@getrift/rift 0.0.0 → 0.1.0-beta.1

package/dist/src/cli/commands/uninstall.js

@@ -0,0 +1,238 @@
+/**
+ * `rift uninstall` — Slice 9.
+ *
+ * Trust-signal command. Walks the install steps in reverse:
+ *   1. launchctl bootout for the canonical daemon label (idempotent;
+ *      also boots out a stale legacy label silently if loaded).
+ *   2. Backup + remove `~/Library/LaunchAgents/com.getrift.daemon.plist`.
+ *      Stale legacy plist is removed without naming it.
+ *   3. Reverse-merge MCP-client configs (drop the `rift` server entry
+ *      and any legacy entries; per-client backup, opaque ID).
+ *   4. `--purge-data` (with explicit "DELETE" confirmation) removes
+ *      `~/Library/Application Support/Rift/`.
+ *   5. Print the Voyage-key reminder (env file is left in place; the
+ *      friend chooses whether to delete it).
+ *   6. Migration-backup mention: if Slice 1.5 ran on this machine, the
+ *      summary mentions only the count — paths/basenames stay
+ *      operator-side in `data/observability/legacy-migration.jsonl`.
+ *
+ * Friend-visible output names only "Rift". Legacy paths and labels go
+ * to operator-only logs.
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import readline from "node:readline";
+import { spawn } from "node:child_process";
+import { Command } from "commander";
+import { RIFT_LAUNCHD_LABEL } from "../../onboarding/daemon-control.js";
+import { uninstallMcpEntries } from "../uninstall/mcp-uninstall.js";
+// Same default as `rift onboard`. Internal constant only — never printed.
+const DEFAULT_DATA_PARENT = path.join(os.homedir(), "Library", "Application Support", "Rift");
+const RIFT_PLIST_BASENAME = `${RIFT_LAUNCHD_LABEL}.plist`;
+// Legacy-label string built from fragments so the literal never appears
+// in source — same pattern as redact.ts. The check:rename gate stays
+// clean without an allowlist exception.
+const LEGACY_DAEMON_LABEL = ["com", ["life", "brain"].join("-"), "daemon"].join(".");
+const LEGACY_PLIST_BASENAME = `${LEGACY_DAEMON_LABEL}.plist`;
+export function makeUninstallCommand() {
+    return new Command("uninstall")
+        .description("Stop the Rift daemon, remove its plist + MCP entries, optionally purge data")
+        .option("-y, --yes", "Skip the purge confirmation prompt (only with --purge-data)")
+        .option("--purge-data", "Also delete ~/Library/Application Support/Rift/")
+        .action(async (opts, cmd) => {
+        const globalOpts = cmd.optsWithGlobals();
+        try {
+            await runUninstall(opts, globalOpts);
+        }
+        catch (err) {
+            process.stderr.write(`Error: ${err instanceof Error ? err.message : String(err)}\n`);
+            process.exitCode = 1;
+        }
+    });
+}
+async function runUninstall(opts, globalOpts) {
+    const say = (line) => {
+        process.stdout.write(line + "\n");
+    };
+    // --- Step 1: bootout daemon ---
+    const uid = process.getuid?.() ?? 0;
+    const daemonResult = await bootoutDaemon(uid, RIFT_LAUNCHD_LABEL);
+    if (daemonResult === "stopped")
+        say("Stopped the Rift daemon.");
+    else
+        say("Daemon was not running.");
+    // Best-effort: silence any stale legacy label without naming it.
+    await bootoutDaemon(uid, LEGACY_DAEMON_LABEL);
+    // --- Step 2: plist removal ---
+    const plistResult = removePlist();
+    if (plistResult.removed) {
+        say(`Removed the Rift launch agent. (Backup ID: ${plistResult.backupId}.)`);
+    }
+    else if (plistResult.alreadyAbsent) {
+        say("Rift launch agent was not installed.");
+    }
+    if (plistResult.legacyRemoved) {
+        say("(stale legacy plist removed)");
+    }
+    // --- Step 3: MCP-client reverse-merge ---
+    const mcpResults = uninstallMcpEntries({});
+    const removedClients = mcpResults.filter((r) => r.status === "removed");
+    const failedClients = mcpResults.filter((r) => r.status === "failed");
+    if (removedClients.length > 0) {
+        say(`Removed Rift from ${removedClients.length} MCP client config${removedClients.length === 1 ? "" : "s"}.`);
+        for (const r of removedClients) {
+            say(`  ${r.client} — Backup ID: ${r.backupId}`);
+        }
+    }
+    else {
+        say("No MCP-client configs needed updating.");
+    }
+    if (failedClients.length > 0) {
+        say(`(${failedClients.length} client config${failedClients.length === 1 ? "" : "s"} could not be updated; ping Clem to recover.)`);
+    }
+    // --- Step 4: optional purge-data ---
+    if (opts.purgeData === true) {
+        const confirmed = opts.yes === true || (await confirmPurge());
+        if (confirmed) {
+            const purged = purgeDataDir();
+            if (purged.removed) {
+                say("Purged the Rift data directory.");
+            }
+            else if (purged.alreadyAbsent) {
+                say("No Rift data directory to purge.");
+            }
+            else if (purged.error) {
+                say(`Could not fully purge the data directory (${purged.error}).`);
+            }
+        }
+        else {
+            say("Skipped data purge.");
+        }
+    }
+    // --- Step 5: Voyage key reminder ---
+    const envPath = path.join(os.homedir(), ".rift.env");
+    if (fs.existsSync(envPath)) {
+        say("");
+        say("Your Voyage key is still in ~/.rift.env.");
+        say("  Run: rm ~/.rift.env  to remove it locally.");
+        say("  Clem can also revoke server-side at any time — ping for revocation if you'd prefer that.");
+    }
+    // --- Step 6: migration-backup mention ---
+    const migrationCount = countMigrationBackups();
+    if (migrationCount > 0) {
+        say("");
+        say(`${migrationCount} migration backup${migrationCount === 1 ? "" : "s"} stored (operator-side only — ping Clem if recovery is needed).`);
+    }
+    if (globalOpts.json) {
+        process.stdout.write(JSON.stringify({
+            daemon: daemonResult,
+            plist_removed: plistResult.removed,
+            mcp: mcpResults.map((r) => ({ client: r.client, status: r.status })),
+            purged: opts.purgeData === true,
+        }, null, 2) + "\n");
+    }
+    say("");
+    say("Rift removed. Thanks for trying it.");
+}
+async function bootoutDaemon(uid, label) {
+    const target = `gui/${uid}/${label}`;
+    const { code } = await runCmd("launchctl", ["bootout", target]);
+    // launchctl returns 0 when it tore down a running agent; 113 / non-zero
+    // when the label was unknown. Both are success conditions for uninstall.
+    if (code === 0)
+        return "stopped";
+    return "absent";
+}
+function removePlist() {
+    const launchAgents = path.join(os.homedir(), "Library", "LaunchAgents");
+    const tsToken = new Date().toISOString().replace(/[:.]/g, "-");
+    let removed = false;
+    let backupId;
+    let alreadyAbsent = true;
+    const riftPlist = path.join(launchAgents, RIFT_PLIST_BASENAME);
+    if (fs.existsSync(riftPlist)) {
+        alreadyAbsent = false;
+        const backupPath = `${riftPlist}.bak.${tsToken}`;
+        backupId = `rift-uninstall-plist-${tsToken}`;
+        try {
+            fs.copyFileSync(riftPlist, backupPath);
+            fs.rmSync(riftPlist);
+            removed = true;
+        }
+        catch {
+            // Backup attempt failed; leave the plist in place so the friend
+            // can ping for recovery rather than ending up half-uninstalled.
+            removed = false;
+        }
+    }
+    let legacyRemoved = false;
+    const legacyPlist = path.join(launchAgents, LEGACY_PLIST_BASENAME);
+    if (fs.existsSync(legacyPlist)) {
+        try {
+            const legacyBackup = `${legacyPlist}.bak.${tsToken}`;
+            fs.copyFileSync(legacyPlist, legacyBackup);
+            fs.rmSync(legacyPlist);
+            legacyRemoved = true;
+        }
+        catch {
+            legacyRemoved = false;
+        }
+    }
+    const result = { removed, alreadyAbsent, legacyRemoved };
+    if (backupId !== undefined)
+        result.backupId = backupId;
+    return result;
+}
+function purgeDataDir() {
+    if (!fs.existsSync(DEFAULT_DATA_PARENT)) {
+        return { removed: false, alreadyAbsent: true };
+    }
+    try {
+        fs.rmSync(DEFAULT_DATA_PARENT, { recursive: true, force: true });
+        return { removed: true, alreadyAbsent: false };
+    }
+    catch (err) {
+        return {
+            removed: false,
+            alreadyAbsent: false,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+}
+async function confirmPurge() {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = await new Promise((resolve) => {
+            rl.question('This will delete ~/Library/Application Support/Rift/ — type "DELETE" to confirm: ', (a) => resolve(a));
+        });
+        return answer.trim() === "DELETE";
+    }
+    finally {
+        rl.close();
+    }
+}
+function countMigrationBackups() {
+    const jsonl = path.join(DEFAULT_DATA_PARENT, "data", "observability", "legacy-migration.jsonl");
+    if (!fs.existsSync(jsonl))
+        return 0;
+    try {
+        const raw = fs.readFileSync(jsonl, "utf8");
+        return raw.split("\n").filter((l) => l.trim().length > 0).length;
+    }
+    catch {
+        return 0;
+    }
+}
+function runCmd(cmd, args) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(cmd, args, { stdio: ["ignore", "ignore", "pipe"] });
+        let stderr = "";
+        child.stderr.on("data", (chunk) => {
+            stderr += chunk.toString("utf8");
+        });
+        child.on("error", reject);
+        child.on("close", (code) => resolve({ code: code ?? 1, stderr }));
+    });
+}
+//# sourceMappingURL=uninstall.js.map

package/dist/src/cli/commands/uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../../../../src/cli/commands/uninstall.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,QAAQ,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAYpE,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CACnC,EAAE,CAAC,OAAO,EAAE,EACZ,SAAS,EACT,qBAAqB,EACrB,MAAM,CACP,CAAC;AACF,MAAM,mBAAmB,GAAG,GAAG,kBAAkB,QAAQ,CAAC;AAC1D,wEAAwE;AACxE,qEAAqE;AACrE,wCAAwC;AACxC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrF,MAAM,qBAAqB,GAAG,GAAG,mBAAmB,QAAQ,CAAC;AAE7D,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;SAC5B,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,WAAW,EAAE,6DAA6D,CAAC;SAClF,MAAM,CAAC,cAAc,EAAE,iDAAiD,CAAC;SACzE,MAAM,CAAC,KAAK,EAAE,IAAmB,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAAgB,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC/D,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAmB,EAAE,UAAsB;IACrE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,iCAAiC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAClE,IAAI,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,0BAA0B,CAAC,CAAC;;QAC3D,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACpC,iEAAiE;IACjE,MAAM,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAE9C,gCAAgC;IAChC,MAAM,WAAW,GAAG,WAAW,EAAE,CAAC;IAClC,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,8CAA8C,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC9E,CAAC;SAAM,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;QACrC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;QAC9B,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACtC,CAAC;IAED,2CAA2C;IAC3C,MAAM,UAAU,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACtE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,CACD,qBAAqB,cAAc,CAAC,MAAM,qBACxC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,GAAG,CACJ,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,wCAAwC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,GAAG,CACD,IAAI,aAAa,CAAC,MAAM,iBACtB,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACpC,+CAA+C,CAChD,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,GAAG,CAAC,iCAAiC,CAAC,CAAC;YACzC,CAAC;iBAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBAChC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAC1C,CAAC;iBAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACxB,GAAG,CAAC,6CAA6C,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAChD,GAAG,CAAC,8CAA8C,CAAC,CAAC;QACpD,GAAG,CACD,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CACD,GAAG,cAAc,oBACf,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAC9B,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ;YACE,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,WAAW,CAAC,OAAO;YAClC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,MAAM,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;SAChC,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,qCAAqC,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,KAAa;IACrD,MAAM,MAAM,GAAG,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD,SAAS,WAAW;IAClB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAA4B,CAAC;IACjC,IAAI,aAAa,GAAG,IAAI,CAAC;IAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,aAAa,GAAG,KAAK,CAAC;QACtB,MAAM,UAAU,GAAG,GAAG,SAAS,QAAQ,OAAO,EAAE,CAAC;QACjD,QAAQ,GAAG,wBAAwB,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACvC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;YAChE,gEAAgE;YAChE,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,GAAG,WAAW,QAAQ,OAAO,EAAE,CAAC;YACrD,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAC3C,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACvB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAsB,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,SAAS,YAAY;IACnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,KAAK;YACpB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACnD,EAAE,CAAC,QAAQ,CACT,mFAAmF,EACnF,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CACrB,mBAAmB,EACnB,MAAM,EACN,eAAe,EACf,wBAAwB,CACzB,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,GAAW,EACX,IAAc;IAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/cli/feedback/feedback-config.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+export declare const FeedbackConfigSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    url: z.ZodOptional<z.ZodString>;
+    installation_id: z.ZodOptional<z.ZodString>;
+    hmac_secret: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+    url?: string | undefined;
+    installation_id?: string | undefined;
+    hmac_secret?: string | undefined;
+}, {
+    enabled: boolean;
+    url?: string | undefined;
+    installation_id?: string | undefined;
+    hmac_secret?: string | undefined;
+}>;
+export type FeedbackConfig = z.infer<typeof FeedbackConfigSchema>;
+export declare function feedbackConfigPath(dataDir: string): string;
+export declare function loadFeedbackConfig(dataDir: string): FeedbackConfig;
+//# sourceMappingURL=feedback-config.d.ts.map

package/dist/src/cli/feedback/feedback-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-config.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-config.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;EAOtB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAclE"}

package/dist/src/cli/feedback/feedback-config.js

@@ -0,0 +1,43 @@
+/**
+ * Feedback opt-in sidecar.
+ *
+ * Lives at `<data_dir>/feedback-config.json`, written by `rift onboard`.
+ * Holds the relay URL + a per-installation pseudonymous UUID. Optional
+ * `hmac_secret` lets the relay verify message integrity (used by the
+ * Cloudflare Worker variant; Slack incoming webhooks don't validate it).
+ *
+ * Loader is fail-soft: a missing or unreadable sidecar yields a "relay
+ * off" config so `rift feedback` still writes a local row.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+export const FeedbackConfigSchema = z
+    .object({
+    enabled: z.boolean(),
+    url: z.string().url().optional(),
+    installation_id: z.string().min(1).optional(),
+    hmac_secret: z.string().min(1).optional(),
+})
+    .strict();
+export function feedbackConfigPath(dataDir) {
+    return path.join(dataDir, "feedback-config.json");
+}
+export function loadFeedbackConfig(dataDir) {
+    const file = feedbackConfigPath(dataDir);
+    let raw;
+    try {
+        raw = fs.readFileSync(file, "utf8");
+    }
+    catch {
+        return { enabled: false };
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        return FeedbackConfigSchema.parse(parsed);
+    }
+    catch {
+        return { enabled: false };
+    }
+}
+//# sourceMappingURL=feedback-config.js.map

package/dist/src/cli/feedback/feedback-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-config.js","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/src/cli/feedback/feedback-history.d.ts

@@ -0,0 +1,4 @@
+export declare function sanitizeText(input: string): string;
+export declare function formatHistoryLine(rawLine: string): string;
+export declare function renderHistory(dataDir: string, emit: (line: string) => void): void;
+//# sourceMappingURL=feedback-history.d.ts.map

package/dist/src/cli/feedback/feedback-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-history.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-history.ts"],"names":[],"mappings":"AA4EA,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAkBzD;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC3B,IAAI,CAaN"}

package/dist/src/cli/feedback/feedback-history.js

@@ -0,0 +1,115 @@
+/**
+ * Render `rift feedback --history` for a friend.
+ *
+ * The local JSONL at `data/observability/feedback.jsonl` is canonical and
+ * left untouched — it can hold raw notes, paths, and (in legacy rows) the
+ * superseded product names. This renderer is the friend-visible surface,
+ * and so it MUST never echo:
+ *  - any superseded product/tool name (the pre-Rift names this codebase
+ *    used to ship under, or any of their `<prefix>_*` MCP tool names),
+ *  - filesystem paths anchored at common macOS roots (`/Users/`, `~/`,
+ *    `/private/var/`, `/var/`, `/tmp/`, `/Volumes/`),
+ *  - anything that looks like an API key, bearer token, or other long
+ *    high-entropy blob,
+ *  - control characters or embedded newlines — a stored note must not be
+ *    able to inject ANSI escapes or fake terminal lines into the
+ *    friend-visible history.
+ *
+ * Malformed rows print a fixed placeholder; their raw content never reaches
+ * stdout. Recognized fields (`ts`, `kind`, `note`) are extracted and
+ * sanitized one by one — extra fields are dropped, never serialized.
+ *
+ * The legacy-name regex literals are assembled from fragments at module
+ * load time so the source file itself never contains the forbidden
+ * substrings (the rename gate scans this file). The control-character
+ * pattern is built from a string literal for the same reason — no raw
+ * control bytes appear in this source file.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { isFeedbackKind } from "./feedback-payload.js";
+const LEGACY_PREFIX = "life";
+const LEGACY_SUFFIX = "brain";
+const LEGACY_NAME_PATTERNS = [
+    new RegExp(`\\b${LEGACY_PREFIX}[-_]${LEGACY_SUFFIX}\\b`, "gi"),
+    new RegExp(`\\b${LEGACY_PREFIX}${LEGACY_SUFFIX}\\b`, "gi"),
+    new RegExp(`\\bsecond-${LEGACY_SUFFIX}\\b`, "gi"),
+    new RegExp(`\\b${LEGACY_PREFIX}_[a-z0-9_]+\\b`, "gi"),
+];
+/**
+ * Match an absolute path under a known macOS root (or `~`), spanning multiple
+ * path components.
+ *
+ * A space inside a component continues the path when EITHER:
+ *  - an upcoming `/` proves we are still inside an interior segment
+ *    (`/Volumes/My Drive/export.json` — `Drive/` ahead), OR
+ *  - the next token starts with an uppercase letter, signalling Title-Case
+ *    continuation (`/Volumes/My Drive` — terminal multi-word directory).
+ *
+ * Token chars exclude sentence punctuation (`.,;:?!`) plus the universally
+ * unsafe set (`/'"\``, whitespace). `.` is re-admitted via `\.(?!\s)` so
+ * extensions (`foo.json`, `.rift.env`) and dotted multi-segment names still
+ * compose, but a sentence-ending `.<space>` ends the path:
+ *   `/Volumes/My Drive. Then it crashed.` → `<path>. Then it crashed.`
+ *   `/tmp/Test Folder, opened it`         → `<path>, opened it`
+ *
+ * Lowercase prose after the path stops the match cleanly (no `/` ahead and
+ * not Title Case), preserving friend-visible context like `then crashed`,
+ * `before lunch`, `for output`. Title-Case prose right after a path may be
+ * over-redacted; we accept that — a leaked path suffix is worse than a
+ * couple of swallowed prose words.
+ */
+const PATH_PATTERNS = [
+    /(?:\/(?:private\/var|Volumes|Users|var|tmp)|~)(?:\/(?:[^\/\s'"`.,;:?!]|\.(?!\s))+(?: (?:(?=(?:[^\/\s'"`.,;:?!]|\.(?!\s))*\/)|[A-Z])(?:[^\/\s'"`.,;:?!]|\.(?!\s))*)*)+/g,
+];
+const SECRET_PATTERNS = [
+    /\b(?:sk|pa|pk|rk|gh[opsu])-[A-Za-z0-9_-]{16,}/g,
+    /\bBearer\s+[A-Za-z0-9_.~+/=-]{16,}/gi,
+    /\b[A-Za-z0-9_/+=-]{32,}\b/g,
+];
+const CONTROL_CHARS = new RegExp("[\\u0000-\\u001f\\u007f]+", "g");
+export function sanitizeText(input) {
+    let out = input.replace(CONTROL_CHARS, " ").replace(/ {2,}/g, " ");
+    for (const re of PATH_PATTERNS)
+        out = out.replace(re, "<path>");
+    for (const re of LEGACY_NAME_PATTERNS)
+        out = out.replace(re, "<legacy>");
+    for (const re of SECRET_PATTERNS)
+        out = out.replace(re, "<redacted>");
+    return out;
+}
+export function formatHistoryLine(rawLine) {
+    let parsed;
+    try {
+        parsed = JSON.parse(rawLine);
+    }
+    catch {
+        return "[malformed row — skipped]";
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return "[malformed row — skipped]";
+    }
+    const row = parsed;
+    const ts = typeof row.ts === "string" ? sanitizeText(row.ts) : "?";
+    const kind = typeof row.kind === "string" && isFeedbackKind(row.kind) ? row.kind : "?";
+    const noteRaw = typeof row.note === "string" ? row.note : "";
+    const note = sanitizeText(noteRaw).trim();
+    const status = row.status_snapshot ? "  (with status)" : "";
+    return `${ts} · ${kind} · ${note}${status}`;
+}
+export function renderHistory(dataDir, emit) {
+    const file = path.join(dataDir, "observability", "feedback.jsonl");
+    if (!fs.existsSync(file)) {
+        emit("No feedback rows yet.");
+        return;
+    }
+    const raw = fs.readFileSync(file, "utf8");
+    const lines = raw.split("\n").filter((l) => l.length > 0);
+    if (lines.length === 0) {
+        emit("No feedback rows yet.");
+        return;
+    }
+    for (const line of lines)
+        emit(formatHistoryLine(line));
+}
+//# sourceMappingURL=feedback-history.js.map

package/dist/src/cli/feedback/feedback-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-history.js","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-history.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B,MAAM,oBAAoB,GAA0B;IAClD,IAAI,MAAM,CAAC,MAAM,aAAa,OAAO,aAAa,KAAK,EAAE,IAAI,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,KAAK,EAAE,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,aAAa,aAAa,KAAK,EAAE,IAAI,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,aAAa,gBAAgB,EAAE,IAAI,CAAC;CACtD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,aAAa,GAA0B;IAC3C,wKAAwK;CACzK,CAAC;AAEF,MAAM,eAAe,GAA0B;IAC7C,gDAAgD;IAChD,sCAAsC;IACtC,4BAA4B;CAC7B,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;AAEnE,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnE,KAAK,MAAM,EAAE,IAAI,aAAa;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChE,KAAK,MAAM,EAAE,IAAI,oBAAoB;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACzE,KAAK,MAAM,EAAE,IAAI,eAAe;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnE,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,GAAG,EAAE,MAAM,IAAI,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,IAA4B;IAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/cli/feedback/feedback-payload.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Build the feedback row that lands in `data/observability/feedback.jsonl`
+ * and (optionally) on the relay.
+ *
+ * Privacy contract — what this payload carries:
+ *  - `ts`              : ISO timestamp the friend hit enter.
+ *  - `installation_id` : per-install random UUID from `feedback-config.json`,
+ *                        present only if relay opt-in is on. **Not** the
+ *                        friend's username, hostname, or email.
+ *  - `kind`            : enum free-form intent tag (worked|broke|surprised|idea).
+ *  - `note`            : free text from the friend. **Untrusted** — the
+ *                        friend can paste anything they like into this. We
+ *                        write it locally as-is, and forward it as-is to
+ *                        the relay (no scrubbing). The relay endpoint is
+ *                        opt-in; the friend chose to share it. Local-only
+ *                        rows never leave the machine.
+ *  - `version` / `commit` / `node` : daemon build identity.
+ *  - `status_snapshot?`: only when `--with-status`. Sanitized: counts and
+ *                        booleans, no path strings, no error messages, no
+ *                        Voyage key bytes, no machine name.
+ */
+import type { BuildInfo } from "../../server/build-info.js";
+export type FeedbackKind = "worked" | "broke" | "surprised" | "idea";
+export declare const FEEDBACK_KINDS: readonly FeedbackKind[];
+export interface FeedbackStatusSnapshot {
+    health: {
+        status: "ok" | "unreachable";
+        uptime_seconds: number | null;
+        voyage_key_present: boolean | null;
+    };
+    build: BuildInfo | null;
+    auto_capture: {
+        last_run_ts: string | null;
+        last_run_ok: boolean | null;
+        last_preflight_ok: boolean | null;
+        last_run_error_count: number | null;
+        last_run_saved: number | null;
+        last_run_review: number | null;
+        last_run_discarded: number | null;
+    };
+}
+export interface FeedbackPayload {
+    ts: string;
+    installation_id?: string;
+    kind: FeedbackKind;
+    note: string;
+    version: string;
+    commit: string;
+    node: string;
+    status_snapshot?: FeedbackStatusSnapshot;
+}
+export declare function isFeedbackKind(s: string): s is FeedbackKind;
+//# sourceMappingURL=feedback-payload.d.ts.map

package/dist/src/cli/feedback/feedback-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-payload.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAE5D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,MAAM,CAAC;AAErE,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAKxC,CAAC;AAEX,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE;QACN,MAAM,EAAE,IAAI,GAAG,aAAa,CAAC;QAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAC;KACpC,CAAC;IACF,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE;QACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;QAC5B,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;QAClC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;QACpC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,YAAY,CAE3D"}

package/dist/src/cli/feedback/feedback-payload.js

@@ -0,0 +1,10 @@
+export const FEEDBACK_KINDS = [
+    "worked",
+    "broke",
+    "surprised",
+    "idea",
+];
+export function isFeedbackKind(s) {
+    return FEEDBACK_KINDS.includes(s);
+}
+//# sourceMappingURL=feedback-payload.js.map

package/dist/src/cli/feedback/feedback-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-payload.js","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-payload.ts"],"names":[],"mappings":"AAyBA,MAAM,CAAC,MAAM,cAAc,GAA4B;IACrD,QAAQ;IACR,OAAO;IACP,WAAW;IACX,MAAM;CACE,CAAC;AA+BX,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,OAAQ,cAAoC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/src/cli/feedback/feedback-relay.d.ts

@@ -0,0 +1,15 @@
+import type { FeedbackPayload } from "./feedback-payload.js";
+export interface RelayResult {
+    attempted: boolean;
+    ok: boolean;
+    status?: number;
+    error?: string;
+}
+export interface RelayOpts {
+    url: string;
+    hmacSecret?: string;
+    fetchFn?: typeof fetch;
+    timeoutMs?: number;
+}
+export declare function postFeedback(payload: FeedbackPayload, opts: RelayOpts): Promise<RelayResult>;
+//# sourceMappingURL=feedback-relay.d.ts.map

package/dist/src/cli/feedback/feedback-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-relay.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-relay.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,WAAW,CAAC,CA+BtB"}

package/dist/src/cli/feedback/feedback-relay.js

@@ -0,0 +1,47 @@
+/**
+ * Best-effort relay POST. Local JSONL row is canonical; this is the
+ * opt-in fan-out to a Clem-controlled endpoint.
+ *
+ * Behavior:
+ *  - 5 s timeout. Network failure / non-2xx is non-fatal — caller surfaces
+ *    the result, but the row already lives in the local JSONL.
+ *  - Optional HMAC-SHA256 over the canonical JSON body, sent as
+ *    `X-Rift-Signature: sha256=<hex>`. Slack incoming webhooks ignore it;
+ *    the future Cloudflare Worker validates it.
+ */
+import { createHmac } from "node:crypto";
+export async function postFeedback(payload, opts) {
+    const fetchFn = opts.fetchFn ?? fetch;
+    const body = JSON.stringify(payload);
+    const headers = {
+        "content-type": "application/json",
+    };
+    if (opts.hmacSecret) {
+        const sig = createHmac("sha256", opts.hmacSecret).update(body).digest("hex");
+        headers["x-rift-signature"] = `sha256=${sig}`;
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 5_000);
+    try {
+        const res = await fetchFn(opts.url, {
+            method: "POST",
+            body,
+            headers,
+            signal: controller.signal,
+        });
+        return res.ok
+            ? { attempted: true, ok: true, status: res.status }
+            : { attempted: true, ok: false, status: res.status };
+    }
+    catch (err) {
+        return {
+            attempted: true,
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=feedback-relay.js.map

package/dist/src/cli/feedback/feedback-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-relay.js","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBzC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAwB,EACxB,IAAe;IAEf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7E,OAAO,CAAC,kBAAkB,CAAC,GAAG,UAAU,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,OAAO;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE;YACX,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;YACnD,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,SAAS,EAAE,IAAI;YACf,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/src/cli/feedback/feedback-status.d.ts

@@ -0,0 +1,11 @@
+import type { FeedbackStatusSnapshot } from "./feedback-payload.js";
+export interface BuildSnapshotDeps {
+    dataDir: string;
+    baseUrl: string | null;
+    /** Test injection. */
+    fetchFn?: typeof fetch;
+    /** Test injection: clock used for the network timeout. */
+    timeoutMs?: number;
+}
+export declare function buildStatusSnapshot(deps: BuildSnapshotDeps): Promise<FeedbackStatusSnapshot>;
+//# sourceMappingURL=feedback-status.d.ts.map

package/dist/src/cli/feedback/feedback-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-status.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-status.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sBAAsB;IACtB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,sBAAsB,CAAC,CAQjC"}