noteconnection 1.6.8 → 1.8.0

package/dist/src/memory/MemoryGovernance.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeGovernedMemoryType = normalizeGovernedMemoryType;
+exports.normalizeGovernedMemoryPurpose = normalizeGovernedMemoryPurpose;
+exports.classifyMemoryEntry = classifyMemoryEntry;
+exports.computeGovernedMemoryWeight = computeGovernedMemoryWeight;
+exports.buildMemoryAuditRecord = buildMemoryAuditRecord;
+function normalizeGovernedMemoryType(value) {
+    const normalized = String(value || '').trim().toLowerCase();
+    if (normalized === 'study' || normalized === 'note' || normalized === 'system') {
+        return normalized;
+    }
+    return 'fact';
+}
+function normalizeGovernedMemoryPurpose(value) {
+    const normalized = String(value || '').trim().toLowerCase();
+    if (normalized === 'internalized' || normalized === 'supplementary' || normalized === 'systemic') {
+        return normalized;
+    }
+    return 'memorized';
+}
+function classifyMemoryEntry(entry) {
+    const tags = Array.isArray(entry.tags) ? entry.tags.map((tag) => String(tag || '').trim().toLowerCase()) : [];
+    const rawText = `${entry.key} ${entry.value} ${tags.join(' ')}`.toLowerCase();
+    const memoryType = normalizeGovernedMemoryType(entry.memoryType
+        || (tags.includes('study') || rawText.includes('quiz') || rawText.includes('review') ? 'study'
+            : tags.includes('note') || rawText.includes('note') ? 'note'
+                : tags.includes('system') ? 'system'
+                    : 'fact'));
+    const memoryPurpose = normalizeGovernedMemoryPurpose(entry.memoryPurpose
+        || (memoryType === 'study' ? 'internalized'
+            : memoryType === 'system' ? 'systemic'
+                : memoryType === 'note' ? 'supplementary'
+                    : 'memorized'));
+    return {
+        memoryType,
+        memoryPurpose,
+        classificationConfidence: Math.max(0.45, Math.min(0.98, Number(entry.confidence || 0.72))),
+    };
+}
+function computeGovernedMemoryWeight(entry) {
+    const { memoryType, memoryPurpose } = classifyMemoryEntry(entry);
+    const typeWeight = memoryType === 'study'
+        ? 1.25
+        : memoryType === 'note'
+            ? 1.1
+            : memoryType === 'system'
+                ? 0.7
+                : 1;
+    const purposeWeight = memoryPurpose === 'internalized'
+        ? 1.35
+        : memoryPurpose === 'supplementary'
+            ? 0.92
+            : memoryPurpose === 'systemic'
+                ? 0.75
+                : 1;
+    return Number((typeWeight * purposeWeight).toFixed(4));
+}
+function buildMemoryAuditRecord(nextId, params) {
+    const classification = classifyMemoryEntry(params.entry);
+    return {
+        auditId: nextId('memory_audit'),
+        userId: params.userId,
+        operation: params.operation,
+        layer: params.layer,
+        memoryKey: params.entry.key,
+        memoryType: classification.memoryType,
+        memoryPurpose: classification.memoryPurpose,
+        reason: params.reason,
+        scopeWorkspaceId: params.scopeWorkspaceId || null,
+        scopeCorpusId: params.scopeCorpusId || null,
+        recordedAt: params.recordedAt,
+    };
+}

package/dist/src/memory/MemoryGovernance.test.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const MemoryGovernance_1 = require("./MemoryGovernance");
+describe('MemoryGovernance', () => {
+    test('classifies study memories and raises their retrieval weight', () => {
+        const entry = {
+            key: 'quiz_note',
+            value: 'Review this quiz correction before the next session.',
+            tags: ['study', 'review'],
+            confidence: 0.84,
+            references: ['atom_1'],
+            createdAt: '2026-05-26T00:00:00.000Z',
+            updatedAt: '2026-05-26T00:00:00.000Z',
+        };
+        const classification = (0, MemoryGovernance_1.classifyMemoryEntry)(entry);
+        expect(classification.memoryType).toBe('study');
+        expect(classification.memoryPurpose).toBe('internalized');
+        expect((0, MemoryGovernance_1.computeGovernedMemoryWeight)(entry)).toBeGreaterThan(1);
+    });
+    test('builds audit records with explicit scope fields', () => {
+        const entry = {
+            key: 'memory_1',
+            value: 'Scoped note',
+            tags: ['note'],
+            confidence: 0.7,
+            references: [],
+            scopeWorkspaceId: 'optics',
+            scopeCorpusId: 'optics',
+            createdAt: '2026-05-26T00:00:00.000Z',
+            updatedAt: '2026-05-26T00:00:00.000Z',
+        };
+        const audit = (0, MemoryGovernance_1.buildMemoryAuditRecord)((prefix = 'memory_audit') => `${prefix}_1`, {
+            userId: 'user_a',
+            operation: 'write',
+            layer: 'session',
+            entry,
+            reason: 'test',
+            scopeWorkspaceId: 'optics',
+            scopeCorpusId: 'optics',
+            recordedAt: '2026-05-26T00:01:00.000Z',
+        });
+        expect(audit.scopeWorkspaceId).toBe('optics');
+        expect(audit.scopeCorpusId).toBe('optics');
+        expect(audit.memoryKey).toBe('memory_1');
+    });
+});

package/dist/src/memory/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/mermaid.frontend.guard.contract.test.js

@@ -0,0 +1,77 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+describe('mermaid frontend guard contract', () => {
+    const repoRoot = path.resolve(__dirname, '..');
+    const appPath = path.join(repoRoot, 'src', 'frontend', 'app.js');
+    const readerPath = path.join(repoRoot, 'src', 'frontend', 'reader.js');
+    const stylesPath = path.join(repoRoot, 'src', 'frontend', 'styles.css');
+    test('installs a global Mermaid artifact suppression observer for leaked error SVGs', () => {
+        const source = fs.readFileSync(appPath, 'utf8');
+        expect(source).toContain('function suppressMermaidErrorArtifacts(root, context = {})');
+        expect(source).toContain('function installMermaidErrorArtifactObserver()');
+        expect(source).toContain('function installMermaidRuntimeGuards()');
+        expect(source).toContain('function exposeMermaidDebugInterface()');
+        expect(source).toContain('installMermaidErrorArtifactObserver();');
+        expect(source).toContain("normalized.includes('syntax error in text')");
+        expect(source).toContain("normalized.includes('mermaid version')");
+        expect(source).toContain('captureRuntimeState: () => ({');
+        expect(source).toContain('function isProtectedMermaidSuppressionHost(host)');
+        expect(source).toContain('root !== document.body');
+        expect(source).toContain("host.id === 'reading-body'");
+    });
+    test('reader mermaid suppression never selects the page root as a removable host', () => {
+        const source = fs.readFileSync(readerPath, 'utf8');
+        expect(source).toContain('isProtectedMermaidSuppressionHost(host)');
+        expect(source).toContain('root !== document.body');
+        expect(source).toContain("host.id === 'graph-wrapper'");
+        expect(source).toContain('Reader Mermaid offscreen host mount root is unavailable.');
+        expect(source).toContain('ensureReaderStructure()');
+        expect(source).toContain("replacementBody.id = 'reading-body'");
+        expect(source).toContain('this.contentBox.appendChild(replacementBody);');
+        expect(source).toContain('lookupNodeDataById(nodeId)');
+        expect(source).toContain("typeof graphData !== 'undefined'");
+        expect(source).toContain('isReaderBodyVisiblyEmpty()');
+        expect(source).toContain('Markdown protocol path completed without visible content. Falling back to raw markdown render.');
+    });
+    test('ships compact inline and toast styles for suppressed Mermaid errors', () => {
+        const source = fs.readFileSync(stylesPath, 'utf8');
+        expect(source).toContain('.mermaid-inline-guard');
+        expect(source).toContain('.mermaid-error-toast-stack');
+        expect(source).toContain('.mermaid-error-toast');
+    });
+});

package/dist/src/middleware/auth.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setSidecarAuthToken = setSidecarAuthToken;
+exports.isAuthorizedRequest = isAuthorizedRequest;
+let sidecarAuthToken = null;
+function setSidecarAuthToken(token) {
+    sidecarAuthToken = token;
+}
+function isAuthorizedRequest(req) {
+    if (!sidecarAuthToken)
+        return true;
+    const authHeader = req.headers.authorization || '';
+    if (authHeader.startsWith('Bearer ')) {
+        return authHeader.slice(7) === sidecarAuthToken;
+    }
+    return true;
+}

package/dist/src/middleware/body-parser.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readRequestBody = readRequestBody;
+exports.parseJsonBody = parseJsonBody;
+exports.sendJson = sendJson;
+exports.sendError = sendError;
+const MAX_BODY_SIZE = 50 * 1024 * 1024; // 50MB
+async function readRequestBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let totalSize = 0;
+        req.on('data', (chunk) => {
+            totalSize += chunk.length;
+            if (totalSize > MAX_BODY_SIZE) {
+                req.destroy();
+                reject(new Error('Request body exceeds maximum size'));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => {
+            resolve(Buffer.concat(chunks).toString('utf8'));
+        });
+        req.on('error', reject);
+    });
+}
+async function parseJsonBody(req) {
+    const raw = await readRequestBody(req);
+    if (!raw.trim())
+        return {};
+    return JSON.parse(raw);
+}
+function sendJson(res, statusCode, data) {
+    res.writeHead(statusCode, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(data));
+}
+function sendError(res, statusCode, error, errorCode) {
+    if (errorCode) {
+        res.setHeader('x-nc-error-code', errorCode);
+    }
+    sendJson(res, statusCode, {
+        success: false,
+        error: error instanceof Error ? error.message : String(error),
+    });
+}

package/dist/src/middleware/cors.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyCorsHeaders = applyCorsHeaders;
+const ALLOWED_ORIGINS = new Set([
+    'http://localhost:3000',
+    'http://127.0.0.1:3000',
+    'http://localhost:5173',
+    'http://127.0.0.1:5173',
+    'tauri://localhost',
+    'https://tauri.localhost',
+]);
+const ALLOWED_HEADER_NAMES = [
+    'Content-Type',
+    'Authorization',
+    'X-Request-Id',
+    'X-NoteConnection-Token',
+    'X-Agent-Conversation-Turn-Id',
+    'X-Agent-Conversation-Resume-Turn-Id',
+];
+const EXPOSED_HEADER_NAMES = [
+    'X-Request-Id',
+    'X-Error-Code',
+    'X-Agent-Conversation-Turn-Id',
+    'X-Agent-Conversation-Replay',
+];
+function applyCorsHeaders(req, res) {
+    const origin = req.headers.origin;
+    if (!origin) {
+        res.setHeader('Access-Control-Allow-Origin', '*');
+        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', ALLOWED_HEADER_NAMES.join(', '));
+        res.setHeader('Access-Control-Expose-Headers', EXPOSED_HEADER_NAMES.join(', '));
+        return true;
+    }
+    if (ALLOWED_ORIGINS.has(origin)) {
+        res.setHeader('Access-Control-Allow-Origin', origin);
+        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', ALLOWED_HEADER_NAMES.join(', '));
+        res.setHeader('Access-Control-Expose-Headers', EXPOSED_HEADER_NAMES.join(', '));
+        res.setHeader('Vary', 'Origin');
+        return true;
+    }
+    return false;
+}

package/dist/src/middleware/index.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendError = exports.sendJson = exports.parseJsonBody = exports.readRequestBody = exports.ERROR_CODE_HEADER = exports.appendRuntimeApiRequestTrace = exports.getRuntimeRequestTrace = exports.normalizeApiErrorCodeToken = exports.finishRequestTrace = exports.startRequestTraceHandler = exports.resolveRequestId = exports.setSidecarAuthToken = exports.isAuthorizedRequest = exports.applyCorsHeaders = void 0;
+var cors_1 = require("./cors");
+Object.defineProperty(exports, "applyCorsHeaders", { enumerable: true, get: function () { return cors_1.applyCorsHeaders; } });
+var auth_1 = require("./auth");
+Object.defineProperty(exports, "isAuthorizedRequest", { enumerable: true, get: function () { return auth_1.isAuthorizedRequest; } });
+Object.defineProperty(exports, "setSidecarAuthToken", { enumerable: true, get: function () { return auth_1.setSidecarAuthToken; } });
+var request_trace_1 = require("./request-trace");
+Object.defineProperty(exports, "resolveRequestId", { enumerable: true, get: function () { return request_trace_1.resolveRequestId; } });
+Object.defineProperty(exports, "startRequestTraceHandler", { enumerable: true, get: function () { return request_trace_1.startRequestTraceHandler; } });
+Object.defineProperty(exports, "finishRequestTrace", { enumerable: true, get: function () { return request_trace_1.finishRequestTrace; } });
+Object.defineProperty(exports, "normalizeApiErrorCodeToken", { enumerable: true, get: function () { return request_trace_1.normalizeApiErrorCodeToken; } });
+Object.defineProperty(exports, "getRuntimeRequestTrace", { enumerable: true, get: function () { return request_trace_1.getRuntimeRequestTrace; } });
+Object.defineProperty(exports, "appendRuntimeApiRequestTrace", { enumerable: true, get: function () { return request_trace_1.appendRuntimeApiRequestTrace; } });
+Object.defineProperty(exports, "ERROR_CODE_HEADER", { enumerable: true, get: function () { return request_trace_1.ERROR_CODE_HEADER; } });
+var body_parser_1 = require("./body-parser");
+Object.defineProperty(exports, "readRequestBody", { enumerable: true, get: function () { return body_parser_1.readRequestBody; } });
+Object.defineProperty(exports, "parseJsonBody", { enumerable: true, get: function () { return body_parser_1.parseJsonBody; } });
+Object.defineProperty(exports, "sendJson", { enumerable: true, get: function () { return body_parser_1.sendJson; } });
+Object.defineProperty(exports, "sendError", { enumerable: true, get: function () { return body_parser_1.sendError; } });

package/dist/src/middleware/request-trace.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ERROR_CODE_HEADER = void 0;
+exports.resolveRequestId = resolveRequestId;
+exports.normalizeApiErrorCodeToken = normalizeApiErrorCodeToken;
+exports.appendRuntimeApiRequestTrace = appendRuntimeApiRequestTrace;
+exports.getRuntimeRequestTrace = getRuntimeRequestTrace;
+exports.startRequestTraceHandler = startRequestTraceHandler;
+exports.finishRequestTrace = finishRequestTrace;
+const crypto = __importStar(require("crypto"));
+const ERROR_CODE_HEADER = 'x-nc-error-code';
+exports.ERROR_CODE_HEADER = ERROR_CODE_HEADER;
+const MAX_TRACE_RECORDS = 5000;
+const traceRecords = [];
+function resolveRequestId(req) {
+    return req.headers['x-request-id'] || crypto.randomUUID();
+}
+function normalizeApiErrorCodeToken(value, fallback) {
+    if (typeof value === 'string')
+        return value.trim();
+    return fallback;
+}
+function appendRuntimeApiRequestTrace(record) {
+    traceRecords.push(record);
+    while (traceRecords.length > MAX_TRACE_RECORDS) {
+        traceRecords.shift();
+    }
+}
+function getRuntimeRequestTrace(requestId) {
+    if (requestId) {
+        return traceRecords.filter((r) => r.requestId === requestId);
+    }
+    return traceRecords.slice(-100);
+}
+function startRequestTraceHandler(req, res) {
+    const requestId = resolveRequestId(req);
+    const requestStartedAtMs = Date.now();
+    const requestStartedAt = new Date(requestStartedAtMs).toISOString();
+    res.setHeader('X-Request-Id', requestId);
+    return { requestId, requestStartedAtMs, requestStartedAt };
+}
+function finishRequestTrace(req, res, requestId, requestStartedAtMs, requestStartedAt, requestPath, ERROR_CODE_HEADER) {
+    const responseContentLengthHeader = Number(res.getHeader('content-length'));
+    const responseContentLength = Number.isFinite(responseContentLengthHeader)
+        ? Math.max(0, Math.floor(responseContentLengthHeader))
+        : null;
+    const responseErrorCode = normalizeApiErrorCodeToken(res.getHeader(ERROR_CODE_HEADER), '');
+    appendRuntimeApiRequestTrace({
+        requestId,
+        method: String(req.method || 'GET').trim().toUpperCase(),
+        path: requestPath,
+        statusCode: Number(res.statusCode || 0),
+        errorCode: responseErrorCode || undefined,
+        durationMs: Number((Date.now() - requestStartedAtMs).toFixed(4)),
+        startedAt: requestStartedAt,
+        finishedAt: new Date().toISOString(),
+        responseContentType: String(res.getHeader('content-type') || '').trim(),
+        responseContentLength,
+        requestContentLength: null,
+        remoteAddress: String(req.socket?.remoteAddress || '').trim(),
+        userAgent: String(req.headers['user-agent'] || '').trim().slice(0, 180),
+    });
+}

package/dist/src/notemd/AppConfigToml.js

@@ -48,6 +48,7 @@ const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const TOML = __importStar(require("@iarna/toml"));
 const constants_1 = require("./constants");
+const providerTemplates_1 = require("./providerTemplates");
 const NOTEMD_BOOLEAN_KEYS = [
     'developerMode',
     'useCustomConceptNoteFolder',
@@ -142,8 +143,8 @@ exports.DEFAULT_PATH_MODE_SETTINGS = {
     auto_reconstruct: true,
     retain_history: true,
     focus_mode: true,
-    background: 'belfast_sunset_puresky_4k.exr',
-    bg_brightness: 1.0,
+    background: '',
+    bg_brightness: 0.1,
     reading_mode: 'window',
     reader_render_mode: 'render',
     reader_toggle_source_shortcut: 'Ctrl+M',
@@ -382,7 +383,7 @@ function normalizePathModeSettingsValue(raw) {
     }
     const brightness = readNumber(section, 'bg_brightness');
     if (typeof brightness === 'number') {
-        merged.bg_brightness = clampNumber(brightness, 0.01, 10.0);
+        merged.bg_brightness = clampNumber(brightness, 0.0, 0.1);
     }
     merged.reading_mode = normalizePathModeReadingMode(readString(section, 'reading_mode') || merged.reading_mode);
     merged.reader_render_mode = normalizePathModeRenderMode(readString(section, 'reader_render_mode') || merged.reader_render_mode);
@@ -597,7 +598,7 @@ function extractNotemdSettingsFromAppConfig(appConfig) {
     return mergedSettings;
 }
 function applyNotemdSettingsToAppConfig(appConfig, settings) {
-    const nextNotemdSection = isObjectRecord(appConfig.notemd) ? { ...appConfig.notemd } : {};
+    let nextNotemdSection = isObjectRecord(appConfig.notemd) ? { ...appConfig.notemd } : {};
     const activeProvider = settings.providers.find((provider) => provider.name === settings.activeProvider) ||
         settings.providers[0] ||
         constants_1.DEFAULT_SETTINGS.providers[0];
@@ -656,6 +657,7 @@ function applyNotemdSettingsToAppConfig(appConfig, settings) {
         api_version: activeProvider.apiVersion || '',
         temperature: activeProvider.temperature,
     };
+    nextNotemdSection = (0, providerTemplates_1.mergeProviderTemplatesIntoNotemdSection)(nextNotemdSection);
     return {
         ...appConfig,
         notemd: nextNotemdSection,