exovault-mcp-server 1.0.0

package/dist/tools/archive-memory.js

@@ -0,0 +1,19 @@
+import { archiveMemory as dbArchiveMemory, getMemory } from "../db.js";
+import { logMcpUsageEvent } from "../usage.js";
+export async function archiveMemory(ctx, memoryId, archived = true) {
+    const memory = await getMemory(ctx.supabase, ctx.userId, memoryId);
+    if (!memory) {
+        return JSON.stringify({ success: false, error: "Memory not found" });
+    }
+    await dbArchiveMemory(ctx.supabase, memoryId, ctx.userId, archived);
+    const payload = JSON.stringify({ success: true, memoryId, archived });
+    await logMcpUsageEvent({
+        supabase: ctx.supabase,
+        userId: ctx.userId,
+        vaultId: memory.vault_id ?? undefined,
+        operationType: archived ? "mcp_archive_memory" : "mcp_unarchive_memory",
+        inputText: memoryId,
+        outputText: payload,
+    });
+    return payload;
+}

package/dist/tools/archive-memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-memory.js","sourceRoot":"","sources":["../../src/tools/archive-memory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAe,EACf,QAAgB,EAChB,QAAQ,GAAG,IAAI;IAEf,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,gBAAgB,CAAC;QACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;QACrC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB;QACvE,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,OAAO;KACpB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/tools/blind-index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Blind index utilities for privacy-preserving keyword search on E2E encrypted content.
+ *
+ * At write time: tokenize plaintext → HMAC-SHA256 each token → store hashes.
+ * At search time: tokenize query → HMAC-SHA256 each token → match against stored hashes.
+ * The DB never sees plaintext tokens — only irreversible HMAC hashes.
+ */
+/**
+ * Tokenizes text into normalized lowercase tokens.
+ * Preserves hyphens, underscores, and dots (important for identifiers like
+ * "invoice-2345", "VERCEL_TOKEN", "config.json").
+ */
+export declare function tokenize(text: string): string[];
+/**
+ * Derives a 256-bit HMAC key from the MEK hex string.
+ * This sub-key is used exclusively for blind index token hashing.
+ * Deterministic: same MEK always produces the same blind key.
+ */
+export declare function deriveBlindKey(mekHex: string): Buffer;
+/**
+ * HMAC-SHA256 hashes a single token with the blind key.
+ * Returns a compact base64url-encoded string (43 chars).
+ */
+export declare function hashToken(token: string, blindKey: Buffer): string;
+/**
+ * Convenience: tokenizes plaintext and hashes all tokens in one step.
+ * Returns an array of base64url HMAC hashes ready for DB storage or query matching.
+ */
+export declare function generateBlindTokens(plaintext: string, mekHex: string): string[];

package/dist/tools/blind-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blind-index.d.ts","sourceRoot":"","sources":["../../src/tools/blind-index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAO/C;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIrD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAK/E"}

package/dist/tools/blind-index.js

@@ -0,0 +1,53 @@
+/**
+ * Blind index utilities for privacy-preserving keyword search on E2E encrypted content.
+ *
+ * At write time: tokenize plaintext → HMAC-SHA256 each token → store hashes.
+ * At search time: tokenize query → HMAC-SHA256 each token → match against stored hashes.
+ * The DB never sees plaintext tokens — only irreversible HMAC hashes.
+ */
+import { createHmac } from "node:crypto";
+/** Salt used to derive the blind index sub-key from the MEK. */
+const BLIND_INDEX_SALT = "exovault-blind-index-v1";
+/** Maximum number of unique tokens stored per memory. */
+const MAX_TOKENS = 500;
+/**
+ * Tokenizes text into normalized lowercase tokens.
+ * Preserves hyphens, underscores, and dots (important for identifiers like
+ * "invoice-2345", "VERCEL_TOKEN", "config.json").
+ */
+export function tokenize(text) {
+    return text
+        .toLowerCase()
+        .split(/[^a-z0-9_\-.]+/)
+        .filter((t) => t.length >= 2)
+        .filter((v, i, a) => a.indexOf(v) === i)
+        .slice(0, MAX_TOKENS);
+}
+/**
+ * Derives a 256-bit HMAC key from the MEK hex string.
+ * This sub-key is used exclusively for blind index token hashing.
+ * Deterministic: same MEK always produces the same blind key.
+ */
+export function deriveBlindKey(mekHex) {
+    return createHmac("sha256", Buffer.from(mekHex, "hex"))
+        .update(BLIND_INDEX_SALT)
+        .digest();
+}
+/**
+ * HMAC-SHA256 hashes a single token with the blind key.
+ * Returns a compact base64url-encoded string (43 chars).
+ */
+export function hashToken(token, blindKey) {
+    return createHmac("sha256", blindKey).update(token).digest("base64url");
+}
+/**
+ * Convenience: tokenizes plaintext and hashes all tokens in one step.
+ * Returns an array of base64url HMAC hashes ready for DB storage or query matching.
+ */
+export function generateBlindTokens(plaintext, mekHex) {
+    const tokens = tokenize(plaintext);
+    if (tokens.length === 0)
+        return [];
+    const blindKey = deriveBlindKey(mekHex);
+    return tokens.map((t) => hashToken(t, blindKey));
+}

package/dist/tools/blind-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blind-index.js","sourceRoot":"","sources":["../../src/tools/blind-index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,gEAAgE;AAChE,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAEnD,yDAAyD;AACzD,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,KAAK,CAAC,gBAAgB,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;SACvC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;SACpD,MAAM,CAAC,gBAAgB,CAAC;SACxB,MAAM,EAAE,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,QAAgB;IACvD,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,MAAc;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/tools/cleanup-memories.d.ts

@@ -0,0 +1,44 @@
+import type { McpContext } from "../auth.js";
+interface CleanupInput {
+    vaultId?: string;
+    /** Archive episodic memories older than N days (default: 30) */
+    maxEpisodicAgeDays?: number;
+    /** Archive memories with importance <= this threshold (default: 1) */
+    maxImportance?: number;
+    /** Only archive memories not updated in N days (default: 14) */
+    staleAfterDays?: number;
+    /** Preview what would be archived without actually archiving (default: false) */
+    dryRun?: boolean;
+}
+export interface CleanupCandidate {
+    id: string;
+    memoryType: string;
+    summary: string | null;
+    importance: number;
+    reason: string;
+    updatedAt: string;
+}
+export interface CleanupOptions {
+    maxEpisodicAgeDays?: number;
+    maxImportance?: number;
+    staleAfterDays?: number;
+    dryRun?: boolean;
+    /** When true, only apply safe rules (3: failed indexing, 4: superseded). Skips judgment-based rules 1+2. */
+    safeOnly?: boolean;
+}
+export interface CleanupResult {
+    scannedCount: number;
+    candidateCount: number;
+    archivedCount: number;
+    candidates: CleanupCandidate[];
+}
+/**
+ * Core cleanup logic — scans memories and archives candidates based on rules.
+ * Extracted so it can be called standalone (e.g. auto-cleanup in session_start).
+ */
+export declare function runCleanup(ctx: McpContext, vaultId: string | undefined, options?: CleanupOptions): Promise<CleanupResult>;
+/**
+ * MCP-facing cleanup tool — wraps runCleanup with logging and JSON output.
+ */
+export declare function cleanupMemories(ctx: McpContext, input: CleanupInput): Promise<string>;
+export {};

package/dist/tools/cleanup-memories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup-memories.d.ts","sourceRoot":"","sources":["../../src/tools/cleanup-memories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAK7C,UAAU,YAAY;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAiGxB;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,MAAM,CAAC,CA+BjB"}

package/dist/tools/cleanup-memories.js

@@ -0,0 +1,126 @@
+import { getMemories, archiveMemory } from "../db.js";
+import { logMcpUsageEvent } from "../usage.js";
+import { resolveVaultId } from "./resolve-vault-id.js";
+/**
+ * Core cleanup logic — scans memories and archives candidates based on rules.
+ * Extracted so it can be called standalone (e.g. auto-cleanup in session_start).
+ */
+export async function runCleanup(ctx, vaultId, options = {}) {
+    const resolvedVaultId = ctx.defaultVaultId
+        ? resolveVaultId(ctx, vaultId)
+        : vaultId;
+    const maxEpisodicAgeDays = options.maxEpisodicAgeDays ?? 30;
+    const maxImportance = options.maxImportance ?? 1;
+    const staleAfterDays = options.staleAfterDays ?? 14;
+    const dryRun = options.dryRun ?? false;
+    const safeOnly = options.safeOnly ?? false;
+    const now = Date.now();
+    const candidates = [];
+    // Fetch non-archived memories (up to 200 for scanning)
+    const memories = await getMemories(ctx.supabase, ctx.userId, {
+        vaultId: resolvedVaultId,
+        includeArchived: false,
+        limit: 200,
+    });
+    for (const m of memories) {
+        const ageMs = now - new Date(m.updated_at).getTime();
+        const ageDays = ageMs / (1000 * 60 * 60 * 24);
+        if (!safeOnly) {
+            // Rule 1: Old episodic memories with low importance
+            if (m.memory_type === "episodic" &&
+                ageDays > maxEpisodicAgeDays &&
+                m.importance <= 2) {
+                candidates.push({
+                    id: m.id,
+                    memoryType: m.memory_type,
+                    summary: m.encrypted_summary ? "(encrypted)" : null,
+                    importance: m.importance,
+                    reason: `episodic memory older than ${maxEpisodicAgeDays} days (${Math.floor(ageDays)}d)`,
+                    updatedAt: m.updated_at,
+                });
+                continue;
+            }
+            // Rule 2: Very low importance memories that are stale
+            if (m.importance <= maxImportance && ageDays > staleAfterDays) {
+                candidates.push({
+                    id: m.id,
+                    memoryType: m.memory_type,
+                    summary: m.encrypted_summary ? "(encrypted)" : null,
+                    importance: m.importance,
+                    reason: `importance ${m.importance} and stale for ${Math.floor(ageDays)} days`,
+                    updatedAt: m.updated_at,
+                });
+                continue;
+            }
+        }
+        // Rule 3: Failed indexing older than 7 days (embeddings never succeeded)
+        if (m.indexing_status === "failed" && ageDays > 7) {
+            candidates.push({
+                id: m.id,
+                memoryType: m.memory_type,
+                summary: m.encrypted_summary ? "(encrypted)" : null,
+                importance: m.importance,
+                reason: `indexing failed for ${Math.floor(ageDays)} days`,
+                updatedAt: m.updated_at,
+            });
+            continue;
+        }
+        // Rule 4: Superseded memories (replaced by newer version)
+        if (m.superseded_by_id) {
+            candidates.push({
+                id: m.id,
+                memoryType: m.memory_type,
+                summary: m.encrypted_summary ? "(encrypted)" : null,
+                importance: m.importance,
+                reason: `superseded by ${m.superseded_by_id}`,
+                updatedAt: m.updated_at,
+            });
+        }
+    }
+    // Archive candidates (unless dry run)
+    let archivedCount = 0;
+    if (!dryRun) {
+        for (const c of candidates) {
+            await archiveMemory(ctx.supabase, c.id, ctx.userId, true);
+            archivedCount++;
+        }
+    }
+    return {
+        scannedCount: memories.length,
+        candidateCount: candidates.length,
+        archivedCount,
+        candidates,
+    };
+}
+/**
+ * MCP-facing cleanup tool — wraps runCleanup with logging and JSON output.
+ */
+export async function cleanupMemories(ctx, input) {
+    const result = await runCleanup(ctx, input.vaultId, {
+        maxEpisodicAgeDays: input.maxEpisodicAgeDays,
+        maxImportance: input.maxImportance,
+        staleAfterDays: input.staleAfterDays,
+        dryRun: input.dryRun,
+    });
+    const payload = JSON.stringify({
+        dryRun: input.dryRun ?? false,
+        scannedCount: result.scannedCount,
+        candidateCount: result.candidateCount,
+        archivedCount: result.archivedCount,
+        candidates: result.candidates.map((c) => ({
+            id: c.id,
+            memoryType: c.memoryType,
+            importance: c.importance,
+            reason: c.reason,
+            updatedAt: c.updatedAt,
+        })),
+    }, null, 2);
+    await logMcpUsageEvent({
+        supabase: ctx.supabase,
+        userId: ctx.userId,
+        operationType: "mcp_cleanup_memories",
+        inputText: JSON.stringify(input),
+        outputText: payload,
+    });
+    return payload;
+}

package/dist/tools/cleanup-memories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup-memories.js","sourceRoot":"","sources":["../../src/tools/cleanup-memories.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAuCvD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,OAA2B,EAC3B,UAA0B,EAAE;IAE5B,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc;QACxC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC;QAC9B,CAAC,CAAC,OAAO,CAAC;IACZ,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAC5D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;IAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAuB,EAAE,CAAC;IAE1C,uDAAuD;IACvD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAC3D,OAAO,EAAE,eAAe;QACxB,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAE9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,oDAAoD;YACpD,IACE,CAAC,CAAC,WAAW,KAAK,UAAU;gBAC5B,OAAO,GAAG,kBAAkB;gBAC5B,CAAC,CAAC,UAAU,IAAI,CAAC,EACjB,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC;oBACd,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,UAAU,EAAE,CAAC,CAAC,WAAW;oBACzB,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;oBACnD,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,MAAM,EAAE,8BAA8B,kBAAkB,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI;oBACzF,SAAS,EAAE,CAAC,CAAC,UAAU;iBACxB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,sDAAsD;YACtD,IAAI,CAAC,CAAC,UAAU,IAAI,aAAa,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;gBAC9D,UAAU,CAAC,IAAI,CAAC;oBACd,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,UAAU,EAAE,CAAC,CAAC,WAAW;oBACzB,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;oBACnD,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,MAAM,EAAE,cAAc,CAAC,CAAC,UAAU,kBAAkB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO;oBAC9E,SAAS,EAAE,CAAC,CAAC,UAAU;iBACxB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,IAAI,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAClD,UAAU,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,UAAU,EAAE,CAAC,CAAC,WAAW;gBACzB,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;gBACnD,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,MAAM,EAAE,uBAAuB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO;gBACzD,SAAS,EAAE,CAAC,CAAC,UAAU;aACxB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,UAAU,EAAE,CAAC,CAAC,WAAW;gBACzB,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;gBACnD,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,MAAM,EAAE,iBAAiB,CAAC,CAAC,gBAAgB,EAAE;gBAC7C,SAAS,EAAE,CAAC,CAAC,UAAU;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1D,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,aAAa;QACb,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAe,EACf,KAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE;QAClD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;KACJ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEZ,MAAM,gBAAgB,CAAC;QACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa,EAAE,sBAAsB;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAChC,UAAU,EAAE,OAAO;KACpB,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/tools/context-checkpoint.d.ts

@@ -0,0 +1,28 @@
+import type { McpContext } from "../auth.js";
+interface MemoryRelation {
+    memoryId: string;
+    relationType: "derived_from" | "contradicts" | "refines" | "part_of" | "supersedes";
+}
+interface CheckpointMemoryInput {
+    content: string;
+    memoryType?: string;
+    summary?: string;
+    importance?: number;
+    confidence?: number;
+    entities?: string[];
+    writeReason?: string;
+    relatedMemoryIds?: MemoryRelation[];
+    sourceNoteIds?: string[];
+    supersededById?: string;
+}
+interface CheckpointInput {
+    memories: CheckpointMemoryInput[];
+    sessionSummary?: string;
+    vaultId?: string;
+    agentId?: string;
+    modelId?: string;
+    agentRunId?: string;
+    dedup?: boolean;
+}
+export declare function contextCheckpoint(ctx: McpContext, input: CheckpointInput): Promise<string>;
+export {};

package/dist/tools/context-checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-checkpoint.d.ts","sourceRoot":"","sources":["../../src/tools/context-checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAO7C,UAAU,cAAc;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,cAAc,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC;CACrF;AAED,UAAU,qBAAqB;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AASD,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,MAAM,CAAC,CA0JjB"}

package/dist/tools/context-checkpoint.js

@@ -0,0 +1,140 @@
+import { writeMemory } from "./write-memory.js";
+import { logMcpUsageEvent } from "../usage.js";
+import { generateEpisodicHeadline } from "../episodic-headline.js";
+import { getPendingMessages, bulkUpdateMessageStatus } from "../db.js";
+import { decrypt } from "../crypto.js";
+export async function contextCheckpoint(ctx, input) {
+    const start = Date.now();
+    const dedup = input.dedup ?? true;
+    const results = [];
+    let created = 0;
+    let skipped = 0;
+    let superseded = 0;
+    let failed = 0;
+    // Process memories sequentially so dedup can see previously written ones
+    for (let i = 0; i < input.memories.length; i++) {
+        const mem = input.memories[i];
+        try {
+            const externalWriteId = input.agentRunId
+                ? `checkpoint:${input.agentRunId}:${i}`
+                : undefined;
+            const resultJson = await writeMemory(ctx, {
+                content: mem.content,
+                memoryType: mem.memoryType,
+                summary: mem.summary,
+                importance: mem.importance,
+                confidence: mem.confidence,
+                entities: mem.entities,
+                writeReason: mem.writeReason,
+                relatedMemoryIds: mem.relatedMemoryIds,
+                sourceNoteIds: mem.sourceNoteIds,
+                supersededById: mem.supersededById,
+                vaultId: input.vaultId,
+                agentId: input.agentId,
+                modelId: input.modelId,
+                agentRunId: input.agentRunId,
+                externalWriteId,
+                dedup,
+            });
+            const parsed = JSON.parse(resultJson);
+            const dedupAction = parsed.dedupAction;
+            if (dedupAction === "skip") {
+                skipped++;
+                results.push({ index: i, memoryId: parsed.memoryId, status: "skipped" });
+            }
+            else if (parsed.created === false && parsed.upserted === true) {
+                // Upserted via externalWriteId — count as superseded
+                superseded++;
+                results.push({ index: i, memoryId: parsed.memoryId, status: "superseded" });
+            }
+            else {
+                created++;
+                results.push({ index: i, memoryId: parsed.memoryId, status: "created" });
+            }
+        }
+        catch (err) {
+            failed++;
+            results.push({
+                index: i,
+                status: "failed",
+                error: err.message,
+            });
+        }
+    }
+    // Write session summary as episodic memory if provided
+    if (input.sessionSummary?.trim()) {
+        try {
+            const externalWriteId = input.agentRunId
+                ? `checkpoint:${input.agentRunId}:session_summary`
+                : undefined;
+            await writeMemory(ctx, {
+                content: input.sessionSummary,
+                memoryType: "episodic",
+                summary: generateEpisodicHeadline(input.sessionSummary),
+                importance: 2,
+                confidence: 4,
+                vaultId: input.vaultId,
+                agentId: input.agentId,
+                modelId: input.modelId,
+                agentRunId: input.agentRunId,
+                writeReason: "End-of-session context checkpoint",
+                externalWriteId,
+                dedup,
+            });
+        }
+        catch {
+            // Don't fail the whole checkpoint for a session summary error
+        }
+    }
+    // Fetch pending messages for this agent (budget: 3, best-effort)
+    let pendingMessages = null;
+    if (input.agentId) {
+        try {
+            const pendingMsgRows = await getPendingMessages(ctx.supabase, ctx.userId, input.agentId, 3);
+            if (pendingMsgRows.length > 0) {
+                pendingMessages = await Promise.all(pendingMsgRows.map(async (m) => {
+                    const content = await decrypt(m.encrypted_content, m.content_iv, ctx.masterKey);
+                    return {
+                        id: m.id,
+                        senderId: m.sender_id,
+                        senderType: m.sender_type,
+                        category: m.category,
+                        priority: m.priority,
+                        subject: m.subject,
+                        content,
+                        createdAt: m.created_at,
+                    };
+                }));
+                // Mark as delivered (best-effort)
+                await bulkUpdateMessageStatus(ctx.supabase, pendingMsgRows.map((m) => m.id), ctx.userId, "delivered", { delivered_at: new Date().toISOString() }).catch(() => { });
+            }
+        }
+        catch {
+            // Best-effort — never block checkpoint for message delivery
+        }
+    }
+    const durationMs = Date.now() - start;
+    const result = {
+        total: input.memories.length,
+        created,
+        skipped,
+        superseded,
+        failed,
+        durationMs,
+        results,
+    };
+    if (pendingMessages && pendingMessages.length > 0) {
+        result.pendingMessages = pendingMessages;
+    }
+    const payload = JSON.stringify(result);
+    await logMcpUsageEvent({
+        supabase: ctx.supabase,
+        userId: ctx.userId,
+        vaultId: input.vaultId,
+        modelId: input.modelId,
+        operationType: "mcp_context_checkpoint",
+        inputText: `${input.memories.length} memories`,
+        outputText: payload,
+    });
+    return payload;
+}

package/dist/tools/context-checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-checkpoint.js","sourceRoot":"","sources":["../../src/tools/context-checkpoint.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAqCvC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAe,EACf,KAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;IAClC,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,yEAAyE;IACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU;gBACtC,CAAC,CAAC,cAAc,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE;gBACvC,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE;gBACxC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,eAAe;gBACf,KAAK;aACN,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAiC,CAAC;YAE7D,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3E,CAAC;iBAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAChE,qDAAqD;gBACrD,UAAU,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU;gBACtC,CAAC,CAAC,cAAc,KAAK,CAAC,UAAU,kBAAkB;gBAClD,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,WAAW,CAAC,GAAG,EAAE;gBACrB,OAAO,EAAE,KAAK,CAAC,cAAc;gBAC7B,UAAU,EAAE,UAAU;gBACtB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC,cAAc,CAAC;gBACvD,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,WAAW,EAAE,mCAAmC;gBAChD,eAAe;gBACf,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,IAAI,eAAe,GAAqC,IAAI,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAC7C,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,MAAM,EACV,KAAK,CAAC,OAAO,EACb,CAAC,CACF,CAAC;YACF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,eAAe,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;oBAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;oBAChF,OAAO;wBACL,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,QAAQ,EAAE,CAAC,CAAC,SAAS;wBACrB,UAAU,EAAE,CAAC,CAAC,WAAW;wBACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,OAAO;wBACP,SAAS,EAAE,CAAC,CAAC,UAAU;qBACxB,CAAC;gBACJ,CAAC,CAAC,CACH,CAAC;gBACF,kCAAkC;gBAClC,MAAM,uBAAuB,CAC3B,GAAG,CAAC,QAAQ,EACZ,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC/B,GAAG,CAAC,MAAM,EACV,WAAW,EACX,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAC3C,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,MAAM,GAA4B;QACtC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC5B,OAAO;QACP,OAAO;QACP,UAAU;QACV,MAAM;QACN,UAAU;QACV,OAAO;KACR,CAAC;IAEF,IAAI,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC;IAC3C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,gBAAgB,CAAC;QACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,wBAAwB;QACvC,SAAS,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,WAAW;QAC9C,UAAU,EAAE,OAAO;KACpB,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/tools/context-profiles.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Context profiles for session_start — preset retrieval ratios
+ * for different agent situations.
+ */
+export declare const CONTEXT_PROFILES: {
+    readonly default: {
+        readonly maxEpisodic: 3;
+        readonly maxFacts: 5;
+        readonly maxTasks: 5;
+        readonly maxConstraints: 10;
+    };
+    readonly planning: {
+        readonly maxEpisodic: 1;
+        readonly maxFacts: 8;
+        readonly maxTasks: 8;
+        readonly maxConstraints: 10;
+    };
+    readonly incident: {
+        readonly maxEpisodic: 5;
+        readonly maxFacts: 8;
+        readonly maxTasks: 3;
+        readonly maxConstraints: 10;
+    };
+    readonly handoff: {
+        readonly maxEpisodic: 5;
+        readonly maxFacts: 5;
+        readonly maxTasks: 8;
+        readonly maxConstraints: 10;
+    };
+    readonly deep: {
+        readonly maxEpisodic: 5;
+        readonly maxFacts: 10;
+        readonly maxTasks: 5;
+        readonly maxConstraints: 10;
+    };
+    readonly minimal: {
+        readonly maxEpisodic: 1;
+        readonly maxFacts: 2;
+        readonly maxTasks: 2;
+        readonly maxConstraints: 3;
+    };
+    readonly none: {
+        readonly maxEpisodic: 0;
+        readonly maxFacts: 0;
+        readonly maxTasks: 0;
+        readonly maxConstraints: 0;
+    };
+};
+export type ContextMode = keyof typeof CONTEXT_PROFILES;
+export interface ContextLimits {
+    maxEpisodic: number;
+    maxFacts: number;
+    maxTasks: number;
+    maxConstraints: number;
+}
+/**
+ * Resolves context limits from a mode preset + optional explicit overrides.
+ * Explicit params always take precedence over mode defaults.
+ * Unknown modes fall back to "default".
+ */
+export declare function resolveContextLimits(input: {
+    mode?: string;
+    maxEpisodic?: number;
+    maxFacts?: number;
+    maxTasks?: number;
+    maxConstraints?: number;
+}): ContextLimits;

package/dist/tools/context-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-profiles.d.ts","sourceRoot":"","sources":["../../src/tools/context-profiles.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQnB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,gBAAgB,CAAC;AACxD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,aAAa,CAahB"}

package/dist/tools/context-profiles.js

@@ -0,0 +1,30 @@
+/**
+ * Context profiles for session_start — preset retrieval ratios
+ * for different agent situations.
+ */
+export const CONTEXT_PROFILES = {
+    default: { maxEpisodic: 3, maxFacts: 5, maxTasks: 5, maxConstraints: 10 },
+    planning: { maxEpisodic: 1, maxFacts: 8, maxTasks: 8, maxConstraints: 10 },
+    incident: { maxEpisodic: 5, maxFacts: 8, maxTasks: 3, maxConstraints: 10 },
+    handoff: { maxEpisodic: 5, maxFacts: 5, maxTasks: 8, maxConstraints: 10 },
+    deep: { maxEpisodic: 5, maxFacts: 10, maxTasks: 5, maxConstraints: 10 },
+    minimal: { maxEpisodic: 1, maxFacts: 2, maxTasks: 2, maxConstraints: 3 },
+    none: { maxEpisodic: 0, maxFacts: 0, maxTasks: 0, maxConstraints: 0 },
+};
+/**
+ * Resolves context limits from a mode preset + optional explicit overrides.
+ * Explicit params always take precedence over mode defaults.
+ * Unknown modes fall back to "default".
+ */
+export function resolveContextLimits(input) {
+    const mode = input.mode;
+    const profile = mode && mode in CONTEXT_PROFILES
+        ? CONTEXT_PROFILES[mode]
+        : CONTEXT_PROFILES.default;
+    return {
+        maxEpisodic: input.maxEpisodic ?? profile.maxEpisodic,
+        maxFacts: input.maxFacts ?? profile.maxFacts,
+        maxTasks: input.maxTasks ?? profile.maxTasks,
+        maxConstraints: input.maxConstraints ?? profile.maxConstraints,
+    };
+}

package/dist/tools/context-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-profiles.js","sourceRoot":"","sources":["../../src/tools/context-profiles.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE;IACzE,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE;IAC1E,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE;IAC1E,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE;IACzE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE;IACvE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;IACxE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;CAC7D,CAAC;AAUX;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+B,CAAC;IACnD,MAAM,OAAO,GACX,IAAI,IAAI,IAAI,IAAI,gBAAgB;QAC9B,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC;IAE/B,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW;QACrD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc;KAC/D,CAAC;AACJ,CAAC"}

package/dist/tools/create-note.d.ts

@@ -0,0 +1,2 @@
+import type { McpContext } from "../auth.js";
+export declare function createNote(ctx: McpContext, vaultId: string, title: string, content: string, tags?: string[]): Promise<string>;

package/dist/tools/create-note.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-note.d.ts","sourceRoot":"","sources":["../../src/tools/create-note.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAO7C,wBAAsB,UAAU,CAC9B,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,GACd,OAAO,CAAC,MAAM,CAAC,CAgEjB"}