garmin-bud 0.2.0

package/.env.example

@@ -0,0 +1,11 @@
+GARMIN_EMAIL=your@email.com
+GARMIN_PASSWORD=yourpassword
+GARMIN_MCP_API_KEY=
+GARMIN_MCP_HOST=127.0.0.1
+GARMIN_MCP_PORT=3847
+GARMIN_SESSION_PATH=.garmin/session.json
+GARMIN_LOG_PATH=.garmin/mcp.log
+GARMIN_CACHE_PATH=.garmin/cache.db
+CACHE_TTL_ACTIVITIES=1800
+CACHE_TTL_SLEEP=7200
+CACHE_TTL_STATS=3600

package/CHANGELOG.md

@@ -0,0 +1,56 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+## [0.2.0] - 2026-06-26
+
+### Fixed
+
+- **Critical:** Logger no longer writes to stdout — pino-pretty uses stderr; file logging starts only when server starts
+- **Critical:** Credentials validated at server startup, not on first tool call
+- N+1 Garmin API calls batched with concurrency limit (`mapInBatches`, max 6 parallel)
+- Body composition fetches parallelized instead of sequential
+- Activities range queries use shared paginated pool cache (up to 500 activities) with truncation warning
+- Cache keys unified via `buildToolCacheKey()` with stable sorted-param hashing
+- Recovery tool uses yesterday's sleep data with fallback to prior nights
+- Activity date filtering uses consistent Luxon parsing
+- Session path resolved from single `getSessionPath()` in config
+- Version read from `package.json` instead of hardcoded strings
+- `GarminApiError` is now a proper class; auth retry uses `await`
+- Tool errors sanitized before returning to MCP clients
+- SQLite cache closed on SIGTERM/SIGINT/exit
+
+### Added
+
+- `src/version.ts`, `src/utils/batch.ts`, `src/garmin/garminApiTypes.ts`, `src/tools/types.ts`
+- `filterActivitiesByRange()`, `sanitizeErrorMessage()`, `getYesterday()` helpers
+- `configureLogger()` for lazy log file initialization
+- `.nvmrc` (Node 20)
+- `.github/workflows/publish.yml` for npm + GitHub Releases on version tags
+- Project knowledge base moved to Obsidian vault (`05-Projects/garmin-bud/`); see `docs/VAULT.md`
+- 11 new tests (32 total): cache key stability, date filtering, recovery scoring, error sanitization
+
+### Changed
+
+- **Rebranded** from garmin-mcp to **GarminBud** (package `garmin-bud`, CLI `garmin-bud`)
+- README rewritten as product page with disclaimer, badges, and security section
+- Added CONTRIBUTING.md; updated vault docs and examples
+- Removed imports from internal `garmin-connect/dist/` paths
+- Tool registry uses shared `ToolDefinition` interface without unsafe casts
+- `runCacheClear` is synchronous
+
+## [0.1.0] - 2026-06-26
+
+### Added
+
+- Initial MCP server exposing 6 Garmin Connect tools
+- Email/password authentication with session persistence (`.garmin/session.json`)
+- SQLite caching layer with configurable TTL per resource type
+- CLI commands: `start`, `auth`, `cache clear`, `status`
+- Unit and integration tests using Node test runner
+- README, QUICKSTART, and example prompts
+
+### Notes
+
+- Uses unofficial `garmin-connect` npm package (Windows/macOS/Linux compatible)
+- MFA is not yet supported by the underlying library

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zsadigzade
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/QUICKSTART.md

@@ -0,0 +1,174 @@
+# Quickstart
+
+Get GarminBud running in about 5 minutes.
+
+## Prerequisites
+
+- Node.js 20 or newer ([`.nvmrc`](./.nvmrc) included)
+- A Garmin Connect account with synced device data
+- Garmin Connect **MFA disabled** (the underlying library does not support MFA yet)
+
+## Recommended: one-command setup
+
+```bash
+git clone https://github.com/Zsadigzade/garmin-bud.git
+cd garmin-bud
+npm install
+npm run build
+npx garmin-bud setup
+```
+
+The setup wizard will:
+
+1. Ask for your Garmin Connect email and password
+2. Save credentials to `.env`
+3. Authenticate with Garmin Connect
+4. Detect Cursor and Claude Desktop on your machine
+5. Offer to add GarminBud to your MCP client config automatically
+6. Optionally run a live API check against all 9 tools
+
+After setup, **restart your MCP client completely** (Cursor or Claude Desktop), then ask:
+
+- "What did I do today?"
+- "How's my sleep been this week?"
+- "Am I recovered enough to train hard?"
+
+### Claude Code: plugin or slash commands
+
+**Plugin (recommended)** — skills + MCP in one install:
+
+```bash
+/plugin marketplace add Zsadigzade/garmin-bud
+/plugin install garmin-bud@garmin-bud
+```
+
+Then `/garmin-bud:garmin-bud-setup` and `/garmin-bud:garmin-bud`.
+
+**In-repo skills** — if you cloned the repo and run `claude` here:
+
+1. `/garmin-bud-setup` — guided install + MCP config + live check
+2. Restart MCP client
+3. `/garmin-bud` — ask any fitness question
+
+See [`plugin/README.md`](./plugin/README.md) for plugin details.
+
+## Verify without an MCP client
+
+After setup, you can confirm Garmin Connect access directly:
+
+```bash
+garmin-bud check
+```
+
+Example output:
+
+```text
+GarminBud live check
+
+  get_latest_activity       ✓  Activity: Morning Run, Distance: 5.2 km, Start: ...
+  get_activities_range      ✓  3 activities found
+  get_sleep_data            ✓  7 nights retrieved
+  get_heart_rate_trends     ✓  30-day trend loaded
+  get_recovery_status       ✓  Score: 72 (Ready to train)
+  get_body_composition      ✗  No body composition data found for the last 30 days.
+  get_stress_levels         ✓  7-day stress trend loaded
+  get_vo2_max_trends        ✓  30-day VO2 max trend loaded
+  get_training_insights     ✓  Weekly summary generated
+
+All 9 checks passed. GarminBud is ready to use.
+```
+
+## Manual setup (alternative)
+
+If you prefer to configure files yourself:
+
+### 1. Install
+
+```bash
+git clone https://github.com/Zsadigzade/garmin-bud.git
+cd garmin-bud
+npm install
+```
+
+### 2. Configure credentials
+
+```bash
+cp .env.example .env
+```
+
+Edit `.env`:
+
+```env
+GARMIN_EMAIL=your@email.com
+GARMIN_PASSWORD=yourpassword
+```
+
+### 3. Build and authenticate
+
+```bash
+npm run build
+npx garmin-bud auth
+```
+
+You should see: `Garmin authentication successful. Session saved.`
+
+### 4. Connect to Cursor or Claude Desktop
+
+**Cursor:** `%USERPROFILE%\.cursor\mcp.json` (Windows) or `~/.cursor/mcp.json` (macOS/Linux)
+
+**Claude Desktop (Windows):** `%APPDATA%\Claude\claude_desktop_config.json`  
+**Claude Desktop (macOS):** `~/Library/Application Support/Claude/claude_desktop_config.json`
+
+```json
+{
+  "mcpServers": {
+    "garmin-bud": {
+      "command": "node",
+      "args": ["C:/path/to/garmin-bud/dist/index.js", "start"],
+      "env": {
+        "GARMIN_EMAIL": "your@email.com",
+        "GARMIN_PASSWORD": "yourpassword"
+      }
+    }
+  }
+}
+```
+
+Restart your MCP client.
+
+## Web AI (claude.ai, ChatGPT)
+
+For web AI platforms that require remote MCP connectors:
+
+```bash
+garmin-bud serve
+```
+
+Then expose via HTTPS tunnel and add to claude.ai Connectors. Full guide: [docs/WEB-MCP.md](./docs/WEB-MCP.md)
+
+## Useful commands
+
+```bash
+garmin-bud setup         # Interactive first-time setup (recommended)
+garmin-bud serve         # Remote HTTP MCP for web AI connectors
+garmin-bud check         # Live diagnostics against all tools
+garmin-bud status        # Check session + cache
+garmin-bud cache clear   # Force fresh data fetch
+garmin-bud auth          # Re-login if session expired
+garmin-bud start         # Start MCP server manually (stdio)
+```
+
+## Troubleshooting setup
+
+| Issue | Fix |
+|-------|-----|
+| Authentication failed | Verify email/password; disable MFA at connect.garmin.com |
+| MCP client doesn't see tools | Restart the client completely (not just reload window) |
+| Stale data | Run `garmin-bud cache clear` |
+| `dist/index.js` not found | Run `npm run build` |
+
+## Next steps
+
+- [README.md](./README.md) — full reference
+- [examples/prompts.md](./examples/prompts.md) — sample questions
+- [docs/VAULT.md](./docs/VAULT.md) — architecture, branding, and design notes (Obsidian vault)

package/README.md

@@ -0,0 +1,227 @@
+# GarminBud
+
+**Talk to your Garmin data.**
+
+GarminBud is an open-source MCP server that connects your Garmin Connect fitness data to Claude, Cursor, and other AI assistants. Ask about workouts, sleep, heart rate, recovery, and body composition in plain English — privately, on your machine.
+
+> **Disclaimer:** GarminBud is an unofficial community project. It is not affiliated with, endorsed by, or sponsored by Garmin Ltd. Garmin Connect is a trademark of Garmin Ltd.
+
+[![CI](https://github.com/Zsadigzade/garmin-bud/actions/workflows/ci.yml/badge.svg)](https://github.com/Zsadigzade/garmin-bud/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![Node 20+](https://img.shields.io/badge/node-%3E%3D20-brightgreen)](.nvmrc)
+
+## Try it
+
+Once connected to your MCP client, ask things like:
+
+- *"What did I do today?"*
+- *"How's my sleep been this week?"*
+- *"Am I recovered enough to train hard tomorrow?"*
+- *"Is my resting heart rate trending down?"*
+
+See [examples/prompts.md](./examples/prompts.md) for more ideas.
+
+## Why GarminBud
+
+- **Private** — credentials stay in your local `.env`; data is cached on your machine
+- **Local-first** — SQLite cache, session tokens in `.garmin/`
+- **Works everywhere** — Windows, macOS, Linux (Node.js 20+)
+- **Any MCP client** — Claude Desktop, Cursor, and other stdio-compatible clients
+- **Smart fetching** — batched API calls and automatic re-auth when sessions expire
+
+## Quick start
+
+```bash
+git clone https://github.com/Zsadigzade/garmin-bud.git
+cd garmin-bud
+npm install
+npm run build
+npx garmin-bud setup
+```
+
+The setup wizard walks you through credentials, authentication, and connecting Cursor or Claude Desktop — no MCP config editing required.
+
+Full walkthrough: [QUICKSTART.md](./QUICKSTART.md)
+
+## Claude Code plugin (recommended)
+
+Install as a [Claude Code plugin](https://code.claude.com/docs/en/plugins) — skills **and** MCP server in one step:
+
+```bash
+/plugin marketplace add Zsadigzade/garmin-bud
+/plugin install garmin-bud@garmin-bud
+```
+
+Set credentials, then restart Claude Code:
+
+```bash
+export GARMIN_EMAIL="your@email.com"
+export GARMIN_PASSWORD="yourpassword"
+```
+
+| Command | What it does |
+|---------|----------------|
+| `/garmin-bud:garmin-bud-setup` | First-time setup and diagnostics |
+| `/garmin-bud:garmin-bud` | Ask about workouts, sleep, recovery, HR, stress, VO2 max |
+
+Plugin files live in [`plugin/`](./plugin/). See [`plugin/README.md`](./plugin/README.md).
+
+## Claude Code skills (in-repo)
+
+This repo also ships project skills in [`.claude/skills/`](./.claude/skills/) for development without installing the plugin:
+
+| Command | What it does |
+|---------|----------------|
+| `/garmin-bud-setup` | Install, authenticate, configure MCP, run live check |
+| `/garmin-bud` | Ask about workouts, sleep, recovery, HR, stress, VO2 max |
+
+Open the repo in **Claude Code** (`claude` in this directory) — skills load automatically.
+
+To use skills in **every** project without the plugin, copy them to `~/.claude/skills/`.
+
+After setup, restart your MCP client and try `/garmin-bud` with *"What did I do today?"*
+
+## Garmin watch widget (Connect IQ)
+
+View recovery, sleep, activity, stress, and VO2 max on your Garmin watch via a Connect IQ widget in [`ciq/`](./ciq/).
+
+**Requires:** `garmin-bud serve` running + HTTPS tunnel (same setup as web AI).
+
+1. Start the server and tunnel:
+   ```bash
+   garmin-bud serve
+   cloudflared tunnel --url http://127.0.0.1:3847
+   ```
+2. Build and sideload the widget — see [ciq/README.md](./ciq/README.md)
+3. In **Garmin Connect Mobile** → Connect IQ → GarminBud settings, set:
+   - **Server URL** — your tunnel URL (e.g. `https://abc.trycloudflare.com`)
+4. Open the widget on your watch — it shows a pairing code. Approve it in the dashboard (`/dashboard?token=YOUR_API_KEY`) to complete setup.
+
+Tap the widget to cycle through data cards. The watch calls `GET /api/watch` — a compact JSON summary, not the full MCP protocol.
+
+## Connect to Claude Desktop
+
+Edit `claude_desktop_config.json`:
+
+**Windows:** `%APPDATA%\Claude\claude_desktop_config.json`  
+**macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
+
+```json
+{
+  "mcpServers": {
+    "garmin-bud": {
+      "command": "node",
+      "args": ["C:/path/to/garmin-bud/dist/index.js", "start"],
+      "env": {
+        "GARMIN_EMAIL": "your@email.com",
+        "GARMIN_PASSWORD": "yourpassword"
+      }
+    }
+  }
+}
+```
+
+After `npm link`, you can use the CLI directly:
+
+```json
+{
+  "mcpServers": {
+    "garmin-bud": {
+      "command": "garmin-bud",
+      "args": ["start"]
+    }
+  }
+}
+```
+
+Restart your MCP client, then start asking questions.
+
+## Tools
+
+| Tool | What it answers |
+|------|-----------------|
+| `get_latest_activity` | Your most recent workout — distance, pace, HR, elevation |
+| `get_activities_range` | Activities between two dates |
+| `get_sleep_data` | Sleep duration, stages, score, awakenings |
+| `get_heart_rate_trends` | Resting, max, and average HR over time |
+| `get_recovery_status` | Recovery score from HRV, sleep, stress, resting HR |
+| `get_body_composition` | Weight, body fat, and muscle mass trends |
+| `get_stress_levels` | Daily stress averages and trends |
+| `get_vo2_max_trends` | VO2 max fitness trends over time |
+| `get_training_insights` | Combined weekly summary (activities, sleep, recovery, stress) |
+
+## CLI
+
+```bash
+garmin-bud setup          # Interactive first-time setup (recommended)
+garmin-bud serve          # Remote HTTP MCP for web AI (claude.ai, ChatGPT)
+garmin-bud check          # Live diagnostics against all tools
+garmin-bud start          # Start the MCP server (stdio)
+garmin-bud auth           # Force re-authentication
+garmin-bud cache clear    # Clear cached data
+garmin-bud status         # Show session and cache status
+garmin-bud --version      # Print version
+```
+
+## Configuration
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `GARMIN_EMAIL` | — | Garmin Connect email |
+| `GARMIN_PASSWORD` | — | Garmin Connect password |
+| `GARMIN_SESSION_PATH` | `.garmin/session.json` | Session token storage |
+| `GARMIN_LOG_PATH` | `.garmin/mcp.log` | Log file path |
+| `GARMIN_CACHE_PATH` | `.garmin/cache.db` | SQLite cache database |
+| `CACHE_TTL_ACTIVITIES` | `1800` | Activity cache TTL (seconds) |
+| `CACHE_TTL_SLEEP` | `7200` | Sleep cache TTL (seconds) |
+| `CACHE_TTL_STATS` | `3600` | Stats cache TTL (seconds) |
+| `GARMIN_MCP_API_KEY` | auto-generated | Bearer token for HTTP MCP (`garmin-bud serve`) |
+| `GARMIN_MCP_HOST` | `127.0.0.1` | Bind host for HTTP server |
+| `GARMIN_MCP_PORT` | `3847` | Bind port for HTTP server |
+
+## Security & privacy
+
+- Credentials live only in your local `.env` file — never sent to a third party
+- Session tokens in `.garmin/session.json` are as sensitive as a password
+- Tool errors are sanitized before reaching the AI client
+- Uses the unofficial [`garmin-connect`](https://www.npmjs.com/package/garmin-connect) npm package (not Garmin's enterprise OAuth API)
+- **MFA is not supported** by the underlying library — disable MFA or use an app-specific password
+
+## Troubleshooting
+
+| Issue | Fix |
+|-------|-----|
+| Authentication failed | Verify `.env` credentials, run `garmin-bud auth` |
+| MFA enabled on account | Disable MFA or use an app-specific password |
+| Stale data | Run `garmin-bud cache clear` |
+| Rate limited | Wait 60 seconds; cached responses are used when available |
+| No sleep/HR data | Ensure your Garmin device has synced to Garmin Connect |
+| Server won't start | Check that `GARMIN_EMAIL` and `GARMIN_PASSWORD` are set in `.env` |
+
+## Development
+
+```bash
+npm install
+npm run build
+npm test          # 33 tests via Node test runner
+npm run lint
+npm run dev       # Start with auto-reload
+```
+
+Use `.nvmrc` with nvm/fnm for Node 20. If your project path contains `#`, use `npm test` instead of `npm run test:vitest`.
+
+See [CONTRIBUTING.md](./CONTRIBUTING.md) and [docs/VAULT.md](./docs/VAULT.md) for architecture and design notes (Obsidian vault, outside this repo).
+
+## Roadmap
+
+- [x] VO2 max trends
+- [x] Stress levels
+- [x] Training insights
+- [ ] Workout comparison
+- [ ] Docker image
+
+## License
+
+MIT — see [LICENSE](./LICENSE).
+
+Garmin Connect is a trademark of Garmin Ltd. This project is not affiliated with Garmin Ltd.

package/dist/appDb.d.ts

@@ -0,0 +1,32 @@
+export interface PairToken {
+    code: string;
+    created_at: number;
+    expires_at: number;
+    approved_at: number | null;
+}
+export interface PromptJob {
+    id: string;
+    prompt: string;
+    status: "pending" | "running" | "done" | "error";
+    result: string | null;
+    error: string | null;
+    created_at: number;
+    completed_at: number | null;
+}
+export declare function getSetting(key: string): string | null;
+export declare function setSetting(key: string, value: string): void;
+export declare function deleteSetting(key: string): void;
+export declare function createPairToken(): PairToken;
+export declare function getPairToken(code: string): PairToken | null;
+export declare function approvePairToken(code: string): boolean;
+export declare function deletePairToken(code: string): void;
+export declare function listPendingPairTokens(): PairToken[];
+export declare function createPromptJob(id: string, prompt: string): PromptJob;
+export declare function getPromptJob(id: string): PromptJob | null;
+export declare function updatePromptJob(id: string, update: {
+    status: PromptJob["status"];
+    result?: string;
+    error?: string;
+}): void;
+export declare function closeAppDb(): void;
+//# sourceMappingURL=appDb.d.ts.map

package/dist/appDb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appDb.d.ts","sourceRoot":"","sources":["../src/appDb.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;IACjD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAkCD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKrD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI3D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE/C;AAeD,wBAAgB,eAAe,IAAI,SAAS,CAqB3C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAK3D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAStD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,wBAAgB,qBAAqB,IAAI,SAAS,EAAE,CAKnD;AAID,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAOrE;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAKzD;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE;IAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,IAAI,CAWN;AAED,wBAAgB,UAAU,IAAI,IAAI,CAKjC"}

package/dist/appDb.js

@@ -0,0 +1,131 @@
+import Database from "better-sqlite3";
+import fs from "node:fs";
+import path from "node:path";
+import { appConfig } from "./config.js";
+// SECTION: App DB — settings, pair tokens, prompt jobs
+const DB_PATH = path.resolve(path.dirname(appConfig.cachePath), "app.db");
+let _db = null;
+function getDb() {
+    if (_db)
+        return _db;
+    fs.mkdirSync(path.dirname(DB_PATH), { recursive: true });
+    _db = new Database(DB_PATH);
+    _db.exec(`
+    CREATE TABLE IF NOT EXISTS settings (
+      key   TEXT PRIMARY KEY,
+      value TEXT NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS pair_tokens (
+      code        TEXT PRIMARY KEY,
+      created_at  INTEGER NOT NULL,
+      expires_at  INTEGER NOT NULL,
+      approved_at INTEGER
+    );
+    CREATE TABLE IF NOT EXISTS prompt_jobs (
+      id           TEXT PRIMARY KEY,
+      prompt       TEXT NOT NULL,
+      status       TEXT NOT NULL DEFAULT 'pending',
+      result       TEXT,
+      error        TEXT,
+      created_at   INTEGER NOT NULL,
+      completed_at INTEGER
+    );
+  `);
+    return _db;
+}
+// Settings
+export function getSetting(key) {
+    const row = getDb().prepare("SELECT value FROM settings WHERE key = ?").get(key);
+    return row?.value ?? null;
+}
+export function setSetting(key, value) {
+    getDb()
+        .prepare("INSERT INTO settings (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value")
+        .run(key, value);
+}
+export function deleteSetting(key) {
+    getDb().prepare("DELETE FROM settings WHERE key = ?").run(key);
+}
+// Pair tokens
+const PAIR_TOKEN_TTL_SECONDS = 5 * 60;
+function randomCode() {
+    const digits = "0123456789";
+    let code = "";
+    for (let i = 0; i < 6; i++) {
+        code += digits[Math.floor(Math.random() * digits.length)];
+    }
+    return code;
+}
+export function createPairToken() {
+    const db = getDb();
+    const now = Math.floor(Date.now() / 1000);
+    const expiresAt = now + PAIR_TOKEN_TTL_SECONDS;
+    // Clean expired tokens
+    db.prepare("DELETE FROM pair_tokens WHERE expires_at < ?").run(now);
+    let code = randomCode();
+    let attempts = 0;
+    while (attempts < 10) {
+        const existing = db.prepare("SELECT code FROM pair_tokens WHERE code = ?").get(code);
+        if (!existing)
+            break;
+        code = randomCode();
+        attempts++;
+    }
+    const token = { code, created_at: now, expires_at: expiresAt, approved_at: null };
+    db.prepare("INSERT INTO pair_tokens (code, created_at, expires_at, approved_at) VALUES (?, ?, ?, NULL)")
+        .run(code, now, expiresAt);
+    return token;
+}
+export function getPairToken(code) {
+    const row = getDb()
+        .prepare("SELECT code, created_at, expires_at, approved_at FROM pair_tokens WHERE code = ?")
+        .get(code);
+    return row ?? null;
+}
+export function approvePairToken(code) {
+    const now = Math.floor(Date.now() / 1000);
+    const token = getPairToken(code);
+    if (!token || token.expires_at < now)
+        return false;
+    getDb()
+        .prepare("UPDATE pair_tokens SET approved_at = ? WHERE code = ?")
+        .run(now, code);
+    return true;
+}
+export function deletePairToken(code) {
+    getDb().prepare("DELETE FROM pair_tokens WHERE code = ?").run(code);
+}
+export function listPendingPairTokens() {
+    const now = Math.floor(Date.now() / 1000);
+    return getDb()
+        .prepare("SELECT code, created_at, expires_at, approved_at FROM pair_tokens WHERE expires_at > ? AND approved_at IS NULL ORDER BY created_at DESC")
+        .all(now);
+}
+// Prompt jobs
+export function createPromptJob(id, prompt) {
+    const now = Math.floor(Date.now() / 1000);
+    const job = { id, prompt, status: "pending", result: null, error: null, created_at: now, completed_at: null };
+    getDb()
+        .prepare("INSERT INTO prompt_jobs (id, prompt, status, result, error, created_at, completed_at) VALUES (?, ?, 'pending', NULL, NULL, ?, NULL)")
+        .run(id, prompt, now);
+    return job;
+}
+export function getPromptJob(id) {
+    const row = getDb()
+        .prepare("SELECT id, prompt, status, result, error, created_at, completed_at FROM prompt_jobs WHERE id = ?")
+        .get(id);
+    return row ?? null;
+}
+export function updatePromptJob(id, update) {
+    const now = Math.floor(Date.now() / 1000);
+    getDb()
+        .prepare("UPDATE prompt_jobs SET status = ?, result = ?, error = ?, completed_at = ? WHERE id = ?")
+        .run(update.status, update.result ?? null, update.error ?? null, update.status === "done" || update.status === "error" ? now : null, id);
+}
+export function closeAppDb() {
+    if (_db) {
+        _db.close();
+        _db = null;
+    }
+}
+//# sourceMappingURL=appDb.js.map

package/dist/appDb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appDb.js","sourceRoot":"","sources":["../src/appDb.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,uDAAuD;AAEvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EACjC,QAAQ,CACT,CAAC;AAmBF,IAAI,GAAG,GAA6B,IAAI,CAAC;AAEzC,SAAS,KAAK;IACZ,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,GAAG,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5B,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;GAoBR,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,WAAW;AAEX,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,GAAG,CAElE,CAAC;IACd,OAAO,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,KAAa;IACnD,KAAK,EAAE;SACJ,OAAO,CAAC,uGAAuG,CAAC;SAChH,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,KAAK,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,cAAc;AAEd,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,CAAC;AAEtC,SAAS,UAAU;IACjB,MAAM,MAAM,GAAG,YAAY,CAAC;IAC5B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,GAAG,sBAAsB,CAAC;IAE/C,uBAAuB;IACvB,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEpE,IAAI,IAAI,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,QAAQ,GAAG,EAAE,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ;YAAE,MAAM;QACrB,IAAI,GAAG,UAAU,EAAE,CAAC;QACpB,QAAQ,EAAE,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAc,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7F,EAAE,CAAC,OAAO,CAAC,4FAA4F,CAAC;SACrG,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,KAAK,EAAE;SAChB,OAAO,CAAC,kFAAkF,CAAC;SAC3F,GAAG,CAAC,IAAI,CAA0B,CAAC;IACtC,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAEnD,KAAK,EAAE;SACJ,OAAO,CAAC,uDAAuD,CAAC;SAChE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,KAAK,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,KAAK,EAAE;SACX,OAAO,CAAC,yIAAyI,CAAC;SAClJ,GAAG,CAAC,GAAG,CAAgB,CAAC;AAC7B,CAAC;AAED,cAAc;AAEd,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,MAAc;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAc,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACzH,KAAK,EAAE;SACJ,OAAO,CAAC,qIAAqI,CAAC;SAC9I,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,MAAM,GAAG,GAAG,KAAK,EAAE;SAChB,OAAO,CAAC,kGAAkG,CAAC;SAC3G,GAAG,CAAC,EAAE,CAA0B,CAAC;IACpC,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,EAAU,EACV,MAAwE;IAExE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,KAAK,EAAE;SACJ,OAAO,CAAC,yFAAyF,CAAC;SAClG,GAAG,CACF,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,IAAI,IAAI,EACrB,MAAM,CAAC,KAAK,IAAI,IAAI,EACpB,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAClE,EAAE,CACH,CAAC;AACN,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/check.d.ts

@@ -0,0 +1,9 @@
+interface ToolCheckResult {
+    name: string;
+    ok: boolean;
+    summary: string;
+}
+export declare function runLiveCheck(): Promise<ToolCheckResult[]>;
+export declare function printLiveCheckResults(results: ToolCheckResult[]): void;
+export {};
+//# sourceMappingURL=check.d.ts.map

package/dist/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAYA,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AA2ID,wBAAsB,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAc/D;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAqBtE"}