lockin-mcp 1.0.0

package/README.md

@@ -0,0 +1,349 @@
+# LockIn MCP
+
+A [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that blocks distracting websites at the **system level** by managing entries in `/etc/hosts`. Use it with [Poke](https://poke.com), Claude Desktop, or ChatGPT custom MCP connectors to stay focused.
+
+## Features
+
+| Tool | Description |
+|------|-------------|
+| `block_domains` | Block a list of domains (e.g. `youtube.com`, `x.com`, `tiktok.com`) |
+| `unblock_domains` | Permanently unblock specific domains |
+| `temporarily_unblock_domains` | Allow access for a limited time, then auto re-block |
+| `enter_focus_mode` | Block common distraction sites in one action |
+| `get_block_status` | Show what is blocked, temporarily allowed, and system readiness |
+
+Blocking redirects domains to `127.0.0.1` and `::1`, including `www.` variants.
+
+## Requirements
+
+- **macOS / Linux / Windows** (hosts-based blocking; macOS uses `dscacheutil` for DNS flush)
+- **Node.js 18+**
+- **Administrator privileges** to modify `/etc/hosts` (see below)
+
+## Web App & Pro Licensing
+
+The `web/` directory contains the landing page, user accounts, Stripe checkout, and license API.
+
+### Quick start (local)
+
+```bash
+# Terminal 1 — web app
+cd web
+cp ../.env.example .env.local   # edit with your Stripe keys
+npm install
+npm run dev                     # http://localhost:3001
+
+# Terminal 2 — CLI installer (points at local API by default)
+export MDB_APP_URL=http://localhost:3001
+export MDB_LICENSE_API_URL=http://localhost:3001/api/v1
+npm run build
+npm run install:local
+# or from GitHub (no clone):
+# npx -y lockin-mcp mdb-install
+```
+
+### Architecture
+
+| Component | Purpose |
+|-----------|---------|
+| Landing page (`/`) | Features, how-it-works, pricing |
+| Device auth (`/device`) | Browser login for CLI OAuth device flow |
+| Dashboard (`/dashboard`) | License keys, Pro status, install instructions |
+| API (`/api/v1/*`) | License verify, OAuth device flow, token status |
+| Stripe webhook | Pro upgrade + license key generation |
+
+### CLI auth handshake
+
+1. Installer calls `POST /api/v1/oauth/device` → receives `user_code` + `device_code`
+2. Browser opens `/device?code=ABCD-1234`
+3. User signs in and approves (requires Pro)
+4. Installer polls `POST /api/v1/oauth/token` → receives `access_token`
+5. Daemon verifies token via `POST /api/v1/license/status` on startup and hourly
+
+### Environment variables
+
+See [`.env.example`](.env.example) for all configuration options.
+
+---
+
+## One-Line Installer
+
+The fastest way to set up blocking, tunneling, and Poke integration:
+
+### macOS / Linux (curl)
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/Kiog-Aser/mac-distraction-blocker-mcp/main/install.sh | bash
+```
+
+### Windows (PowerShell)
+
+```powershell
+iwr -useb https://raw.githubusercontent.com/Kiog-Aser/mac-distraction-blocker-mcp/main/install.ps1 | iex
+```
+
+### npm
+
+```bash
+npx -y lockin-mcp mdb-install
+# or from a local clone:
+npm run install:local
+```
+
+### What the installer does
+
+1. **Detects your platform** (macOS, Linux, or Windows)
+2. **Verifies your $9.99 Pro license** via browser login or license key
+3. **Prompts for distraction sites** — popular presets pre-selected (YouTube, X, TikTok, Instagram, Reddit) plus custom domains
+4. **Applies initial blocks** to `/etc/hosts`
+5. **Starts the MCP HTTP server** locally with an outbound relay connection (background LaunchAgent on macOS)
+6. **Provisions a stable relay URL** (`https://relay.lockinmcp.com/device/{id}/mcp`) so Poke, Claude, and ChatGPT can reach your Mac
+7. **Connects your AI agent** — Poke, Claude Desktop, or ChatGPT (URL + API key from manifest)
+
+### Installer flags (non-interactive)
+
+```bash
+curl -fsSL .../install.sh | bash -s -- --yes --browser-login --poke-recipe
+npx -y lockin-mcp mdb-install --license-key mdb_pro_xxx --sites all --poke-recipe
+```
+
+| Flag | Description |
+|------|-------------|
+| `--yes` | Non-interactive with defaults |
+| `--license-key <key>` | Pro license key |
+| `--browser-login` | Verify license via browser device flow (default) |
+| `--skip-tunnel` | Local MCP only (no relay URL) |
+| `--sites all` | Block all presets |
+| `--custom-domains a.com,b.com` | Extra domains |
+| `--poke-recipe` | Generate distraction-coach recipe URL |
+| `--mcp-auth-token <token>` | Custom bearer token for tunneled MCP |
+
+Setup details are saved to `~/.mac-distraction-blocker/setup-manifest.json`.
+
+### Pro licensing ($9.99 lifetime — 50% off $19.99)
+
+- **Purchase**: Sign up (email or Google/GitHub), verify email, pay via Stripe
+- **License key**: Available on dashboard after purchase; pass `--license-key` to installer
+- **Browser login**: Default installer flow — OAuth device authorization in your browser
+- **Auth**: Google and GitHub OAuth supported; email/password requires verification before checkout
+
+---
+
+## Quick Start (manual)
+
+```bash
+git clone <this-repo>
+cd mac-distraction-blocker-mcp
+npm install
+npm run build
+```
+
+### Run locally (stdio — advanced)
+
+For MCP clients that spawn a local subprocess:
+
+```bash
+node dist/index.js --stdio
+```
+
+## MCP Client Configuration (after installer)
+
+Your MCP URL and API key are in `~/.mac-distraction-blocker/setup-manifest.json`:
+
+- **MCP URL:** from manifest — e.g. `https://relay.lockinmcp.com/device/abc123/mcp` (Poke, Claude, ChatGPT)
+- **API key:** `mdb_…`
+
+### Poke
+
+```bash
+npx poke@latest login
+npx poke@latest mcp add 'https://YOUR_RELAY_HOST/device/YOUR_ID/mcp' -n 'LockIn MCP' --api-key 'mdb_...'
+```
+
+Or set URL + API key in [poke.com/integrations](https://poke.com/integrations).
+
+### Claude Desktop
+
+`~/Library/Application Support/Claude/claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "lockin-mcp": {
+      "url": "https://YOUR_TUNNEL_HOST/mcp",
+      "headers": {
+        "Authorization": "Bearer mdb_..."
+      }
+    }
+  }
+}
+```
+
+### ChatGPT
+
+1. Open ChatGPT → Settings → Connectors
+2. Add MCP server URL from your manifest (e.g. `https://….trycloudflare.com/mcp`)
+3. Paste API key when prompted: `mdb_...`
+
+### Relay deployment (operators)
+
+The `relay/` package is a Cloudflare Worker + Durable Object that bridges remote MCP HTTP requests to each Mac daemon over an outbound WebSocket.
+
+```bash
+cd relay
+npm install
+npx wrangler secret put REGISTRATION_SECRET
+npx wrangler secret put MDB_JWT_SECRET   # optional, same as web app
+npm run deploy
+```
+
+Set `MDB_RELAY_URL`, `MDB_RELAY_PUBLIC_URL`, and `REGISTRATION_SECRET` in `web/.env.local` and sync to Convex via `./scripts/sync-convex-env.sh`.
+
+## Privileges & `/etc/hosts`
+
+The server writes marked entries between:
+
+```
+# mac-distraction-blocker-mcp BEGIN
+...
+# mac-distraction-blocker-mcp END
+```
+
+Only those lines are touched; the rest of `/etc/hosts` is preserved.
+
+### Option A: Run the server with `sudo` (simplest)
+
+```bash
+sudo node dist/index.js --http --port 3000
+```
+
+For stdio MCP clients, configure the client to launch with `sudo` (see client config examples below).
+
+### Option B: Passwordless `sudo` for hosts updates (recommended)
+
+The server falls back to `sudo cp` when it cannot write `/etc/hosts` directly. To avoid prompts during tool calls, allow your user to copy a temp file into hosts without a password:
+
+```bash
+sudo visudo -f /etc/sudoers.d/mac-distraction-blocker
+```
+
+Add (replace `YOUR_USER` with your macOS username):
+
+```
+YOUR_USER ALL=(ALL) NOPASSWD: /bin/cp /tmp/mac-distraction-blocker-hosts-* /etc/hosts
+YOUR_USER ALL=(ALL) NOPASSWD: /usr/sbin/dscacheutil -flushcache
+YOUR_USER ALL=(ALL) NOPASSWD: /usr/bin/killall -HUP mDNSResponder
+```
+
+### Verify permissions
+
+Call `get_block_status` — `hostsFileWritable: true` means the server can update blocking without extra setup.
+
+## MCP Client Configuration
+
+See **MCP Client Configuration (after installer)** above.
+
+### Legacy: local stdio (Claude Desktop)
+
+`~/Library/Application Support/Claude/claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "lockin-mcp": {
+      "command": "node",
+      "args": ["/absolute/path/to/mac-distraction-blocker-mcp/dist/index.js", "--stdio"]
+    }
+  }
+}
+```
+
+## Hooking up to [poke.com/kitchen](https://poke.com/kitchen)
+
+The installer tunnels your local MCP over HTTPS so Poke can connect remotely — no extra terminal tab.
+
+```bash
+npx poke@latest login
+npx poke@latest mcp add 'https://YOUR_RELAY_HOST/device/YOUR_ID/mcp' -n 'LockIn MCP' --api-key 'mdb_...'
+```
+
+The installer runs this automatically when you choose Poke. Credentials are in `setup-manifest.json`.
+
+### Recipe / Kitchen (recommended)
+
+**Install the official LockIn recipe** for the best Poke experience:
+
+https://poke.com/r/KQ7myvC_Xpo
+
+The recipe connects your MCP tools and coaches you through focus sessions. You can also build custom recipes in [poke.com/kitchen](https://poke.com/kitchen) using `block_domains`, `get_block_status`, etc.
+
+## Tool Examples
+
+### Block sites
+
+```json
+{
+  "domains": ["youtube.com", "x.com", "tiktok.com", "reddit.com"]
+}
+```
+
+### Unblock one site
+
+```json
+{
+  "domains": ["youtube.com"]
+}
+```
+
+### 15-minute break
+
+```json
+{
+  "domains": ["youtube.com"],
+  "duration_seconds": 900
+}
+```
+
+### Check status
+
+No arguments. Returns blocked list, temporary allowances with expiry timestamps, and whether hosts is writable.
+
+## How it works
+
+```mermaid
+flowchart LR
+  A[MCP Client / Poke] --> R[Relay Worker]
+  R --> B[MCP Server on Mac]
+  B --> C[State JSON\n~/.mac-distraction-blocker/]
+  B --> D[/etc/hosts]
+  B --> E[DNS cache flush]
+  C --> B
+```
+
+1. **State** — Block list and temporary unblocks live in `~/.mac-distraction-blocker/state.json`
+2. **Hosts sync** — Active blocks are written to `/etc/hosts` with a managed marker
+3. **Expiry watcher** — A background timer re-applies blocks when temporary unblocks expire (server process must be running)
+4. **DNS flush** — Best-effort `dscacheutil` / `mDNSResponder` refresh after changes
+
+## Development
+
+```bash
+npm install
+npm run dev          # watch TypeScript
+npm run build
+npm run lint
+```
+
+## Troubleshooting
+
+| Issue | Fix |
+|-------|-----|
+| `EACCES` on block/unblock | Run with `sudo` or configure passwordless sudo (see above) |
+| Site still loads | Hard-refresh browser; DNS cache may take a moment. Try private window. |
+| Temp unblock didn't re-block | Keep the MCP server process running (expiry watcher runs in-process) |
+| Poke can't connect | Check manifest relay URL + `/health` returns `lockin-mcp`; verify relay device is online |
+| Wrong platform | Designed for macOS; Linux may work with `/etc/hosts` but DNS flush differs |
+
+## License
+
+MIT

package/assets/icon.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256" fill="#111827">
+  <rect width="256" height="256" rx="48" fill="#111827"/>
+  <path fill="#ffffff" d="M 144 224 L 43.598 224 L 144 123.598 Z M 224 183.5 L 176 224 L 176 48 L 16 48 L 56 8 L 224 8 Z M 16 180.402 L 16 96 L 100.402 96 Z"/>
+</svg>

package/dist/blocker.d.ts

@@ -0,0 +1,23 @@
+import { type BlockStatusResult, type BlockerState, type DomainStatus } from "./types.js";
+export declare function startExpiryWatcher(intervalMs?: number): void;
+export declare function stopExpiryWatcher(): void;
+export declare function blockDomains(domains: string[]): Promise<{
+    blocked: string[];
+    message: string;
+}>;
+export declare function unblockDomains(domains: string[]): Promise<{
+    unblocked: string[];
+    message: string;
+}>;
+export declare function temporarilyUnblockDomains(domains: string[], durationSeconds: number): Promise<{
+    temporarilyUnblocked: Array<{
+        domain: string;
+        expiresAt: number;
+    }>;
+    message: string;
+}>;
+export declare function getBlockStatus(): Promise<BlockStatusResult>;
+export declare function listAllKnownDomains(): Promise<string[]>;
+export declare function describeDomain(domain: string, state: BlockerState): DomainStatus;
+export declare function isCurrentlyBlocked(domain: string): Promise<boolean>;
+//# sourceMappingURL=blocker.d.ts.map

package/dist/blocker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocker.d.ts","sourceRoot":"","sources":["../src/blocker.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,YAAY,EAGlB,MAAM,YAAY,CAAC;AAKpB,wBAAgB,kBAAkB,CAChC,UAAU,SAAS,GAClB,IAAI,CAUN;AAED,wBAAgB,iBAAiB,IAAI,IAAI,CAKxC;AAsCD,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC7D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CA4CD;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC/D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CA8BD;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EAAE,EACjB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC;IACT,oBAAoB,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CA4CD;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAiCjE;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAG7D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAgBhF;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGzE"}

package/dist/blocker.js

@@ -0,0 +1,184 @@
+import { canWriteHostsFile, syncHostsFile, } from "./hosts-manager.js";
+import { dedupeDomains, getDomainsToBlockInHosts, getActiveTemporaryUnblock, isDomainBlocked, loadState, pruneExpiredUnblocks, saveState, appendAuditEntry, } from "./state.js";
+import { isValidDomain, normalizeDomain, } from "./types.js";
+let expiryTimer;
+let lastSyncedAt = null;
+export function startExpiryWatcher(intervalMs = 10_000) {
+    if (expiryTimer) {
+        return;
+    }
+    expiryTimer = setInterval(() => {
+        void refreshExpiredUnblocks();
+    }, intervalMs);
+    expiryTimer.unref();
+}
+export function stopExpiryWatcher() {
+    if (expiryTimer) {
+        clearInterval(expiryTimer);
+        expiryTimer = undefined;
+    }
+}
+async function refreshExpiredUnblocks() {
+    const state = await loadState();
+    const pruned = pruneExpiredUnblocks(state.temporaryUnblocks);
+    if (pruned.length === state.temporaryUnblocks.length) {
+        return false;
+    }
+    const nextState = {
+        ...state,
+        temporaryUnblocks: pruned,
+    };
+    await saveState(nextState);
+    await applyHostsFromState(nextState);
+    return true;
+}
+async function applyHostsFromState(state) {
+    const domains = getDomainsToBlockInHosts(state);
+    const sync = await syncHostsFile(domains);
+    if (sync.method !== "unchanged") {
+        lastSyncedAt = Date.now();
+    }
+    return sync.method;
+}
+function validateDomains(domains) {
+    const normalized = dedupeDomains(domains);
+    const invalid = normalized.filter((domain) => !isValidDomain(domain));
+    if (invalid.length > 0) {
+        throw new Error(`Invalid domain(s): ${invalid.join(", ")}`);
+    }
+    return normalized;
+}
+export async function blockDomains(domains) {
+    const validated = validateDomains(domains);
+    const state = await loadState();
+    const blockedSet = new Set(state.blockedDomains);
+    const newDomains = validated.filter((domain) => !blockedSet.has(domain));
+    for (const domain of validated) {
+        blockedSet.add(domain);
+    }
+    const nextState = appendAuditEntry({
+        blockedDomains: [...blockedSet].sort(),
+        temporaryUnblocks: state.temporaryUnblocks.filter((entry) => !validated.includes(entry.domain)),
+        updatedAt: Date.now(),
+    }, "block_domains", validated);
+    const stateUnchanged = newDomains.length === 0 &&
+        nextState.blockedDomains.length === state.blockedDomains.length &&
+        nextState.temporaryUnblocks.length === state.temporaryUnblocks.length;
+    if (!stateUnchanged) {
+        await saveState(nextState);
+    }
+    const method = await applyHostsFromState(nextState);
+    if (method === "unchanged" && newDomains.length === 0) {
+        return {
+            blocked: validated,
+            message: `${validated.length} domain(s) already blocked.`,
+        };
+    }
+    return {
+        blocked: validated,
+        message: `Blocked ${validated.length} domain(s) via /etc/hosts (${method}).`,
+    };
+}
+export async function unblockDomains(domains) {
+    const validated = validateDomains(domains);
+    const state = await loadState();
+    const removeSet = new Set(validated);
+    const unblocked = state.blockedDomains.filter((domain) => removeSet.has(domain));
+    const nextState = appendAuditEntry({
+        blockedDomains: state.blockedDomains.filter((domain) => !removeSet.has(domain)),
+        temporaryUnblocks: state.temporaryUnblocks.filter((entry) => !removeSet.has(entry.domain)),
+        updatedAt: Date.now(),
+    }, "unblock_domains", unblocked);
+    await saveState(nextState);
+    const method = await applyHostsFromState(nextState);
+    return {
+        unblocked,
+        message: `Unblocked ${unblocked.length} domain(s) and updated /etc/hosts (${method}).`,
+    };
+}
+export async function temporarilyUnblockDomains(domains, durationSeconds) {
+    if (!Number.isFinite(durationSeconds) || durationSeconds <= 0) {
+        throw new Error("duration_seconds must be a positive number");
+    }
+    const validated = validateDomains(domains);
+    const state = await loadState();
+    const expiresAt = Date.now() + durationSeconds * 1000;
+    const temporaryUnblocks = [...state.temporaryUnblocks];
+    for (const domain of validated) {
+        if (!state.blockedDomains.includes(domain)) {
+            throw new Error(`Cannot temporarily unblock "${domain}" because it is not in the blocked list`);
+        }
+        const existingIndex = temporaryUnblocks.findIndex((entry) => entry.domain === domain);
+        const entry = { domain, expiresAt };
+        if (existingIndex >= 0) {
+            temporaryUnblocks[existingIndex] = entry;
+        }
+        else {
+            temporaryUnblocks.push(entry);
+        }
+    }
+    const nextState = appendAuditEntry({
+        ...state,
+        temporaryUnblocks,
+    }, "temporarily_unblock_domains", validated);
+    await saveState(nextState);
+    const method = await applyHostsFromState(nextState);
+    return {
+        temporarilyUnblocked: validated.map((domain) => ({ domain, expiresAt })),
+        message: `Temporarily unblocked ${validated.length} domain(s) for ${durationSeconds}s (${method}).`,
+    };
+}
+export async function getBlockStatus() {
+    await refreshExpiredUnblocks();
+    const state = await loadState();
+    const now = Date.now();
+    const hostsFileWritable = await canWriteHostsFile();
+    const blocked = [];
+    const temporarilyUnblocked = [];
+    for (const domain of state.blockedDomains) {
+        const temp = getActiveTemporaryUnblock(domain, state.temporaryUnblocks, now);
+        if (temp) {
+            temporarilyUnblocked.push({
+                domain,
+                status: "temporarily_unblocked",
+                expiresAt: temp.expiresAt,
+            });
+            continue;
+        }
+        blocked.push({
+            domain,
+            status: "blocked",
+        });
+    }
+    return {
+        blocked,
+        temporarilyUnblocked,
+        notBlocked: [],
+        hostsFileWritable,
+        lastSyncedAt,
+    };
+}
+export async function listAllKnownDomains() {
+    const state = await loadState();
+    return state.blockedDomains;
+}
+export function describeDomain(domain, state) {
+    const normalized = normalizeDomain(domain);
+    if (!state.blockedDomains.includes(normalized)) {
+        return { domain: normalized, status: "not_blocked" };
+    }
+    const temp = getActiveTemporaryUnblock(normalized, state.temporaryUnblocks);
+    if (temp) {
+        return {
+            domain: normalized,
+            status: "temporarily_unblocked",
+            expiresAt: temp.expiresAt,
+        };
+    }
+    return { domain: normalized, status: "blocked" };
+}
+export async function isCurrentlyBlocked(domain) {
+    const state = await loadState();
+    return isDomainBlocked(domain, state);
+}
+//# sourceMappingURL=blocker.js.map

package/dist/blocker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocker.js","sourceRoot":"","sources":["../src/blocker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,eAAe,EACf,SAAS,EACT,oBAAoB,EACpB,SAAS,EACT,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAIL,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,IAAI,WAAuC,CAAC;AAC5C,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,MAAM,UAAU,kBAAkB,CAChC,UAAU,GAAG,MAAM;IAEnB,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,KAAK,sBAAsB,EAAE,CAAC;IAChC,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,IAAI,WAAW,EAAE,CAAC;QAChB,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,WAAW,GAAG,SAAS,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB;IACnC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAiB;QAC9B,GAAG,KAAK;QACR,iBAAiB,EAAE,MAAM;KAC1B,CAAC;IACF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAAmB;IAEnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,OAAiB;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAiB;IAIlD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAEhC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;QACtC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAC7C;QACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,EACD,eAAe,EACf,SAAS,CACV,CAAC;IAEF,MAAM,cAAc,GAClB,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,SAAS,CAAC,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,CAAC,MAAM;QAC/D,SAAS,CAAC,iBAAiB,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC;IAExE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,6BAA6B;SAC1D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,WAAW,SAAS,CAAC,MAAM,8BAA8B,MAAM,IAAI;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiB;IAIpD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAErC,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CACtB,CAAC;IAEF,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM,CACzC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CACnC;QACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACxC;QACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,EACD,iBAAiB,EACjB,SAAS,CACV,CAAC;IAEF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,SAAS;QACT,OAAO,EAAE,aAAa,SAAS,CAAC,MAAM,sCAAsC,MAAM,IAAI;KACvF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAiB,EACjB,eAAuB;IAKvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,IAAI,CAAC;IACtD,MAAM,iBAAiB,GAAG,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAEvD,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,yCAAyC,CAC/E,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CACnC,CAAC;QACF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACpC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,iBAAiB,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,GAAG,KAAK;QACR,iBAAiB;KAClB,EACD,6BAA6B,EAC7B,SAAS,CACV,CAAC;IAEF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,oBAAoB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,yBAAyB,SAAS,CAAC,MAAM,kBAAkB,eAAe,MAAM,MAAM,IAAI;KACpG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,oBAAoB,GAAmB,EAAE,CAAC;IAEhD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC7E,IAAI,IAAI,EAAE,CAAC;YACT,oBAAoB,CAAC,IAAI,CAAC;gBACxB,MAAM;gBACN,MAAM,EAAE,uBAAuB;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO;QACP,oBAAoB;QACpB,UAAU,EAAE,EAAE;QACd,iBAAiB;QACjB,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,cAAc,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAmB;IAChE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,yBAAyB,CAAC,UAAU,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5E,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,uBAAuB;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC"}

package/dist/brand.d.ts

@@ -0,0 +1,12 @@
+export declare const APP_NAME = "LockIn MCP";
+export declare const APP_SLUG = "lockin-mcp";
+export declare const APP_TAGLINE = "Block distractions. Lock in focus.";
+export declare const APP_DOMAIN = "lockinmcp.com";
+export declare const RELAY_HOST = "relay.lockinmcp.com";
+export declare const RELAY_PUBLIC_ORIGIN = "https://relay.lockinmcp.com";
+export declare const LICENSE_PRICE_ORIGINAL = "$19.99";
+export declare const LICENSE_PRICE = "$9.99";
+export declare const LICENSE_DISCOUNT_LABEL = "50% off \u2014 forever";
+export declare const POKE_LOCKIN_RECIPE_URL = "https://poke.com/r/KQ7myvC_Xpo";
+export declare const ICON_URL = "https://lockinmcp.com/icon.png";
+//# sourceMappingURL=brand.d.ts.map

package/dist/brand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand.d.ts","sourceRoot":"","sources":["../src/brand.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,eAAe,CAAC;AACrC,eAAO,MAAM,QAAQ,eAAe,CAAC;AACrC,eAAO,MAAM,WAAW,uCAAuC,CAAC;AAChE,eAAO,MAAM,UAAU,kBAAkB,CAAC;AAC1C,eAAO,MAAM,UAAU,wBAAwB,CAAC;AAChD,eAAO,MAAM,mBAAmB,gCAA0B,CAAC;AAC3D,eAAO,MAAM,sBAAsB,WAAW,CAAC;AAC/C,eAAO,MAAM,aAAa,UAAU,CAAC;AACrC,eAAO,MAAM,sBAAsB,2BAAsB,CAAC;AAC1D,eAAO,MAAM,sBAAsB,mCAAmC,CAAC;AACvE,eAAO,MAAM,QAAQ,mCAAmC,CAAC"}

package/dist/brand.js

@@ -0,0 +1,12 @@
+export const APP_NAME = "LockIn MCP";
+export const APP_SLUG = "lockin-mcp";
+export const APP_TAGLINE = "Block distractions. Lock in focus.";
+export const APP_DOMAIN = "lockinmcp.com";
+export const RELAY_HOST = `relay.${APP_DOMAIN}`;
+export const RELAY_PUBLIC_ORIGIN = `https://${RELAY_HOST}`;
+export const LICENSE_PRICE_ORIGINAL = "$19.99";
+export const LICENSE_PRICE = "$9.99";
+export const LICENSE_DISCOUNT_LABEL = "50% off — forever";
+export const POKE_LOCKIN_RECIPE_URL = "https://poke.com/r/KQ7myvC_Xpo";
+export const ICON_URL = `https://${APP_DOMAIN}/icon.png`;
+//# sourceMappingURL=brand.js.map

package/dist/brand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand.js","sourceRoot":"","sources":["../src/brand.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AACrC,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AACrC,MAAM,CAAC,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAChE,MAAM,CAAC,MAAM,UAAU,GAAG,eAAe,CAAC;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,UAAU,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,UAAU,EAAE,CAAC;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AACvE,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,UAAU,WAAW,CAAC"}

package/dist/hosts-manager.d.ts

@@ -0,0 +1,14 @@
+export declare function canWriteHostsFile(): Promise<boolean>;
+export declare function readHostsFile(): Promise<string>;
+export declare function stripManagedEntries(hostsContent: string): string;
+export declare function buildManagedSection(domains: string[]): string;
+export declare function composeHostsFile(existingContent: string, blockedDomains: string[]): string;
+export declare function writeHostsFile(content: string): Promise<"direct" | "sudo">;
+export declare function flushDnsCache(): Promise<void>;
+export declare function syncHostsFile(blockedDomains: string[]): Promise<{
+    method: "direct" | "sudo" | "unchanged";
+    blockedCount: number;
+}>;
+/** Reconcile hosts file with saved state on daemon startup. */
+export declare function reconcileHostsOnStartup(): Promise<void>;
+//# sourceMappingURL=hosts-manager.d.ts.map

package/dist/hosts-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts-manager.d.ts","sourceRoot":"","sources":["../src/hosts-manager.ts"],"names":[],"mappings":"AA4DA,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAS1D;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAErD;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CA+BhE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAyB7D;AAED,wBAAgB,gBAAgB,CAC9B,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM,EAAE,GACvB,MAAM,CAOR;AA6BD,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,CAehF;AA2CD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAcnD;AAED,wBAAsB,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrE,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IACxC,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAiBD;AAED,+DAA+D;AAC/D,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAK7D"}