virlow-mcp 3.11.7 → 3.11.8

package/dist/cli.js

@@ -435,9 +435,7 @@ var NotesService = class {
     const key = this.requireSession();
     const row = await this.api.getNote(id);
     const exposure = await this.exposure();
-    if (!exposure.allows(row.folderId)) {
-      throw new Error(`Note ${id} is in a folder that is not exposed to MCP. Turn on "Expose to MCP" in that folder's settings in the Virlow app to read it here.`);
-    }
+    this.requireExposed(exposure, row.folderId, id);
     const { title, content } = await this.decryptRow(key, row);
     return { id: row.id, title, content, folderId: row.folderId };
   }
@@ -464,6 +462,8 @@ var NotesService = class {
     return this.enqueue(async () => {
       const key = this.requireSession();
       const existingRow = await this.api.getNote(id);
+      const exposure = await this.exposure();
+      this.requireExposed(exposure, existingRow.folderId, id);
       const current = await this.decryptRow(key, existingRow);
       const title = changes.title ?? current.title;
       const content = changes.content ?? current.content;
@@ -482,6 +482,7 @@ var NotesService = class {
   async searchNotes(query, limit = 20) {
     const key = this.requireSession();
     const q = query.toLowerCase();
+    const exposure = await this.exposure();
     const results = [];
     let scanned = 0;
     let total = 0;
@@ -492,6 +493,8 @@ var NotesService = class {
       for (const row of notes) {
         if (row.hidden === true)
           continue;
+        if (!exposure.allows(row.folderId))
+          continue;
         if (scanned >= SEARCH_SCAN_CAP)
           break scan;
         scanned++;
@@ -512,18 +515,33 @@ var NotesService = class {
   }
   async moveNote(id, folderId) {
     this.requireSession();
+    const existingRow = await this.api.getNote(id);
+    const exposure = await this.exposure();
+    this.requireExposed(exposure, existingRow.folderId, id);
+    if (folderId !== null) {
+      this.requireExposed(exposure, folderId, id);
+    }
     await this.api.updateNote(id, { folderId });
   }
   async setStar(id, starred) {
     this.requireSession();
+    const existingRow = await this.api.getNote(id);
+    const exposure = await this.exposure();
+    this.requireExposed(exposure, existingRow.folderId, id);
     await this.api.updateNote(id, { starred });
   }
   async archiveNote(id, archived) {
     this.requireSession();
+    const existingRow = await this.api.getNote(id);
+    const exposure = await this.exposure();
+    this.requireExposed(exposure, existingRow.folderId, id);
     await this.api.updateNote(id, { archived });
   }
   async trashNote(id) {
     this.requireSession();
+    const existingRow = await this.api.getNote(id);
+    const exposure = await this.exposure();
+    this.requireExposed(exposure, existingRow.folderId, id);
     await this.api.updateNote(id, { deleted: true });
   }
   async listFolders() {
@@ -545,6 +563,14 @@ var NotesService = class {
     const { folders } = await this.api.listFolders();
     return computeExposure(folders);
   }
+  /** Throws unless `folderId` is exposed to MCP. Every method that reads or
+   * mutates a specific note (by id) must call this — knowing a note's id is
+   * not consent to bypass the "Expose to MCP" folder switch. */
+  requireExposed(exposure, folderId, id) {
+    if (!exposure.allows(folderId)) {
+      throw new Error(`Note ${id} is in a folder that is not exposed to MCP. Turn on "Expose to MCP" in that folder's settings in the Virlow app to access it here.`);
+    }
+  }
   async createFolder(name, parentId) {
     this.requireSession();
     const folder = await this.api.createFolder(name, parentId);
@@ -1535,7 +1561,7 @@ function startUnlockServer(api, vault, opts = {}) {
 }
 
 // src/version.ts
-var VERSION = true ? "3.11.7" : "dev";
+var VERSION = true ? "3.11.8" : "dev";
 
 // src/server.ts
 function textResult(text) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "virlow-mcp",
-  "version": "3.11.7",
+  "version": "3.11.8",
   "description": "Local MCP server for Virlow Secure Notes: end-to-end-encrypted AI memories and notes for Cursor, Claude, Codex, and any MCP client.",
   "license": "MIT",
   "type": "module",
@@ -34,9 +34,9 @@
     "esbuild": "^0.25.0",
     "typescript": "^5.8.0",
     "vitest": "^3.0.0",
-    "@batalabs/virlow-crypto": "3.11.7",
-    "@batalabs/virlow-memory": "3.11.7",
-    "@batalabs/virlow-mcp-core": "3.11.7"
+    "@batalabs/virlow-crypto": "3.11.8",
+    "@batalabs/virlow-memory": "3.11.8",
+    "@batalabs/virlow-mcp-core": "3.11.8"
   },
   "scripts": {
     "build": "node build.mjs",