Wymcp tool notebook — an open SQL surface over notebook.db, the node's own private store, together with the actions that keep it safe.

The store's schema belongs to the user and the LLM: this tool runs whatever SQL it is handed. The only things it refuses are the two that would break the contract around it — reaching outside this database, and letting a read write. Delegates to YmerNode.Notebook and YmerNode.Notebook.Backup.

Backup lives on this tool rather than beside it because the node has exactly one database worth keeping: "back up" and "back up the notebook" are the same act, and a caller who has just been told the store is destructible should find the undo in the same place.

Destructive — DROP, DELETE and restore are all reachable — and closed-world, since everything it touches is a local file.