDirectOperations(server2, manager) {
@@ -47677,8 +48452,8 @@ function registerDirectOperations(server2, manager) {
     }
   );
 }
-function attachmentName(path7, filename) {
-  const source = basename2(path7);
+function attachmentName(path8, filename) {
+  const source = basename3(path8);
   if (filename === void 0) return source;
   if (Buffer.byteLength(filename, "utf8") > 255)
     throw new Error("filename must be at most 255 bytes");
@@ -47686,21 +48461,21 @@ function attachmentName(path7, filename) {
     throw new Error(
       "filename must be one path component with no slash, colon, backslash, control character, leading dot, or surrounding spaces"
     );
-  if (extname2(filename).toLowerCase() !== extname2(source).toLowerCase())
+  if (extname3(filename).toLowerCase() !== extname3(source).toLowerCase())
     throw new Error(
-      `filename must keep the source file's extension (${extname2(source) || "none"})`
+      `filename must keep the source file's extension (${extname3(source) || "none"})`
     );
   return filename;
 }
 function attachFile(manager, args) {
-  const { id: id2, expectedContentHash, path: path7 } = args;
-  const name = attachmentName(path7, args.filename);
+  const { id: id2, expectedContentHash, path: path8 } = args;
+  const name = attachmentName(path8, args.filename);
   const before = readSnapshot(manager, id2);
   if (before.hash !== expectedContentHash) throw new Error("Note revision changed");
-  const bytes = localAttachment(path7);
+  const bytes = localAttachment(path8);
   const beforeAttachments = manager.listAttachmentsById(id2);
-  const directory = mkdtempSync4(join16(tmpdir4(), "notes-attachment-add-"));
-  const temporaryFile = join16(directory, name);
+  const directory = mkdtempSync4(join18(tmpdir4(), "notes-attachment-add-"));
+  const temporaryFile = join18(directory, name);
   try {
     writeFileSync3(temporaryFile, bytes, { mode: 384 });
     if (readSnapshot(manager, id2).hash !== before.hash) throw new Error("Note revision changed");
@@ -48258,9 +49033,9 @@ function registerNativeOperations(server2, manager) {
 
 // src/setupShortcuts.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync12 } from "node:fs";
 import { release as release2 } from "node:os";
-import { dirname as dirname3, resolve as resolve3 } from "node:path";
+import { dirname as dirname4, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 var OPTIONAL_BRIDGE_NOTE = "(optional \u2014 needed only for create-note format: markdown, macOS 26+)";
 var MARKDOWN_MIN_DARWIN_MAJOR = 25;
@@ -48278,16 +49053,16 @@ var shortcutFiles = [
 ];
 function setupShortcuts(checkOnly, dependencies = {}) {
   const status = dependencies.status || nativeTagsStatus;
-  const exists = dependencies.exists || existsSync11;
-  const open = dependencies.open || ((path7) => {
-    const result = spawnSync2("/usr/bin/open", [path7], { encoding: "utf8" });
+  const exists = dependencies.exists || existsSync12;
+  const open = dependencies.open || ((path8) => {
+    const result = spawnSync2("/usr/bin/open", [path8], { encoding: "utf8" });
     return result.status === 0 ? { ok: true } : { ok: false, error: result.stderr || result.error?.message || "open failed" };
   });
-  const baseDirectory = dependencies.baseDirectory || resolve3(dirname3(fileURLToPath(import.meta.url)), "../shortcuts");
+  const baseDirectory = dependencies.baseDirectory || resolve3(dirname4(fileURLToPath(import.meta.url)), "../shortcuts");
   const osRelease = (dependencies.osRelease || release2)();
   const darwinMajor = Number.parseInt(osRelease.split(".")[0], 10);
   const items = shortcutFiles.map(({ name, file, optional: optional2 }) => {
-    const path7 = resolve3(baseDirectory, file);
+    const path8 = resolve3(baseDirectory, file);
     let installed = false;
     let identifier;
     let error2;
@@ -48303,9 +49078,9 @@ function setupShortcuts(checkOnly, dependencies = {}) {
     if (!installed && !checkOnly) {
       if (optional2 && !(darwinMajor >= MARKDOWN_MIN_DARWIN_MAJOR))
         skipped = `requires macOS 26 or later (this Mac reports Darwin ${osRelease})`;
-      else if (!exists(path7)) error2 = `Packaged Shortcut is missing: ${path7}`;
+      else if (!exists(path8)) error2 = `Packaged Shortcut is missing: ${path8}`;
       else {
-        const result = open(path7);
+        const result = open(path8);
         opened = result.ok;
         if (!result.ok) error2 = result.error || `Could not open ${file}`;
       }
@@ -48314,7 +49089,7 @@ function setupShortcuts(checkOnly, dependencies = {}) {
       name,
       installed,
       identifier,
-      file: path7,
+      file: path8,
       opened,
       ...optional2 ? { optional: optional2 } : {},
       ...skipped ? { skipped } : {},
@@ -49245,19 +50020,47 @@ registerTool(
 registerTool(
   "list-native-tags",
   {
-    description: "Use when: listing actual native Notes tags used in one explicit account and folder.\nReturns: each native tag mapped to exact matching note IDs, plus completeness and per-note errors.\nDo not use when: searching textual #hashtags in note bodies (search-notes).\nSafety: read-only; requires Full Disk Access and discloses partial reads.",
+    description: "Use when: listing actual native Notes tags, either in one folder (pass folder) or as an account-wide inventory with note counts (omit folder; account then optionally narrows it, else every account is counted).\nReturns: folder mode maps each tag to exact matching note IDs, plus completeness and per-note errors; inventory mode returns each tag with noteCount and per-account counts, sorted by count.\nDo not use when: searching textual #hashtags in note bodies (search-notes).\nSafety: read-only; requires Full Disk Access and discloses partial reads.",
     inputSchema: {
-      account: external_exports.string().min(1).max(MAX.ACCOUNT),
-      folder: external_exports.string().min(1).max(MAX.FOLDER)
+      account: external_exports.string().min(1).max(MAX.ACCOUNT).optional().describe(
+        "Account name (exact or unique prefix). Folder mode: defaults to Notes.app's default account. Inventory mode: omit to count every account."
+      ),
+      folder: external_exports.string().min(1).max(MAX.FOLDER).optional().describe("Folder to list tags in. Omit for the account-wide inventory with counts.")
     },
     outputSchema: {
       tags: external_exports.record(external_exports.array(external_exports.string())).optional(),
       complete: external_exports.boolean().optional(),
-      errors: external_exports.record(external_exports.string()).optional()
+      errors: external_exports.record(external_exports.string()).optional(),
+      inventory: external_exports.array(
+        external_exports.object({
+          tag: external_exports.string(),
+          noteCount: external_exports.number(),
+          accounts: external_exports.record(external_exports.number()),
+          spellings: external_exports.array(external_exports.string()).optional()
+        }).passthrough()
+      ).optional(),
+      tagCount: external_exports.number().optional(),
+      unverifiedNotes: external_exports.number().optional(),
+      account: external_exports.string().optional()
     },
     annotations: { readOnlyHint: true }
   },
   withErrorHandling(({ account, folder }) => {
+    if (!folder) {
+      const result = nativeTagInventory({ account });
+      const scope2 = result.account ? ` in ${result.account}` : " across all accounts";
+      const lines = result.inventory.map(
+        (entry) => `  - ${entry.tag}: ${entry.noteCount} note${entry.noteCount === 1 ? "" : "s"}`
+      );
+      const partial2 = result.complete ? "" : `
+
+${result.unverifiedNotes} note(s) could not be checked against their body (locked or unreadable) and were counted from tag objects alone.`;
+      return successResponse(
+        `${result.tagCount} native tag${result.tagCount === 1 ? "" : "s"}${scope2}` + (lines.length ? `:
+${lines.join("\n")}` : ".") + partial2,
+        result
+      );
+    }
     const tags = {};
     const errors = {};
     for (const note of notesManager.listNoteRefs(account, folder)) {
@@ -50372,6 +51175,88 @@ registerTool(
     });
   }, "Error saving attachment")
 );
+function drawingView(noteId3, d) {
+  const { pk, raster, ...rest } = d;
+  return {
+    attachmentId: attachmentCoreDataId(noteId3, pk),
+    ...rest,
+    raster: raster ? { source: raster.source, format: raster.format, width: raster.width, height: raster.height } : null
+  };
+}
+registerTool(
+  "list-paper-attachments",
+  {
+    description: "Use when: finding the Paper drawings (com.apple.paper) and classic drawings in one note, and whether Notes has a rendered image of each.\nReturns: per drawing its attachmentId, identifier, uti, kind (paper or drawing), handwritingSummary (Notes' recognized handwriting text, or null), bundlePresent, fallbackImagePath, previewPath, and raster {source, format, width, height} (the validated image export-paper-image would copy, or null).\nDo not use when: you want every attachment (list-attachments) or the image file itself (export-paper-image).\nSafety: read-only; reads NoteStore and the Notes data folder without opening Notes.app and requires Full Disk Access. Strokes are not decoded: Notes' Paper bundle has no public reader, so the raster is Notes' own rendering.",
+    inputSchema: { id: noteIdInput },
+    outputSchema: {
+      attachments: external_exports.array(external_exports.object({}).passthrough()).optional(),
+      count: external_exports.number().optional()
+    },
+    annotations: { readOnlyHint: true }
+  },
+  withErrorHandling(({ id: id2 }) => {
+    const drawings = notesManager.listPaperAttachmentsById(id2).map((d) => drawingView(id2, d));
+    if (drawings.length === 0) {
+      return successResponse("This note has no Paper or drawing attachments.", {
+        attachments: [],
+        count: 0
+      });
+    }
+    const lines = drawings.map(
+      (d) => `  - ${d.kind} ${d.attachmentId}: ${d.raster ? `${d.raster.format.toUpperCase()} ${d.raster.width}x${d.raster.height} (${d.raster.source})` : "no rendered image on disk"}${d.handwritingSummary ? "; handwriting text stored" : ""}`
+    );
+    return successResponse(
+      `Found ${drawings.length} Paper or drawing attachment(s):
+${lines.join("\n")}`,
+      { attachments: drawings, count: drawings.length }
+    );
+  }, "Error listing Paper attachments")
+);
+registerTool(
+  "export-paper-image",
+  {
+    description: "Use when: saving Notes' rendered image of a Paper drawing or classic drawing to a file.\nReturns: savedPath, format (png or jpeg), width, height, bytes, source (fallback: Notes' full rendering; preview: its largest thumbnail, used only when no full rendering exists), and the drawing's attachmentId and handwritingSummary.\nDo not use when: the attachment is a photo or file (save-attachment or export-attachments).\nSafety: writes one new file; savePath must be absolute, under the home directory, a temp dir, or /Volumes, outside the Notes data folder, must not exist yet, and must end in the image's extension (.png, or .jpg/.jpeg). The image header is validated before and after copying. Pass attachmentId (from list-paper-attachments) when the note has more than one drawing. Requires Full Disk Access; Notes.app is not opened.",
+    inputSchema: {
+      noteId: noteIdInput,
+      savePath: external_exports.string().min(1, "savePath is required").max(MAX.SAVE_PATH).describe(
+        "Absolute path for the new image file (.png, or .jpg/.jpeg for a JPEG rendering)"
+      ),
+      attachmentId: external_exports.string().max(MAX.ATTACHMENT_ID).optional().describe(
+        "Drawing to export (attachmentId or identifier from list-paper-attachments); required when the note has more than one"
+      )
+    },
+    outputSchema: {
+      savedPath: external_exports.string().optional(),
+      format: external_exports.enum(["png", "jpeg"]).optional(),
+      width: external_exports.number().optional(),
+      height: external_exports.number().optional(),
+      bytes: external_exports.number().optional(),
+      source: external_exports.enum(["fallback", "preview"]).optional(),
+      attachmentId: external_exports.string().optional(),
+      identifier: external_exports.string().optional(),
+      kind: external_exports.enum(["paper", "drawing"]).optional(),
+      handwritingSummary: external_exports.string().nullable().optional()
+    }
+  },
+  withErrorHandling(({ noteId: noteId3, savePath, attachmentId }) => {
+    const r = notesManager.exportPaperImageById(noteId3, savePath, attachmentId);
+    return successResponse(
+      `Saved ${r.format.toUpperCase()} ${r.width}x${r.height} (${r.bytes} bytes, ${r.source === "fallback" ? "Notes' full rendering" : "largest preview"}) to ${r.savedPath}`,
+      {
+        savedPath: r.savedPath,
+        format: r.format,
+        width: r.width,
+        height: r.height,
+        bytes: r.bytes,
+        source: r.source,
+        attachmentId: attachmentCoreDataId(noteId3, r.drawing.pk),
+        identifier: r.drawing.identifier,
+        kind: r.drawing.kind,
+        handwritingSummary: r.drawing.handwritingSummary
+      }
+    );
+  }, "Error exporting Paper image")
+);
 registerTool(
   "export-attachments",
   {
@@ -50697,6 +51582,57 @@ registerTool(
     return successResponse(summary, metadata);
   }, "Error reading note metadata")
 );
+var SPECIAL_KIND_LABEL = {
+  pinned: "pinned notes",
+  "quick-notes": "Quick Notes",
+  "recently-deleted": "notes in Recently Deleted",
+  locked: "password-protected notes"
+};
+registerTool(
+  "list-special-notes",
+  {
+    description: "Use when: listing pinned notes, Quick Notes, notes in Recently Deleted, or password-protected (locked) notes \u2014 sets AppleScript cannot enumerate.\nReturns: metadata rows newest first (id, identifier, title, folder path, account, created, modified, and pinned/locked/quickNote/inRecentlyDeleted flags; snippet except for locked notes; passwordHint for kind locked), plus total before limit. supported is false when this macOS version's database cannot answer that kind.\nDo not use when: you need note content (get-note-content) or a folder listing (list-notes).\nNote: reads the NoteStore SQLite database read-only and requires Full Disk Access. Pinned and Quick Notes listings cover notes in folders outside Recently Deleted; the locked listing includes trashed and folderless locked notes, flagged as such. Never reads locked note bodies.",
+    inputSchema: {
+      kind: external_exports.enum(["pinned", "quick-notes", "recently-deleted", "locked"]).describe("Which set of notes to list"),
+      account: external_exports.string().min(1).max(MAX.ACCOUNT).optional().describe("Only this account (exact or unique-prefix name). Omit for every account."),
+      limit: external_exports.number().int().min(1).max(SPECIAL_LIMIT.MAX).optional().describe(`Maximum notes to return (default ${SPECIAL_LIMIT.DEFAULT})`)
+    },
+    outputSchema: {
+      kind: external_exports.string().optional(),
+      notes: external_exports.array(external_exports.object({}).passthrough()).optional(),
+      count: external_exports.number().optional(),
+      total: external_exports.number().optional(),
+      limit: external_exports.number().optional(),
+      supported: external_exports.boolean().optional(),
+      account: external_exports.string().optional()
+    },
+    annotations: { readOnlyHint: true }
+  },
+  withErrorHandling(({ kind, account, limit }) => {
+    const result = listSpecialNotes({ kind, account, limit });
+    const label = SPECIAL_KIND_LABEL[kind];
+    const structured = result;
+    if (!result.supported) {
+      return successResponse(
+        `This macOS version's Notes database does not record ${label}.`,
+        structured
+      );
+    }
+    const scope2 = result.account ? ` in ${result.account}` : "";
+    if (result.count === 0) return successResponse(`No ${label}${scope2}.`, structured);
+    const lines = result.notes.map(
+      (row) => `  - ${row.title ?? "(untitled)"}${row.folder ? ` (${row.folder})` : ""} [id: ${row.id}]`
+    );
+    const more = result.total > result.count ? `
+
+Showing ${result.count} of ${result.total}; pass a higher limit to see more.` : "";
+    return successResponse(
+      `Found ${result.total} ${label}${scope2}:
+${lines.join("\n")}${more}`,
+      structured
+    );
+  }, "Error listing notes")
+);
 registerResourcesAndPrompts(server, notesManager);
 process.on("uncaughtException", (err) => {
   if (err?.code === "EPIPE") process.exit(0);