apple-notes-mcp 2.9.10 → 2.9.12

package/build/index.js

@@ -24465,14 +24465,14 @@ var require_turndown_cjs = __commonJS({
         } else if (node.nodeType === 1) {
           replacement = replacementForNode.call(self, node);
         }
-        return join27(output, replacement);
+        return join28(output, replacement);
       }, "");
     }
     function postProcess(output) {
       var self = this;
       this.rules.forEach(function(rule) {
         if (typeof rule.append === "function") {
-          output = join27(output, rule.append(self.options));
+          output = join28(output, rule.append(self.options));
         }
       });
       return output.replace(/^[\t\r\n]+/, "").replace(/[\t\r\n\s]+$/, "");
@@ -24484,7 +24484,7 @@ var require_turndown_cjs = __commonJS({
       if (whitespace.leading || whitespace.trailing) content = content.trim();
       return whitespace.leading + rule.replacement(content, node, this.options) + whitespace.trailing;
     }
-    function join27(output, replacement) {
+    function join28(output, replacement) {
       var s1 = trimTrailingNewlines(output);
       var s2 = trimLeadingNewlines(replacement);
       var nls = Math.max(output.length - s1.length, replacement.length - s2.length);
@@ -38983,6 +38983,7 @@ var StdioServerTransport = class {
 
 // src/utils/applescript.ts
 import { execFileSync } from "child_process";
+import { constants as bufferConstants } from "node:buffer";
 
 // src/utils/docsUrls.ts
 var FULL_DISK_ACCESS_GUIDE_URL = "https://github.com/sweetrb/apple-notes-mcp/blob/main/docs/FULL-DISK-ACCESS.md";
@@ -39020,6 +39021,21 @@ function envPositiveNumber(name) {
 function getMaxBuffer() {
   return envPositiveNumber("APPLE_NOTES_MCP_MAX_BUFFER") ?? DEFAULT_MAX_BUFFER_BYTES;
 }
+var MAX_OUTPUT_BYTES = bufferConstants.MAX_STRING_LENGTH;
+var NOTE_BODY_MAX_BUFFER_BYTES = Math.min(512 * 1024 * 1024, MAX_OUTPUT_BYTES);
+function noteBodyMaxBuffer() {
+  return Math.min(Math.max(getMaxBuffer(), NOTE_BODY_MAX_BUFFER_BYTES), MAX_OUTPUT_BYTES);
+}
+function isOutputOverflowError(error2) {
+  const code = error2 instanceof Error ? error2.code : void 0;
+  return code === "ENOBUFS" || code === "ERR_STRING_TOO_LONG";
+}
+function outputOverflowMessage(maxBufferBytes) {
+  const mib = 1024 * 1024;
+  const limit = maxBufferBytes >= mib ? `${Math.round(maxBufferBytes / mib)} MB` : `${maxBufferBytes} bytes`;
+  const remedy = maxBufferBytes >= MAX_OUTPUT_BYTES ? "That is the longest string Node.js can hold, so raising APPLE_NOTES_MCP_MAX_BUFFER will not help; remove or shrink the large image or attachment in Notes.app." : "Raise APPLE_NOTES_MCP_MAX_BUFFER (in bytes) to allow more.";
+  return `Notes.app returned more than ${limit} of output, the most this server accepts from one AppleScript call. A note whose body carries large inline images or attachments can reach this. ${remedy}`;
+}
 var SCRIPT_TIMEOUT_HEADROOM_MS = 5e3;
 var MIN_ATTEMPT_BUDGET_MS = 1e3;
 function wrapWithTimeout(script, processTimeoutMs) {
@@ -39165,6 +39181,7 @@ function executeAppleScript(script, options = {}) {
   const timeoutMs = options.timeoutMs ?? callTimeoutMs() ?? envPositiveNumber("APPLE_NOTES_MCP_TIMEOUT_MS") ?? DEFAULT_TIMEOUT_MS;
   const maxRetries = options.maxRetries ?? envPositiveNumber("APPLE_NOTES_MCP_MAX_RETRIES") ?? DEFAULT_MAX_RETRIES;
   const retryDelayMs = options.retryDelayMs ?? envPositiveNumber("APPLE_NOTES_MCP_RETRY_DELAY_MS") ?? DEFAULT_RETRY_DELAY_MS;
+  const maxBufferBytes = Math.min(options.maxBufferBytes ?? getMaxBuffer(), MAX_OUTPUT_BYTES);
   if (!script || !script.trim()) {
     return {
       success: false,
@@ -39195,7 +39212,7 @@ function executeAppleScript(script, options = {}) {
         killSignal: "SIGKILL",
         // Raise the output cap above Node's 1 MB default so large exports /
         // long notes aren't truncated into an ENOBUFS failure. (#16)
-        maxBuffer: getMaxBuffer()
+        maxBuffer: maxBufferBytes
       });
       const duration3 = Date.now() - attemptStart;
       debugLog("AppleScript succeeded", {
@@ -39213,7 +39230,9 @@ function executeAppleScript(script, options = {}) {
       let errorMessage;
       let isTimeout = false;
       let rawError;
-      if (isTimeoutError(error2)) {
+      if (isOutputOverflowError(error2)) {
+        errorMessage = outputOverflowMessage(maxBufferBytes);
+      } else if (isTimeoutError(error2)) {
         isTimeout = true;
         const timeoutSecs = Math.round(timeoutMs / 1e3);
         errorMessage = `Operation timed out after ${timeoutSecs} seconds. Notes.app may be unresponsive or the operation involves too many notes.`;
@@ -42130,8 +42149,8 @@ function scopeConflictMessage(reason) {
 
 // src/services/appleNotesManager.ts
 var import_turndown = __toESM(require_turndown_cjs(), 1);
-import { existsSync as existsSync5 } from "fs";
-import { homedir as homedir8 } from "os";
+import { existsSync as existsSync5, mkdtempSync as mkdtempSync2, rmSync as rmSync2, writeFileSync } from "fs";
+import { homedir as homedir8, tmpdir as tmpdir2 } from "os";
 import { join as join9 } from "path";
 var FIELD_SEP = "";
 var RECORD_SEP = "";
@@ -42442,6 +42461,34 @@ function buildAppLevelScript(command) {
     end tell
   `;
 }
+var INLINE_EXPECTED_BODY_LIMIT = MAX_CONTENT_LENGTH;
+var ExpectedBodies = class {
+  directory;
+  files = 0;
+  /**
+   * Returns AppleScript `setup` to run before the comparison (empty for a
+   * literal) and the `operand` to compare the note's body against.
+   * `variable` names the AppleScript variable a file-backed body is read into.
+   */
+  bind(body, variable) {
+    if (body.length <= INLINE_EXPECTED_BODY_LIMIT) {
+      return { setup: "", operand: `"${escapeHtmlForAppleScript(body)}"` };
+    }
+    this.directory ??= mkdtempSync2(join9(tmpdir2(), "apple-notes-expected-body-"));
+    const file = join9(this.directory, `body-${this.files++}.html`);
+    writeFileSync(file, body, { encoding: "utf8", mode: 384 });
+    return {
+      setup: `
+      tell current application to set ${variable} to read (POSIX file "${escapePlainStringForAppleScript(file)}") as \xABclass utf8\xBB`,
+      operand: variable
+    };
+  }
+  /** Removes any temporary files. Safe to call more than once. */
+  cleanup() {
+    if (this.directory) rmSync2(this.directory, { recursive: true, force: true });
+    this.directory = void 0;
+  }
+};
 function folderDeleteFactsScript(id2) {
   if (!FOLDER_ID_PATTERN.test(id2)) throw new Error("An exact folder ID is required");
   return `
@@ -42803,7 +42850,7 @@ var AppleNotesManager = class {
     const safeTitle = escapePlainStringForAppleScript(title);
     const getCommand = `get body of note "${safeTitle}"`;
     const script = buildAccountScopedScript({ account: targetAccount }, getCommand);
-    const result = executeAppleScript(script);
+    const result = executeAppleScript(script, { maxBufferBytes: noteBodyMaxBuffer() });
     if (!result.success) {
       throwIfAccountResolutionFailed(result.error);
       console.error(`Failed to get content of note "${title}":`, result.error);
@@ -42840,7 +42887,7 @@ var AppleNotesManager = class {
     const safeId = sanitizeId(id2);
     const getCommand = `get body of note id "${safeId}"`;
     const script = buildAppLevelScript(getCommand);
-    const result = executeAppleScript(script);
+    const result = executeAppleScript(script, { maxBufferBytes: noteBodyMaxBuffer() });
     if (!result.success) {
       console.error(`Failed to get content of note with ID "${id2}":`, result.error);
       return { body: "", error: result.error };
@@ -43063,25 +43110,25 @@ var AppleNotesManager = class {
    */
   deleteNoteByIdIfUnchanged(id2, expectedBody, scope2, guards = []) {
     const safeId = sanitizeNoteId(id2);
-    validateLength(expectedBody, MAX_CONTENT_LENGTH, "Expected note content");
-    const safeExpectedBody = escapeHtmlForAppleScript(expectedBody);
     const trashIds = trashFolderIdList();
-    const guardChecks = guards.map((guard, index) => {
-      const safeGuardId = sanitizeNoteId(guard.id);
-      const ref = `__guardRef${index}`;
-      const folderVar = `__guardFolder${index}`;
-      const inactive = (reason) => `return "SAFETY_GUARD_INACTIVE:${index}:${reason}"`;
-      let bodyCheck = "";
-      if (guard.expectedBody !== void 0) {
-        validateLength(guard.expectedBody, MAX_CONTENT_LENGTH, "Expected guard note content");
-        const safeGuardBody = escapeHtmlForAppleScript(guard.expectedBody);
-        bodyCheck = `
+    const bodies = new ExpectedBodies();
+    let result;
+    try {
+      const guardChecks = guards.map((guard, index) => {
+        const safeGuardId = sanitizeNoteId(guard.id);
+        const ref = `__guardRef${index}`;
+        const folderVar = `__guardFolder${index}`;
+        const inactive = (reason) => `return "SAFETY_GUARD_INACTIVE:${index}:${reason}"`;
+        let bodyCheck = "";
+        if (guard.expectedBody !== void 0) {
+          const expected2 = bodies.bind(guard.expectedBody, `__expectedGuardBody${index}`);
+          bodyCheck = `${expected2.setup}
       set __guardBody to body of ${ref}
       considering case
-        if __guardBody is not "${safeGuardBody}" and __guardBody is not "${safeGuardBody}" & linefeed then return "SAFETY_GUARD_CONFLICT:${index}"
+        if __guardBody is not ${expected2.operand} and __guardBody is not ${expected2.operand} & linefeed then return "SAFETY_GUARD_CONFLICT:${index}"
       end considering`;
-      }
-      return `
+        }
+        return `
       if not (exists note id "${safeGuardId}") then ${inactive("missing")}
       set ${ref} to note id "${safeGuardId}"
       if password protected of ${ref} then ${inactive("locked")}
@@ -43091,18 +43138,19 @@ var AppleNotesManager = class {
       end try
       if ${folderVar} is missing value then ${inactive("folder unknown")}${inRecentlyDeletedScript(folderVar, "__guardInTrash", trashIds)}
       if __guardInTrash then ${inactive("in Recently Deleted")}${bodyCheck}`;
-    }).join("");
-    const script = buildAppLevelScript(`
+      }).join("");
+      const expected = bodies.bind(expectedBody, "__expectedBody");
+      const script = buildAppLevelScript(`
       set noteRef to note id "${safeId}"${buildScopeGuardScript("noteRef", scope2)}
       set originalFolder to missing value
       try
         set originalFolder to container of noteRef
       end try
       if originalFolder is missing value then return "SAFETY_CONTAINER_UNKNOWN"${inRecentlyDeletedScript("originalFolder", "__inTrash", trashIds)}
-      if __inTrash then return "SAFETY_IN_RECENTLY_DELETED"${guardChecks}
+      if __inTrash then return "SAFETY_IN_RECENTLY_DELETED"${guardChecks}${expected.setup}
       set currentBody to body of noteRef
       considering case
-        if currentBody is not "${safeExpectedBody}" and currentBody is not "${safeExpectedBody}" & linefeed then return "SAFETY_CONFLICT"
+        if currentBody is not ${expected.operand} and currentBody is not ${expected.operand} & linefeed then return "SAFETY_CONFLICT"
         delete noteRef
       end considering
       try
@@ -43110,7 +43158,10 @@ var AppleNotesManager = class {
       end try
       return "SAFETY_DELETED"
     `);
-    const result = executeMutationAppleScript(script);
+      result = executeMutationAppleScript(script);
+    } finally {
+      bodies.cleanup();
+    }
     if (!result.success) {
       console.error(`Failed guarded delete for note ID "${id2}":`, result.error);
       return { status: "failed" };
@@ -47592,8 +47643,8 @@ import { spawnSync } from "child_process";
 
 // src/services/nativeTags.ts
 import { execFileSync as execFileSync15 } from "node:child_process";
-import { mkdtempSync as mkdtempSync2, writeFileSync, rmSync as rmSync2 } from "node:fs";
-import { tmpdir as tmpdir2 } from "node:os";
+import { mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync2, rmSync as rmSync3 } from "node:fs";
+import { tmpdir as tmpdir3 } from "node:os";
 import { join as join16 } from "node:path";
 
 // src/services/shortcutConsent.ts
@@ -47696,10 +47747,10 @@ function runNativeTagsShortcut(input) {
   const status = nativeTagsStatus();
   if (!status.installed)
     throw new Error(`Import the supplied ${status.shortcut}.shortcut in Shortcuts first`);
-  const directory = mkdtempSync2(join16(tmpdir2(), "apple-notes-native-tags-"));
+  const directory = mkdtempSync3(join16(tmpdir3(), "apple-notes-native-tags-"));
   try {
     const path10 = join16(directory, "request.json");
-    writeFileSync(path10, JSON.stringify(input), { mode: 384 });
+    writeFileSync2(path10, JSON.stringify(input), { mode: 384 });
     execFileSync15("/usr/bin/shortcuts", ["run", status.identifier, "--input-path", path10], {
       encoding: "utf8",
       timeout: 6e4,
@@ -47714,14 +47765,14 @@ function runNativeTagsShortcut(input) {
       { shortcut: status.shortcut, code: error2?.code }
     );
   } finally {
-    rmSync2(directory, { recursive: true, force: true });
+    rmSync3(directory, { recursive: true, force: true });
   }
 }
 
 // src/services/backgroundNotes.ts
 import { execFileSync as execFileSync16 } from "node:child_process";
-import { mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync2, rmSync as rmSync3 } from "node:fs";
-import { tmpdir as tmpdir3 } from "node:os";
+import { mkdtempSync as mkdtempSync4, writeFileSync as writeFileSync3, rmSync as rmSync4 } from "node:fs";
+import { tmpdir as tmpdir4 } from "node:os";
 import { join as join17 } from "node:path";
 
 // src/utils/appendMarkdown.ts
@@ -48047,10 +48098,10 @@ function runBackgroundShortcut(input, status = backgroundStatus()) {
     throw new Error(
       `Install the supplied "${status.shortcut}" Shortcut once; Shortcuts must list it exactly once`
     );
-  const directory = mkdtempSync3(join17(tmpdir3(), "apple-notes-background-"));
+  const directory = mkdtempSync4(join17(tmpdir4(), "apple-notes-background-"));
   try {
     const file = join17(directory, "request.json");
-    writeFileSync2(
+    writeFileSync3(
       file,
       JSON.stringify({
         operation: "",
@@ -48079,7 +48130,7 @@ function runBackgroundShortcut(input, status = backgroundStatus()) {
       throw Object.assign(error2, { shortcut: status.shortcut });
     }
   } finally {
-    rmSync3(directory, { recursive: true, force: true });
+    rmSync4(directory, { recursive: true, force: true });
   }
 }
 function backgroundDependencies(manager) {
@@ -49607,9 +49658,12 @@ function readNoteStructure(id2, { dbPath: dbPath2 = NOTES_DB_PATH7, includeText
 
 // src/utils/bodyReadFailure.ts
 var LARGE_ATTACHMENT_BYTES = 5 * 1024 * 1024;
+var OUTPUT_OVERFLOW = /Notes\.app returned more than [\d.]+ (?:MB|bytes) of output/;
 function classifyBodyReadError(error2) {
   if (!error2) return "other";
-  if (/ENOBUFS|maxBuffer/i.test(error2)) return "buffer";
+  if (OUTPUT_OVERFLOW.test(error2) || /ENOBUFS|maxBuffer|ERR_STRING_TOO_LONG/i.test(error2)) {
+    return "buffer";
+  }
   if (/timed out|timeout|-1712/i.test(error2)) return "timeout";
   return "other";
 }
@@ -49627,10 +49681,17 @@ function describeBodyReadFailure(title, error2, attachments) {
   const kind = classifyBodyReadError(error2);
   if (kind === "other") return base;
   const large = attachments ? largeAttachments(attachments) : [];
-  const cause = large.length > 0 ? `The note holds ${large.length === 1 ? "a large attachment" : "large attachments"} (${large.map((a) => `${a.name}, ${formatBytes2(a.bytes)}`).join(
-    "; "
-  )}). Notes.app returns images inside the note body as base64, so a large image makes the body too big to read in time.` : "Notes.app returns images inside the note body as base64, so a note with a very large image can take longer to read than the timeout allows.";
-  const remedy = kind === "buffer" ? "Raise APPLE_NOTES_MCP_MAX_BUFFER (bytes) and retry, or remove the attachment in Notes.app." : "Retry with a longer timeoutSeconds (up to 120) or raise APPLE_NOTES_MCP_TIMEOUT_MS. If it still fails, delete or shrink the attachment in Notes.app; delete-note needs a successful read to verify the note first.";
+  const listed = large.map((a) => `${a.name}, ${formatBytes2(a.bytes)}`).join("; ");
+  const holds = large.length > 0 ? `The note holds ${large.length === 1 ? "a large attachment" : "large attachments"} (${listed}). ` : "";
+  if (kind === "buffer") {
+    const cause2 = `${holds}Notes.app returns images inside the note body as base64, so a large image makes the body bigger than this server can read in one call.`;
+    const remedy2 = "Retrying, or a longer timeoutSeconds, will not help. Remove or shrink the attachment in Notes.app, or delete the note there; delete-note needs a successful read to verify the note first.";
+    return `${base}
+
+${cause2} ${remedy2}`;
+  }
+  const cause = large.length > 0 ? `${holds}Notes.app returns images inside the note body as base64, so a large image makes the body too big to read in time.` : "Notes.app returns images inside the note body as base64, so a note with a very large image can take longer to read than the timeout allows.";
+  const remedy = "Retry with a longer timeoutSeconds (up to 120) or raise APPLE_NOTES_MCP_TIMEOUT_MS. If it still fails, delete or shrink the attachment in Notes.app; delete-note needs a successful read to verify the note first.";
   return `${base}
 
 ${cause} ${remedy}`;
@@ -51386,13 +51447,13 @@ import {
   closeSync as closeSync5,
   constants as constants5,
   fstatSync as fstatSync5,
-  mkdtempSync as mkdtempSync4,
+  mkdtempSync as mkdtempSync5,
   openSync as openSync5,
   readFileSync as readFileSync3,
-  rmSync as rmSync4,
-  writeFileSync as writeFileSync3
+  rmSync as rmSync5,
+  writeFileSync as writeFileSync4
 } from "node:fs";
-import { tmpdir as tmpdir4 } from "node:os";
+import { tmpdir as tmpdir5 } from "node:os";
 import { basename as basename5, extname as extname5, isAbsolute as isAbsolute3, join as join22 } from "node:path";
 var noteId = exactIdInput(
   "ICNote",
@@ -51633,10 +51694,10 @@ function attachFile(manager, args) {
   const bytes = localAttachment(path10);
   const beforeAttachments = manager.listAttachmentsById(id2);
   const beforeStored = storedAttachmentIds(manager, id2);
-  const directory = mkdtempSync4(join22(tmpdir4(), "notes-attachment-add-"));
+  const directory = mkdtempSync5(join22(tmpdir5(), "notes-attachment-add-"));
   const temporaryFile = join22(directory, name);
   try {
-    writeFileSync3(temporaryFile, bytes, { mode: 384 });
+    writeFileSync4(temporaryFile, bytes, { mode: 384 });
     if (readSnapshot(manager, id2).hash !== before.hash) throw new Error("Note revision changed");
     let returnedId;
     let transportUncertain = false;
@@ -51696,7 +51757,7 @@ function attachFile(manager, args) {
       } : {}
     };
   } finally {
-    rmSync4(directory, { recursive: true, force: true });
+    rmSync5(directory, { recursive: true, force: true });
   }
 }
 
@@ -54680,17 +54741,17 @@ function formatShortcutSetup(report) {
 }
 
 // src/services/publicHelper.ts
-import { spawnSync as spawnSync3 } from "node:child_process";
+import { spawn, spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import {
   chmodSync,
   existsSync as existsSync14,
   mkdirSync as mkdirSync6,
-  mkdtempSync as mkdtempSync5,
+  mkdtempSync as mkdtempSync6,
   readFileSync as readFileSync4,
   renameSync,
-  rmSync as rmSync5,
-  writeFileSync as writeFileSync4
+  rmSync as rmSync6,
+  writeFileSync as writeFileSync5
 } from "node:fs";
 import { homedir as homedir19, release as release3 } from "node:os";
 import { dirname as dirname8, join as join24, resolve as resolve5 } from "node:path";
@@ -54702,9 +54763,13 @@ var PUBLIC_HELPER_BINARY = "apple-notes-public-helper";
 var PUBLIC_HELPER_SOURCE = "native/public-helper/apple-notes-public-helper.swift";
 var PUBLIC_HELPER_MANIFEST = "manifest.json";
 var PUBLIC_HELPER_SETUP_COMMAND = "apple-notes-mcp setup --public-helper";
-var PUBLIC_HELPER_ACTIONS = /* @__PURE__ */ new Set(["hello", "decode_drawing"]);
+var PUBLIC_HELPER_ACTIONS = /* @__PURE__ */ new Set([
+  "hello",
+  "decode_drawing",
+  "transcribe"
+]);
 var DEFAULT_TIMEOUT_MS2 = 3e4;
-var MAX_OUTPUT_BYTES = 256 * 1024 * 1024;
+var MAX_OUTPUT_BYTES2 = 256 * 1024 * 1024;
 var publicManifestSchema = external_exports.object({
   schemaVersion: external_exports.literal(1),
   protocolVersion: external_exports.number().int(),
@@ -54738,6 +54803,7 @@ function defaultPublicHelperDeps(overrides = {}) {
     exists: existsSync14,
     readFile: (path10) => readFileSync4(path10),
     spawn: spawnSync3,
+    spawnAsync: spawn,
     ...overrides
   };
 }
@@ -54802,10 +54868,14 @@ var UNAVAILABLE_CODES = /* @__PURE__ */ new Set([
   "helper_modified",
   "helper_manifest_invalid"
 ]);
+var ENVELOPE_CODES = {
+  invalid_request: "validation_error",
+  attachment_not_found: "not_found"
+};
 var PublicHelperError = class extends CodedError {
   constructor(code, message) {
     super(message, {
-      code: UNAVAILABLE_CODES.has(code) ? "unsupported" : "operation_failed",
+      code: UNAVAILABLE_CODES.has(code) ? "unsupported" : ENVELOPE_CODES[code] ?? "operation_failed",
       helperCode: code
     });
     this.code = code;
@@ -54821,25 +54891,13 @@ var publicHelloSchema = external_exports.object({
   actions: external_exports.array(external_exports.string())
 }).passthrough();
 function callPublicHelper(action, fields = {}, deps = defaultPublicHelperDeps(), options = {}) {
-  if (!PUBLIC_HELPER_ACTIONS.has(action))
-    throw new PublicHelperError(
-      "unknown_action",
-      `"${action}" is not an action the server sends to the public helper.`
-    );
-  let binaryPath = options.binaryPath;
-  if (!binaryPath) {
-    const install = inspectPublicHelper(deps);
-    if (!install.ready)
-      throw new PublicHelperError(install.reason ?? "helper_not_installed", install.detail ?? "");
-    binaryPath = install.binaryPath;
-  }
-  const timeout = Number.parseInt(deps.env[PUBLIC_HELPER_TIMEOUT_ENV] || "", 10) || options.timeoutMs || DEFAULT_TIMEOUT_MS2;
+  const { binaryPath, timeout, input } = prepareCall(action, fields, deps, options);
   const result = deps.spawn(binaryPath, [], {
-    input: JSON.stringify({ protocol: PUBLIC_HELPER_PROTOCOL, action, ...fields }),
+    input,
     encoding: "utf8",
     timeout,
     killSignal: "SIGKILL",
-    maxBuffer: MAX_OUTPUT_BYTES
+    maxBuffer: MAX_OUTPUT_BYTES2
   });
   const errno = result.error?.code;
   if (errno === "ETIMEDOUT" || result.signal && result.status === null)
@@ -54849,24 +54907,100 @@ function callPublicHelper(action, fields = {}, deps = defaultPublicHelperDeps(),
       "helper_unreachable",
       `Could not run the helper: ${result.error.message}`
     );
+  return parseHelperOutput(result.status, String(result.stdout ?? ""));
+}
+async function callPublicHelperAsync(action, fields = {}, deps = defaultPublicHelperDeps(), options = {}) {
+  const { binaryPath, timeout, input } = prepareCall(action, fields, deps, options);
+  const { signal } = options;
+  const aborted2 = () => new PublicHelperError("aborted", "The request was cancelled; the helper was stopped.");
+  if (signal?.aborted) throw aborted2();
+  return new Promise((resolvePromise, reject) => {
+    const child = (deps.spawnAsync ?? spawn)(binaryPath, [], {
+      stdio: ["pipe", "pipe", "ignore"]
+    });
+    const chunks = [];
+    let size = 0;
+    let failure = null;
+    const stop = (error2) => {
+      failure ??= error2;
+      child.kill("SIGKILL");
+    };
+    const timer = setTimeout(
+      () => stop(new PublicHelperError("timeout", `The helper did not answer within ${timeout} ms.`)),
+      timeout
+    );
+    const onAbort = () => stop(aborted2());
+    signal?.addEventListener("abort", onAbort, { once: true });
+    const settle = () => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+    };
+    child.stdout?.on("data", (chunk) => {
+      size += chunk.length;
+      if (size > MAX_OUTPUT_BYTES2)
+        stop(new PublicHelperError("invalid_response", "The helper response is too large."));
+      else chunks.push(chunk);
+    });
+    child.on("error", (error2) => {
+      settle();
+      reject(
+        failure ?? new PublicHelperError("helper_unreachable", `Could not run the helper: ${error2.message}`)
+      );
+    });
+    child.on("close", (status, exitSignal) => {
+      settle();
+      if (failure) return reject(failure);
+      if (status === null && exitSignal)
+        return reject(
+          new PublicHelperError("helper_crashed", `The helper stopped on signal ${exitSignal}.`)
+        );
+      try {
+        resolvePromise(parseHelperOutput(status, Buffer.concat(chunks).toString("utf8")));
+      } catch (error2) {
+        reject(error2);
+      }
+    });
+    child.stdin?.on("error", () => {
+    });
+    child.stdin?.end(input);
+  });
+}
+function prepareCall(action, fields, deps, options) {
+  if (!PUBLIC_HELPER_ACTIONS.has(action))
+    throw new PublicHelperError(
+      "unknown_action",
+      `"${action}" is not an action the server sends to the public helper.`
+    );
+  let binaryPath = options.binaryPath;
+  if (!binaryPath) {
+    const install = inspectPublicHelper(deps);
+    if (!install.ready)
+      throw new PublicHelperError(install.reason ?? "helper_not_installed", install.detail ?? "");
+    binaryPath = install.binaryPath;
+  }
+  const timeout = options.timeoutMs || Number.parseInt(deps.env[PUBLIC_HELPER_TIMEOUT_ENV] || "", 10) || DEFAULT_TIMEOUT_MS2;
+  const input = JSON.stringify({ protocol: PUBLIC_HELPER_PROTOCOL, action, ...fields });
+  return { binaryPath, timeout, input };
+}
+function parseHelperOutput(status, stdout) {
   let parsed;
   try {
-    parsed = JSON.parse(String(result.stdout ?? "").trim());
+    parsed = JSON.parse(stdout.trim());
   } catch {
     throw new PublicHelperError(
       "invalid_response",
-      `The helper exited with status ${result.status} and no JSON response.`
+      `The helper exited with status ${status} and no JSON response.`
     );
   }
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
     throw new PublicHelperError("invalid_response", "The helper response is not a JSON object.");
   const object3 = parsed;
-  if (result.status !== 0 || object3.status !== "ok") {
+  if (status !== 0 || object3.status !== "ok") {
     const error2 = errorSchema.safeParse(object3);
     if (!error2.success)
       throw new PublicHelperError(
         "invalid_response",
-        `The helper failed with an unrecognized response (exit ${result.status}).`
+        `The helper failed with an unrecognized response (exit ${status}).`
       );
     throw new PublicHelperError(error2.data.code, error2.data.message);
   }
@@ -54913,6 +55047,10 @@ function publicHelperCompileArguments(sourcePath, digestPath, plistPath, outputP
     "AppKit",
     "-framework",
     "PencilKit",
+    "-framework",
+    "AVFoundation",
+    "-framework",
+    "Speech",
     "-Xlinker",
     "-sectcreate",
     "-Xlinker",
@@ -54967,13 +55105,13 @@ function buildPublicHelper(checkOnly, deps = defaultPublicHelperBuildDeps()) {
   steps.push({ step: "find compiler", ok: true, detail: compiler });
   const installDir = publicHelperInstallDir(deps.env);
   mkdirSync6(installDir, { recursive: true, mode: 448 });
-  const staging = mkdtempSync5(join24(installDir, ".staging-"));
+  const staging = mkdtempSync6(join24(installDir, ".staging-"));
   try {
     const stagedBinary = join24(staging, PUBLIC_HELPER_BINARY);
     const digestPath = join24(staging, "source-digest.swift");
     const plistPath = join24(staging, "Info.plist");
-    writeFileSync4(digestPath, sourceDigestSwift(sourceSha), { mode: 384 });
-    writeFileSync4(plistPath, publicHelperInfoPlist(), { mode: 384 });
+    writeFileSync5(digestPath, sourceDigestSwift(sourceSha), { mode: 384 });
+    writeFileSync5(plistPath, publicHelperInfoPlist(), { mode: 384 });
     const compile = deps.spawn(
       "/usr/bin/xcrun",
       publicHelperCompileArguments(deps.sourcePath, digestPath, plistPath, stagedBinary),
@@ -55035,14 +55173,14 @@ function buildPublicHelper(checkOnly, deps = defaultPublicHelperBuildDeps()) {
     };
     chmodSync(stagedBinary, 448);
     renameSync(stagedBinary, join24(installDir, PUBLIC_HELPER_BINARY));
-    writeFileSync4(
+    writeFileSync5(
       join24(installDir, PUBLIC_HELPER_MANIFEST),
       JSON.stringify(manifest, null, 2) + "\n",
       { mode: 384 }
     );
     steps.push({ step: "install", ok: true, detail: installDir });
   } finally {
-    rmSync5(staging, { recursive: true, force: true });
+    rmSync6(staging, { recursive: true, force: true });
   }
   const installation = inspectPublicHelper(deps);
   steps.push({
@@ -55279,26 +55417,333 @@ function formatNoteDrawings(result) {
   return lines.join("\n");
 }
 
+// src/utils/noteAudio.ts
+import { readdirSync as readdirSync4, statSync as statSync4 } from "node:fs";
+import { join as join25 } from "node:path";
+var EXTRA_AUDIO_UTIS = [
+  "public.mp3",
+  "public.aiff-audio",
+  "public.aifc-audio",
+  "com.microsoft.waveform-audio"
+];
+function audioRowsSql(columns, generationColumn) {
+  const generation = generationColumn ? `m.${generationColumn}` : "NULL";
+  const media = (alias) => `json((SELECT json_object('identifier', m.ZIDENTIFIER, 'generation', ${generation}, 'filename', m.ZFILENAME) FROM ZICCLOUDSYNCINGOBJECT m WHERE m.Z_PK = ${alias}.ZMEDIA))`;
+  const live = (alias) => notTombstonedSql(columns, alias);
+  const utis = EXTRA_AUDIO_UTIS.map((u) => `'${u}'`).join(", ");
+  const accountCols = [...columns].filter((c) => /^ZACCOUNT\d*$/.test(c)).sort();
+  const account = accountCols.length ? `SELECT (SELECT acc.ZIDENTIFIER FROM ZICCLOUDSYNCINGOBJECT acc WHERE acc.Z_ENT = ${entity("ICAccount")} AND acc.Z_PK IN (${accountCols.map((c) => `n.${c}`).join(", ")}) LIMIT 1) FROM ZICCLOUDSYNCINGOBJECT n WHERE n.Z_PK = @pk;` : "SELECT NULL;";
+  return [
+    NOTE_STATE_SQL,
+    `SELECT json_group_array(json_object('pk', a.Z_PK, 'identifier', a.ZIDENTIFIER, 'uti', a.ZTYPEUTI, 'duration', a.ZDURATION, 'media', ${media("a")}, 'children', json((SELECT json_group_array(json_object('pk', c.Z_PK, 'identifier', c.ZIDENTIFIER, 'duration', c.ZDURATION, 'media', ${media("c")})) FROM (SELECT * FROM ZICCLOUDSYNCINGOBJECT k WHERE k.ZPARENTATTACHMENT = a.Z_PK AND ${live("k")} ORDER BY k.Z_PK) c)))) FROM (SELECT * FROM ZICCLOUDSYNCINGOBJECT t WHERE t.ZNOTE = @pk AND t.ZPARENTATTACHMENT IS NULL AND ${live("t")} AND (t.ZTYPEUTI LIKE '%audio%' OR t.ZTYPEUTI IN (${utis})) ORDER BY t.Z_PK) a;`,
+    account
+  ].join("\n");
+}
+function accountDirsFor(containerDir, accountIdentifier) {
+  const own = resolveAccountDir(containerDir, accountIdentifier);
+  if (own) return [own];
+  let names;
+  try {
+    names = readdirSync4(join25(containerDir, "Accounts")).sort();
+  } catch {
+    return [];
+  }
+  return names.map((name) => safeComponent(name) ? resolveAccountDir(containerDir, name) : null).filter((dir) => dir !== null);
+}
+function resolveMediaPath(media, accountIdentifier = null, containerDir = NOTES_CONTAINER_DIR) {
+  const id2 = safeComponent(media?.identifier);
+  const filename = safeComponent(media?.filename);
+  if (!id2 || !filename) return null;
+  const generation = safeComponent(media?.generation);
+  for (const dir of accountDirsFor(containerDir, accountIdentifier)) {
+    const base = join25(dir, "Media", id2);
+    const candidates = generation ? [join25(base, generation, filename), join25(base, filename)] : [join25(base, filename)];
+    for (const candidate of candidates) {
+      const real = realInside(candidate, dir);
+      if (real && isFile2(real)) return real;
+    }
+  }
+  return null;
+}
+function isFile2(path10) {
+  try {
+    return statSync4(path10).isFile();
+  } catch {
+    return false;
+  }
+}
+var positive = (value) => typeof value === "number" && Number.isFinite(value) && value > 0 ? value : null;
+function readAudioAssets(noteId3, options = {}) {
+  const { store, pk } = parseNoteId2(noteId3);
+  const dbPath2 = options.dbPath ?? NOTES_DB_PATH7;
+  const columns = readColumns(dbPath2);
+  const missing = ["ZMEDIA", "ZPARENTATTACHMENT", "ZFILENAME"].filter((c) => !columns.has(c));
+  if (missing.length)
+    throw new NoteStoreError(
+      `This macOS version's Notes database lacks ${missing.join(", ")}; audio files cannot be located.`,
+      "schema"
+    );
+  const generation = columns.has("ZGENERATION1") ? "ZGENERATION1" : columns.has("ZGENERATION") ? "ZGENERATION" : null;
+  const [stateLine, rowsLine, accountLine] = queryNoteScoped(
+    audioRowsSql(columns, generation),
+    pk,
+    dbPath2
+  );
+  assertNoteReadable(stateLine, noteId3);
+  const rows = JSON.parse(rowsLine || "[]");
+  const account = accountLine?.trim() || null;
+  const attachmentId = (rowPk) => `x-coredata://${store}/ICAttachment/p${rowPk}`;
+  return rows.map((row) => {
+    const sources = row.children?.length ? row.children : [{ pk: row.pk, identifier: row.identifier, duration: row.duration, media: row.media }];
+    const takes = sources.map((take) => ({
+      attachmentId: attachmentId(take.pk),
+      identifier: take.identifier ?? "",
+      durationSeconds: positive(take.duration),
+      path: resolveMediaPath(take.media, account, options.containerDir)
+    }));
+    const total = takes.reduce((sum, t) => sum + (t.durationSeconds ?? 0), 0);
+    return {
+      pk: row.pk,
+      attachmentId: attachmentId(row.pk),
+      identifier: row.identifier ?? "",
+      typeUti: row.uti,
+      durationSeconds: positive(row.duration) ?? positive(total),
+      takes
+    };
+  });
+}
+function countWords2(text2) {
+  return text2.split(/\s+/u).filter((w) => /[\p{L}\p{N}]/u.test(w)).length;
+}
+
+// src/services/noteTranscription.ts
+var DEFAULT_TRANSCRIPTION_LOCALE = "en-US";
+var LOCALE_PATTERN = /^[A-Za-z]{2,3}(?:[-_][A-Za-z0-9]{2,8}){0,3}$/;
+var TRANSCRIBE_MAX_SECONDS = { default: 900, min: 30, max: 3600 };
+function takeDeadlineSeconds(durationSeconds) {
+  const duration3 = durationSeconds ?? 600;
+  return Math.min(1800, Math.max(60, Math.ceil(duration3 * 1.5) + 60));
+}
+var KILL_GRACE_MS = 3e4;
+var BUDGET_MARGIN_MS = 1e4;
+var MIN_TAKE_SECONDS = 5;
+var CALL_WIDE_CODES = /* @__PURE__ */ new Set([
+  "permission_required",
+  "asset_unavailable",
+  "unsupported_locale",
+  "speech_unavailable"
+]);
+var helperTranscriptSchema = external_exports.object({
+  status: external_exports.literal("ok"),
+  transcript: external_exports.string(),
+  complete: external_exports.boolean(),
+  stopReason: external_exports.string().optional(),
+  engine: external_exports.string().optional(),
+  durationSeconds: external_exports.number().optional()
+});
+async function transcribeTake(take, ctx) {
+  const base = {
+    attachmentId: take.attachmentId,
+    identifier: take.identifier,
+    status: "error",
+    ...take.durationSeconds !== null ? { durationSeconds: Math.round(take.durationSeconds) } : {}
+  };
+  const failed = (code, message) => ({
+    take: { ...base, code, message },
+    text: ""
+  });
+  if (!take.path)
+    return failed(
+      "asset_unavailable",
+      "The audio file is not on this Mac (it may not have downloaded from iCloud yet)."
+    );
+  if (ctx.callWide) return failed(ctx.callWide.code, ctx.callWide.message);
+  const remainingMs = ctx.deadlineAt - ctx.now();
+  const deadline = Math.min(
+    takeDeadlineSeconds(take.durationSeconds),
+    Math.floor((remainingMs - BUDGET_MARGIN_MS) / 1e3)
+  );
+  if (deadline < MIN_TAKE_SECONDS)
+    return failed(
+      "time_limit",
+      `Not started: the call's ${ctx.maxSeconds}-second limit was reached. Transcribe this recording on its own with attachmentId, or raise maxSeconds.`
+    );
+  let raw;
+  try {
+    raw = await callPublicHelperAsync(
+      "transcribe",
+      {
+        path: take.path,
+        locale: ctx.locale,
+        timeoutSeconds: deadline,
+        downloadAssets: ctx.downloadAssets
+      },
+      ctx.deps,
+      { timeoutMs: Math.min(deadline * 1e3 + KILL_GRACE_MS, remainingMs), signal: ctx.signal }
+    );
+  } catch (error2) {
+    const code = error2 instanceof PublicHelperError ? error2.code : "internal_error";
+    if (code === "aborted") throw error2;
+    const message = error2 instanceof Error ? error2.message : String(error2);
+    if (CALL_WIDE_CODES.has(code)) ctx.callWide = { code, message };
+    return {
+      take: {
+        ...base,
+        // A timeout means the helper was killed mid-run: the outcome is unknown.
+        status: code === "timeout" ? "indeterminate" : "error",
+        code,
+        message
+      },
+      text: ""
+    };
+  }
+  const parsed = helperTranscriptSchema.safeParse(raw);
+  if (!parsed.success) return failed("invalid_response", "Unexpected helper response.");
+  const { transcript, complete, stopReason, engine, durationSeconds } = parsed.data;
+  const text2 = transcript.trim();
+  return {
+    take: {
+      ...base,
+      status: complete ? "ok" : text2 ? "partial" : "indeterminate",
+      ...complete ? {} : { code: "incomplete", message: stopReason ?? "stopped early" },
+      ...durationSeconds !== void 0 ? { durationSeconds } : {},
+      wordCount: countWords2(text2),
+      ...engine ? { engine } : {}
+    },
+    text: text2
+  };
+}
+function combineStatus(parts) {
+  if (parts.length && parts.every((p) => p.status === "ok")) return "ok";
+  if (parts.some((p) => p.hasText)) return "partial";
+  if (parts.some((p) => p.status === "indeterminate")) return "indeterminate";
+  return "error";
+}
+async function transcribeRecording(asset, includeText, ctx) {
+  const outcomes = [];
+  for (const take of asset.takes) outcomes.push(await transcribeTake(take, ctx));
+  const transcript = outcomes.map((o) => o.text).filter(Boolean).join("\n\n");
+  const status = combineStatus(
+    outcomes.map((o) => ({ status: o.take.status, hasText: o.text.length > 0 }))
+  );
+  const firstProblem = outcomes.find((o) => o.take.status !== "ok")?.take;
+  return {
+    attachmentId: asset.attachmentId,
+    identifier: asset.identifier,
+    typeUti: asset.typeUti,
+    status,
+    ...status !== "ok" && firstProblem?.code ? { code: firstProblem.code, message: firstProblem.message } : {},
+    ...asset.durationSeconds !== null ? { durationSeconds: Math.round(asset.durationSeconds) } : {},
+    wordCount: countWords2(transcript),
+    ...includeText ? { transcript } : {},
+    takes: outcomes.map((o) => o.take)
+  };
+}
+async function transcribeNoteAudio(noteId3, options = {}) {
+  const locale = options.locale ?? DEFAULT_TRANSCRIPTION_LOCALE;
+  if (!LOCALE_PATTERN.test(locale))
+    throw new PublicHelperError("invalid_request", `"${locale}" is not a BCP-47 locale.`);
+  const maxSeconds = options.maxSeconds ?? TRANSCRIBE_MAX_SECONDS.default;
+  if (!Number.isInteger(maxSeconds) || maxSeconds < TRANSCRIBE_MAX_SECONDS.min || maxSeconds > TRANSCRIBE_MAX_SECONDS.max)
+    throw new PublicHelperError(
+      "invalid_request",
+      `maxSeconds must be a whole number from ${TRANSCRIBE_MAX_SECONDS.min} to ${TRANSCRIBE_MAX_SECONDS.max}.`
+    );
+  const deps = options.deps ?? defaultPublicHelperDeps();
+  let assets = (options.readAssets ?? ((id2) => readAudioAssets(id2)))(noteId3);
+  if (options.attachmentId) {
+    assets = assets.filter((a) => a.attachmentId === options.attachmentId);
+    if (assets.length === 0)
+      throw new PublicHelperError(
+        "attachment_not_found",
+        `No audio attachment ${options.attachmentId} in note ${noteId3}.`
+      );
+  }
+  const empty = { id: noteId3, locale, recordingCount: 0, recordings: [] };
+  if (assets.length === 0) return { ...empty, status: "none" };
+  const install = inspectPublicHelper(deps);
+  if (!install.ready)
+    throw new PublicHelperError(install.reason ?? "helper_not_installed", install.detail ?? "");
+  const now = options.now ?? Date.now;
+  const ctx = {
+    locale,
+    downloadAssets: options.downloadAssets ?? false,
+    deps,
+    signal: options.signal,
+    now,
+    deadlineAt: now() + maxSeconds * 1e3,
+    maxSeconds,
+    callWide: null
+  };
+  const recordings = [];
+  for (const asset of assets)
+    recordings.push(await transcribeRecording(asset, options.includeText ?? true, ctx));
+  return {
+    ...empty,
+    status: combineStatus(
+      recordings.map((r) => ({ status: r.status, hasText: (r.wordCount ?? 0) > 0 }))
+    ),
+    recordingCount: recordings.length,
+    recordings
+  };
+}
+function fitTranscriptions(result, maxBytes, measure = (r) => Buffer.byteLength(JSON.stringify(r))) {
+  if (measure(result) <= maxBytes) return result;
+  let next = result;
+  for (let share = 0.5; measure(next) > maxBytes && share > 1e-4; share /= 2) {
+    next = {
+      ...result,
+      recordings: result.recordings.map(
+        (r) => r.transcript ? {
+          ...r,
+          transcript: r.transcript.slice(0, Math.floor(r.transcript.length * share)),
+          transcriptTruncated: true
+        } : r
+      )
+    };
+  }
+  return next;
+}
+function formatTranscription(result) {
+  if (result.recordingCount === 0) return `No audio attachments in note ${result.id}.`;
+  const lines = [
+    `${result.recordingCount} audio attachment${result.recordingCount === 1 ? "" : "s"} in note ${result.id} (${result.status}, locale ${result.locale}):`
+  ];
+  result.recordings.forEach((r, i) => {
+    const facts = [
+      `status ${r.status}`,
+      ...r.durationSeconds !== void 0 ? [`${r.durationSeconds} s`] : [],
+      `${r.wordCount ?? 0} words`,
+      ...r.takes.length > 1 ? [`${r.takes.length} takes`] : [],
+      ...r.code ? [`${r.code}: ${r.message}`] : []
+    ];
+    lines.push("", `[${i + 1}] ${r.attachmentId} (${facts.join(", ")})`);
+    if (r.transcript)
+      lines.push(r.transcriptTruncated ? `${r.transcript} [truncated]` : r.transcript);
+  });
+  return lines.join("\n");
+}
+
 // src/services/privateHelperBuild.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
 import {
   chmodSync as chmodSync2,
   existsSync as existsSync16,
   mkdirSync as mkdirSync7,
-  mkdtempSync as mkdtempSync6,
+  mkdtempSync as mkdtempSync7,
   renameSync as renameSync2,
-  rmSync as rmSync6,
-  writeFileSync as writeFileSync5
+  rmSync as rmSync7,
+  writeFileSync as writeFileSync6
 } from "node:fs";
 import { release as release4 } from "node:os";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 
 // src/services/privateHelper.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash6 } from "node:crypto";
 import { existsSync as existsSync15, readFileSync as readFileSync5 } from "node:fs";
 import { homedir as homedir20 } from "node:os";
-import { dirname as dirname9, join as join25, resolve as resolve6 } from "node:path";
+import { dirname as dirname9, join as join26, resolve as resolve6 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var PRIVATE_HELPER_PROTOCOL = 1;
 var ENABLE_ENV = "APPLE_NOTES_MCP_ENABLE_PRIVATE";
@@ -55313,7 +55758,7 @@ var HELPER_BINARY_NAME = "apple-notes-private-helper";
 var HELPER_SOURCE_RELATIVE = "native/private-helper/apple-notes-private-helper.m";
 var MANIFEST_NAME = "manifest.json";
 var DEFAULT_TIMEOUT_MS3 = 2e4;
-var MAX_OUTPUT_BYTES2 = 4 * 1024 * 1024;
+var MAX_OUTPUT_BYTES3 = 4 * 1024 * 1024;
 var manifestSchema = external_exports.object({
   schemaVersion: external_exports.literal(1),
   protocolVersion: external_exports.number().int(),
@@ -55326,7 +55771,7 @@ var manifestSchema = external_exports.object({
 function packageRoot2(fromDir = dirname9(fileURLToPath3(import.meta.url))) {
   let dir = fromDir;
   for (; ; ) {
-    const candidate = join25(dir, "package.json");
+    const candidate = join26(dir, "package.json");
     if (existsSync15(candidate)) {
       try {
         const pkg = JSON.parse(readFileSync5(candidate, "utf8"));
@@ -55343,7 +55788,7 @@ function defaultDeps2(overrides = {}) {
   return {
     env: process.env,
     platform: process.platform,
-    sourcePath: join25(packageRoot2(), HELPER_SOURCE_RELATIVE),
+    sourcePath: join26(packageRoot2(), HELPER_SOURCE_RELATIVE),
     exists: existsSync15,
     readFile: (path10) => readFileSync5(path10),
     spawn: spawnSync4,
@@ -55356,14 +55801,14 @@ function privateHelperEnabled(env = process.env) {
 function helperInstallDir(env = process.env) {
   const override = env[HELPER_DIR_ENV]?.trim();
   if (override) return override;
-  return join25(homedir20(), "Library", "Application Support", "apple-notes-mcp", "private-helper");
+  return join26(homedir20(), "Library", "Application Support", "apple-notes-mcp", "private-helper");
 }
 function sha256Hex2(data) {
   return createHash6("sha256").update(data).digest("hex");
 }
 function inspectInstallation(deps = defaultDeps2()) {
   const installDir = helperInstallDir(deps.env);
-  const binaryPath = join25(installDir, HELPER_BINARY_NAME);
+  const binaryPath = join26(installDir, HELPER_BINARY_NAME);
   const base = {
     installDir,
     binaryPath,
@@ -55381,7 +55826,7 @@ function inspectInstallation(deps = defaultDeps2()) {
   if (!deps.exists(deps.sourcePath))
     return fail("helper_not_installed", `Packaged helper source is missing: ${deps.sourcePath}`);
   base.expectedSourceSha256 = sha256Hex2(deps.readFile(deps.sourcePath));
-  const manifestPath = join25(installDir, MANIFEST_NAME);
+  const manifestPath = join26(installDir, MANIFEST_NAME);
   if (!deps.exists(binaryPath) || !deps.exists(manifestPath))
     return fail(
       "helper_not_installed",
@@ -55497,7 +55942,7 @@ function callPrivateHelper(action, fields = {}, deps = defaultDeps2(), options =
     encoding: "utf8",
     timeout,
     killSignal: "SIGKILL",
-    maxBuffer: MAX_OUTPUT_BYTES2,
+    maxBuffer: MAX_OUTPUT_BYTES3,
     env: deps.env
   });
   const errno = result.error?.code;
@@ -55696,9 +56141,9 @@ function buildPrivateHelper(checkOnly, deps = defaultBuildDeps()) {
   steps.push({ step: "find compiler", ok: true, detail: compiler });
   const installDir = helperInstallDir(deps.env);
   mkdirSync7(installDir, { recursive: true, mode: 448 });
-  const staging = mkdtempSync6(join26(installDir, ".staging-"));
+  const staging = mkdtempSync7(join27(installDir, ".staging-"));
   try {
-    const stagedBinary = join26(staging, HELPER_BINARY_NAME);
+    const stagedBinary = join27(staging, HELPER_BINARY_NAME);
     const compile = deps.spawn(
       "/usr/bin/xcrun",
       compileArguments(deps.sourcePath, stagedBinary, sourceSha),
@@ -55775,13 +56220,13 @@ function buildPrivateHelper(checkOnly, deps = defaultBuildDeps()) {
       compiler
     };
     chmodSync2(stagedBinary, 448);
-    renameSync2(stagedBinary, join26(installDir, HELPER_BINARY_NAME));
-    writeFileSync5(join26(installDir, MANIFEST_NAME), JSON.stringify(manifest, null, 2) + "\n", {
+    renameSync2(stagedBinary, join27(installDir, HELPER_BINARY_NAME));
+    writeFileSync6(join27(installDir, MANIFEST_NAME), JSON.stringify(manifest, null, 2) + "\n", {
       mode: 384
     });
     steps.push({ step: "install", ok: true, detail: installDir });
   } finally {
-    if (existsSync16(staging)) rmSync6(staging, { recursive: true, force: true });
+    if (existsSync16(staging)) rmSync7(staging, { recursive: true, force: true });
   }
   const installation = inspectInstallation(deps);
   steps.push({
@@ -55970,6 +56415,16 @@ function withErrorHandling(handler, errorPrefix) {
     }
   };
 }
+function withAsyncErrorHandling(handler, errorPrefix) {
+  return async (params, extra) => {
+    try {
+      return await handler(params, extra?.signal);
+    } catch (error2) {
+      const message = error2 instanceof Error ? error2.message : "Unknown error";
+      return errorResponse(`${errorPrefix}: ${message}`, error2);
+    }
+  };
+}
 var MAX = {
   TITLE: 2e3,
   CONTENT: 5 * 1024 * 1024,
@@ -59006,6 +59461,49 @@ registerTool(
     });
   }, "Error reading drawings")
 );
+registerTool(
+  "transcribe-note-audio",
+  {
+    description: "Use when: you need the words spoken in a note's voice recordings or audio attachments, transcribed now on this Mac, by note id.\nReturns: per audio attachment a status (ok / partial / error / indeterminate), duration, word count, per-take results, and the transcript; overall status ok / partial / error / indeterminate / none.\nDo not use when: you only need the audio file (save-attachment) or a note has no audio.\nNote: read-only; recognition runs entirely on-device (never sent to a server). Needs Full Disk Access and the public native helper built once with `apple-notes-mcp setup --public-helper`. Long recordings take time: pass attachmentId to transcribe one at a time. An indeterminate result means the helper timed out; retrying may succeed. Never prompts: code permission_required means the user must allow the host app under System Settings > Privacy & Security > Speech Recognition. asset_unavailable can mean the language's speech model is not installed; pass downloadAssets: true only if the user agrees to the download.",
+    inputSchema: {
+      id: noteIdInput,
+      locale: external_exports.string().max(35).optional().describe('BCP-47 language of the speech, e.g. "en-US" (default), "it-IT", "fr-FR"'),
+      attachmentId: external_exports.string().max(MAX.ATTACHMENT_ID).optional().describe("Only transcribe this audio attachment (x-coredata ICAttachment id)"),
+      includeText: external_exports.boolean().optional().describe("Include transcript text (default true); false returns statuses and counts only"),
+      downloadAssets: external_exports.boolean().optional().describe(
+        "Let macOS download the language's on-device speech model if it is missing (default false: returns asset_unavailable at once)"
+      ),
+      maxSeconds: external_exports.number().int().min(TRANSCRIBE_MAX_SECONDS.min).max(TRANSCRIBE_MAX_SECONDS.max).optional().describe(
+        `Total time budget for the call in seconds (default ${TRANSCRIBE_MAX_SECONDS.default}); recordings not started in time report code time_limit`
+      )
+    },
+    outputSchema: {
+      id: external_exports.string().optional(),
+      locale: external_exports.string().optional(),
+      status: external_exports.string().optional(),
+      recordingCount: external_exports.number().optional(),
+      recordings: external_exports.array(external_exports.object({}).passthrough()).optional()
+    }
+  },
+  withAsyncErrorHandling(async (params, signal) => {
+    const { id: id2, locale, attachmentId, includeText, downloadAssets, maxSeconds } = params;
+    const result = fitTranscriptions(
+      await transcribeNoteAudio(id2, {
+        locale,
+        attachmentId,
+        includeText,
+        downloadAssets,
+        maxSeconds,
+        signal
+      }),
+      exportMaxResponseBytes()
+    );
+    return successResponse(
+      formatTranscription(result),
+      result
+    );
+  }, "Error transcribing audio")
+);
 registerTool(
   "list-recent-notes",
   {