MemStrata CL1 Workspace

Version 0.1.0, publisher NeerajYadav9991. A thin TypeScript client of the existing public CL1 API; no retrieval, selection, engine or model implementation. It needs a provisioned MemStrata CL1 service and a scoped grant. Licensed under the MemStrata commercial license (see LICENSE), Copyright (c) 2026 Called It Inc.

Disabled by default; a trusted local workspace and explicit owner opt-in are required. Grants live only in VS Code SecretStorage under an endpoint/project key. Settings contain nonsecret connection/scope choices. Clearing a local grant does not revoke other holders: revoke it at the service separately.

Owner-invoked commands

Refresh paginated committed/indexed/searchable status. Freshness is a recorded observation, not exact completion timing.
Inspect context packets with UTF-8 hash, source/session, quote-locator and profile checks. This does not prove model consumption.
Inspect a current source and metadata.
Import editor text, replace a revision or delete a source after modal consent. The service must also accept a write grant. No embedding job starts automatically.
Export on the local endpoint only. A modal warns that full source text remains on disk until the customer deletes it, independently of MemStrata Delete. A Save dialog has no default URI; any open-workspace destination requires a second version-control warning. Cancellation makes no request/write. One request and one write go only to the chosen URI. No extension temp/state copy or body log is made. Write failure is reported safely, without retry.

Remote credentials require HTTPS; redirects are refused. Remote export is refused before secret access or transport. Future remote v1 excludes export and import. Grants appear only in Authorization headers, never settings, URLs or webview HTML. The escaped dashboard has a nonce-limited script policy, no iframe/local-resource access. No watcher, polling, daemon, scheduled export, telemetry or model-callable write tool. Optional CL1Options.deadlineMs is 1..120000; commands omit it by default. A late-result refusal is not a claim of compute interruption.

Build and audit locally

npm ci --ignore-scripts --registry=https://registry.npmjs.org --no-audit --no-fund
npm run compile
npm test
npm run build
npm run package -- --allow-missing-repository --out <temporary-folder>/candidate.vsix
python test/audit_vsix.py <temporary-folder>/candidate.vsix

The audit lists every file, enforces the closed thin-client inventory, rejects Python/private/model artifacts and credential patterns, and checks package identity. Development sources, tests, dependencies and source maps are excluded. Only lockfile dependencies are installed; install scripts are disabled.

Never commit a real token. Real VS Code activation, Copilot delivery and cross-platform host behavior remain separate qualification; unit tests and a file audit do not establish them.