@peekdev/mcp 0.1.0-alpha.1

package/NOTICE

@@ -0,0 +1,10 @@
+@peekdev/mcp
+Copyright 2026 Cubenest
+
+This product includes software developed by:
+- WiseLibs — better-sqlite3 (MIT License)
+- Anthropic — @modelcontextprotocol/sdk (MIT License)
+- Colin McDonnell — zod (MIT License)
+
+This product is licensed under the Apache License, Version 2.0.
+See the LICENSE file for details.

package/dist/db/index.d.ts

@@ -0,0 +1,3 @@
+export { defaultDbPath, openDb, type OpenDbOptions, openReadonlyDb, peekHomeDir, type ReadonlyDbResult, schemaVersion, } from './open.js';
+export { defaultMigrationsDir, loadMigrations, type Migration, runMigrations, } from './migrate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/db/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,aAAa,EACb,MAAM,EACN,KAAK,aAAa,EAClB,cAAc,EACd,WAAW,EACX,KAAK,gBAAgB,EACrB,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,KAAK,SAAS,EACd,aAAa,GACd,MAAM,cAAc,CAAC"}

package/dist/db/index.js

@@ -0,0 +1,7 @@
+// Public DB surface re-exported for the thin clients (@peekdev/cli, and the MCP
+// server itself) so they open ~/.peek/sessions.db through the same open/migrate
+// path the native host owns — no duplicated DB code (ADR-0007). Consumed as the
+// `@peekdev/mcp/db` subpath export.
+export { defaultDbPath, openDb, openReadonlyDb, peekHomeDir, schemaVersion, } from './open.js';
+export { defaultMigrationsDir, loadMigrations, runMigrations, } from './migrate.js';
+//# sourceMappingURL=index.js.map

package/dist/db/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,oCAAoC;AAEpC,OAAO,EACL,aAAa,EACb,MAAM,EAEN,cAAc,EACd,WAAW,EAEX,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,oBAAoB,EACpB,cAAc,EAEd,aAAa,GACd,MAAM,cAAc,CAAC"}

package/dist/db/migrate.d.ts

@@ -0,0 +1,37 @@
+import type { Database } from 'better-sqlite3';
+/** A single migration discovered on disk. */
+export interface Migration {
+    /** Numeric prefix, e.g. 1 for `0001_initial.sql`. Determines apply order. */
+    readonly version: number;
+    /** Full filename, e.g. `0001_initial.sql`. Recorded in `_migrations`. */
+    readonly name: string;
+    /** Raw SQL contents. */
+    readonly sql: string;
+}
+/**
+ * Default directory holding the `.sql` migration files, resolved relative to
+ * this module. Works from both `src/` (vitest, ts) and `dist/` (built, js)
+ * because the build step copies the `migrations/` folder next to the output.
+ */
+export declare function defaultMigrationsDir(): string;
+/**
+ * Read and parse every `NNNN-*.sql` (or `NNNN_*.sql`) file in `dir`, sorted by
+ * numeric version ascending. Non-matching files are ignored.
+ */
+export declare function loadMigrations(dir?: string): Migration[];
+/**
+ * Apply every pending migration to `db` in order. Each migration runs inside a
+ * transaction together with the `_migrations` bookkeeping insert, so a failure
+ * mid-migration rolls back cleanly and leaves the version unrecorded.
+ *
+ * Returns the list of migrations applied during this call (empty if the DB was
+ * already up to date).
+ */
+export declare function runMigrations(db: Database, migrations?: Migration[]): Migration[];
+/**
+ * Current schema version (highest applied migration), or 0 if migrations have
+ * never run. Read-only: unlike {@link runMigrations} it does not create the
+ * `_migrations` table — querying the version must not mutate an uninitialized DB.
+ */
+export declare function schemaVersion(db: Database): number;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/db/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,6CAA6C;AAC7C,MAAM,WAAW,SAAS;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wBAAwB;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAA+B,GAAG,SAAS,EAAE,CAchF;AAmBD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,QAAQ,EACZ,UAAU,GAAE,SAAS,EAAqB,GACzC,SAAS,EAAE,CAiBb;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,GAAG,MAAM,CASlD"}

package/dist/db/migrate.js

@@ -0,0 +1,86 @@
+// Migrations runner (ADR-0007 action item 5): a directory of `NNNN-description.sql`
+// files applied in lexical order on host startup, each inside a transaction,
+// tracked in a `_migrations` bookkeeping table so re-running is idempotent.
+import { readFileSync, readdirSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const MIGRATION_FILE_RE = /^(\d+)[_-].+\.sql$/;
+/**
+ * Default directory holding the `.sql` migration files, resolved relative to
+ * this module. Works from both `src/` (vitest, ts) and `dist/` (built, js)
+ * because the build step copies the `migrations/` folder next to the output.
+ */
+export function defaultMigrationsDir() {
+    return join(dirname(fileURLToPath(import.meta.url)), 'migrations');
+}
+/**
+ * Read and parse every `NNNN-*.sql` (or `NNNN_*.sql`) file in `dir`, sorted by
+ * numeric version ascending. Non-matching files are ignored.
+ */
+export function loadMigrations(dir = defaultMigrationsDir()) {
+    const entries = readdirSync(dir);
+    const migrations = [];
+    for (const name of entries) {
+        const match = MIGRATION_FILE_RE.exec(name);
+        if (!match)
+            continue;
+        migrations.push({
+            version: Number(match[1]),
+            name,
+            sql: readFileSync(join(dir, name), 'utf8'),
+        });
+    }
+    migrations.sort((a, b) => a.version - b.version);
+    return migrations;
+}
+function ensureMigrationsTable(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS _migrations (
+       version    INTEGER PRIMARY KEY,
+       name       TEXT NOT NULL,
+       applied_at TEXT NOT NULL
+     )`);
+}
+function appliedVersions(db) {
+    const rows = db.prepare('SELECT version FROM _migrations').all();
+    return new Set(rows.map((r) => r.version));
+}
+/**
+ * Apply every pending migration to `db` in order. Each migration runs inside a
+ * transaction together with the `_migrations` bookkeeping insert, so a failure
+ * mid-migration rolls back cleanly and leaves the version unrecorded.
+ *
+ * Returns the list of migrations applied during this call (empty if the DB was
+ * already up to date).
+ */
+export function runMigrations(db, migrations = loadMigrations()) {
+    ensureMigrationsTable(db);
+    const already = appliedVersions(db);
+    const record = db.prepare('INSERT INTO _migrations (version, name, applied_at) VALUES (?, ?, ?)');
+    const applied = [];
+    for (const migration of migrations) {
+        if (already.has(migration.version))
+            continue;
+        const apply = db.transaction(() => {
+            db.exec(migration.sql);
+            record.run(migration.version, migration.name, new Date().toISOString());
+        });
+        apply();
+        applied.push(migration);
+    }
+    return applied;
+}
+/**
+ * Current schema version (highest applied migration), or 0 if migrations have
+ * never run. Read-only: unlike {@link runMigrations} it does not create the
+ * `_migrations` table — querying the version must not mutate an uninitialized DB.
+ */
+export function schemaVersion(db) {
+    const exists = db
+        .prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = '_migrations'")
+        .get();
+    if (!exists)
+        return 0;
+    const row = db.prepare('SELECT MAX(version) AS v FROM _migrations').get();
+    return row.v ?? 0;
+}
+//# sourceMappingURL=migrate.js.map

package/dist/db/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6EAA6E;AAC7E,4EAA4E;AAE5E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAazC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAE/C;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,oBAAoB,EAAE;IACjE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,UAAU,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI;YACJ,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAY;IACzC,EAAE,CAAC,IAAI,CACL;;;;OAIG,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,EAAY;IACnC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAE5D,CAAC;IACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAY,EACZ,aAA0B,cAAc,EAAE;IAE1C,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC;IAClG,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,SAAS;QAC7C,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAChC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAY;IACxC,MAAM,MAAM,GAAG,EAAE;SACd,OAAO,CAAC,2EAA2E,CAAC;SACpF,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,EAEtE,CAAC;IACF,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC"}

package/dist/db/migrations/0001_initial.sql

@@ -0,0 +1,102 @@
+-- 0001_initial — peek native-host SQLite schema (ADR-0007).
+--
+-- The native messaging host owns ~/.peek/sessions.db; the extension writes via
+-- native messaging and the MCP server + CLI read the same file directly. rrweb
+-- event blobs live on disk under ~/.peek/rrweb-events/ (gzipped, one per
+-- session); this DB stores session metadata, the chunk index into those blobs,
+-- and the extracted console / network / audit rows that the MCP tools query.
+--
+-- Conventions: UTC ISO-8601 strings for timestamps (text); epoch-millis
+-- integers where a monotonic ordering key is wanted (`ts_ms`). All foreign keys
+-- reference sessions(id) and cascade on delete so `peek sessions delete` is a
+-- single statement.
+
+-- One row per recorded browser session.
+CREATE TABLE sessions (
+  id              TEXT PRIMARY KEY,            -- e.g. "s_8nQ..."
+  created_at      TEXT NOT NULL,               -- UTC ISO-8601 of first event
+  updated_at      TEXT NOT NULL,               -- UTC ISO-8601 of last append
+  url             TEXT,                        -- initial top-frame URL
+  title           TEXT,                        -- initial document title
+  origin          TEXT,                        -- scheme://host[:port] of `url`
+  user_agent      TEXT,
+  -- Path to the gzipped rrweb event blob for this session, relative to
+  -- ~/.peek/rrweb-events/ (the native host owns the absolute base).
+  events_blob_path TEXT,
+  event_count     INTEGER NOT NULL DEFAULT 0,  -- total rrweb events recorded
+  bytes           INTEGER NOT NULL DEFAULT 0,  -- on-disk size of the blob
+  status          TEXT NOT NULL DEFAULT 'active' -- 'active' | 'finalized'
+);
+
+CREATE INDEX idx_sessions_created_at ON sessions (created_at);
+CREATE INDEX idx_sessions_origin ON sessions (origin);
+
+-- Index of rrweb event chunks appended over native messaging. The events
+-- themselves are persisted to the gzipped blob; a chunk row records the byte
+-- range + event range so a reader can seek without parsing the whole blob.
+CREATE TABLE events_chunks (
+  id          INTEGER PRIMARY KEY AUTOINCREMENT,
+  session_id  TEXT NOT NULL REFERENCES sessions (id) ON DELETE CASCADE,
+  seq         INTEGER NOT NULL,                -- 0-based chunk order within session
+  start_ts_ms INTEGER NOT NULL,               -- epoch-millis of first event in chunk
+  end_ts_ms   INTEGER NOT NULL,               -- epoch-millis of last event in chunk
+  event_count INTEGER NOT NULL,
+  byte_offset INTEGER NOT NULL,               -- offset into the gzipped blob
+  byte_length INTEGER NOT NULL,
+  created_at  TEXT NOT NULL,
+  UNIQUE (session_id, seq)
+);
+
+CREATE INDEX idx_events_chunks_session ON events_chunks (session_id, seq);
+
+-- Console messages extracted from the rrweb console plugin
+-- (EventType=6, plugin "rrweb/console@1") for fast MCP queries.
+CREATE TABLE console_events (
+  id          INTEGER PRIMARY KEY AUTOINCREMENT,
+  session_id  TEXT NOT NULL REFERENCES sessions (id) ON DELETE CASCADE,
+  ts_ms       INTEGER NOT NULL,               -- epoch-millis of the log
+  level       TEXT NOT NULL,                  -- 'log'|'info'|'warn'|'error'|'debug'|...
+  message     TEXT NOT NULL,                  -- joined payload text
+  stack       TEXT,                           -- trace, when present
+  url         TEXT                            -- page URL at time of log
+);
+
+CREATE INDEX idx_console_events_session ON console_events (session_id, ts_ms);
+CREATE INDEX idx_console_events_level ON console_events (session_id, level);
+
+-- Network activity captured via CDP (chrome.debugger) / console-error fallback.
+CREATE TABLE network_events (
+  id            INTEGER PRIMARY KEY AUTOINCREMENT,
+  session_id    TEXT NOT NULL REFERENCES sessions (id) ON DELETE CASCADE,
+  ts_ms         INTEGER NOT NULL,             -- epoch-millis of request start
+  method        TEXT NOT NULL,                -- GET/POST/...
+  url           TEXT NOT NULL,
+  status        INTEGER,                      -- HTTP status; NULL if failed/pending
+  status_text   TEXT,
+  request_id    TEXT,                         -- CDP requestId, for correlation
+  resource_type TEXT,                         -- 'xhr'|'fetch'|'document'|...
+  duration_ms   INTEGER,                      -- response time, when known
+  error_text    TEXT                          -- net error string, when failed
+);
+
+CREATE INDEX idx_network_events_session ON network_events (session_id, ts_ms);
+CREATE INDEX idx_network_events_status ON network_events (session_id, status);
+
+-- Append-only audit log of every AI-driven act-tool call (ADR-0010 / PRD §H3).
+-- Mirrors the JSONL shape written to ~/.peek/audit.log; kept in SQLite too so
+-- `peek audit log --since 1h --tool ... --client ...` is an indexed query.
+CREATE TABLE audit_log (
+  id           INTEGER PRIMARY KEY AUTOINCREMENT,
+  ts           TEXT NOT NULL,                 -- UTC ISO-8601 of the action
+  tool         TEXT NOT NULL,                 -- e.g. 'execute_action'
+  args_json    TEXT,                          -- JSON of the tool args
+  approval_ts  TEXT,                          -- when the user approved
+  approver     TEXT,                          -- 'user' | ...
+  client       TEXT,                          -- 'claude-code' | 'cursor' | ...
+  session_id   TEXT REFERENCES sessions (id) ON DELETE SET NULL,
+  result       TEXT                           -- 'ok' | 'error' | ...
+);
+
+CREATE INDEX idx_audit_log_ts ON audit_log (ts);
+CREATE INDEX idx_audit_log_tool ON audit_log (tool);
+CREATE INDEX idx_audit_log_client ON audit_log (client);

package/dist/db/migrations/0002_network_bodies.sql

@@ -0,0 +1,15 @@
+-- 0002_network_bodies — persist Deep capture masked bodies (ADR-0010, PRD §A.8).
+--
+-- The extension already masks request/response bodies via `maskNetMessage` in
+-- the ISOLATED-world relay (packages/peek-extension/src/relay/mask.ts) BEFORE
+-- forwarding them on `network.append`. Without these columns the native host
+-- silently drops the masked bodies on the floor — the user's yellow-banner
+-- consent for Deep capture yields no persisted body data, defeating the
+-- whole reason `webRequest` is insufficient under MV3 (PRD §A.9).
+--
+-- Columns are TEXT (the relay produces strings via `redactBody`) and nullable
+-- — Basic capture, request-only records, and error records leave them NULL.
+-- SQLite's ALTER TABLE ADD COLUMN is non-destructive: existing rows get NULL
+-- for the new columns, fresh DBs land with them from the start.
+ALTER TABLE network_events ADD COLUMN request_body_redacted TEXT;
+ALTER TABLE network_events ADD COLUMN response_body_redacted TEXT;

package/dist/db/open.d.ts

@@ -0,0 +1,57 @@
+import Database from 'better-sqlite3';
+import { schemaVersion } from './migrate.js';
+/**
+ * The native host's data directory (ADR-0007). Defaults to `~/.peek`; the
+ * `PEEK_HOME` environment variable overrides it (used by tests and by users who
+ * relocate the store).
+ */
+export declare function peekHomeDir(): string;
+/** Absolute path to the SQLite database file. */
+export declare function defaultDbPath(): string;
+export interface OpenDbOptions {
+    /**
+     * Path to the database file. Defaults to `~/.peek/sessions.db`. Pass
+     * `':memory:'` for tests.
+     */
+    readonly path?: string;
+    /** Skip applying migrations on open (default: false). */
+    readonly skipMigrations?: boolean;
+    /**
+     * Open the file read-only (better-sqlite3 `{ readonly: true }`). Forces
+     * `skipMigrations` — a read-only handle cannot run DDL, and a read-only
+     * client (the MCP server, ADR-0011) must never mutate the host-owned schema.
+     * Opening a non-existent file read-only would throw, so the caller is
+     * expected to have ensured the file exists (see {@link openReadonlyDb}).
+     */
+    readonly readonly?: boolean;
+}
+/**
+ * Open (creating if needed) the peek SQLite database with WAL mode + foreign
+ * keys enabled, run any pending migrations, and return the connection. The
+ * caller owns closing it.
+ *
+ * When `readonly` is set the handle is opened read-only and migrations are
+ * skipped regardless of `skipMigrations`.
+ */
+export declare function openDb(options?: OpenDbOptions): Database.Database;
+/**
+ * The result of {@link openReadonlyDb}: either a live read-only connection, or
+ * a sentinel that no store exists yet (no native host has ever run). MCP tools
+ * branch on `exists` to return "no sessions recorded yet" rather than throwing.
+ */
+export type ReadonlyDbResult = {
+    readonly exists: true;
+    readonly db: Database.Database;
+} | {
+    readonly exists: false;
+    readonly db: undefined;
+};
+/**
+ * Open `~/.peek/sessions.db` read-only for a thin client (the MCP server). If
+ * the file does not exist — the user installed the MCP server but never ran the
+ * extension / native host — return `{ exists: false }` so callers degrade
+ * gracefully instead of better-sqlite3 throwing `SQLITE_CANTOPEN`.
+ */
+export declare function openReadonlyDb(path?: string): ReadonlyDbResult;
+export { schemaVersion };
+//# sourceMappingURL=open.d.ts.map

package/dist/db/open.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open.d.ts","sourceRoot":"","sources":["../../src/db/open.ts"],"names":[],"mappings":"AAOA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAiB,aAAa,EAAE,MAAM,cAAc,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAIpC;AAED,iDAAiD;AACjD,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,QAAQ,CAAC,QAAQ,CA0BrE;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAA;CAAE,CAAC;AAEvD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAwB,GAAG,gBAAgB,CAQ/E;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/db/open.js

@@ -0,0 +1,74 @@
+// Database open + bootstrap. The native host, MCP server, and CLI all open the
+// same ~/.peek/sessions.db through here so the pragmas (WAL, foreign keys) and
+// the migration state stay consistent across the three thin clients (ADR-0007).
+import { existsSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import Database from 'better-sqlite3';
+import { runMigrations, schemaVersion } from './migrate.js';
+/**
+ * The native host's data directory (ADR-0007). Defaults to `~/.peek`; the
+ * `PEEK_HOME` environment variable overrides it (used by tests and by users who
+ * relocate the store).
+ */
+export function peekHomeDir() {
+    const override = process.env.PEEK_HOME;
+    if (override && override.length > 0)
+        return override;
+    return join(homedir(), '.peek');
+}
+/** Absolute path to the SQLite database file. */
+export function defaultDbPath() {
+    return join(peekHomeDir(), 'sessions.db');
+}
+/**
+ * Open (creating if needed) the peek SQLite database with WAL mode + foreign
+ * keys enabled, run any pending migrations, and return the connection. The
+ * caller owns closing it.
+ *
+ * When `readonly` is set the handle is opened read-only and migrations are
+ * skipped regardless of `skipMigrations`.
+ */
+export function openDb(options = {}) {
+    const path = options.path ?? defaultDbPath();
+    const readonly = options.readonly ?? false;
+    // A read-only open must not create the directory or the file — that would
+    // resurrect a deleted store or mask a "never recorded" state as an empty DB.
+    if (path !== ':memory:' && !readonly) {
+        mkdirSync(dirname(path), { recursive: true });
+    }
+    const db = new Database(path, readonly ? { readonly: true } : {});
+    if (readonly) {
+        // Read-only handles can't enable WAL (a DDL/pragma write); the writer (the
+        // native host) already put the file in WAL mode. FK enforcement is moot
+        // for a reader. Leave pragmas to the writer.
+    }
+    else {
+        // WAL gives concurrent readers (CLI/MCP) while the host writes (ADR-0007).
+        db.pragma('journal_mode = WAL');
+        // Enforce the ON DELETE CASCADE / SET NULL foreign keys in the schema.
+        db.pragma('foreign_keys = ON');
+    }
+    // Read-only handles can't run DDL, so migrations are always skipped there.
+    if (!options.skipMigrations && !readonly) {
+        runMigrations(db);
+    }
+    return db;
+}
+/**
+ * Open `~/.peek/sessions.db` read-only for a thin client (the MCP server). If
+ * the file does not exist — the user installed the MCP server but never ran the
+ * extension / native host — return `{ exists: false }` so callers degrade
+ * gracefully instead of better-sqlite3 throwing `SQLITE_CANTOPEN`.
+ */
+export function openReadonlyDb(path = defaultDbPath()) {
+    // `:memory:` is only meaningful for tests that seed a writable handle; a
+    // read-only in-memory DB is empty and useless, so treat it as "exists" and
+    // let the caller manage it.
+    if (path !== ':memory:' && !existsSync(path)) {
+        return { exists: false, db: undefined };
+    }
+    return { exists: true, db: openDb({ path, readonly: true }) };
+}
+export { schemaVersion };
+//# sourceMappingURL=open.js.map

package/dist/db/open.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open.js","sourceRoot":"","sources":["../../src/db/open.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE5D;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACvC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,aAAa,CAAC,CAAC;AAC5C,CAAC;AAoBD;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,UAAyB,EAAE;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC3C,0EAA0E;IAC1E,6EAA6E;IAC7E,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,QAAQ,EAAE,CAAC;QACb,2EAA2E;QAC3E,wEAAwE;QACxE,6CAA6C;IAC/C,CAAC;SAAM,CAAC;QACN,2EAA2E;QAC3E,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAChC,uEAAuE;QACvE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,aAAa,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,aAAa,EAAE;IAC3D,yEAAyE;IACzE,2EAA2E;IAC3E,4BAA4B;IAC5B,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+/**
+ * Decide the run mode from argv. Native-host mode when invoked with the
+ * explicit `--native-host` flag, or when a browser spawns us with the calling
+ * extension's `chrome-extension://...` origin as an argument. Otherwise MCP.
+ */
+export declare function resolveMode(argv: readonly string[]): 'native-host' | 'mcp';
+/** The `chrome-extension://<id>/` origin Chrome/Edge passed, if any. */
+export declare function callingExtensionOrigin(argv: readonly string[]): string | undefined;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAsBA;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,GAAG,KAAK,CAI1E;AAED,wEAAwE;AACxE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAElF"}

package/dist/index.js

@@ -0,0 +1,58 @@
+#!/usr/bin/env node
+// `peek-mcp` entry. The same binary serves two roles depending on argv
+// (ADR-0007):
+//   - native messaging host (owns ~/.peek/sessions.db), entered either via the
+//     explicit `--native-host` flag (manual/testing) OR — the path that fires
+//     in production — when a browser spawns the manifest's `path`. Chrome/Edge
+//     pass the calling extension's origin (`chrome-extension://<id>/`) as the
+//     first argument (and on Windows a second arg, the Chrome native window
+//     handle), with NO `--native-host` flag. We detect that origin argument so
+//     the installed manifest works with zero platform-specific shell wrappers
+//     (this supersedes the PRD §A7 `native-host.sh` example).
+//   - `peek-mcp` (default): run the stdio MCP server AI tools spawn (Phase 3c).
+//
+// This dispatcher keeps the surface stable so the manifest path and
+// `npx -y @peekdev/mcp` invocations are already correct.
+import { runMcpServer } from './mcp/index.js';
+import { startNativeHost } from './native-host/host.js';
+/** Matches the `chrome-extension://<id>/` origin Chrome/Edge pass when spawning a host. */
+const EXTENSION_ORIGIN_RE = /^chrome-extension:\/\//;
+/**
+ * Decide the run mode from argv. Native-host mode when invoked with the
+ * explicit `--native-host` flag, or when a browser spawns us with the calling
+ * extension's `chrome-extension://...` origin as an argument. Otherwise MCP.
+ */
+export function resolveMode(argv) {
+    if (argv.includes('--native-host'))
+        return 'native-host';
+    if (argv.some((arg) => EXTENSION_ORIGIN_RE.test(arg)))
+        return 'native-host';
+    return 'mcp';
+}
+/** The `chrome-extension://<id>/` origin Chrome/Edge passed, if any. */
+export function callingExtensionOrigin(argv) {
+    return argv.find((arg) => EXTENSION_ORIGIN_RE.test(arg));
+}
+async function main() {
+    const argv = process.argv.slice(2);
+    const mode = resolveMode(argv);
+    if (mode === 'native-host') {
+        const callerOrigin = callingExtensionOrigin(argv);
+        const host = startNativeHost(callerOrigin !== undefined ? { callerOrigin } : {});
+        try {
+            await host.done;
+        }
+        finally {
+            // Always release the SQLite handle, even if the stream errored.
+            host.close();
+        }
+        return;
+    }
+    // MCP stdio server (ADR-0011): runs until the client closes stdin.
+    await runMcpServer();
+}
+main().catch((err) => {
+    console.error(`peek-mcp: fatal — ${err instanceof Error ? (err.stack ?? err.message) : String(err)}`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,uEAAuE;AACvE,cAAc;AACd,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,8DAA8D;AAC9D,gFAAgF;AAChF,EAAE;AACF,oEAAoE;AACpE,yDAAyD;AAEzD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,2FAA2F;AAC3F,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,aAAa,CAAC;IACzD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,sBAAsB,CAAC,IAAuB;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,gEAAgE;YAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;QACD,OAAO;IACT,CAAC;IAED,mEAAmE;IACnE,MAAM,YAAY,EAAE,CAAC;AACvB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CACX,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvF,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}