@getrift/rift 0.0.0 → 0.1.0-beta.1

package/dist/src/cli/commands/ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.js","sourceRoot":"","sources":["../../../../src/cli/commands/ingest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEnF,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/D,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;SACzB,WAAW,CAAC,4CAA4C,CAAC;SACzD,cAAc,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;SAC3D,cAAc,CAAC,eAAe,EAAE,qCAAqC,CAAC;SACtE,MAAM,CAAC,yBAAyB,EAAE,iBAAiB,CAAC;SACpD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAAuC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,UAAU,CAAC,sCAAsC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAEjG,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,UAAU,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;gBAC1C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,UAAU,CACR,+BAA+B,GAAG,KAAK;oBACrC,YAAY,CAAC,GAAG,2BAA2B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7D,CAAC;gBACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrE,IAAI,IAAI,CAAC,cAAc;gBAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAE7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,IAA+C,CAAC;YAE7D,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;oBAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;qBAAM,CAAC;oBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAC3G,OAAO;YACT,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM,0BAA0B,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;iBAAM,CAAC;gBAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YACrG,IAAI,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;gBAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;iBAAM,CAAC;gBAAC,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC;YAChI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/cli/commands/mcp-install.d.ts

@@ -0,0 +1,25 @@
+import { Command } from "commander";
+import type { ClientId } from "../mcp-config-writers/index.js";
+interface RunOptions {
+    /** Single client target. Mutually exclusive with `--all`. */
+    client?: ClientId;
+    all?: boolean;
+    dryRun?: boolean;
+}
+export interface McpInstallDeps {
+    /** Absolute path to the Rift config.json the daemon will read. */
+    configPath: string;
+    /** Absolute path to the Rift MCP server entrypoint (`server.js`). */
+    mcpServerPath: string;
+    /** Where to look up default per-client config files. */
+    homeDir?: string;
+    /** Test injection: stable timestamp for backup IDs. */
+    now?: () => Date;
+    /** Test injection: where stdout writes go. */
+    emit?: (line: string) => void;
+}
+export declare function makeMcpInstallCommand(): Command;
+export declare function makeMcpCommand(): Command;
+export declare function runMcpInstall(opts: RunOptions, deps: McpInstallDeps): Promise<void>;
+export {};
+//# sourceMappingURL=mcp-install.d.ts.map

package/dist/src/cli/commands/mcp-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-install.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/mcp-install.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAS5C,OAAO,KAAK,EACV,QAAQ,EAGT,MAAM,gCAAgC,CAAC;AAExC,UAAU,UAAU;IAClB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAOD,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CAoB/C;AAED,wBAAgB,cAAc,IAAI,OAAO,CAMxC;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,IAAI,CAAC,CAiDf"}

package/dist/src/cli/commands/mcp-install.js

@@ -0,0 +1,134 @@
+/**
+ * `rift mcp install [--client <id>] [--all] [--dry-run]`
+ *
+ * Idempotent edits to known MCP-client config files. Backs up the
+ * prior file first (timestamped, opaque ID surfaced to the friend),
+ * removes legacy server entries (every form covered by the rename
+ * gate, regardless of which binary they pointed at), and inserts a
+ * single `rift` server entry pointing at the local stdio MCP server.
+ *
+ * Friend-visible output is redacted: the command name is "rift mcp
+ * install"; the diff replaces any forbidden-name substring with the
+ * literal `<legacy>`. The Voyage key is never written here — the
+ * daemon loads it from `~/.rift.env`.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { Command, Option } from "commander";
+import { CliError } from "../http-client.js";
+import { ALL_CLIENTS, isClientId, ParseFailedError, writeMcpConfig, } from "../mcp-config-writers/index.js";
+import { redactSensitive } from "../mcp-config-writers/redact.js";
+export function makeMcpInstallCommand() {
+    const cmd = new Command("install")
+        .description("Install the Rift MCP server entry into a known client config.")
+        .addOption(new Option("--client <id>", "Target client (claude-desktop|codex|claude-code|cursor)").choices([...ALL_CLIENTS]))
+        .option("--all", "Apply to every supported client", false)
+        .option("--dry-run", "Print the redacted diff without writing", false)
+        .action(async function () {
+        const runOpts = this.opts();
+        const globalOpts = this.parent?.parent?.opts() ?? {};
+        const deps = resolveDefaultDeps(globalOpts);
+        await runMcpInstall(runOpts, deps);
+    });
+    return cmd;
+}
+export function makeMcpCommand() {
+    const mcp = new Command("mcp").description("Manage MCP-client config files for Rift.");
+    mcp.addCommand(makeMcpInstallCommand());
+    return mcp;
+}
+export async function runMcpInstall(opts, deps) {
+    const emit = deps.emit ?? ((line) => process.stdout.write(`${line}\n`));
+    if (opts.client && opts.all) {
+        throw new CliError("Pass either --client or --all, not both.", "validation");
+    }
+    if (!opts.client && !opts.all) {
+        throw new CliError("Pass --client <id> or --all.", "validation");
+    }
+    const targets = opts.all
+        ? [...ALL_CLIENTS]
+        : opts.client && isClientId(opts.client)
+            ? [opts.client]
+            : (() => {
+                throw new CliError("Unknown --client value.", "validation");
+            })();
+    const spec = {
+        command: "node",
+        args: [deps.mcpServerPath, deps.configPath],
+    };
+    let failures = 0;
+    for (const client of targets) {
+        try {
+            const outcome = writeMcpConfig({
+                client,
+                spec,
+                dryRun: !!opts.dryRun,
+                ...(deps.homeDir ? { homeDir: deps.homeDir } : {}),
+                ...(deps.now ? { now: deps.now } : {}),
+            });
+            printSummary(emit, client, outcome, !!opts.dryRun);
+        }
+        catch (err) {
+            failures += 1;
+            printFailure(emit, client, err, deps);
+        }
+    }
+    if (failures > 0) {
+        throw new CliError(`rift mcp install: ${failures} client(s) failed.`, "server_error");
+    }
+}
+function printSummary(emit, client, outcome, dryRun) {
+    const verb = dryRun
+        ? "Would update"
+        : outcome.preexisting
+            ? "Updated"
+            : "Created";
+    emit(`${verb} ${client} MCP config.`);
+    if (outcome.legacyRemovedCount > 0) {
+        emit(`  Disabled ${outcome.legacyRemovedCount} stale MCP-server ${outcome.legacyRemovedCount === 1 ? "entry" : "entries"}.`);
+    }
+    if (outcome.backupId) {
+        emit(`  Backup ID: ${outcome.backupId}`);
+    }
+    for (const line of outcome.redactedDiff.split("\n")) {
+        emit(`  ${line}`);
+    }
+}
+function printFailure(emit, client, err, deps) {
+    if (err instanceof ParseFailedError) {
+        // ParseFailedError.message is path-free + forbidden-name-free by
+        // construction; pass it through unmodified.
+        emit(err.message);
+        return;
+    }
+    if (err instanceof CliError) {
+        emit(redactSensitive(`rift mcp install (${client}): ${err.message}`));
+        return;
+    }
+    const id = `rift-mcp-${client}-${new Date(deps.now ? deps.now().getTime() : Date.now())
+        .toISOString()
+        .replace(/\.\d{3}Z$/, "Z")
+        .replace(/:/g, "-")}`;
+    const message = err instanceof Error ? err.message : String(err);
+    emit(redactSensitive(`rift mcp install (${client}) failed: ${message}. Backup ID: ${id}.`));
+}
+function resolveDefaultDeps(globalOpts) {
+    const configPath = path.resolve(globalOpts.config ?? "config.json");
+    const mcpServerPath = resolveMcpServerPath();
+    if (!fs.existsSync(mcpServerPath)) {
+        throw new CliError("Could not locate the Rift MCP server entrypoint. " +
+            "Run `pnpm build` first, or invoke with a built binary.", "validation");
+    }
+    return { configPath, mcpServerPath };
+}
+function resolveMcpServerPath() {
+    // Walk up from this module file to the dist/src root, then sibling
+    // into mcp/server.js. Resolves correctly whether the caller invoked
+    // a globally installed `rift` shim or `node dist/src/cli/index.js`.
+    const here = fileURLToPath(import.meta.url);
+    // .../dist/src/cli/commands/mcp-install.js
+    const distSrc = path.resolve(path.dirname(here), "..", "..");
+    return path.join(distSrc, "mcp", "server.js");
+}
+//# sourceMappingURL=mcp-install.js.map

package/dist/src/cli/commands/mcp-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-install.js","sourceRoot":"","sources":["../../../../src/cli/commands/mcp-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EACL,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAgClE,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;SAC/B,WAAW,CACV,+DAA+D,CAChE;SACA,SAAS,CACR,IAAI,MAAM,CACR,eAAe,EACf,yDAAyD,CAC1D,CAAC,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAC5B;SACA,MAAM,CAAC,OAAO,EAAE,iCAAiC,EAAE,KAAK,CAAC;SACzD,MAAM,CAAC,WAAW,EAAE,yCAAyC,EAAE,KAAK,CAAC;SACrE,MAAM,CAAC,KAAK;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAc,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAc,IAAI,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACL,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CACxC,0CAA0C,CAC3C,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAgB,EAChB,IAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAExE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAChB,0CAA0C,EAC1C,YAAY,CACb,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAe,IAAI,CAAC,GAAG;QAClC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;QAClB,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YACtC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YACf,CAAC,CAAC,CAAC,GAAG,EAAE;gBACJ,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;YAC9D,CAAC,CAAC,EAAE,CAAC;IAEX,MAAM,IAAI,GAAmB;QAC3B,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC;KAC5C,CAAC;IAEF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,cAAc,CAAC;gBAC7B,MAAM;gBACN,IAAI;gBACJ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;gBACrB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAC,CAAC;YACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,IAAI,CAAC,CAAC;YACd,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAChB,qBAAqB,QAAQ,oBAAoB,EACjD,cAAc,CACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,IAA4B,EAC5B,MAAgB,EAChB,OAAqB,EACrB,MAAe;IAEf,MAAM,IAAI,GAAG,MAAM;QACjB,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,OAAO,CAAC,WAAW;YACnB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,cAAc,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CACF,cAAc,OAAO,CAAC,kBAAkB,qBACtC,OAAO,CAAC,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAC/C,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,IAA4B,EAC5B,MAAgB,EAChB,GAAY,EACZ,IAAoB;IAEpB,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;QACpC,iEAAiE;QACjE,4CAA4C;QAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IACD,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,qBAAqB,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IACD,MAAM,EAAE,GAAG,YAAY,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SACpF,WAAW,EAAE;SACb,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,CACF,eAAe,CACb,qBAAqB,MAAM,aAAa,OAAO,gBAAgB,EAAE,GAAG,CACrE,CACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAsB;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,QAAQ,CAChB,mDAAmD;YACjD,wDAAwD,EAC1D,YAAY,CACb,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,oBAAoB;IAC3B,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,2CAA2C;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC"}

package/dist/src/cli/commands/onboard.d.ts

@@ -0,0 +1,98 @@
+import { Command } from "commander";
+import { loadRiftEnv } from "../../runtime/rift-env.js";
+import { validateVoyageKey } from "../../onboarding/voyage-validate.js";
+import { writeEnvFile } from "../../onboarding/env-file.js";
+export declare function makeOnboardCommand(): Command;
+/**
+ * Sanitize a raw `--voyage-label`, persist it when valid, and return the
+ * string the caller should use for display. Invalid labels are dropped
+ * with a generic notice that never echoes the raw value — so a
+ * key-shaped, path-shaped, or legacy-name-shaped label cannot leak
+ * through stdout or `config.json`. Returns `null` when the input was
+ * absent or rejected.
+ *
+ * Exported for orchestrator-level tests; `runOnboard` is the only
+ * production caller.
+ */
+export declare function applyVoyageLabel(rawLabel: string | undefined, configPath: string, emit: (line: string) => void): string | null;
+/**
+ * Merge `voyage.project_label` into the config file. The file is
+ * backed up to `<file>.bak.<iso>` first so an interrupted write or a
+ * future operator typo can be undone. Display only — never sent to the
+ * relay, never inferred from the key bytes.
+ *
+ * Defensively re-runs `sanitizeProjectLabel` even though the standard
+ * `applyVoyageLabel` caller has already validated: a future programmer
+ * who reaches for this export directly still cannot land an unsafe
+ * string in the file.
+ */
+export declare function persistVoyageLabel(configPath: string, label: string): void;
+type DaemonRefreshOutcome = {
+    ok: true;
+    kickstarted: boolean;
+} | {
+    ok: false;
+    reason: string;
+    kind: "not_configured" | "agent_not_loaded" | "kickstart_failed" | "health_failed" | "smoke_failed";
+};
+export declare function runFirstCapturePass(configPath: string, dataDir: string): Promise<{
+    saved: number;
+    reviewed: number;
+}>;
+export type RecallResult = {
+    ok: true;
+    hits: number;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Pure outcome decision for the next-action card. Onboarding is only
+ * "complete" when this run actually ingested user data AND a recall
+ * query against the freshly-ingested data returned at least one hit.
+ * Smoke is non-indexing (see daemonRefreshFlow), so any hit is real
+ * user data, not a leftover probe.
+ */
+export declare function decideOnboardOutcome(input: {
+    ingestedAny: boolean;
+    recall: RecallResult;
+}): string[];
+export interface ReconfigureDeps {
+    key: string;
+    envPath: string;
+    refresh: () => Promise<DaemonRefreshOutcome>;
+    /** Test injection — defaults to the real Voyage validation probe. */
+    validate?: typeof validateVoyageKey;
+    /** Test injection — defaults to the real env-file writer. */
+    write?: typeof writeEnvFile;
+    /** Test injection — defaults to the real env loader. */
+    loadEnv?: typeof loadRiftEnv;
+    /** Test injection — defaults to `say`. */
+    emit?: (line: string) => void;
+}
+/**
+ * Core reconfigure logic, extracted so tests can drive every failure
+ * branch (validate fail, kickstart agent_not_loaded, /health fail,
+ * voyage_key_present=false) without spinning up a real daemon.
+ *
+ * Contract: ALL of {validate ok, daemonRefresh ok} must succeed; any
+ * failure rolls back the env file AND restores the previous in-process
+ * VOYAGE_API_KEY. agent_not_loaded counts as a failure here — the call
+ * site only invokes this when the daemon should already be running.
+ */
+export declare function performVoyageReconfigure(deps: ReconfigureDeps): Promise<void>;
+export interface VoyageWriteResult {
+    backedUp: boolean;
+    backupPath?: string;
+}
+/**
+ * Restore a Voyage env file + in-process VOYAGE_API_KEY after a failed
+ * write. Exported for testing — `reconfigureVoyageFlow` is the only
+ * production caller. When `writeResult.backedUp` is true, the prior
+ * env-file contents are copied back at mode 0600; when false (no prior
+ * file existed), the file we just wrote is removed so we don't leave
+ * a key paired with a now-rejected daemon respawn.
+ */
+export declare function rollbackVoyageEnv(envPath: string, writeResult: VoyageWriteResult, previousInProcessKey: string | undefined): void;
+export {};
+//# sourceMappingURL=onboard.d.ts.map

package/dist/src/cli/commands/onboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/onboard.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,OAAO,EAEL,WAAW,EACZ,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAmD5D,wBAAgB,kBAAkB,IAAI,OAAO,CAsC5C;AAuLD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC3B,MAAM,GAAG,IAAI,CAgBf;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAmC1E;AA6DD,KAAK,oBAAoB,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,GAClC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,eAAe,GAAG,cAAc,CAAA;CAAE,CAAC;AAgOvI,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAqD9C;AAqFD,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;CACtB,GAAG,MAAM,EAAE,CAyBX;AAwDD,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7C,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACpC,6DAA6D;IAC7D,KAAK,CAAC,EAAE,OAAO,YAAY,CAAC;IAC5B,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,WAAW,CAAC;IAC7B,0CAA0C;IAC1C,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,iBAAiB,EAC9B,oBAAoB,EAAE,MAAM,GAAG,SAAS,GACvC,IAAI,CAyBN"}