virlow-mcp 3.13.0 → 3.14.1

package/README.md

@@ -28,6 +28,29 @@ Your account credentials and master password are just as protected from the AI:
 entered exclusively into a local browser form served by this process, never passed
 through a tool call, and never seen by the AI model.
 
+### This is the local server, and that distinction is the whole security model
+
+Every claim above is about **this package**, running on **your machine**. Virlow also
+offers a **hosted connector** — the same 19 tools, served from Virlow's own servers, so a
+client can connect by URL with nothing installed. It is a genuinely different trust model,
+and the sentence "the key never leaves it" is the part that stops being true:
+
+| | this local server | the hosted connector |
+| --- | --- | --- |
+| where the key is derived | this process, on your machine | Virlow's API process |
+| who can read a decrypted note | this process | this process, and Virlow's server |
+| what an unlock sends | nothing; the password stays local | your master password, over HTTPS |
+| what it takes to run | Node on your machine | nothing |
+| session lifetime | 4 hours idle | 30 minutes idle |
+
+The hosted connector is **off by default** on every account and has to be switched on in
+Virlow's settings. If you are reading this page, you are looking at the option that keeps
+the key on your own hardware — that is the reason to prefer it, and the reason this
+package exists.
+
+See `SECURITY.md` in the Virlow repository for what the hosted mode does and does not
+guarantee.
+
 ## Install / configure
 
 virlow-mcp needs no separate install — `npx -y virlow-mcp` fetches and runs it directly.

package/dist/cli.js

@@ -664,8 +664,16 @@ function findSimilar(embedding, entries, threshold = DEDUPE_REPORT_THRESHOLD) {
 }
 
 // ../../packages/memory-core/dist/embedder.js
-import { env, pipeline } from "@huggingface/transformers";
+var transformers = null;
+function loadTransformers() {
+  transformers ??= import("@huggingface/transformers").catch((err) => {
+    transformers = null;
+    throw err;
+  });
+  return transformers;
+}
 async function createEmbedder(opts = {}) {
+  const { env, pipeline } = await loadTransformers();
   if (opts.cacheDir) {
     env.cacheDir = opts.cacheDir;
   }
@@ -1873,7 +1881,7 @@ function startUnlockServer(api, vault, opts = {}) {
 }
 
 // src/version.ts
-var VERSION = true ? "3.13.0" : "dev";
+var VERSION = true ? "3.14.1" : "dev";
 
 // src/server.ts
 function defaultEmbeddingCacheDir() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "virlow-mcp",
-  "version": "3.13.0",
+  "version": "3.14.1",
   "description": "Local MCP server for Virlow Secure Notes: end-to-end-encrypted AI memories and notes for Cursor, Claude, Codex, and any MCP client.",
   "license": "MIT",
   "type": "module",
@@ -34,9 +34,9 @@
     "esbuild": "^0.25.0",
     "typescript": "^5.8.0",
     "vitest": "^3.0.0",
-    "@batalabs/virlow-memory": "3.13.0",
-    "@batalabs/virlow-mcp-core": "3.13.0",
-    "@batalabs/virlow-crypto": "3.13.0"
+    "@batalabs/virlow-crypto": "3.14.1",
+    "@batalabs/virlow-memory": "3.14.1",
+    "@batalabs/virlow-mcp-core": "3.14.1"
   },
   "scripts": {
     "build": "node build.mjs",