@getrift/rift 0.0.0 → 0.1.0-beta.1

package/dist/src/observability/tool-usage.d.ts

@@ -0,0 +1,68 @@
+export interface ToolUsageEntry {
+    timestamp: string;
+    type: "mcp_tool_call";
+    tool: string;
+    args: Record<string, unknown>;
+    latency_ms: number;
+    success: boolean;
+    result_count?: number;
+    degraded?: boolean;
+    error?: string;
+}
+export declare function sanitizeArgs(raw: Record<string, unknown>): Record<string, unknown>;
+/**
+ * Try to extract result_count from search-tool responses.
+ *
+ * Slice 1: search tools now emit markdown on the text channel and put the
+ * compact DTO in `structuredContent`. We read from structuredContent first
+ * and fall back to JSON-parsing the text channel for backwards compatibility
+ * with tools that still return JSON there.
+ */
+export declare function extractResultCount(tool: string, mcpResult: {
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+    structuredContent?: Record<string, unknown>;
+}): number | undefined;
+/**
+ * Try to extract degraded flag from search-tool responses.
+ */
+export declare function extractDegraded(tool: string, mcpResult: {
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+    structuredContent?: Record<string, unknown>;
+}): boolean | undefined;
+export declare class ToolUsageLogger {
+    private readonly logPath;
+    constructor(dataDir: string);
+    /** Append a single entry. Never throws. */
+    log(entry: ToolUsageEntry): void;
+    /**
+     * Wrap an MCP tool handler with usage logging.
+     * Returns the handler's original result — logging failures are invisible to callers.
+     */
+    wrap<T extends {
+        content: Array<{
+            type: string;
+            text: string;
+        }>;
+        isError?: boolean;
+        structuredContent?: Record<string, unknown>;
+    }>(tool: string, args: Record<string, unknown>, handler: () => Promise<T>): Promise<T>;
+    /** Read all entries (for testing). */
+    readAll(): ToolUsageEntry[];
+    get filePath(): string;
+}
+/**
+ * Tolerant JSONL reader for the agent-tool-usage log.
+ *
+ * Unlike `ToolUsageLogger.readAll`, which drops the entire file to `[]` on
+ * a single bad line, this helper parses each line in its own try/catch,
+ * keeps the valid ones, and silently skips the rest. Used by the
+ * /stats/mcp-usage route so one corrupt entry doesn't blank the dashboard.
+ */
+export declare function readToolUsageEntriesTolerant(filePath: string): ToolUsageEntry[];
+//# sourceMappingURL=tool-usage.d.ts.map

package/dist/src/observability/tool-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-usage.d.ts","sourceRoot":"","sources":["../../../src/observability/tool-usage.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB;AAID;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C,GACA,MAAM,GAAG,SAAS,CAapB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C,GACA,OAAO,GAAG,SAAS,CAarB;AAID,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,EAAE,MAAM;IAK3B,2CAA2C;IAC3C,GAAG,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAWhC;;;OAGG;IACH,IAAI,CACF,CAAC,SAAS;QACR,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC7C,EAED,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACxB,OAAO,CAAC,CAAC,CAAC;IAwCb,sCAAsC;IACtC,OAAO,IAAI,cAAc,EAAE;IAa3B,IAAI,QAAQ,IAAI,MAAM,CAErB;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,GACf,cAAc,EAAE,CA4BlB"}

package/dist/src/observability/tool-usage.js

@@ -0,0 +1,207 @@
+/**
+ * MCP tool-usage logger — append-only JSONL.
+ *
+ * Logs every life_* MCP tool call with timing, args, and outcome.
+ * Designed to never interfere with tool execution: all logging
+ * errors are swallowed and reported to stderr.
+ */
+import fs from "node:fs";
+import path from "node:path";
+// --- Config ---
+const MAX_STRING_ARG_LENGTH = 512;
+const REDACTED_KEYS = new Set([
+    "token",
+    "secret",
+    "password",
+    "authorization",
+    "api_key",
+    "apikey",
+]);
+// --- Sanitisation ---
+export function sanitizeArgs(raw) {
+    const out = {};
+    for (const [key, value] of Object.entries(raw)) {
+        if (REDACTED_KEYS.has(key.toLowerCase())) {
+            out[key] = "[REDACTED]";
+        }
+        else if (typeof value === "string" && value.length > MAX_STRING_ARG_LENGTH) {
+            out[key] = value.slice(0, MAX_STRING_ARG_LENGTH) + `...[truncated ${value.length}]`;
+        }
+        else if (Array.isArray(value)) {
+            out[key] = value.map((v) => typeof v === "string" && v.length > MAX_STRING_ARG_LENGTH
+                ? v.slice(0, MAX_STRING_ARG_LENGTH) + `...[truncated ${v.length}]`
+                : v);
+        }
+        else {
+            out[key] = value;
+        }
+    }
+    return out;
+}
+// --- Result extraction ---
+/**
+ * Try to extract result_count from search-tool responses.
+ *
+ * Slice 1: search tools now emit markdown on the text channel and put the
+ * compact DTO in `structuredContent`. We read from structuredContent first
+ * and fall back to JSON-parsing the text channel for backwards compatibility
+ * with tools that still return JSON there.
+ */
+export function extractResultCount(tool, mcpResult) {
+    if (!tool.includes("search"))
+        return undefined;
+    const fromStructured = mcpResult.structuredContent?.["results"];
+    if (Array.isArray(fromStructured))
+        return fromStructured.length;
+    try {
+        const text = mcpResult.content[0]?.text;
+        if (!text)
+            return undefined;
+        const parsed = JSON.parse(text);
+        if (Array.isArray(parsed.results))
+            return parsed.results.length;
+    }
+    catch {
+        // not parseable — fine
+    }
+    return undefined;
+}
+/**
+ * Try to extract degraded flag from search-tool responses.
+ */
+export function extractDegraded(tool, mcpResult) {
+    if (!tool.includes("search"))
+        return undefined;
+    const fromStructured = mcpResult.structuredContent?.["degraded"];
+    if (typeof fromStructured === "boolean")
+        return fromStructured;
+    try {
+        const text = mcpResult.content[0]?.text;
+        if (!text)
+            return undefined;
+        const parsed = JSON.parse(text);
+        if (typeof parsed.degraded === "boolean")
+            return parsed.degraded;
+    }
+    catch {
+        // not parseable — fine
+    }
+    return undefined;
+}
+// --- Logger ---
+export class ToolUsageLogger {
+    logPath;
+    constructor(dataDir) {
+        const dir = path.join(dataDir, "observability");
+        this.logPath = path.join(dir, "agent-tool-usage.jsonl");
+    }
+    /** Append a single entry. Never throws. */
+    log(entry) {
+        try {
+            fs.appendFileSync(this.logPath, JSON.stringify(entry) + "\n");
+        }
+        catch (err) {
+            // Logging must never break tool execution
+            process.stderr.write(`[tool-usage] write failed: ${err instanceof Error ? err.message : String(err)}\n`);
+        }
+    }
+    /**
+     * Wrap an MCP tool handler with usage logging.
+     * Returns the handler's original result — logging failures are invisible to callers.
+     */
+    wrap(tool, args, handler) {
+        const start = Date.now();
+        return handler().then((result) => {
+            const entry = {
+                timestamp: new Date().toISOString(),
+                type: "mcp_tool_call",
+                tool,
+                args: sanitizeArgs(args),
+                latency_ms: Date.now() - start,
+                success: !result.isError,
+            };
+            if (result.isError) {
+                const errText = result.content[0]?.text;
+                if (errText)
+                    entry.error = errText.slice(0, MAX_STRING_ARG_LENGTH);
+            }
+            const rc = extractResultCount(tool, result);
+            if (rc !== undefined)
+                entry.result_count = rc;
+            const deg = extractDegraded(tool, result);
+            if (deg !== undefined)
+                entry.degraded = deg;
+            this.log(entry);
+            return result;
+        }, (err) => {
+            // Handler threw — log failure, then re-throw so MCP layer handles it
+            const entry = {
+                timestamp: new Date().toISOString(),
+                type: "mcp_tool_call",
+                tool,
+                args: sanitizeArgs(args),
+                latency_ms: Date.now() - start,
+                success: false,
+                error: err instanceof Error ? err.message : String(err),
+            };
+            this.log(entry);
+            throw err;
+        });
+    }
+    /** Read all entries (for testing). */
+    readAll() {
+        try {
+            const raw = fs.readFileSync(this.logPath, "utf-8");
+            return raw
+                .trim()
+                .split("\n")
+                .filter(Boolean)
+                .map((line) => JSON.parse(line));
+        }
+        catch {
+            return [];
+        }
+    }
+    get filePath() {
+        return this.logPath;
+    }
+}
+/**
+ * Tolerant JSONL reader for the agent-tool-usage log.
+ *
+ * Unlike `ToolUsageLogger.readAll`, which drops the entire file to `[]` on
+ * a single bad line, this helper parses each line in its own try/catch,
+ * keeps the valid ones, and silently skips the rest. Used by the
+ * /stats/mcp-usage route so one corrupt entry doesn't blank the dashboard.
+ */
+export function readToolUsageEntriesTolerant(filePath) {
+    let raw;
+    try {
+        raw = fs.readFileSync(filePath, "utf-8");
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const line of raw.split("\n")) {
+        if (!line)
+            continue;
+        let parsed;
+        try {
+            parsed = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        if (parsed === null ||
+            typeof parsed !== "object" ||
+            typeof parsed["timestamp"] !== "string" ||
+            typeof parsed["tool"] !== "string" ||
+            typeof parsed["success"] !== "boolean") {
+            continue;
+        }
+        out.push(parsed);
+    }
+    return out;
+}
+//# sourceMappingURL=tool-usage.js.map

package/dist/src/observability/tool-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-usage.js","sourceRoot":"","sources":["../../../src/observability/tool-usage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,iBAAiB;AAEjB,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,OAAO;IACP,QAAQ;IACR,UAAU;IACV,eAAe;IACf,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAgBH,uBAAuB;AAEvB,MAAM,UAAU,YAAY,CAC1B,GAA4B;IAE5B,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC1B,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;YAC7E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,GAAG,iBAAiB,KAAK,CAAC,MAAM,GAAG,CAAC;QACtF,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,qBAAqB;gBACvD,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,GAAG,iBAAiB,CAAC,CAAC,MAAM,GAAG;gBAClE,CAAC,CAAC,CAAC,CACN,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4BAA4B;AAE5B;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,SAGC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,cAAc,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,SAGC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,cAAc,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,OAAO,cAAc,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iBAAiB;AAEjB,MAAM,OAAO,eAAe;IACT,OAAO,CAAS;IAEjC,YAAY,OAAe;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAC1D,CAAC;IAED,2CAA2C;IAC3C,GAAG,CAAC,KAAqB;QACvB,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0CAA0C;YAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,IAAI,CAOF,IAAY,EACZ,IAA6B,EAC7B,OAAyB;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,OAAO,EAAE,CAAC,IAAI,CACnB,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,KAAK,GAAmB;gBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,eAAe;gBACrB,IAAI;gBACJ,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;gBACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO;aACzB,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;gBACxC,IAAI,OAAO;oBAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,EAAE,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,EAAE,KAAK,SAAS;gBAAE,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,GAAG,KAAK,SAAS;gBAAE,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,OAAO,MAAM,CAAC;QAChB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,qEAAqE;YACrE,MAAM,KAAK,GAAmB;gBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,eAAe;gBACrB,IAAI;gBACJ,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;gBACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,MAAM,GAAG,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,OAAO;QACL,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,GAAG;iBACP,IAAI,EAAE;iBACN,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB;IAEhB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAQ,MAAkC,CAAC,WAAW,CAAC,KAAK,QAAQ;YACpE,OAAQ,MAAkC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAC/D,OAAQ,MAAkC,CAAC,SAAS,CAAC,KAAK,SAAS,EACnE,CAAC;YACD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAwB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/onboarding/daemon-control.d.ts

@@ -0,0 +1,33 @@
+export declare const RIFT_LAUNCHD_LABEL = "com.getrift.daemon";
+export interface KickstartResult {
+    status: "ok" | "agent_not_loaded" | "failed";
+    /** Human-readable hint for the caller to print or include in errors. */
+    hint?: string;
+    /** Raw stderr from launchctl, when relevant. */
+    stderr?: string;
+}
+export interface KickstartOptions {
+    label?: string;
+    uid?: number;
+    /** Test-injectable spawn replacement returning {code, stderr}. */
+    runner?: (cmd: string, args: string[]) => Promise<{
+        code: number;
+        stderr: string;
+    }>;
+}
+export declare function kickstartDaemon(opts?: KickstartOptions): Promise<KickstartResult>;
+export interface WaitForHealthOptions {
+    baseUrl: string;
+    timeoutMs?: number;
+    intervalMs?: number;
+    fetchFn?: typeof fetch;
+}
+export declare function waitForHealth(opts: WaitForHealthOptions): Promise<{
+    ok: true;
+    uptimeSeconds: number;
+    voyageKeyPresent: boolean;
+} | {
+    ok: false;
+    reason: string;
+}>;
+//# sourceMappingURL=daemon-control.d.ts.map

package/dist/src/onboarding/daemon-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-control.d.ts","sourceRoot":"","sources":["../../../src/onboarding/daemon-control.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,IAAI,GAAG,kBAAkB,GAAG,QAAQ,CAAC;IAC7C,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;QAChD,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ;AAED,wBAAsB,eAAe,CACnC,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAmBD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,oBAAoB,GACzB,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAChC,CAiCA"}

package/dist/src/onboarding/daemon-control.js

@@ -0,0 +1,92 @@
+/**
+ * Daemon-control helpers used by `rift onboard` (and reconfigure flows).
+ *
+ *   - `kickstartDaemon` — launchctl kickstart -k for the canonical label.
+ *     Returns ok/skipped/failed plus a hint string a caller can surface.
+ *     Best-effort: if launchd doesn't know the label yet, we surface
+ *     a hint pointing at install.sh rather than aborting onboarding.
+ *
+ *   - `waitForHealth` — polls GET /health until 200 or timeout.
+ *
+ *   - `voyageSmoke` — round-trips a tiny `/save` to confirm the daemon
+ *     can actually embed via Voyage now that the env file has been
+ *     refreshed. Onboarding only declares "cloud embedding live" after
+ *     this passes.
+ */
+import { spawn } from "node:child_process";
+export const RIFT_LAUNCHD_LABEL = "com.getrift.daemon";
+export async function kickstartDaemon(opts = {}) {
+    const label = opts.label ?? RIFT_LAUNCHD_LABEL;
+    const uid = opts.uid ?? process.getuid?.() ?? 0;
+    const target = `gui/${uid}/${label}`;
+    const runner = opts.runner ?? defaultRunner;
+    const { code, stderr } = await runner("launchctl", ["kickstart", "-k", target]);
+    if (code === 0) {
+        return { status: "ok" };
+    }
+    // launchctl prints "Could not find specified service" / exit 113
+    // when the agent isn't loaded.
+    if (/could not find/i.test(stderr) ||
+        /no such process/i.test(stderr) ||
+        code === 113) {
+        return {
+            status: "agent_not_loaded",
+            hint: "The Rift daemon is not registered with launchd yet. Bootstrap it first " +
+                "(install.sh handles this in one step), then re-run rift onboard.",
+            stderr,
+        };
+    }
+    return {
+        status: "failed",
+        hint: `launchctl kickstart exited ${code}.`,
+        stderr,
+    };
+}
+function defaultRunner(cmd, args) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(cmd, args, { stdio: ["ignore", "ignore", "pipe"] });
+        let stderr = "";
+        child.stderr.on("data", (chunk) => {
+            stderr += chunk.toString("utf8");
+        });
+        child.on("error", reject);
+        child.on("close", (code) => {
+            resolve({ code: code ?? 1, stderr });
+        });
+    });
+}
+export async function waitForHealth(opts) {
+    const timeoutMs = opts.timeoutMs ?? 30_000;
+    const intervalMs = opts.intervalMs ?? 500;
+    const f = opts.fetchFn ?? fetch;
+    const deadline = Date.now() + timeoutMs;
+    let lastErr = "";
+    while (Date.now() < deadline) {
+        try {
+            const res = await f(`${opts.baseUrl}/health`, {
+                signal: AbortSignal.timeout(2_000),
+            });
+            if (res.ok) {
+                const body = (await res.json());
+                return {
+                    ok: true,
+                    uptimeSeconds: body.uptime_seconds ?? 0,
+                    voyageKeyPresent: body.voyage_key_present === true,
+                };
+            }
+            lastErr = `HTTP ${res.status}`;
+        }
+        catch (err) {
+            lastErr = err instanceof Error ? err.message : String(err);
+        }
+        await sleep(intervalMs);
+    }
+    return {
+        ok: false,
+        reason: `Daemon /health did not return 200 within ${timeoutMs}ms (last error: ${lastErr || "none"}).`,
+    };
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+//# sourceMappingURL=daemon-control.js.map

package/dist/src/onboarding/daemon-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-control.js","sourceRoot":"","sources":["../../../src/onboarding/daemon-control.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAoBvD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAyB,EAAE;IAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;IAE5C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChF,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IACD,iEAAiE;IACjE,+BAA+B;IAC/B,IACE,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9B,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,IAAI,KAAK,GAAG,EACZ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,IAAI,EACF,yEAAyE;gBACzE,kEAAkE;YACpE,MAAM;SACP,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,8BAA8B,IAAI,GAAG;QAC3C,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,GAAW,EACX,IAAc;IAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA0B;IAK1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,SAAS,EAAE;gBAC5C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;aACnC,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;gBACF,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;oBACvC,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,KAAK,IAAI;iBACnD,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,4CAA4C,SAAS,mBAAmB,OAAO,IAAI,MAAM,IAAI;KACtG,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/src/onboarding/env-file.d.ts

@@ -0,0 +1,18 @@
+export interface WriteEnvFileOptions {
+    /** Absolute path to the env file (e.g., `~/.rift.env`). */
+    filePath: string;
+    /** Key to set or update (e.g., `VOYAGE_API_KEY`). */
+    key: string;
+    /** Value (raw, unquoted). */
+    value: string;
+    /** Override the timestamp source (test-injectable). */
+    now?: () => Date;
+}
+export interface WriteEnvFileResult {
+    /** True when the destination existed and we backed it up. */
+    backedUp: boolean;
+    /** Path to the backup copy when `backedUp` is true. */
+    backupPath?: string;
+}
+export declare function writeEnvFile(opts: WriteEnvFileOptions): WriteEnvFileResult;
+//# sourceMappingURL=env-file.d.ts.map

package/dist/src/onboarding/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../../../src/onboarding/env-file.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,QAAQ,EAAE,OAAO,CAAC;IAClB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,wBAAgB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,kBAAkB,CAkC1E"}

package/dist/src/onboarding/env-file.js

@@ -0,0 +1,89 @@
+/**
+ * Atomic env-file write with timestamped backup of any pre-existing file.
+ *
+ * Used by `rift onboard` (initial Voyage key write) and the
+ * `--reconfigure-voyage` flow (Slice 6). Properties:
+ *
+ *   - Writes mode 0600. Re-chmods after write to defeat umask masking.
+ *   - tmp + rename within the same dir, so a partial write never lands
+ *     under the canonical path.
+ *   - When the destination already exists, a `.bak.<iso>` copy is taken
+ *     first; the path is returned so a caller can roll back on failure.
+ *   - Preserves any other key=value lines already in the file. Onboarding
+ *     should only mutate `VOYAGE_API_KEY`; other secrets the operator
+ *     hand-edited (e.g. `ANTHROPIC_API_KEY`) are kept verbatim.
+ */
+import fs from "node:fs";
+import path from "node:path";
+const KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+export function writeEnvFile(opts) {
+    if (!KEY_PATTERN.test(opts.key)) {
+        throw new Error(`Invalid env key: ${opts.key}`);
+    }
+    const dir = path.dirname(opts.filePath);
+    fs.mkdirSync(dir, { recursive: true });
+    let existingContent = "";
+    let existed = false;
+    try {
+        existingContent = fs.readFileSync(opts.filePath, "utf8");
+        existed = true;
+    }
+    catch {
+        // not present — fine
+    }
+    let backupPath;
+    if (existed) {
+        const ts = (opts.now?.() ?? new Date()).toISOString().replace(/[:.]/g, "-");
+        backupPath = `${opts.filePath}.bak.${ts}`;
+        fs.copyFileSync(opts.filePath, backupPath);
+        fs.chmodSync(backupPath, 0o600);
+    }
+    const next = upsertKey(existingContent, opts.key, opts.value);
+    const tmp = `${opts.filePath}.tmp.${process.pid}`;
+    fs.writeFileSync(tmp, next, { encoding: "utf8", mode: 0o600 });
+    fs.chmodSync(tmp, 0o600);
+    fs.renameSync(tmp, opts.filePath);
+    return existed
+        ? { backedUp: true, backupPath: backupPath }
+        : { backedUp: false };
+}
+function upsertKey(content, key, value) {
+    const lines = content.split(/\r?\n/);
+    // Drop the trailing empty element from a content ending with \n so we
+    // don't introduce a duplicate blank line on round-trip.
+    const trailing = lines.length > 0 && lines[lines.length - 1] === ""
+        ? lines.pop()
+        : undefined;
+    let replaced = false;
+    const out = lines.map((line) => {
+        const parsed = parseLine(line);
+        if (parsed && parsed.key === key) {
+            replaced = true;
+            return `${key}=${value}`;
+        }
+        return line;
+    });
+    if (!replaced) {
+        out.push(`${key}=${value}`);
+    }
+    if (trailing !== undefined)
+        out.push("");
+    // Always end with a newline.
+    return out.join("\n").replace(/\n*$/, "\n");
+}
+function parseLine(line) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#"))
+        return null;
+    const withoutExport = trimmed.startsWith("export ")
+        ? trimmed.slice("export ".length).trim()
+        : trimmed;
+    const eq = withoutExport.indexOf("=");
+    if (eq <= 0)
+        return null;
+    const key = withoutExport.slice(0, eq).trim();
+    if (!KEY_PATTERN.test(key))
+        return null;
+    return { key };
+}
+//# sourceMappingURL=env-file.js.map

package/dist/src/onboarding/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../../src/onboarding/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAoB7B,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAE/C,MAAM,UAAU,YAAY,CAAC,IAAyB;IACpD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IAED,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5E,UAAU,GAAG,GAAG,IAAI,CAAC,QAAQ,QAAQ,EAAE,EAAE,CAAC;QAC1C,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3C,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAElC,OAAO,OAAO;QACZ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,UAAW,EAAE;QAC7C,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,GAAW,EAAE,KAAa;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,QAAQ,GACZ,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAChD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACb,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,6BAA6B;IAC7B,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QACjD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;QACxC,CAAC,CAAC,OAAO,CAAC;IACZ,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,EAAE,GAAG,EAAE,CAAC;AACjB,CAAC"}

package/dist/src/onboarding/voyage-validate.d.ts

@@ -0,0 +1,16 @@
+export interface VoyageValidateOptions {
+    apiKey: string;
+    model?: string;
+    fetchFn?: typeof fetch;
+    timeoutMs?: number;
+}
+export type VoyageValidateResult = {
+    ok: true;
+    last4: string;
+    model: string;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function validateVoyageKey(opts: VoyageValidateOptions): Promise<VoyageValidateResult>;
+//# sourceMappingURL=voyage-validate.d.ts.map

package/dist/src/onboarding/voyage-validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"voyage-validate.d.ts","sourceRoot":"","sources":["../../../src/onboarding/voyage-validate.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAuE/B"}

package/dist/src/onboarding/voyage-validate.js

@@ -0,0 +1,85 @@
+/**
+ * Voyage API key validation via a tiny real embedding request.
+ *
+ * Catches the cases that matter for onboarding:
+ *   - bogus / typo'd key (401)
+ *   - revoked or rate-limited key (4xx)
+ *   - network outage (TypeError)
+ *
+ * Does NOT cache. Each call is a fresh round-trip — onboarding wants a
+ * live signal, not a stale "yes" from a previous run.
+ */
+const VOYAGE_API_URL = "https://api.voyageai.com/v1/embeddings";
+const PROBE_INPUT = "rift onboarding probe";
+export async function validateVoyageKey(opts) {
+    const apiKey = opts.apiKey.trim();
+    if (apiKey.length < 8) {
+        return { ok: false, reason: "Voyage key looks too short to be valid." };
+    }
+    const model = opts.model ?? "voyage-3-lite";
+    const f = opts.fetchFn ?? fetch;
+    const timeoutMs = opts.timeoutMs ?? 15_000;
+    let res;
+    try {
+        res = await f(VOYAGE_API_URL, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${apiKey}`,
+            },
+            body: JSON.stringify({ input: [PROBE_INPUT], model }),
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+    }
+    catch (err) {
+        if (err instanceof DOMException && err.name === "TimeoutError") {
+            return {
+                ok: false,
+                reason: "Voyage API request timed out — check network and retry.",
+            };
+        }
+        return {
+            ok: false,
+            reason: `Voyage API unreachable: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    if (res.status === 401 || res.status === 403) {
+        return {
+            ok: false,
+            reason: "Voyage rejected the key (401/403). Double-check the value or ask Clem for a fresh key.",
+        };
+    }
+    if (res.status === 429) {
+        return {
+            ok: false,
+            reason: "Voyage rate-limited the key (429). Wait a minute and retry.",
+        };
+    }
+    if (!res.ok) {
+        let body = "";
+        try {
+            body = (await res.text()).slice(0, 200);
+        }
+        catch {
+            // ignore
+        }
+        return {
+            ok: false,
+            reason: `Voyage API returned ${res.status}${body ? `: ${body}` : ""}`,
+        };
+    }
+    let parsed;
+    try {
+        parsed = await res.json();
+    }
+    catch {
+        return { ok: false, reason: "Voyage returned an unparseable response." };
+    }
+    const body = parsed;
+    const embedding = body.data?.[0]?.embedding;
+    if (!Array.isArray(embedding) || embedding.length === 0) {
+        return { ok: false, reason: "Voyage returned no embedding for the probe input." };
+    }
+    return { ok: true, last4: apiKey.slice(-4), model };
+}
+//# sourceMappingURL=voyage-validate.js.map

package/dist/src/onboarding/voyage-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"voyage-validate.js","sourceRoot":"","sources":["../../../src/onboarding/voyage-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,cAAc,GAAG,wCAAwC,CAAC;AAChE,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAa5C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAE3C,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,cAAc,EAAE;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC;YACrD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC/D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yDAAyD;aAClE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACtF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,wFAAwF;SACjG,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,6DAA6D;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACtE,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,MAAoD,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;IACpF,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC"}