@de-otio/chaoskb-client 0.2.0

package/dist/cli/mcp-server.js

@@ -0,0 +1,366 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { handleKbIngest } from './tools/kb-ingest.js';
+import { handleKbQuery } from './tools/kb-query.js';
+import { handleKbList } from './tools/kb-list.js';
+import { handleKbDelete } from './tools/kb-delete.js';
+import { handleKbSummary } from './tools/kb-summary.js';
+import { handleKbQueryShared } from './tools/kb-query-shared.js';
+const TOOL_DEFINITIONS = [
+    {
+        name: 'kb_ingest',
+        description: 'Ingest a URL into the knowledge base. Fetches content, extracts text, chunks, embeds, encrypts, and stores locally.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                url: { type: 'string', description: 'URL to ingest' },
+                tags: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'Optional tags to assign to the source',
+                },
+                kb: {
+                    type: 'string',
+                    description: 'Named KB to ingest into (required when multiple KBs exist, defaults to active KB)',
+                },
+            },
+            required: ['url'],
+        },
+    },
+    {
+        name: 'kb_query',
+        description: 'Search the knowledge base. Supports semantic (embedding) search, keyword (FTS5) search, or hybrid (both combined). Without a kb parameter, searches all KBs and merges results.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                query: { type: 'string', description: 'Search query' },
+                limit: {
+                    type: 'number',
+                    description: 'Maximum number of results to return (default: 10)',
+                },
+                mode: {
+                    type: 'string',
+                    enum: ['semantic', 'keyword', 'hybrid'],
+                    description: 'Search mode: "semantic" (default) for meaning-based, "keyword" for exact text match, "hybrid" for combined ranking',
+                },
+                kb: {
+                    type: 'string',
+                    description: 'Named KB to search (omit to search all KBs)',
+                },
+            },
+            required: ['query'],
+        },
+    },
+    {
+        name: 'kb_list',
+        description: 'List saved sources in the knowledge base with metadata. Without a kb parameter, lists sources across all KBs.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                limit: {
+                    type: 'number',
+                    description: 'Maximum number of sources to return (default: 20)',
+                },
+                offset: {
+                    type: 'number',
+                    description: 'Offset for pagination (default: 0)',
+                },
+                tags: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'Filter by tags',
+                },
+                kb: {
+                    type: 'string',
+                    description: 'Named KB to list (omit to list all KBs)',
+                },
+            },
+        },
+    },
+    {
+        name: 'kb_delete',
+        description: 'Soft-delete a source and its chunks from the knowledge base.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                id: { type: 'string', description: 'Source ID to delete' },
+            },
+            required: ['id'],
+        },
+    },
+    {
+        name: 'kb_summary',
+        description: 'Get a summary of articles added during a time period. Returns structured data for the agent to summarize.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                period: {
+                    type: 'string',
+                    description: 'Time period: "week", "month", "year", or custom range "YYYY-MM-DD:YYYY-MM-DD"',
+                },
+            },
+            required: ['period'],
+        },
+    },
+    {
+        name: 'kb_query_shared',
+        description: 'Search a shared project knowledge base. Like kb_query but includes content attribution (project name, uploader) in each result for provenance tracking.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                query: { type: 'string', description: 'Search query' },
+                project: { type: 'string', description: 'Shared project name to search' },
+                limit: {
+                    type: 'number',
+                    description: 'Maximum number of results to return (default: 10)',
+                },
+                mode: {
+                    type: 'string',
+                    enum: ['semantic', 'keyword', 'hybrid'],
+                    description: 'Search mode: "semantic" (default), "keyword", or "hybrid"',
+                },
+            },
+            required: ['query', 'project'],
+        },
+    },
+];
+export function createMcpServer(deps) {
+    const server = new Server({ name: 'chaoskb', version: '0.1.0' }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: TOOL_DEFINITIONS,
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        const { name, arguments: args } = request.params;
+        try {
+            switch (name) {
+                case 'kb_ingest': {
+                    const result = await handleKbIngest({
+                        url: args.url,
+                        tags: args.tags,
+                    }, deps);
+                    return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+                }
+                case 'kb_query': {
+                    const result = await handleKbQuery({
+                        query: args.query,
+                        limit: args.limit,
+                        mode: args.mode,
+                    }, deps);
+                    return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+                }
+                case 'kb_list': {
+                    const result = await handleKbList({
+                        limit: args.limit,
+                        offset: args.offset,
+                        tags: args.tags,
+                    }, deps);
+                    return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+                }
+                case 'kb_delete': {
+                    const result = await handleKbDelete({
+                        id: args.id,
+                    }, deps);
+                    return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+                }
+                case 'kb_summary': {
+                    const result = await handleKbSummary({
+                        period: args.period,
+                    }, deps);
+                    return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+                }
+                case 'kb_query_shared': {
+                    const result = await handleKbQueryShared({
+                        query: args.query,
+                        project: args.project,
+                        limit: args.limit,
+                        mode: args.mode,
+                    }, deps);
+                    return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+                }
+                default:
+                    return {
+                        content: [{ type: 'text', text: `Unknown tool: ${name}` }],
+                        isError: true,
+                    };
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return {
+                content: [{ type: 'text', text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+    return server;
+}
+export async function startMcpServer(options) {
+    // In production, dependencies are initialized here.
+    // For now, we set up the server structure and connect transport.
+    // Actual initialization requires loading config, opening DB, etc.
+    const { loadConfig } = await import('./commands/setup.js');
+    let config = await loadConfig();
+    if (!config && process.env.CHAOSKB_UNSAFE_NO_KEYRING === '1') {
+        // In CI/test mode, synthesize a minimal config so setup is not required
+        config = { securityTier: 'standard', projects: [] };
+    }
+    if (!config) {
+        // Auto-bootstrap on first launch
+        process.stderr.write('First launch — setting up ChaosKB...\n');
+        const { bootstrap } = await import('./bootstrap.js');
+        await bootstrap();
+        config = await loadConfig();
+        if (!config) {
+            process.stderr.write('Bootstrap failed. See ~/.chaoskb/ for details.\n');
+            process.exit(1);
+        }
+        process.stderr.write('ChaosKB is ready.\n');
+    }
+    // These would be real implementations in production.
+    // The module structure supports dependency injection for testability.
+    // For the MCP server startup, we dynamically load the real implementations.
+    // Placeholder: in a real build, these come from the actual modules
+    const deps = await initializeDependencies(options, config);
+    const server = createMcpServer(deps);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+async function initializeDependencies(options, config) {
+    // Dynamic imports to keep startup fast when running in CLI mode
+    const { KeyringService } = await import('../crypto/keyring.js');
+    const { EncryptionService } = await import('../crypto/encryption-service.js');
+    const { DatabaseManager } = await import('../storage/database-manager.js');
+    const { ModelManager } = await import('../pipeline/model-manager.js');
+    const { Embedder } = await import('../pipeline/embedder.js');
+    const { ContentPipeline } = await import('../pipeline/content-pipeline.js');
+    // 1. Set up encryption service
+    const encryption = new EncryptionService();
+    // 2. Retrieve master key from OS keyring (or generate ephemeral key for CI)
+    let masterKey;
+    if (process.env.CHAOSKB_UNSAFE_NO_KEYRING === '1') {
+        process.stderr.write('\n⚠ CHAOSKB_UNSAFE_NO_KEYRING=1 — key material is NOT protected by OS keyring. For testing only.\n\n');
+        masterKey = encryption.generateMasterKey();
+    }
+    else {
+        if (config.securityTier === 'maximum') {
+            // Maximum tier: decrypt master key from passphrase-wrapped blob
+            masterKey = await unlockMaximumTierKey();
+        }
+        else {
+            const keyring = new KeyringService();
+            masterKey = await keyring.retrieve('chaoskb', 'master-key');
+            if (!masterKey && process.env.CHAOSKB_KEY_STORAGE === 'file') {
+                // File-based key fallback
+                const { FILE_KEY_PATH } = await import('./bootstrap.js');
+                const fs = await import('node:fs');
+                try {
+                    const hex = fs.readFileSync(FILE_KEY_PATH, 'utf-8').trim();
+                    const { SecureBuffer } = await import('../crypto/secure-buffer.js');
+                    masterKey = SecureBuffer.from(Buffer.from(hex, 'hex'));
+                }
+                catch {
+                    // Fall through to the error below
+                }
+            }
+        }
+        if (!masterKey) {
+            throw new Error('Master key not found. Run `chaoskb-mcp setup` or ensure your OS keyring is accessible.');
+        }
+    }
+    // 3. Derive key set from master key
+    const keys = encryption.deriveKeys(masterKey);
+    // 3. Initialize database
+    const dbManager = new DatabaseManager();
+    const db = options.projectName
+        ? dbManager.getProjectDb(options.projectName)
+        : dbManager.getPersonalDb();
+    // 4. Load embedding index from database
+    db.embeddingIndex.load();
+    // 5. Ensure ONNX model is available and create content pipeline
+    const modelManager = new ModelManager();
+    const modelPath = await modelManager.ensureModel((downloaded, total) => {
+        if (total > 0) {
+            // Write progress to stderr (stdout is reserved for MCP JSON-RPC)
+            process.stderr.write(`\rDownloading embedding model: ${Math.round((downloaded / total) * 100)}%`);
+        }
+    });
+    // Clear the progress line
+    process.stderr.write('\r\x1b[K');
+    const embedder = new Embedder(modelPath);
+    const pipeline = new ContentPipeline({
+        maxChunkTokens: 500,
+        overlapTokens: 50,
+        fetchTimeoutMs: 30000,
+        maxRedirects: 5,
+        userAgent: 'ChaosKB/0.1',
+    }, embedder);
+    return { db, dbManager, pipeline, encryption, keys };
+}
+/**
+ * Unlock the master key for maximum security tier.
+ *
+ * Reads the encrypted key blob from ~/.chaoskb/master-key.enc,
+ * prompts for the passphrase on stderr, derives the wrapping key
+ * with Argon2id, and decrypts with XChaCha20-Poly1305.
+ *
+ * MCP servers communicate over stdin/stdout (JSON-RPC), so the
+ * passphrase prompt goes to stderr. This only works when stderr
+ * is a TTY (i.e. the agent spawned the process with a PTY).
+ * In non-TTY environments, maximum tier cannot unlock.
+ */
+async function unlockMaximumTierKey() {
+    const fs = await import('node:fs');
+    const path = await import('node:path');
+    const { CHAOSKB_DIR } = await import('./bootstrap.js');
+    const blobPath = path.join(CHAOSKB_DIR, 'master-key.enc');
+    let blobJson;
+    try {
+        blobJson = fs.readFileSync(blobPath, 'utf-8');
+    }
+    catch {
+        throw new Error(`Maximum tier key blob not found at ${blobPath}. ` +
+            'Re-run `chaoskb-mcp config upgrade-tier maximum` or reinstall.');
+    }
+    const blob = JSON.parse(blobJson);
+    if (blob.v !== 1 || blob.kdf !== 'argon2id') {
+        throw new Error(`Unsupported key blob format: v=${blob.v}, kdf=${blob.kdf}`);
+    }
+    // Prompt for passphrase on stderr (stdout is reserved for MCP JSON-RPC)
+    const readline = await import('node:readline');
+    const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
+    const passphrase = await new Promise((resolve) => {
+        rl.question('Enter your ChaosKB passphrase: ', (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+    // Derive wrapping key
+    const { argon2Derive } = await import('../crypto/index.js');
+    const salt = Buffer.from(blob.salt, 'hex');
+    const wrappingKey = argon2Derive(passphrase, salt);
+    try {
+        // Decrypt master key
+        const { aeadDecrypt } = await import('../crypto/aead.js');
+        const nonce = new Uint8Array(Buffer.from(blob.nonce, 'hex'));
+        const ctAndTag = Buffer.from(blob.ciphertext, 'hex');
+        // XChaCha20-Poly1305 tag is last 16 bytes
+        const ciphertext = new Uint8Array(ctAndTag.subarray(0, ctAndTag.length - 16));
+        const tag = new Uint8Array(ctAndTag.subarray(ctAndTag.length - 16));
+        const aad = Buffer.from('chaoskb-master-key-wrap-v1');
+        let plaintext;
+        try {
+            plaintext = aeadDecrypt(wrappingKey.buffer, nonce, ciphertext, tag, aad);
+        }
+        catch {
+            throw new Error('Incorrect passphrase.');
+        }
+        const { SecureBuffer } = await import('../crypto/secure-buffer.js');
+        return SecureBuffer.from(Buffer.from(plaintext));
+    }
+    finally {
+        wrappingKey.dispose();
+    }
+}
+export { TOOL_DEFINITIONS };
+//# sourceMappingURL=mcp-server.js.map

package/dist/cli/mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../../cli/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAI5C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAcjE,MAAM,gBAAgB,GAAG;IACvB;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,qHAAqH;QACvH,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;gBACrD,IAAI,EAAE;oBACJ,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,uCAAuC;iBACrD;gBACD,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mFAAmF;iBACjG;aACF;YACD,QAAQ,EAAE,CAAC,KAAK,CAAC;SAClB;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,iLAAiL;QACnL,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;gBACtD,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mDAAmD;iBACjE;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;oBACvC,WAAW,EAAE,oHAAoH;iBAClI;gBACD,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6CAA6C;iBAC3D;aACF;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EACT,+GAA+G;QACjH,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mDAAmD;iBACjE;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oCAAoC;iBAClD;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,gBAAgB;iBAC9B;gBACD,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,yCAAyC;iBACvD;aACF;SACF;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,8DAA8D;QAChE,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;aAC3D;YACD,QAAQ,EAAE,CAAC,IAAI,CAAC;SACjB;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,2GAA2G;QAC7G,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,+EAA+E;iBAClF;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,yJAAyJ;QAC3J,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;gBACtD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;gBACzE,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mDAAmD;iBACjE;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;oBACvC,WAAW,EAAE,2DAA2D;iBACzE;aACF;YACD,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;SAC/B;KACF;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,IAAqB;IACnD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EACrC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,IAAI,CAAC;YACH,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC;wBACE,GAAG,EAAG,IAAgC,CAAC,GAAa;wBACpD,IAAI,EAAG,IAAgC,CAAC,IAA4B;qBACrE,EACD,IAAI,CACL,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChF,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC;wBACE,KAAK,EAAG,IAAgC,CAAC,KAAe;wBACxD,KAAK,EAAG,IAAgC,CAAC,KAA2B;wBACpE,IAAI,EAAG,IAAgC,CAAC,IAAqD;qBAC9F,EACD,IAAI,CACL,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChF,CAAC;gBACD,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B;wBACE,KAAK,EAAG,IAAgC,CAAC,KAA2B;wBACpE,MAAM,EAAG,IAAgC,CAAC,MAA4B;wBACtE,IAAI,EAAG,IAAgC,CAAC,IAA4B;qBACrE,EACD,IAAI,CACL,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChF,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC;wBACE,EAAE,EAAG,IAAgC,CAAC,EAAY;qBACnD,EACD,IAAI,CACL,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChF,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;wBACE,MAAM,EAAG,IAAgC,CAAC,MAAgB;qBAC3D,EACD,IAAI,CACL,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChF,CAAC;gBACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC;wBACE,KAAK,EAAG,IAAgC,CAAC,KAAe;wBACxD,OAAO,EAAG,IAAgC,CAAC,OAAiB;wBAC5D,KAAK,EAAG,IAAgC,CAAC,KAA2B;wBACpE,IAAI,EAAG,IAAgC,CAAC,IAAqD;qBAC9F,EACD,IAAI,CACL,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChF,CAAC;gBACD;oBACE,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;wBAC1D,OAAO,EAAE,IAAI;qBACd,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBACtD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAyB;IAC5D,oDAAoD;IACpD,iEAAiE;IACjE,kEAAkE;IAElE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAEhC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,EAAE,CAAC;QAC7D,wEAAwE;QACxE,MAAM,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,iCAAiC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,SAAS,EAAE,CAAC;QAClB,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IAED,qDAAqD;IACrD,sEAAsE;IACtE,4EAA4E;IAE5E,mEAAmE;IACnE,MAAM,IAAI,GAAoB,MAAM,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,OAAyB,EACzB,MAAqB;IAErB,gEAAgE;IAChE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAChE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC9E,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IAC3E,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IACtE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC7D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAE5E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAE3C,4EAA4E;IAC5E,IAAI,SAAS,CAAC;IACd,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,EAAE,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sGAAsG,CACvG,CAAC;QACF,SAAS,GAAG,UAAU,CAAC,iBAAiB,EAAE,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,gEAAgE;YAChE,SAAS,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;YACrC,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAC5D,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,EAAE,CAAC;gBAC7D,0BAA0B;gBAC1B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACzD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;oBACpE,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,kCAAkC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAE9C,yBAAyB;IACzB,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IACxC,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW;QAC5B,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;IAE9B,wCAAwC;IACxC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAEzB,gEAAgE;IAChE,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACrE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,iEAAiE;YACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kCAAkC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,0BAA0B;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,eAAe,CAClC;QACE,cAAc,EAAE,GAAG;QACnB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,aAAa;KACzB,EACD,QAAQ,CACT,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAE1D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,IAAI;YAClD,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAG/B,CAAC;IAEF,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,wEAAwE;IACxE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACvD,EAAE,CAAC,QAAQ,CAAC,iCAAiC,EAAE,CAAC,MAAM,EAAE,EAAE;YACxD,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sBAAsB;IACtB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,qBAAqB;QACrB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrD,0CAA0C;QAC1C,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAEtD,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;QACpE,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAaD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/cli/tools/kb-delete.d.ts

@@ -0,0 +1,10 @@
+import type { McpDependencies } from '../mcp-server.js';
+export interface KbDeleteInput {
+    id: string;
+}
+export interface KbDeleteResult {
+    id: string;
+    deleted: true;
+}
+export declare function handleKbDelete(input: KbDeleteInput, deps: McpDependencies): Promise<KbDeleteResult>;
+//# sourceMappingURL=kb-delete.d.ts.map

package/dist/cli/tools/kb-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-delete.d.ts","sourceRoot":"","sources":["../../../cli/tools/kb-delete.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,IAAI,CAAC;CACf;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,cAAc,CAAC,CAgCzB"}

package/dist/cli/tools/kb-delete.js

@@ -0,0 +1,28 @@
+import { SyncStatus } from '../../storage/types.js';
+export async function handleKbDelete(input, deps) {
+    const { db } = deps;
+    // 1. Verify the source exists
+    const source = db.sources.getById(input.id);
+    if (!source) {
+        throw new Error(`Source not found: ${input.id}`);
+    }
+    if (source.deletedAt) {
+        throw new Error(`Source already deleted: ${input.id}`);
+    }
+    // 2. Soft-delete the source and its chunks
+    const deleted = db.sources.softDelete(input.id);
+    if (!deleted) {
+        throw new Error(`Failed to delete source: ${input.id}`);
+    }
+    // 3. Remove from embedding index
+    db.embeddingIndex.remove(input.id);
+    // 4. Set sync status to pending_delete for the source and all chunks
+    db.syncStatus.set(input.id, SyncStatus.PendingDelete);
+    // Also mark chunk blobs for deletion
+    const chunks = db.chunks.getBySourceId(input.id);
+    for (const chunk of chunks) {
+        db.syncStatus.set(chunk.id, SyncStatus.PendingDelete);
+    }
+    return { id: input.id, deleted: true };
+}
+//# sourceMappingURL=kb-delete.js.map

package/dist/cli/tools/kb-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-delete.js","sourceRoot":"","sources":["../../../cli/tools/kb-delete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAWpD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAoB,EACpB,IAAqB;IAErB,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,8BAA8B;IAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,2CAA2C;IAC3C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,iCAAiC;IACjC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEnC,qEAAqE;IACrE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAEtD,qCAAqC;IACrC,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC"}

package/dist/cli/tools/kb-ingest.d.ts

@@ -0,0 +1,13 @@
+import type { McpDependencies } from '../mcp-server.js';
+export interface KbIngestInput {
+    url: string;
+    tags?: string[];
+}
+export interface KbIngestResult {
+    title: string;
+    url: string;
+    chunkCount: number;
+    blobIds: string[];
+}
+export declare function handleKbIngest(input: KbIngestInput, deps: McpDependencies): Promise<KbIngestResult>;
+//# sourceMappingURL=kb-ingest.d.ts.map

package/dist/cli/tools/kb-ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-ingest.d.ts","sourceRoot":"","sources":["../../../cli/tools/kb-ingest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAIxD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,cAAc,CAAC,CAoFzB"}

package/dist/cli/tools/kb-ingest.js

@@ -0,0 +1,72 @@
+export async function handleKbIngest(input, deps) {
+    const { db, pipeline, encryption, keys } = deps;
+    // 1. Fetch and extract content from URL
+    const extracted = await pipeline.fetchAndExtract(input.url);
+    // 2. Chunk the extracted text
+    const chunks = pipeline.chunk(extracted.content);
+    // 3. Embed all chunks
+    const embeddedChunks = await pipeline.embedChunks(chunks);
+    // 4. Generate blob IDs
+    const sourceId = encryption.generateBlobId();
+    const chunkBlobIds = embeddedChunks.map(() => encryption.generateBlobId());
+    const allBlobIds = [sourceId, ...chunkBlobIds];
+    // 5. Encrypt source payload
+    const sourcePayload = {
+        type: 'source',
+        url: input.url,
+        title: extracted.title,
+        tags: input.tags,
+        chunkCount: embeddedChunks.length,
+        chunkIds: chunkBlobIds,
+    };
+    encryption.encrypt(sourcePayload, keys, 'CEK');
+    // 6. Encrypt each chunk payload
+    for (let i = 0; i < embeddedChunks.length; i++) {
+        const ec = embeddedChunks[i];
+        const chunkPayload = {
+            type: 'chunk',
+            sourceId,
+            index: ec.index,
+            model: ec.model,
+            content: ec.content,
+            tokenCount: ec.tokenCount,
+            embedding: Array.from(ec.embedding),
+        };
+        encryption.encrypt(chunkPayload, keys, 'CEK');
+    }
+    // 7. Store source record in database
+    db.sources.insert({
+        id: sourceId,
+        url: input.url,
+        title: extracted.title,
+        tags: input.tags ?? [],
+        chunkCount: embeddedChunks.length,
+        blobSizeBytes: extracted.byteLength,
+    });
+    // 8. Store chunk records with embeddings
+    const chunkRecords = embeddedChunks.map((ec, _i) => ({
+        sourceId,
+        chunkIndex: ec.index,
+        content: ec.content,
+        embedding: ec.embedding,
+        tokenCount: ec.tokenCount,
+        model: ec.model,
+    }));
+    db.chunks.insertMany(chunkRecords);
+    // 9. Add embeddings to in-memory index
+    db.embeddingIndex.add(sourceId, embeddedChunks.map((ec) => ({
+        chunkIndex: ec.index,
+        embedding: ec.embedding,
+    })));
+    // 10. Set sync status to local_only for all blobs
+    for (const blobId of allBlobIds) {
+        db.syncStatus.set(blobId, 'local_only');
+    }
+    return {
+        title: extracted.title,
+        url: input.url,
+        chunkCount: embeddedChunks.length,
+        blobIds: allBlobIds,
+    };
+}
+//# sourceMappingURL=kb-ingest.js.map

package/dist/cli/tools/kb-ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-ingest.js","sourceRoot":"","sources":["../../../cli/tools/kb-ingest.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAoB,EACpB,IAAqB;IAErB,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAEhD,wCAAwC;IACxC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE5D,8BAA8B;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAEjD,sBAAsB;IACtB,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1D,uBAAuB;IACvB,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,GAAG,YAAY,CAAC,CAAC;IAE/C,4BAA4B;IAC5B,MAAM,aAAa,GAAkB;QACnC,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,cAAc,CAAC,MAAM;QACjC,QAAQ,EAAE,YAAY;KACvB,CAAC;IACF,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAE/C,gCAAgC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,YAAY,GAAiB;YACjC,IAAI,EAAE,OAAO;YACb,QAAQ;YACR,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC;SACpC,CAAC;QACF,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,qCAAqC;IACrC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,QAAQ;QACZ,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,UAAU,EAAE,cAAc,CAAC,MAAM;QACjC,aAAa,EAAE,SAAS,CAAC,UAAU;KACpC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACnD,QAAQ;QACR,UAAU,EAAE,EAAE,CAAC,KAAK;QACpB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,KAAK,EAAE,EAAE,CAAC,KAAK;KAChB,CAAC,CAAC,CAAC;IACJ,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEnC,uCAAuC;IACvC,EAAE,CAAC,cAAc,CAAC,GAAG,CACnB,QAAQ,EACR,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,UAAU,EAAE,EAAE,CAAC,KAAK;QACpB,SAAS,EAAE,EAAE,CAAC,SAAS;KACxB,CAAC,CAAC,CACJ,CAAC;IAEF,kDAAkD;IAClD,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,YAA0B,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,UAAU,EAAE,cAAc,CAAC,MAAM;QACjC,OAAO,EAAE,UAAU;KACpB,CAAC;AACJ,CAAC"}

package/dist/cli/tools/kb-list.d.ts

@@ -0,0 +1,20 @@
+import type { McpDependencies } from '../mcp-server.js';
+export interface KbListInput {
+    limit?: number;
+    offset?: number;
+    tags?: string[];
+}
+export interface KbListSourceItem {
+    id: string;
+    title: string;
+    url: string;
+    tags: string[];
+    chunkCount: number;
+    createdAt: string;
+}
+export interface KbListResult {
+    sources: KbListSourceItem[];
+    total: number;
+}
+export declare function handleKbList(input: KbListInput, deps: McpDependencies): Promise<KbListResult>;
+//# sourceMappingURL=kb-list.d.ts.map

package/dist/cli/tools/kb-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-list.d.ts","sourceRoot":"","sources":["../../../cli/tools/kb-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,YAAY,CAAC,CA0BvB"}

package/dist/cli/tools/kb-list.js

@@ -0,0 +1,24 @@
+export async function handleKbList(input, deps) {
+    const { db } = deps;
+    const limit = input.limit ?? 20;
+    const offset = input.offset ?? 0;
+    const filter = {
+        tags: input.tags,
+        includeDeleted: false,
+    };
+    const pagination = { limit, offset };
+    const sources = db.sources.list(filter, pagination);
+    const total = db.sources.count(filter);
+    return {
+        sources: sources.map((s) => ({
+            id: s.id,
+            title: s.title,
+            url: s.url,
+            tags: s.tags,
+            chunkCount: s.chunkCount,
+            createdAt: s.createdAt,
+        })),
+        total,
+    };
+}
+//# sourceMappingURL=kb-list.js.map

package/dist/cli/tools/kb-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-list.js","sourceRoot":"","sources":["../../../cli/tools/kb-list.ts"],"names":[],"mappings":"AAsBA,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAkB,EAClB,IAAqB;IAErB,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,cAAc,EAAE,KAAK;KACtB,CAAC;IAEF,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAErC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;QACH,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/cli/tools/kb-query-shared.d.ts

@@ -0,0 +1,27 @@
+import type { McpDependencies } from '../mcp-server.js';
+import type { KbQueryInput, KbQueryResultItem } from './kb-query.js';
+export interface SharedSource {
+    project: string;
+    uploader: string;
+    type: 'shared';
+}
+export interface KbQuerySharedResultItem extends KbQueryResultItem {
+    source: SharedSource;
+}
+export interface KbQuerySharedResult {
+    results: KbQuerySharedResultItem[];
+    mode: string;
+}
+export interface KbQuerySharedInput extends KbQueryInput {
+    project: string;
+    uploader?: string;
+}
+/**
+ * Wraps the existing kb-query logic but adds attribution metadata
+ * (`source: { project, uploader, type: 'shared' }`) to each result.
+ *
+ * This makes content provenance visible to the agent when querying
+ * shared project knowledge bases.
+ */
+export declare function handleKbQueryShared(input: KbQuerySharedInput, deps: McpDependencies): Promise<KbQuerySharedResult>;
+//# sourceMappingURL=kb-query-shared.d.ts.map

package/dist/cli/tools/kb-query-shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-query-shared.d.ts","sourceRoot":"","sources":["../../../cli/tools/kb-query-shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAiB,MAAM,eAAe,CAAC;AAEpF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,mBAAmB,CAAC,CAuB9B"}

package/dist/cli/tools/kb-query-shared.js

@@ -0,0 +1,28 @@
+import { handleKbQuery } from './kb-query.js';
+/**
+ * Wraps the existing kb-query logic but adds attribution metadata
+ * (`source: { project, uploader, type: 'shared' }`) to each result.
+ *
+ * This makes content provenance visible to the agent when querying
+ * shared project knowledge bases.
+ */
+export async function handleKbQueryShared(input, deps) {
+    const baseResult = await handleKbQuery({
+        query: input.query,
+        limit: input.limit,
+        mode: input.mode,
+    }, deps);
+    const results = baseResult.results.map((item) => ({
+        ...item,
+        source: {
+            project: input.project,
+            uploader: input.uploader ?? 'unknown',
+            type: 'shared',
+        },
+    }));
+    return {
+        results,
+        mode: baseResult.mode,
+    };
+}
+//# sourceMappingURL=kb-query-shared.js.map

package/dist/cli/tools/kb-query-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-query-shared.js","sourceRoot":"","sources":["../../../cli/tools/kb-query-shared.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAuB9C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAyB,EACzB,IAAqB;IAErB,MAAM,UAAU,GAAkB,MAAM,aAAa,CACnD;QACE,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,EACD,IAAI,CACL,CAAC;IAEF,MAAM,OAAO,GAA8B,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,GAAG,IAAI;QACP,MAAM,EAAE;YACN,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;YACrC,IAAI,EAAE,QAAiB;SACxB;KACF,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,OAAO;QACP,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC;AACJ,CAAC"}