sandstream-kit 1.2.0 → 1.3.0

package/dist/commands/mcp.js

@@ -0,0 +1,120 @@
+// `kit mcp` command (MCP orchestrator + stdio server) — extracted from cli.ts (split step 5).
+import { startMcpServer } from "../mcp-server.js";
+import { loadConfig } from "../config.js";
+import { resolveConfigPath } from "../cli-shared.js";
+import { c } from "../utils/colors.js";
+import { hasFlag } from "../utils/flags.js";
+export async function cmdMcp() {
+    const sub = process.argv[3];
+    // An MCP client launches `kit mcp` and speaks the stdio transport — no
+    // sub-command and a non-TTY stdin. Start the server in that case. Interactive
+    // use (TTY) or any explicit sub falls through to the orchestrator below.
+    if (!sub && !process.stdin.isTTY) {
+        await startMcpServer();
+        return true;
+    }
+    const config = await loadConfig(resolveConfigPath()).catch(() => null);
+    const mcpConfig = config?.mcp;
+    const { statusAll, statusForMcp, clearMcpToken, storeStaticToken, } = await import("../mcp-orchestrator.js");
+    if (!sub || sub === "list" || sub === "status") {
+        console.log(`${c.bold}${c.cyan}kit mcp${c.reset}`);
+        console.log(`${c.dim}${"─".repeat(50)}${c.reset}\n`);
+        const entries = await statusAll(mcpConfig);
+        if (entries.length === 0) {
+            console.log(`${c.dim}No [mcp.*] blocks declared in .kit.toml${c.reset}`);
+            console.log(`${c.dim}Add e.g. [mcp.sentry] scopes = ["org:read", "project:write"]${c.reset}`);
+            return true;
+        }
+        for (const e of entries) {
+            const color = e.status === "ok"
+                ? c.green
+                : e.status === "missing" || e.status === "expired"
+                    ? c.yellow
+                    : c.red;
+            const marker = e.status === "ok" ? "✓" : e.status === "missing" ? "?" : "✗";
+            const scopeStr = e.declared?.scopes ? ` ${c.dim}[${e.declared.scopes.join(", ")}]${c.reset}` : "";
+            console.log(`  ${color}${marker}${c.reset} ${e.name.padEnd(14)} ${color}${e.status}${c.reset}${scopeStr}`);
+            if (e.detail)
+                console.log(`     ${c.dim}${e.detail}${c.reset}`);
+        }
+        console.log();
+        return entries.every((e) => e.status === "ok" || e.status === "missing");
+    }
+    if (sub === "auth") {
+        const name = process.argv[4];
+        if (!name) {
+            console.error(`${c.red}Usage: kit mcp auth <name>${c.reset}`);
+            return false;
+        }
+        const declared = mcpConfig?.[name];
+        if (!declared) {
+            console.error(`${c.red}No [mcp.${name}] block in .kit.toml${c.reset}`);
+            return false;
+        }
+        // For now we surface vendor-specific guidance; full OAuth flow is
+        // delegated to the operator (paste callback URL). When the vendor's
+        // MCP server publishes a stable /authorize endpoint we can fully
+        // automate.
+        const authUrl = declared.url ?? `https://mcp.${name}.dev`;
+        console.log(`${c.bold}Authorize kit for MCP server "${name}"${c.reset}`);
+        console.log(`${c.dim}Vendor URL: ${authUrl}${c.reset}`);
+        console.log(`${c.dim}Required scopes: ${(declared.scopes ?? ["(none declared)"]).join(", ")}${c.reset}\n`);
+        console.log(`${c.yellow}OAuth-flow not yet automated for "${name}". Two options:${c.reset}`);
+        console.log(`  1. Set env var: ${c.bold}kit mcp set-token ${name} --from-env <VAR>${c.reset}`);
+        console.log(`  2. Paste token: ${c.bold}kit mcp set-token ${name} --paste${c.reset}`);
+        return true;
+    }
+    if (sub === "set-token") {
+        const name = process.argv[4];
+        if (!name) {
+            console.error(`${c.red}Usage: kit mcp set-token <name> [--from-env VAR | --paste]${c.reset}`);
+            return false;
+        }
+        const args = process.argv.slice(5);
+        const fromEnvIdx = args.indexOf("--from-env");
+        let accessToken;
+        if (fromEnvIdx >= 0 && args[fromEnvIdx + 1]) {
+            const envVar = args[fromEnvIdx + 1];
+            accessToken = process.env[envVar];
+            if (!accessToken) {
+                console.error(`${c.red}Env var ${envVar} is empty${c.reset}`);
+                return false;
+            }
+        }
+        else if (hasFlag(args, "--paste")) {
+            const readline = await import("node:readline/promises");
+            const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+            try {
+                accessToken = (await rl.question(`Paste access token for "${name}": `)).trim();
+            }
+            finally {
+                rl.close();
+            }
+        }
+        else {
+            console.error(`${c.red}Missing --from-env <VAR> or --paste${c.reset}`);
+            return false;
+        }
+        const declared = mcpConfig?.[name];
+        await storeStaticToken(name, accessToken, {
+            scopes: declared?.scopes,
+        });
+        console.log(`${c.green}✓${c.reset} Token stored for ${name} in ~/.kit/mcp-tokens.json (chmod 0o600)`);
+        const status = await statusForMcp(name, declared ?? null);
+        console.log(`${c.dim}Status: ${status.status}${c.reset}`);
+        return true;
+    }
+    if (sub === "clear") {
+        const name = process.argv[4];
+        if (!name) {
+            console.error(`${c.red}Usage: kit mcp clear <name>${c.reset}`);
+            return false;
+        }
+        await clearMcpToken(name);
+        console.log(`${c.green}✓${c.reset} Cleared token for ${name}`);
+        return true;
+    }
+    console.error(`${c.red}Usage: kit mcp [list | status | auth <name> | set-token <name> | clear <name>]${c.reset}`);
+    return false;
+}
+//# sourceMappingURL=mcp.js.map

package/dist/commands/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE5B,uEAAuE;IACvE,8EAA8E;IAC9E,yEAAyE;IACzE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,cAAc,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,MAAM,EAAE,GAAG,CAAC;IAC9B,MAAM,EACJ,SAAS,EACT,YAAY,EACZ,aAAa,EACb,gBAAgB,GACjB,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAE3C,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,0CAA0C,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,GAAG,+DAA+D,CAAC,CAAC,KAAK,EAAE,CACjF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GACT,CAAC,CAAC,MAAM,KAAK,IAAI;gBACf,CAAC,CAAC,CAAC,CAAC,KAAK;gBACT,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;oBAChD,CAAC,CAAC,CAAC,CAAC,MAAM;oBACV,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACd,MAAM,MAAM,GACV,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/D,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,QAAQ,EAAE,CAC9F,CAAC;YACF,IAAI,CAAC,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,IAAI,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,kEAAkE;QAClE,oEAAoE;QACpE,iEAAiE;QACjE,YAAY;QACZ,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,eAAe,IAAI,MAAM,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,iCAAiC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,eAAe,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAC9F,CAAC;QACF,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,MAAM,qCAAqC,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAChF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,qBAAqB,IAAI,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,qBAAqB,IAAI,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,6DAA6D,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,WAA+B,CAAC;QACpC,IAAI,UAAU,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;YACpC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,MAAM,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9D,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC;gBACH,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjF,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,sCAAsC,CAAC,CAAC,KAAK,EAAE,CACxD,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE;YACxC,MAAM,EAAE,QAAQ,EAAE,MAAM;SACzB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,qBAAqB,IAAI,0CAA0C,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,8BAA8B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,iFAAiF,CAAC,CAAC,KAAK,EAAE,CACnG,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/commands/memory.d.ts

@@ -0,0 +1 @@
+export declare function cmdMemory(): Promise<boolean>;

package/dist/commands/memory.js

@@ -0,0 +1,534 @@
+// kit memory commands — extracted from cli.ts (split step 7). The large
+// subcommand dispatcher; restructured to a handler table in a follow-up.
+import { c } from "../utils/colors.js";
+import { hasFlag, flagValue } from "../utils/flags.js";
+import { existsSync } from "node:fs";
+import { basename } from "node:path";
+import { openMemoryDb, getStats, getMemoryDbPath, searchMessages } from "../memory/db.js";
+import { indexAllHarnesses } from "../memory/parser.js";
+import { mergeDb } from "../memory/merge.js";
+import { buildSuggestPrompt } from "../memory/suggest.js";
+import { getCurrentProjectRoot } from "../memory/project.js";
+import { scanDbForSecrets } from "../memory/scan.js";
+import { backupEncrypted, restoreEncrypted } from "../memory/backup.js";
+import { shareEntry, listAreas, queryArea, getSharedPath, } from "../memory/shared.js";
+import { userPromptSubmitReminder, runSessionEndIndex, sessionStartRecovery } from "../memory/hook.js";
+import { installMemoryHooks, uninstallMemoryHooks, getClaudeSettingsPath, } from "../memory/install.js";
+import { palAdd, palList, palDone, palSnooze, palAutoVerify, importLegacyLedger, } from "../memory/pal.js";
+import { saveThread, listThreads, removeThread, latestSessionId, resolveThread, } from "../memory/threads.js";
+export async function cmdMemory() {
+    const subcommand = process.argv[3];
+    if (!subcommand || subcommand === "--help" || subcommand === "-h")
+        return memHelp();
+    // One handler per subcommand — keeps this dispatcher flat (was a complexity-132
+    // if-chain). Each handler reads process.argv itself, so no args thread through.
+    const handlers = {
+        index: memIndex,
+        merge: memMerge,
+        stats: memStats,
+        suggest: memSuggest,
+        search: memSearch,
+        hook: memHook,
+        install: memInstall,
+        uninstall: memUninstall,
+        share: memShare,
+        areas: memAreas,
+        area: memArea,
+        scan: memScan,
+        backup: memBackup,
+        restore: memRestore,
+        save: memSave,
+        threads: memThreads,
+        resume: memResume,
+        forget: memForget,
+        pal: memPal,
+    };
+    const handler = handlers[subcommand];
+    if (handler)
+        return handler();
+    console.error(`${c.red}Unknown memory subcommand: ${subcommand}${c.reset}`);
+    console.error("Use: kit memory index | search <query> | stats | install | uninstall | pal");
+    return false;
+}
+async function memPal() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    const action = process.argv[4] && !process.argv[4].startsWith("--") ? process.argv[4] : "list";
+    const db = openMemoryDb();
+    try {
+        if (action === "list") {
+            const scope = hasFlag(process.argv, "--global")
+                ? undefined
+                : basename(getCurrentProjectRoot());
+            const items = palList(db, { scope });
+            if (jsonMode) {
+                console.log(JSON.stringify(items));
+                return true;
+            }
+            if (!items.length) {
+                console.log(`${c.dim}no open action items${c.reset}`);
+                return true;
+            }
+            console.log(`${c.bold}${items.length}${c.reset} open action item(s):`);
+            for (const p of items) {
+                const tag = p.kind === "auto" ? ` ${c.dim}· auto${c.reset}` : "";
+                const scope = p.scope ? ` ${c.dim}[${p.scope}]${c.reset}` : "";
+                console.log(`  ${c.bold}${p.id}${c.reset}  ${p.title}${scope}${tag}`);
+            }
+            return true;
+        }
+        if (action === "add") {
+            const title = process.argv.slice(5).filter((a) => !a.startsWith("--")).join(" ").trim();
+            if (!title) {
+                console.error(`${c.red}usage: kit memory pal add <title> [--verify=<cmd>] [--scope=<s>]${c.reset}`);
+                return false;
+            }
+            const id = palAdd(db, {
+                title,
+                verifyCmd: flagValue(process.argv, "--verify"),
+                scope: flagValue(process.argv, "--scope") ?? basename(getCurrentProjectRoot()),
+            });
+            console.log(`${c.green}✓${c.reset} added ${c.bold}${id}${c.reset}`);
+            return true;
+        }
+        if (action === "done") {
+            const id = process.argv[5];
+            if (!id) {
+                console.error(`${c.red}usage: kit memory pal done <id>${c.reset}`);
+                return false;
+            }
+            console.log(palDone(db, id)
+                ? `${c.green}✓${c.reset} closed ${id}`
+                : `${c.dim}${id} not found or already closed${c.reset}`);
+            return true;
+        }
+        if (action === "snooze") {
+            const id = process.argv[5];
+            const days = Number(process.argv[6] ?? "7") || 7;
+            if (!id) {
+                console.error(`${c.red}usage: kit memory pal snooze <id> [days]${c.reset}`);
+                return false;
+            }
+            console.log(palSnooze(db, id, days)
+                ? `${c.green}✓${c.reset} snoozed ${id} for ${days}d`
+                : `${c.dim}${id} not found${c.reset}`);
+            return true;
+        }
+        if (action === "verify") {
+            const r = palAutoVerify(db);
+            console.log(`${c.dim}checked ${r.checked} · closed ${r.closed.length} · reopened ${r.reopened.length}${c.reset}`);
+            return true;
+        }
+        if (action === "import") {
+            const r = importLegacyLedger(db);
+            console.log(`${c.green}✓${c.reset} imported ${r.imported} item(s) from the legacy ledger`);
+            return true;
+        }
+        console.error(`${c.red}Unknown pal action: ${action}${c.reset}`);
+        console.error("Use: kit memory pal [list|add|done|snooze|verify|import]");
+        return false;
+    }
+    finally {
+        db.close();
+    }
+}
+async function memHelp() {
+    console.log("kit memory — local conversation memory (SQLite + FTS5)");
+    console.log("\nUsage:");
+    console.log("  kit memory index            Index ~/.claude transcripts into the memory store");
+    console.log("  kit memory search <query>   Search memory (current project; --global for all)");
+    console.log("  kit memory stats            Show what the memory store contains");
+    console.log("  kit memory merge <file>     Merge another machine's memory.db into this one");
+    console.log("  kit memory install          Wire the 2 hooks into ~/.claude/settings.json");
+    console.log("  kit memory uninstall        Remove the hooks");
+    console.log("  kit memory pal [list|add|done|snooze|verify|import]   Pending action ledger");
+    console.log("  kit memory save <name>      Bookmark the current session as a named copilot");
+    console.log("  kit memory threads          List saved copilots (--global for all)");
+    console.log("  kit memory resume <name|n>  Print the resume command for a saved copilot");
+    console.log("  kit memory forget <name>    Remove a saved copilot");
+    console.log("  kit memory scan             Scan the store for stored secrets");
+    console.log("  kit memory backup <file>    Encrypted backup (set KIT_MEMORY_PASSPHRASE)");
+    console.log("  kit memory restore <file>   Restore an encrypted backup (new machine)");
+    console.log("  kit memory share …          Promote a curated entry to shared (team) memory");
+    console.log("  kit memory areas            List shared responsibility areas");
+    console.log("  kit memory area <name>      Show shared entries for one area");
+    return true;
+}
+async function memIndex() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    const db = openMemoryDb();
+    const t0 = Date.now();
+    const byHarness = indexAllHarnesses(db);
+    const ms = Date.now() - t0;
+    db.close();
+    if (jsonMode) {
+        console.log(JSON.stringify({ byHarness, ms }));
+        return true;
+    }
+    let messages = 0;
+    let toolUses = 0;
+    let files = 0;
+    let skipped = 0;
+    for (const r of Object.values(byHarness)) {
+        messages += r.messages;
+        toolUses += r.toolUses;
+        files += r.files;
+        skipped += r.filesSkipped;
+    }
+    console.log(`${c.green}✓${c.reset} indexed ${c.bold}${messages}${c.reset} messages + ${toolUses} tool-uses from ${files} sessions${skipped ? `, ${skipped} unchanged` : ""} ${c.dim}(${ms}ms)${c.reset}`);
+    for (const [harness, r] of Object.entries(byHarness)) {
+        if (r.files || r.messages) {
+            console.log(`  ${c.dim}${harness}: ${r.messages} msg · ${r.files} sessions${r.filesSkipped ? ` · ${r.filesSkipped} unchanged` : ""}${c.reset}`);
+        }
+    }
+    return true;
+}
+async function memMerge() {
+    const sourcePath = process.argv[4];
+    if (!sourcePath) {
+        console.error(`${c.red}usage: kit memory merge <other-machine-memory.db>${c.reset}`);
+        return false;
+    }
+    const db = openMemoryDb();
+    try {
+        const r = mergeDb(db, sourcePath);
+        console.log(`${c.green}✓${c.reset} merged ${c.bold}${r.messages}${c.reset} messages + ${r.toolUses} tool-uses · ${r.sessions} sessions · ${r.pending} pending · ${r.threads} copilots ${c.dim}from ${sourcePath}${c.reset}`);
+    }
+    catch (err) {
+        db.close();
+        console.error(`${c.red}${err.message}${c.reset}`);
+        return false;
+    }
+    db.close();
+    return true;
+}
+async function memStats() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    const db = openMemoryDb();
+    const s = getStats(db);
+    db.close();
+    if (jsonMode) {
+        console.log(JSON.stringify(s));
+        return true;
+    }
+    console.log(`${c.bold}kit memory${c.reset}  ${c.dim}${s.dbPath}${c.reset}`);
+    console.log(`  sessions   ${s.sessions}`);
+    console.log(`  messages   ${s.messages}`);
+    console.log(`  tool-uses  ${s.toolUses}`);
+    console.log(`  pending    ${s.pendingOpen} ${c.dim}(open action items)${c.reset}`);
+    console.log(`  size       ${Math.round(s.sizeBytes / 1024)} KB`);
+    return true;
+}
+async function memSuggest() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    // BYO-LLM: kit emits a prompt; it never calls a model. Pipe to your own:
+    //   kit memory suggest | <your-llm>
+    const limitArg = flagValue(process.argv, "--limit");
+    const limit = limitArg ? Math.max(1, parseInt(limitArg, 10) || 30) : undefined;
+    const db = openMemoryDb();
+    const out = buildSuggestPrompt(db, { limit });
+    db.close();
+    if (jsonMode) {
+        console.log(JSON.stringify(out));
+        return true;
+    }
+    console.log(out.prompt);
+    return true;
+}
+async function memSearch() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    const terms = process.argv.slice(4).filter((a) => !a.startsWith("--"));
+    const query = terms.join(" ").trim();
+    if (!query) {
+        console.error(`${c.red}usage: kit memory search <query> [--global] [--project=<path>] [--limit=N]${c.reset}`);
+        return false;
+    }
+    const limit = Number(flagValue(process.argv, "--limit") ?? "20") || 20;
+    const projectPath = hasFlag(process.argv, "--global")
+        ? undefined
+        : (flagValue(process.argv, "--project") ?? getCurrentProjectRoot());
+    const db = openMemoryDb();
+    const hits = searchMessages(db, query, { limit, projectPath });
+    db.close();
+    if (jsonMode) {
+        console.log(JSON.stringify(hits));
+        return true;
+    }
+    const scope = projectPath ? `${c.dim}in ${projectPath}${c.reset}` : `${c.dim}(global)${c.reset}`;
+    if (!hits.length) {
+        console.log(`${c.dim}no matches for "${query}" ${projectPath ?? "(global)"}${c.reset}`);
+        return true;
+    }
+    console.log(`${c.bold}${hits.length}${c.reset} match(es) ${scope}`);
+    for (const h of hits) {
+        const snippet = (h.content ?? "").replace(/\s+/g, " ").slice(0, 120);
+        console.log(`  ${c.dim}${h.timestamp ?? "?"}${c.reset} ${c.bold}${h.role ?? h.uuid ?? ""}${c.reset}  ${snippet}`);
+    }
+    return true;
+}
+async function memHook() {
+    // Internal: invoked by Claude Code hooks. Fail-open — never block.
+    const event = process.argv[4];
+    if (event === "user-prompt-submit") {
+        const text = userPromptSubmitReminder();
+        if (text)
+            console.log(text);
+        return true;
+    }
+    if (event === "session-end") {
+        runSessionEndIndex();
+        return true;
+    }
+    if (event === "session-start") {
+        const text = sessionStartRecovery();
+        if (text)
+            console.log(text);
+        return true;
+    }
+    console.error(`${c.red}Unknown hook event: ${event ?? "(none)"}${c.reset}`);
+    return false;
+}
+async function memInstall() {
+    const { added, alreadyPresent } = installMemoryHooks();
+    for (const e of added)
+        console.log(`${c.green}✓${c.reset} installed ${e} hook`);
+    for (const e of alreadyPresent)
+        console.log(`${c.dim}• ${e} hook already present${c.reset}`);
+    console.log(`${c.dim}settings: ${getClaudeSettingsPath()}${c.reset}`);
+    return true;
+}
+async function memUninstall() {
+    const { removed } = uninstallMemoryHooks();
+    if (removed.length) {
+        for (const e of removed)
+            console.log(`${c.green}✓${c.reset} removed ${e} hook`);
+    }
+    else {
+        console.log(`${c.dim}no kit memory hooks were installed${c.reset}`);
+    }
+    return true;
+}
+async function memShare() {
+    const area = flagValue(process.argv, "--area");
+    const title = flagValue(process.argv, "--title");
+    const kind = (flagValue(process.argv, "--kind") ?? "note");
+    const body = flagValue(process.argv, "--body") ?? "";
+    const ref = flagValue(process.argv, "--ref");
+    if (!area || !title) {
+        console.error(`${c.red}usage: kit memory share --area <a> --title <t> [--kind decision|convention|how-built|status|security|note] [--body <b>] [--ref <r>]${c.reset}`);
+        return false;
+    }
+    const root = getCurrentProjectRoot();
+    try {
+        const e = shareEntry(root, { area, kind, title, body, refs: ref ? [ref] : [] }, new Date().toISOString());
+        console.log(`${c.green}✓${c.reset} shared ${c.bold}${e.id}${c.reset} to area ${c.bold}${area}${c.reset} ${c.dim}(${getSharedPath(root)})${c.reset}`);
+        console.log(`${c.dim}commit .kit/shared/memory.jsonl + open a PR — shared memory is reviewed like code${c.reset}`);
+    }
+    catch (err) {
+        console.error(`${c.red}${err.message}${c.reset}`);
+        return false;
+    }
+    return true;
+}
+async function memAreas() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    const areas = listAreas(getCurrentProjectRoot());
+    if (jsonMode) {
+        console.log(JSON.stringify(areas));
+        return true;
+    }
+    if (!areas.length) {
+        console.log(`${c.dim}no shared areas yet — add one with kit memory share${c.reset}`);
+        return true;
+    }
+    console.log(`${c.bold}${areas.length}${c.reset} responsibility area(s):`);
+    for (const a of areas) {
+        console.log(`  ${c.bold}${a.area}${c.reset} ${c.dim}· ${a.count} entr${a.count === 1 ? "y" : "ies"}${c.reset}`);
+    }
+    return true;
+}
+async function memArea() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    const name = process.argv[4];
+    if (!name) {
+        console.error(`${c.red}usage: kit memory area <name>${c.reset}`);
+        return false;
+    }
+    const entries = queryArea(getCurrentProjectRoot(), name);
+    if (jsonMode) {
+        console.log(JSON.stringify(entries));
+        return true;
+    }
+    if (!entries.length) {
+        console.log(`${c.dim}no shared memory for area '${name}'${c.reset}`);
+        return true;
+    }
+    console.log(`${c.bold}${name}${c.reset} ${c.dim}· ${entries.length} entr${entries.length === 1 ? "y" : "ies"}${c.reset}`);
+    for (const e of entries) {
+        const prov = `${e.author}${e.source_ref ? ` @${e.source_ref}` : ""}`;
+        console.log(`  ${c.bold}[${e.kind}]${c.reset} ${e.title} ${c.dim}— ${prov}${c.reset}`);
+        if (e.body)
+            console.log(`    ${e.body}`);
+        if (e.refs.length)
+            console.log(`    ${c.dim}refs: ${e.refs.join(", ")}${c.reset}`);
+    }
+    return true;
+}
+async function memScan() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    const db = openMemoryDb();
+    const findings = scanDbForSecrets(db);
+    db.close();
+    if (jsonMode) {
+        console.log(JSON.stringify(findings));
+        return !findings.some((f) => f.confidence === "high");
+    }
+    if (!findings.length) {
+        console.log(`${c.green}✓${c.reset} no stored secrets found in the memory store`);
+        return true;
+    }
+    const high = findings.filter((f) => f.confidence === "high");
+    const heuristic = findings.filter((f) => f.confidence === "heuristic");
+    const times = (n) => (n > 1 ? ` ×${n}` : "");
+    if (high.length) {
+        console.log(`${c.red}⚠ ${high.length} high-confidence secret(s):${c.reset}`);
+        for (const f of high) {
+            const proj = f.projects.length ? `${c.bold}[${f.projects.join(", ")}]${c.reset}${c.dim} · ` : "";
+            console.log(`  ${c.bold}${f.label}${c.reset} ${c.dim}${f.preview}${times(f.count)} · ${proj}${f.sample}${c.reset}`);
+        }
+    }
+    else {
+        console.log(`${c.green}✓${c.reset} no high-confidence secrets`);
+    }
+    if (heuristic.length) {
+        const showAll = hasFlag(process.argv, "--all");
+        if (showAll) {
+            console.log(`${c.dim}${heuristic.length} heuristic match(es) (KEY=value patterns — usually env vars / paths):${c.reset}`);
+            for (const f of heuristic) {
+                console.log(`  ${c.dim}${f.label} ${f.preview}${times(f.count)} · ${f.sample}${c.reset}`);
+            }
+        }
+        else {
+            console.log(`${c.dim}+ ${heuristic.length} heuristic match(es) (likely env vars / paths) — run with --all to see${c.reset}`);
+        }
+    }
+    return high.length === 0; // exit non-zero only on high-confidence findings
+}
+async function memBackup() {
+    const out = process.argv[4];
+    const pass = process.env.KIT_MEMORY_PASSPHRASE ?? flagValue(process.argv, "--passphrase");
+    if (!out) {
+        console.error(`${c.red}usage: kit memory backup <file>  (set KIT_MEMORY_PASSPHRASE)${c.reset}`);
+        return false;
+    }
+    if (!pass) {
+        console.error(`${c.red}set KIT_MEMORY_PASSPHRASE (or --passphrase) — the key is never stored${c.reset}`);
+        return false;
+    }
+    try {
+        backupEncrypted(pass, getMemoryDbPath(), out);
+    }
+    catch (err) {
+        console.error(`${c.red}${err.message}${c.reset}`);
+        return false;
+    }
+    console.log(`${c.green}✓${c.reset} encrypted backup → ${out} ${c.dim}(AES-256-GCM · scrypt)${c.reset}`);
+    return true;
+}
+async function memRestore() {
+    const inFile = process.argv[4];
+    const pass = process.env.KIT_MEMORY_PASSPHRASE ?? flagValue(process.argv, "--passphrase");
+    if (!inFile) {
+        console.error(`${c.red}usage: kit memory restore <file> [--to <path>] [--force]${c.reset}`);
+        return false;
+    }
+    if (!pass) {
+        console.error(`${c.red}set KIT_MEMORY_PASSPHRASE (or --passphrase)${c.reset}`);
+        return false;
+    }
+    const dest = flagValue(process.argv, "--to") ?? getMemoryDbPath();
+    if (existsSync(dest) && !hasFlag(process.argv, "--force")) {
+        console.error(`${c.red}${dest} exists — pass --force to overwrite${c.reset}`);
+        return false;
+    }
+    try {
+        restoreEncrypted(pass, inFile, dest);
+    }
+    catch {
+        console.error(`${c.red}restore failed — wrong passphrase or corrupt backup${c.reset}`);
+        return false;
+    }
+    console.log(`${c.green}✓${c.reset} restored → ${dest}`);
+    return true;
+}
+async function memSave() {
+    const name = process.argv.slice(4).filter((a) => !a.startsWith("--")).join(" ").trim();
+    if (!name) {
+        console.error(`${c.red}usage: kit memory save <name> [--session=<id>]${c.reset}`);
+        return false;
+    }
+    const root = getCurrentProjectRoot();
+    const db = openMemoryDb();
+    const sessionId = flagValue(process.argv, "--session") ?? latestSessionId(db, { projectPath: root });
+    if (!sessionId) {
+        db.close();
+        console.error(`${c.red}no session found for ${root} — index first or pass --session=<id>${c.reset}`);
+        return false;
+    }
+    saveThread(db, { name, sessionId, projectPath: root });
+    db.close();
+    console.log(`${c.green}✓${c.reset} saved copilot ${c.bold}${name}${c.reset} ${c.dim}→ ${sessionId}${c.reset}`);
+    return true;
+}
+async function memThreads() {
+    const jsonMode = hasFlag(process.argv, "--json");
+    const projectPath = hasFlag(process.argv, "--global") ? undefined : getCurrentProjectRoot();
+    const db = openMemoryDb();
+    const list = listThreads(db, { projectPath });
+    db.close();
+    if (jsonMode) {
+        console.log(JSON.stringify(list));
+        return true;
+    }
+    if (!list.length) {
+        console.log(`${c.dim}no saved copilots${projectPath ? ` in ${projectPath}` : ""}${c.reset}`);
+        return true;
+    }
+    const scope = projectPath ? `${c.dim}in ${projectPath}${c.reset}` : `${c.dim}(global)${c.reset}`;
+    console.log(`${c.bold}${list.length}${c.reset} saved copilot(s) ${scope}:`);
+    list.forEach((t, i) => {
+        console.log(`  ${c.bold}${i + 1}${c.reset}. ${t.name}  ${c.dim}${t.session_id}${c.reset}`);
+    });
+    console.log(`${c.dim}resume with: kit memory resume <name|number>${c.reset}`);
+    return true;
+}
+async function memResume() {
+    const ref = process.argv[4];
+    if (!ref) {
+        console.error(`${c.red}usage: kit memory resume <name|number>${c.reset}`);
+        return false;
+    }
+    const projectPath = hasFlag(process.argv, "--global") ? undefined : getCurrentProjectRoot();
+    const db = openMemoryDb();
+    const t = resolveThread(db, ref, { projectPath });
+    db.close();
+    if (!t) {
+        console.error(`${c.red}no saved copilot '${ref}'${c.reset}`);
+        return false;
+    }
+    console.log(`${c.bold}${t.name}${c.reset} — run:`);
+    console.log(`  claude --resume ${t.session_id}`);
+    return true;
+}
+async function memForget() {
+    const name = process.argv.slice(4).filter((a) => !a.startsWith("--")).join(" ").trim();
+    if (!name) {
+        console.error(`${c.red}usage: kit memory forget <name>${c.reset}`);
+        return false;
+    }
+    const db = openMemoryDb();
+    const ok = removeThread(db, name);
+    db.close();
+    console.log(ok ? `${c.green}✓${c.reset} forgot ${name}` : `${c.dim}no copilot '${name}'${c.reset}`);
+    return true;
+}
+//# sourceMappingURL=memory.js.map