@kawacode/mcp 5.0.0

package/build/services/repo-encryption.js

@@ -0,0 +1,92 @@
+/**
+ * Repository content encryption for zero-knowledge block assignment.
+ *
+ * Replicates Muninn Gardener's encryption.rs for intent block content:
+ * - Key derivation: PBKDF2-HMAC-SHA256, 600,000 iterations
+ * - Key material: "{initialCommitSHA}-{origin}"
+ * - Salt: "kawa-code-zero-knowledge-v1"
+ * - Cipher: AES-256-GCM with random 12-byte IV
+ * - Output: JSON string {"encryptedContent", "iv", "authTag"}
+ */
+import * as crypto from 'crypto';
+import { execSync } from 'child_process';
+// Cache derived keys by "initialCommit:origin" to avoid repeated 600K-iteration PBKDF2
+const keyCache = new Map();
+/**
+ * Derive a 32-byte AES key from the repo's initial commit SHA and origin.
+ *
+ * Matches Muninn's derive_repository_key():
+ * - key material = "{initialCommit}-{origin}"
+ * - salt = "kawa-code-zero-knowledge-v1"
+ * - 600,000 PBKDF2-HMAC-SHA256 iterations
+ */
+export function deriveRepoKey(initialCommit, origin) {
+    const cacheKey = `${initialCommit.trim()}:${origin}`;
+    const cached = keyCache.get(cacheKey);
+    if (cached)
+        return cached;
+    const keyMaterial = `${initialCommit.trim()}-${origin}`;
+    const salt = 'kawa-code-zero-knowledge-v1';
+    const key = crypto.pbkdf2Sync(keyMaterial, salt, 600_000, 32, 'sha256');
+    keyCache.set(cacheKey, key);
+    return key;
+}
+/**
+ * Get the initial (root) commit SHA for a repository.
+ */
+export function getInitialCommitSHA(repoPath) {
+    return execSync('git rev-list --max-parents=0 HEAD', {
+        cwd: repoPath,
+        encoding: 'utf-8',
+        timeout: 10000,
+    }).trim().split('\n')[0]; // Take first if multiple roots
+}
+/**
+ * Encrypt content using AES-256-GCM.
+ *
+ * Returns a JSON string matching Muninn's EncryptedContent format:
+ * { "encryptedContent": hex, "iv": hex, "authTag": hex }
+ *
+ * The encryptedContent hex includes the 16-byte auth tag appended
+ * (AES-GCM ciphertext + tag), matching Gardener's Rust implementation.
+ */
+export function encryptContent(plaintext, key) {
+    const iv = crypto.randomBytes(12);
+    const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+    const encrypted = Buffer.concat([
+        cipher.update(plaintext, 'utf8'),
+        cipher.final(),
+    ]);
+    const authTag = cipher.getAuthTag(); // 16 bytes
+    // Gardener appends authTag to ciphertext in encryptedContent
+    const ciphertextWithTag = Buffer.concat([encrypted, authTag]);
+    return JSON.stringify({
+        encryptedContent: ciphertextWithTag.toString('hex'),
+        iv: iv.toString('hex'),
+        authTag: authTag.toString('hex'),
+    });
+}
+/**
+ * Extract content from a file at the given line range and compute hash + snippet.
+ *
+ * Matches Gardener's IntentBlockService::extract_content_and_hash():
+ * - Lines are 1-based
+ * - snippet = first 150 characters
+ * - contentHash = SHA-256 of the whitespace-normalized plaintext (hex)
+ */
+export function extractContentAndHash(fileContent, startLine, endLine) {
+    const lines = fileContent.split('\n');
+    const startIdx = startLine - 1;
+    const endIdx = Math.min(endLine, lines.length);
+    if (startIdx >= lines.length) {
+        return { content: '', contentHash: '', contentSnippet: '' };
+    }
+    const content = lines.slice(startIdx, endIdx).join('\n');
+    const contentSnippet = content.slice(0, 150);
+    const contentHash = crypto
+        .createHash('sha256')
+        .update(content.trim())
+        .digest('hex');
+    return { content, contentHash, contentSnippet };
+}
+//# sourceMappingURL=repo-encryption.js.map

package/build/services/repo-encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-encryption.js","sourceRoot":"","sources":["../../src/services/repo-encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,uFAAuF;AACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;AAE1C;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,aAAqB,EAAE,MAAc;IACjE,MAAM,QAAQ,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,MAAM,EAAE,CAAA;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,WAAW,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,MAAM,EAAE,CAAA;IACvD,MAAM,IAAI,GAAG,6BAA6B,CAAA;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAA;IAEvE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC3B,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,QAAQ,CAAC,mCAAmC,EAAE;QACnD,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,KAAK;KACf,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA,CAAE,+BAA+B;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,GAAW;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAE5D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;QAChC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA,CAAC,WAAW;IAE/C,6DAA6D;IAC7D,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;IAE7D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,gBAAgB,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnD,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;KACjC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,SAAiB,EACjB,OAAe;IAEf,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAE9C,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAA;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxD,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,MAAM;SACvB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,CAAA;AACjD,CAAC"}

package/build/services/storage-decryption.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Storage decryption service for reading auth tokens from Muninn's encrypted storage.
+ *
+ * This module replicates Muninn's storage encryption scheme to read the auth token
+ * from ~/.kawa-code/.storage.caw without requiring manual env var configuration.
+ *
+ * Encryption details (must match Muninn's encryption.rs):
+ * - Key derivation: username:hostname with salt "kawa-storage-encryption-v1"
+ * - Algorithm: PBKDF2-HMAC-SHA256, 100,000 iterations
+ * - Cipher: AES-256-GCM
+ * - Format: hex(iv):hex(ciphertext):hex(auth_tag)
+ */
+export interface TokenObject {
+    _id: string;
+    token: string;
+    kind: string;
+    expires: string;
+    user: string;
+    createdAt: string;
+    denied: boolean;
+}
+export interface AuthTokens {
+    access: TokenObject;
+    refresh?: TokenObject;
+}
+export interface StorageData {
+    auth?: {
+        user?: any;
+        tokens?: AuthTokens;
+    };
+    [key: string]: any;
+}
+/**
+ * Read and decrypt the storage file
+ *
+ * Returns the parsed storage data or null if unavailable/corrupted.
+ * Handles both encrypted and legacy unencrypted formats.
+ */
+export declare function readStorage(): StorageData | null;
+/**
+ * Extract auth token from storage
+ *
+ * Returns the access token if available, otherwise null.
+ */
+export declare function getAuthTokenFromStorage(): string | null;
+/**
+ * Get full auth data from storage (user + tokens)
+ */
+export declare function getAuthFromStorage(): {
+    user: any;
+    tokens: AuthTokens;
+} | null;

package/build/services/storage-decryption.js

@@ -0,0 +1,162 @@
+/**
+ * Storage decryption service for reading auth tokens from Muninn's encrypted storage.
+ *
+ * This module replicates Muninn's storage encryption scheme to read the auth token
+ * from ~/.kawa-code/.storage.caw without requiring manual env var configuration.
+ *
+ * Encryption details (must match Muninn's encryption.rs):
+ * - Key derivation: username:hostname with salt "kawa-storage-encryption-v1"
+ * - Algorithm: PBKDF2-HMAC-SHA256, 100,000 iterations
+ * - Cipher: AES-256-GCM
+ * - Format: hex(iv):hex(ciphertext):hex(auth_tag)
+ */
+import * as crypto from 'crypto';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+/**
+ * Derive storage encryption key from username and hostname
+ *
+ * Matches Muninn's derive_storage_key() implementation:
+ * - Key material: "username:hostname"
+ * - Salt: "kawa-storage-encryption-v1"
+ * - Algorithm: PBKDF2-HMAC-SHA256
+ * - Iterations: 100,000
+ * - Key length: 32 bytes
+ */
+function deriveStorageKey() {
+    const username = process.env.USER || process.env.USERNAME || 'unknown';
+    const hostname = os.hostname() || 'unknown';
+    const keyMaterial = `${username}:${hostname}`;
+    const salt = 'kawa-storage-encryption-v1';
+    // PBKDF2-HMAC-SHA256, 100,000 iterations, 32-byte output
+    return crypto.pbkdf2Sync(keyMaterial, salt, 100_000, 32, 'sha256');
+}
+/**
+ * Decrypt storage file content
+ *
+ * Format: hex(iv):hex(ciphertext_with_auth_tag):hex(auth_tag)
+ * The ciphertext includes the auth tag at the end (last 16 bytes).
+ * AES-GCM verifies the auth tag automatically during decryption.
+ */
+function decryptStorage(encryptedData) {
+    const key = deriveStorageKey();
+    // Parse format: hex(iv):hex(ciphertext):hex(auth_tag)
+    const parts = encryptedData.split(':');
+    if (parts.length !== 3) {
+        throw new Error('Invalid encrypted storage format (expected 3 parts)');
+    }
+    const iv = Buffer.from(parts[0], 'hex');
+    const ciphertextWithTag = Buffer.from(parts[1], 'hex');
+    const authTag = Buffer.from(parts[2], 'hex');
+    // Verify IV length
+    if (iv.length !== 12) {
+        throw new Error(`Invalid IV length (expected 12, got ${iv.length})`);
+    }
+    // Verify auth tag length
+    if (authTag.length !== 16) {
+        throw new Error(`Invalid auth tag length (expected 16, got ${authTag.length})`);
+    }
+    // Create decipher for AES-256-GCM
+    const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(authTag);
+    // Decrypt (note: ciphertextWithTag includes the auth tag at the end, but we
+    // extract just the ciphertext portion for decryption since we set the auth tag separately)
+    const ciphertext = ciphertextWithTag.subarray(0, ciphertextWithTag.length - 16);
+    let plaintext = decipher.update(ciphertext, undefined, 'utf8');
+    plaintext += decipher.final('utf8');
+    return plaintext;
+}
+/**
+ * Check if content is in encrypted storage format
+ *
+ * Encrypted format: hex(iv):hex(ciphertext):hex(auth_tag)
+ * All three parts should be valid hex strings
+ */
+function isEncryptedStorage(content) {
+    const parts = content.split(':');
+    if (parts.length !== 3) {
+        return false;
+    }
+    // All parts should be valid hex (even length, only hex chars)
+    return parts.every(part => {
+        return part.length > 0 &&
+            part.length % 2 === 0 &&
+            /^[0-9a-fA-F]+$/.test(part);
+    });
+}
+/**
+ * Get the storage file path
+ *
+ * Returns ~/.kawa-code/.storage.caw
+ */
+function getStoragePath() {
+    const homeDir = os.homedir();
+    return path.join(homeDir, '.kawa-code', '.storage.caw');
+}
+/**
+ * Read and decrypt the storage file
+ *
+ * Returns the parsed storage data or null if unavailable/corrupted.
+ * Handles both encrypted and legacy unencrypted formats.
+ */
+export function readStorage() {
+    try {
+        const storagePath = getStoragePath();
+        if (!fs.existsSync(storagePath)) {
+            return null;
+        }
+        const content = fs.readFileSync(storagePath, 'utf8').trim();
+        if (!content) {
+            return null;
+        }
+        // Decrypt if encrypted, otherwise treat as legacy plaintext JSON
+        let plaintext;
+        if (isEncryptedStorage(content)) {
+            try {
+                plaintext = decryptStorage(content);
+            }
+            catch (err) {
+                console.error('Failed to decrypt storage (hostname/username may have changed):', err);
+                return null;
+            }
+        }
+        else {
+            // Legacy unencrypted format
+            plaintext = content;
+        }
+        // Parse JSON
+        const data = JSON.parse(plaintext);
+        return data;
+    }
+    catch (err) {
+        console.error('Failed to read storage file:', err);
+        return null;
+    }
+}
+/**
+ * Extract auth token from storage
+ *
+ * Returns the access token if available, otherwise null.
+ */
+export function getAuthTokenFromStorage() {
+    const storage = readStorage();
+    if (!storage?.auth?.tokens?.access?.token) {
+        return null;
+    }
+    return storage.auth.tokens.access.token;
+}
+/**
+ * Get full auth data from storage (user + tokens)
+ */
+export function getAuthFromStorage() {
+    const storage = readStorage();
+    if (!storage?.auth?.user || !storage?.auth?.tokens) {
+        return null;
+    }
+    return {
+        user: storage.auth.user,
+        tokens: storage.auth.tokens
+    };
+}
+//# sourceMappingURL=storage-decryption.js.map

package/build/services/storage-decryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-decryption.js","sourceRoot":"","sources":["../../src/services/storage-decryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAChC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAyB5B;;;;;;;;;GASG;AACH,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAA;IACtE,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,SAAS,CAAA;IAC3C,MAAM,WAAW,GAAG,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAA;IAC7C,MAAM,IAAI,GAAG,4BAA4B,CAAA;IAEzC,yDAAyD;IACzD,OAAO,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,aAAqB;IAC3C,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAA;IAE9B,sDAAsD;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAE5C,mBAAmB;IACnB,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,uCAAuC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IACtE,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA;IACjF,CAAC;IAED,kCAAkC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAChE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAE5B,4EAA4E;IAC5E,2FAA2F;IAC3F,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IAE/E,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IAC9D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAEnC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,8DAA8D;IAC9D,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QACxB,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC;YACf,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;YACrB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc;IACrB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,CAAA;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;QAEpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QAE3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAA;QACb,CAAC;QAED,iEAAiE;QACjE,IAAI,SAAiB,CAAA;QACrB,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,iEAAiE,EAAE,GAAG,CAAC,CAAA;gBACrF,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;aAAM,CAAC;YACN,4BAA4B;YAC5B,SAAS,GAAG,OAAO,CAAA;QACrB,CAAC;QAED,aAAa;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAgB,CAAA;QACjD,OAAO,IAAI,CAAA;IAEb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;QAClD,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAA;IAE7B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAA;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAA;IAE7B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;QACvB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;KAC5B,CAAA;AACH,CAAC"}

package/build/tools/assign-blocks.d.ts

@@ -0,0 +1,87 @@
+import { z } from 'zod';
+export declare const assignBlocksSchema: z.ZodObject<{
+    repoOrigin: z.ZodOptional<z.ZodString>;
+    repoPath: z.ZodString;
+    intentId: z.ZodString;
+    blocks: z.ZodArray<z.ZodObject<{
+        filePath: z.ZodString;
+        startLine: z.ZodNumber;
+        endLine: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        filePath: string;
+        startLine: number;
+        endLine: number;
+    }, {
+        filePath: string;
+        startLine: number;
+        endLine: number;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    repoPath: string;
+    intentId: string;
+    blocks: {
+        filePath: string;
+        startLine: number;
+        endLine: number;
+    }[];
+    repoOrigin?: string | undefined;
+}, {
+    repoPath: string;
+    intentId: string;
+    blocks: {
+        filePath: string;
+        startLine: number;
+        endLine: number;
+    }[];
+    repoOrigin?: string | undefined;
+}>;
+export type AssignBlocksInput = z.infer<typeof assignBlocksSchema>;
+export interface AssignBlocksResponse {
+    success: boolean;
+    assignedBlocks: number;
+    intentId: string;
+    intentTitle: string;
+    message: string;
+}
+export declare function assignBlocksToIntent(input: AssignBlocksInput): Promise<AssignBlocksResponse>;
+export declare const assignBlocksToIntentTool: {
+    name: string;
+    description: string;
+    inputSchema: z.ZodObject<{
+        repoOrigin: z.ZodOptional<z.ZodString>;
+        repoPath: z.ZodString;
+        intentId: z.ZodString;
+        blocks: z.ZodArray<z.ZodObject<{
+            filePath: z.ZodString;
+            startLine: z.ZodNumber;
+            endLine: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            filePath: string;
+            startLine: number;
+            endLine: number;
+        }, {
+            filePath: string;
+            startLine: number;
+            endLine: number;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        repoPath: string;
+        intentId: string;
+        blocks: {
+            filePath: string;
+            startLine: number;
+            endLine: number;
+        }[];
+        repoOrigin?: string | undefined;
+    }, {
+        repoPath: string;
+        intentId: string;
+        blocks: {
+            filePath: string;
+            startLine: number;
+            endLine: number;
+        }[];
+        repoOrigin?: string | undefined;
+    }>;
+    handler: typeof assignBlocksToIntent;
+};

package/build/tools/assign-blocks.js

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+import { request } from '../services/muninn-ipc.js';
+import { resolveOrigin } from './resolve-origin.js';
+export const assignBlocksSchema = z.object({
+    repoOrigin: z.string().optional().describe('Git remote origin URL. Auto-detected from repoPath via git if not provided.'),
+    repoPath: z.string().describe('Local path to the repository root'),
+    intentId: z.string().describe('The intent ID to assign blocks to'),
+    blocks: z.array(z.object({
+        filePath: z.string().describe('Path to the file (relative to repo root)'),
+        startLine: z.number().min(1).describe('Start line number (1-based)'),
+        endLine: z.number().min(1).describe('End line number (1-based, inclusive)')
+    })).describe('Code blocks to assign to the active intent')
+});
+export async function assignBlocksToIntent(input) {
+    const actualOrigin = resolveOrigin(input.repoOrigin, input.repoPath);
+    // Delegate all file I/O, encryption, and API sync to Muninn
+    const res = await request('intent-block', 'batch-assign', {
+        repoOrigin: actualOrigin,
+        repoPath: input.repoPath,
+        intentId: input.intentId,
+        blocks: input.blocks.map(b => ({
+            filePath: b.filePath,
+            startLine: b.startLine,
+            endLine: b.endLine,
+        })),
+    });
+    return {
+        success: res.success !== false,
+        assignedBlocks: res.count || res.assignedCount || input.blocks.length,
+        intentId: res.intentId || '',
+        intentTitle: res.intentTitle || 'Active Intent',
+        message: `Assigned ${res.count || input.blocks.length} code block(s) to active intent`
+    };
+}
+export const assignBlocksToIntentTool = {
+    name: 'assign_blocks_to_intent',
+    description: `Assign code blocks to the currently active intent.
+
+Call this AFTER writing code to track which lines were modified:
+1. For each file you modified, provide the line range
+2. Blocks get assigned to the active intent
+3. This enables tracking, conflict detection, and team visibility
+
+Example: After adding a function at lines 50-75 in auth.ts, call with:
+{ blocks: [{ filePath: "src/auth.ts", startLine: 50, endLine: 75 }] }`,
+    inputSchema: assignBlocksSchema,
+    handler: assignBlocksToIntent
+};
+//# sourceMappingURL=assign-blocks.js.map

package/build/tools/assign-blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-blocks.js","sourceRoot":"","sources":["../../src/tools/assign-blocks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACzH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAClE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAClE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACzE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QACpE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;KAC5E,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CAC3D,CAAC,CAAA;AAYF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAwB;IACjE,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEpE,4DAA4D;IAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,cAAc,EAAE;QACxD,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;KACJ,CAAC,CAAA;IAEF,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK;QAC9B,cAAc,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM;QACrE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,eAAe;QAC/C,OAAO,EAAE,YAAY,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,iCAAiC;KACvF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE;;;;;;;;sEAQuD;IACpE,WAAW,EAAE,kBAAkB;IAC/B,OAAO,EAAE,oBAAoB;CAC9B,CAAA"}

package/build/tools/check-active-intent.d.ts

@@ -0,0 +1,50 @@
+import { z } from 'zod';
+export declare const checkActiveIntentSchema: z.ZodObject<{
+    repoOrigin: z.ZodOptional<z.ZodString>;
+    repoPath: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    repoPath: string;
+    repoOrigin?: string | undefined;
+}, {
+    repoPath: string;
+    repoOrigin?: string | undefined;
+}>;
+export type CheckActiveIntentInput = z.infer<typeof checkActiveIntentSchema>;
+export interface IntentBlock {
+    id: string;
+    filePath: string;
+    startLine: number;
+    endLine: number;
+    contentSnippet: string;
+}
+export interface ActiveIntentResponse {
+    hasActiveIntent: boolean;
+    intent?: {
+        id: string;
+        localId: string;
+        title: string;
+        description: string;
+        templateType: 'feature' | 'refactor' | 'exploration';
+        constraints: string[];
+        status: string;
+        branch: string;
+        forkedFrom?: string;
+        blocks: IntentBlock[];
+    };
+}
+export declare function checkActiveIntent(input: CheckActiveIntentInput): Promise<ActiveIntentResponse>;
+export declare const checkActiveIntentTool: {
+    name: string;
+    description: string;
+    inputSchema: z.ZodObject<{
+        repoOrigin: z.ZodOptional<z.ZodString>;
+        repoPath: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        repoPath: string;
+        repoOrigin?: string | undefined;
+    }, {
+        repoPath: string;
+        repoOrigin?: string | undefined;
+    }>;
+    handler: typeof checkActiveIntent;
+};

package/build/tools/check-active-intent.js

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+import { request } from '../services/muninn-ipc.js';
+import { resolveOrigin } from './resolve-origin.js';
+export const checkActiveIntentSchema = z.object({
+    repoOrigin: z.string().optional().describe('Git remote origin URL. Auto-detected from repoPath via git if not provided.'),
+    repoPath: z.string().describe('Local path to the repository root')
+});
+export async function checkActiveIntent(input) {
+    const actualOrigin = resolveOrigin(input.repoOrigin, input.repoPath);
+    const res = await request('intent', 'get-active', {
+        repoOrigin: actualOrigin,
+    });
+    // Muninn returns { success, activeIntentId, activeIntent }
+    const intent = res.activeIntent;
+    if (!intent) {
+        return { hasActiveIntent: false };
+    }
+    return {
+        hasActiveIntent: true,
+        intent: {
+            id: intent.id || res.activeIntentId || '',
+            localId: intent.id || res.activeIntentId || '',
+            title: intent.title || '',
+            description: intent.description || '',
+            templateType: (intent.templateType || 'feature'),
+            constraints: intent.constraints || [],
+            status: intent.status || 'active',
+            branch: intent.branch || '',
+            forkedFrom: intent.forkedFrom,
+            blocks: [] // Blocks are tracked separately by intent-block service
+        }
+    };
+}
+export const checkActiveIntentTool = {
+    name: 'check_active_intent',
+    description: `REQUIRED: Call this tool BEFORE writing any code.
+
+Returns the currently active intent if one exists. If no active intent is set,
+you should ask the user to confirm intent details and then call create_and_activate_intent.
+
+An active intent tracks what the user is working on, enabling:
+- Better code context for AI-generated changes
+- Conflict detection with team members
+- Automatic assignment of code blocks to the intent`,
+    inputSchema: checkActiveIntentSchema,
+    handler: checkActiveIntent
+};
+//# sourceMappingURL=check-active-intent.js.map

package/build/tools/check-active-intent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-active-intent.js","sourceRoot":"","sources":["../../src/tools/check-active-intent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACzH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CACnE,CAAC,CAAA;AA4BF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA6B;IACnE,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE;QAChD,UAAU,EAAE,YAAY;KACzB,CAAC,CAAA;IAEF,2DAA2D;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAA;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAA;IACnC,CAAC;IAED,OAAO;QACL,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE;YACN,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,cAAc,IAAI,EAAE;YACzC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,cAAc,IAAI,EAAE;YAC9C,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,YAAY,EAAE,CAAC,MAAM,CAAC,YAAY,IAAI,SAAS,CAA2C;YAC1F,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,QAAQ;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,EAAE,CAAC,wDAAwD;SACpE;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE;;;;;;;;oDAQqC;IAClD,WAAW,EAAE,uBAAuB;IACpC,OAAO,EAAE,iBAAiB;CAC3B,CAAA"}

package/build/tools/complete-intent.d.ts

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+export declare const completeIntentSchema: z.ZodObject<{
+    repoOrigin: z.ZodOptional<z.ZodString>;
+    repoPath: z.ZodString;
+    commitSha: z.ZodOptional<z.ZodString>;
+    status: z.ZodDefault<z.ZodEnum<["committed", "pushed", "done", "abandoned"]>>;
+}, "strip", z.ZodTypeAny, {
+    repoPath: string;
+    status: "committed" | "pushed" | "done" | "abandoned";
+    repoOrigin?: string | undefined;
+    commitSha?: string | undefined;
+}, {
+    repoPath: string;
+    repoOrigin?: string | undefined;
+    status?: "committed" | "pushed" | "done" | "abandoned" | undefined;
+    commitSha?: string | undefined;
+}>;
+export type CompleteIntentInput = z.infer<typeof completeIntentSchema>;
+export interface CompleteIntentResponse {
+    success: boolean;
+    intentId: string;
+    previousStatus: string;
+    newStatus: string;
+    commitSha?: string;
+    message: string;
+}
+export declare function completeIntent(input: CompleteIntentInput): Promise<CompleteIntentResponse>;
+export declare const completeIntentTool: {
+    name: string;
+    description: string;
+    inputSchema: z.ZodObject<{
+        repoOrigin: z.ZodOptional<z.ZodString>;
+        repoPath: z.ZodString;
+        commitSha: z.ZodOptional<z.ZodString>;
+        status: z.ZodDefault<z.ZodEnum<["committed", "pushed", "done", "abandoned"]>>;
+    }, "strip", z.ZodTypeAny, {
+        repoPath: string;
+        status: "committed" | "pushed" | "done" | "abandoned";
+        repoOrigin?: string | undefined;
+        commitSha?: string | undefined;
+    }, {
+        repoPath: string;
+        repoOrigin?: string | undefined;
+        status?: "committed" | "pushed" | "done" | "abandoned" | undefined;
+        commitSha?: string | undefined;
+    }>;
+    handler: typeof completeIntent;
+};

package/build/tools/complete-intent.js

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+import { request } from '../services/muninn-ipc.js';
+import { resolveOrigin } from './resolve-origin.js';
+export const completeIntentSchema = z.object({
+    repoOrigin: z.string().optional().describe('Git remote origin URL. Auto-detected from repoPath via git if not provided.'),
+    repoPath: z.string().describe('Local path to the repository root'),
+    commitSha: z.string().optional().describe('The git commit SHA to associate with this intent (if already committed)'),
+    status: z.enum(['committed', 'pushed', 'done', 'abandoned']).default('committed')
+        .describe('The new status for the intent. Use "committed" after git commit, "done" when work is complete, "abandoned" to discard.')
+});
+export async function completeIntent(input) {
+    const actualOrigin = resolveOrigin(input.repoOrigin, input.repoPath);
+    const res = await request('intent', 'complete', {
+        repoOrigin: actualOrigin,
+        status: input.status,
+        commitSha: input.commitSha,
+    });
+    const intentId = res.intentId || '';
+    const intentTitle = res.intentTitle || 'Intent';
+    const previousStatus = res.previousStatus || 'active';
+    const statusMessages = {
+        committed: `Intent "${intentTitle}" marked as committed`,
+        pushed: `Intent "${intentTitle}" marked as pushed`,
+        done: `Intent "${intentTitle}" marked as done`,
+        abandoned: `Intent "${intentTitle}" abandoned`
+    };
+    return {
+        success: res.success !== false,
+        intentId,
+        previousStatus,
+        newStatus: input.status,
+        commitSha: input.commitSha,
+        message: statusMessages[input.status] + (input.commitSha ? ` (commit: ${input.commitSha.substring(0, 7)})` : '')
+    };
+}
+export const completeIntentTool = {
+    name: 'complete_intent',
+    description: `Mark the active intent as completed and clear it.
+
+Call this after a successful git commit to:
+1. Update the intent status (committed/pushed/done/abandoned)
+2. Store the commit SHA for tracking
+3. Clear the active intent so a new one can be started
+
+Status values:
+- "committed": Code is committed locally (default)
+- "pushed": Code has been pushed to remote
+- "done": Work is fully complete
+- "abandoned": Work was discarded without committing`,
+    inputSchema: completeIntentSchema,
+    handler: completeIntent
+};
+//# sourceMappingURL=complete-intent.js.map