@getrift/rift 0.1.0-beta.13 → 0.1.0-beta.14

package/dist/src/diagnostics/doctor.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Pure diagnosis layer shared by `rift doctor`, the repair-prompt
+ * generator, and the daemon's failure notifier.
+ *
+ * It consumes exactly what `rift status` already consumes — the
+ * `/status/friend` payload plus the friend's local signals (Voyage key
+ * last-4, MCP-client install presence) — and folds them into a small,
+ * severity-ordered list of issues. Each issue carries plain-language
+ * copy and one next action, so every surface (CLI, prompt, notification)
+ * tells the same story.
+ *
+ * Issue ordering follows `decideNextLine` in `friend-header.ts` so the
+ * two surfaces tell the same story, with one deliberate policy on top:
+ * `primary` (the "do this first" action) is always the highest-SEVERITY
+ * issue — a `broken` failure outranks any `warning`, regardless of
+ * positional order. This is why `rift doctor` can lead with a broken
+ * capture failure where `rift status`'s flat, positional Next: line
+ * might surface a warning-level inbox rejection first. The lists never
+ * contradict each other; `doctor` simply elevates "what is actually
+ * broken" to the lead, which is its whole job.
+ *
+ * This module is intentionally side-effect free: no IO, no clock except
+ * the injected `now`, no daemon access. Callers fetch the payload and
+ * pass it in.
+ */
+import type { FriendStatusPayload } from "../server/routes/friend-status.js";
+/** Stable identifiers for each diagnosable condition. */
+export type DoctorIssueKind = "daemon_unreachable" | "daemon_auth_failed" | "config_missing" | "voyage_key_missing" | "codex_auth_expired" | "voyage_embed_errors" | "index_write_errors" | "inbox_import_errors" | "capture_failed" | "mcp_not_installed" | "capture_quarantined" | "update_available";
+/**
+ * `broken` blocks Rift from doing its job (no capture, no search, no
+ * memory). `warning` is degraded-but-working or user-side (a rejected
+ * import, a missing optional client, an available update).
+ */
+export type DoctorSeverity = "broken" | "warning";
+export interface DoctorIssue {
+    kind: DoctorIssueKind;
+    severity: DoctorSeverity;
+    /** One-line plain-language headline a friend can read. */
+    title: string;
+    /** Plain-language explanation of what is wrong and why it matters. */
+    detail: string;
+    /** Exactly one next action — a command or a concrete step. */
+    nextAction: string;
+    /**
+     * Stable identity of the *cause*, not just the subsystem. For most
+     * issues this is the kind, but error-bearing issues fold in the error
+     * class (e.g. `voyage_embed_errors:provider_400`) so the notifier can
+     * tell "same subsystem, new cause" apart from a still-unresolved
+     * repeat. Optional so hand-built issues fall back to `kind`.
+     */
+    fingerprint?: string;
+    /**
+     * True when a *running* daemon can observe this failure and is
+     * therefore allowed to raise a native notification about it. A fully
+     * dead daemon cannot observe anything, so `daemon_unreachable` is
+     * false here — that case needs the Slice D watchdog, not this path.
+     */
+    daemonObservable: boolean;
+}
+/** Local-only signals the friend's machine answers without the daemon. */
+export interface DoctorLocalSignals {
+    voyageLast4: string | null;
+    mcpClients: Array<{
+        client: string;
+        installed: boolean;
+    }>;
+}
+/**
+ * Why `/status/friend` could not be read. A null status is NOT always
+ * "the daemon is down" — the request can fail because there is no config,
+ * no token has been issued, or the daemon rejected our auth. Each needs a
+ * different next action, so the caller classifies the failure and the
+ * diagnosis turns it into the right issue. Defaults to `connection_refused`
+ * (the in-process daemon caller never passes null, so this only matters
+ * for the CLI).
+ */
+export type DoctorUnreachableReason = "connection_refused" | "auth_failed" | "not_authenticated" | "config_missing" | "unknown";
+export interface DoctorInput {
+    /** `/status/friend` payload, or null when it could not be read. */
+    status: FriendStatusPayload | null;
+    /**
+     * When `status` is null, why. Lets the diagnosis distinguish "daemon
+     * down" from "cannot authenticate to the daemon" from "no config yet".
+     */
+    unreachableReason?: DoctorUnreachableReason;
+    localSignals: DoctorLocalSignals;
+    /** Injected clock; defaults to Date.now() at the call site. */
+    now: number;
+}
+export interface DoctorReport {
+    /** True when no `broken` issue is present. Warnings do not flip this. */
+    healthy: boolean;
+    /**
+     * The single most important issue — the one whose `nextAction` a
+     * surface should lead with. Null only when there are no issues at all.
+     */
+    primary: DoctorIssue | null;
+    /** All detected issues, highest priority first. */
+    issues: DoctorIssue[];
+}
+/**
+ * Diagnose Rift health from the same inputs `rift status` uses. Pure:
+ * given identical inputs it always returns the same report.
+ */
+export declare function diagnose(input: DoctorInput): DoctorReport;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/src/diagnostics/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/diagnostics/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,yDAAyD;AACzD,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,oBAAoB,GACpB,qBAAqB,GACrB,gBAAgB,GAChB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,cAAc,CAAC;IACzB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC3D;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAC/B,oBAAoB,GACpB,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,SAAS,CAAC;AAEd,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C,YAAY,EAAE,kBAAkB,CAAC;IACjC,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,mDAAmD;IACnD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AA8FD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAyLzD"}

package/dist/src/diagnostics/doctor.js

@@ -0,0 +1,251 @@
+/**
+ * True only when `iso` parses to a timestamp at/after the daemon's
+ * current start. Historical errors that predate the running process are
+ * not current and must not be reported as live failures — a healthy
+ * respawn should clear them. Mirrors `friend-header.isCurrentUptime`.
+ */
+function isCurrentUptime(iso, daemonStartMs) {
+    if (!iso)
+        return false;
+    const ts = Date.parse(iso);
+    if (Number.isNaN(ts))
+        return false;
+    return ts >= daemonStartMs;
+}
+/**
+ * Translate internal error-class names into copy a friend can act on.
+ * Falls back to the raw class so a new/unknown value still surfaces.
+ * Kept in sync with `friend-header.humanizeErrorClass`.
+ */
+function humanizeErrorClass(reason) {
+    if (!reason)
+        return "unknown";
+    switch (reason) {
+        case "schema_mismatch":
+            return "index format changed by an update";
+        case "lock_conflict":
+            return "index busy (a concurrent write held the lock)";
+        case "provider_400":
+            return "Voyage rejected the request (often an invalid or revoked key)";
+        case "network":
+            return "a network error reaching Voyage";
+        default:
+            return reason;
+    }
+}
+/**
+ * Build the single issue for a null `/status/friend`, tailored to *why*
+ * the read failed so the next action actually fixes the problem.
+ */
+function unreachableIssue(reason) {
+    switch (reason) {
+        case "config_missing":
+            return {
+                kind: "config_missing",
+                severity: "broken",
+                title: "Rift is not set up on this Mac yet",
+                detail: "Rift has no config file, so the command does not know how to " +
+                    "reach the daemon. This usually means onboarding never finished.",
+                nextAction: "Set it up: rift onboard",
+                daemonObservable: false,
+            };
+        case "not_authenticated":
+            return {
+                kind: "daemon_auth_failed",
+                severity: "broken",
+                title: "Rift has no access token on this Mac",
+                detail: "The daemon may be running, but this command has no token to " +
+                    "authenticate with it, so it cannot read Rift's status.",
+                nextAction: "Issue a token: rift token issue",
+                daemonObservable: false,
+            };
+        case "auth_failed":
+            return {
+                kind: "daemon_auth_failed",
+                severity: "broken",
+                title: "Rift's daemon rejected this command's token",
+                detail: "The daemon is reachable but refused the token (it may be stale " +
+                    "or from a different install). This is an authentication problem, " +
+                    "not a crashed daemon — restarting will not fix it.",
+                nextAction: "Re-issue a token: rift token issue",
+                daemonObservable: false,
+            };
+        case "connection_refused":
+        case "unknown":
+        default:
+            return {
+                kind: "daemon_unreachable",
+                severity: "broken",
+                title: "Rift's background engine is not responding",
+                detail: "The Rift daemon is the always-on process that captures sessions, " +
+                    "keeps the search index fresh, and answers your AI tools. Right now " +
+                    "nothing can reach it, so capture and memory are paused.",
+                nextAction: "Restart it: launchctl kickstart -k gui/$UID/com.getrift.daemon",
+                daemonObservable: false,
+            };
+    }
+}
+/**
+ * Diagnose Rift health from the same inputs `rift status` uses. Pure:
+ * given identical inputs it always returns the same report.
+ */
+export function diagnose(input) {
+    const { status, localSignals, now } = input;
+    const issues = [];
+    // No payload is a root failure, but the *reason* changes the fix:
+    // a down daemon needs a restart, an auth failure needs a fresh token,
+    // and a missing config needs onboarding. Reporting all three as
+    // "restart the daemon" is exactly the misdirection Slice B removes.
+    // All are CLI-side diagnoses (the in-process daemon caller always has a
+    // payload), so none are daemon-observable — a dead/unauthable daemon
+    // cannot notify about itself; that is the Slice D watchdog's job.
+    if (!status) {
+        const issue = unreachableIssue(input.unreachableReason ?? "connection_refused");
+        return { healthy: false, primary: issue, issues: [issue] };
+    }
+    const daemonStartMs = now - status.daemon.uptime_seconds * 1000;
+    // 1. Voyage key missing — without it nothing can be embedded or
+    //    searched. Highest-priority broken state.
+    if (!status.daemon.voyage_key_present) {
+        issues.push({
+            kind: "voyage_key_missing",
+            severity: "broken",
+            title: "Voyage search key is missing",
+            detail: "Rift uses a Voyage key to turn your text into searchable meaning. " +
+                "Without it, nothing new can be indexed and search will not work.",
+            nextAction: "Re-add the key: rift onboard --reconfigure-voyage",
+            daemonObservable: true,
+        });
+    }
+    // 2. Codex auth expired — auto-capture triage runs through the
+    //    locally-authenticated codex CLI. Expired login halts capture.
+    if (status.codex.last_preflight_ok === false) {
+        issues.push({
+            kind: "codex_auth_expired",
+            severity: "broken",
+            title: "Codex login has expired",
+            detail: "Rift reads your new Claude Code / Codex sessions through the codex " +
+                "CLI. Its login has expired, so automatic capture cannot run and new " +
+                "conversations are not being saved.",
+            nextAction: "Sign back in: codex login (then run: rift capture)",
+            daemonObservable: true,
+        });
+    }
+    // 3. Voyage embedding errors during this uptime — the key is present
+    //    but Voyage is rejecting/dropping calls (often an invalid key or
+    //    a network problem). Recency-gated so a prior process's error
+    //    does not haunt a healthy respawn.
+    if (isCurrentUptime(status.voyage.last_error_at, daemonStartMs)) {
+        issues.push({
+            kind: "voyage_embed_errors",
+            severity: "broken",
+            fingerprint: `voyage_embed_errors:${status.voyage.last_error_reason ?? "unknown"}`,
+            title: "Search indexing is failing at the Voyage step",
+            detail: "Rift could not turn recent text into searchable meaning: " +
+                `${humanizeErrorClass(status.voyage.last_error_reason)}. New content ` +
+                "may not be findable until this clears.",
+            nextAction: "Inspect with rift status, then check the Voyage key with " +
+                "rift onboard --reconfigure-voyage if errors mention the key",
+            daemonObservable: true,
+        });
+    }
+    // 4. Index write errors during this uptime — text embedded fine, but
+    //    the LanceDB write failed (schema mismatch, lock, IO). Distinct
+    //    from Voyage: "embedded" does not imply "searchable".
+    if (isCurrentUptime(status.index.last_error_at, daemonStartMs)) {
+        issues.push({
+            kind: "index_write_errors",
+            severity: "broken",
+            fingerprint: `index_write_errors:${status.index.last_error_reason ?? "unknown"}`,
+            title: "Search index writes are failing",
+            detail: "Rift embedded recent text but could not write it to the search " +
+                `index: ${humanizeErrorClass(status.index.last_error_reason)}. ` +
+                "Recently captured items may not be searchable yet.",
+            nextAction: "Inspect with rift status, then try: rift reindex",
+            daemonObservable: true,
+        });
+    }
+    // 5. Capture run failed during this uptime — the auto-capture loop
+    //    itself threw (distinct from a Codex preflight failure, which is
+    //    reported above with a more specific action).
+    if (status.capture.last_errors > 0 &&
+        isCurrentUptime(status.capture.last_run_at, daemonStartMs)) {
+        issues.push({
+            kind: "capture_failed",
+            severity: "broken",
+            title: "The last capture run reported errors",
+            detail: "Rift's automatic capture ran but hit errors while saving sessions, " +
+                "so some recent conversations may not have been stored.",
+            nextAction: "Re-run it and watch the output: rift capture",
+            daemonObservable: true,
+        });
+    }
+    // 6. Inbox import errors — user-side: a dropped export was rejected
+    //    (malformed JSON, corrupt zip, unsupported source). The fix is to
+    //    re-drop a fresh export, not to repair the engine. Warning.
+    if (status.inbox &&
+        isCurrentUptime(status.inbox.last_error_at, daemonStartMs)) {
+        issues.push({
+            kind: "inbox_import_errors",
+            severity: "warning",
+            title: "A dropped import could not be read",
+            detail: "Rift tried to import a file from your inbox folder but could not " +
+                `read it (${status.inbox.last_error_reason ?? "unknown reason"}). ` +
+                "This is usually a corrupt or unsupported export, not a Rift fault.",
+            nextAction: "Re-export and drop a fresh archive under data/inbox/",
+            // User-side; the daemon observes it but the plan scopes
+            // notifications to engine failures, not rejected user input.
+            daemonObservable: false,
+        });
+    }
+    // 7. MCP not installed for one or more clients — degraded reach, not a
+    //    broken engine. Warning.
+    const missing = localSignals.mcpClients
+        .filter((c) => !c.installed)
+        .map((c) => c.client);
+    if (missing.length > 0) {
+        issues.push({
+            kind: "mcp_not_installed",
+            severity: "warning",
+            title: `Rift is not connected to ${missing.join(", ")}`,
+            detail: "MCP is the connection that lets your AI tools ask Rift for memory. " +
+                `These tools are not wired up yet: ${missing.join(", ")}.`,
+            nextAction: `Connect one: rift mcp install --client=${missing[0]}`,
+            daemonObservable: false,
+        });
+    }
+    // 8. Quarantined oversized sessions — silent data loss, but a graceful
+    //    skip rather than an error. Warning.
+    if (status.capture.last_quarantined > 0) {
+        const n = status.capture.last_quarantined;
+        issues.push({
+            kind: "capture_quarantined",
+            severity: "warning",
+            title: `${n} session${n === 1 ? "" : "s"} skipped for being too large`,
+            detail: "Rift skipped some oversized sessions during capture instead of " +
+                "saving them. They are not lost on disk, but they are not in your " +
+                "memory yet.",
+            nextAction: "Raise capture.codex_cli.max_session_bytes in config.json and " +
+                "restart, or accept the gap",
+            daemonObservable: false,
+        });
+    }
+    // 9. Update available — informational nudge, lowest priority.
+    if (status.update.available && status.update.latest_beta) {
+        issues.push({
+            kind: "update_available",
+            severity: "warning",
+            title: `A newer Rift is available (${status.update.installed} → ${status.update.latest_beta})`,
+            detail: "A newer beta build is published.",
+            nextAction: "Update now: rift update",
+            daemonObservable: false,
+        });
+    }
+    const healthy = !issues.some((i) => i.severity === "broken");
+    // Lead with the most severe issue: the first `broken` if any, else the
+    // first issue. Broken issues are already pushed ahead of warnings, so
+    // this also keeps `primary` stable if the positional order ever shifts.
+    const primary = issues.find((i) => i.severity === "broken") ?? issues[0] ?? null;
+    return { healthy, primary, issues };
+}
+//# sourceMappingURL=doctor.js.map

package/dist/src/diagnostics/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/diagnostics/doctor.ts"],"names":[],"mappings":"AA0HA;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAkB,EAAE,aAAqB;IAChE,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,EAAE,IAAI,aAAa,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,MAAqB;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,iBAAiB;YACpB,OAAO,mCAAmC,CAAC;QAC7C,KAAK,eAAe;YAClB,OAAO,+CAA+C,CAAC;QACzD,KAAK,cAAc;YACjB,OAAO,+DAA+D,CAAC;QACzE,KAAK,SAAS;YACZ,OAAO,iCAAiC,CAAC;QAC3C;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,MAA+B;IACvD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,gBAAgB;YACnB,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,oCAAoC;gBAC3C,MAAM,EACJ,+DAA+D;oBAC/D,iEAAiE;gBACnE,UAAU,EAAE,yBAAyB;gBACrC,gBAAgB,EAAE,KAAK;aACxB,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,sCAAsC;gBAC7C,MAAM,EACJ,8DAA8D;oBAC9D,wDAAwD;gBAC1D,UAAU,EAAE,iCAAiC;gBAC7C,gBAAgB,EAAE,KAAK;aACxB,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,6CAA6C;gBACpD,MAAM,EACJ,iEAAiE;oBACjE,mEAAmE;oBACnE,oDAAoD;gBACtD,UAAU,EAAE,oCAAoC;gBAChD,gBAAgB,EAAE,KAAK;aACxB,CAAC;QACJ,KAAK,oBAAoB,CAAC;QAC1B,KAAK,SAAS,CAAC;QACf;YACE,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,4CAA4C;gBACnD,MAAM,EACJ,mEAAmE;oBACnE,qEAAqE;oBACrE,yDAAyD;gBAC3D,UAAU,EACR,gEAAgE;gBAClE,gBAAgB,EAAE,KAAK;aACxB,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAkB;IACzC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,kEAAkE;IAClE,sEAAsE;IACtE,gEAAgE;IAChE,oEAAoE;IACpE,wEAAwE;IACxE,qEAAqE;IACrE,kEAAkE;IAClE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,IAAI,oBAAoB,CAAC,CAAC;QAChF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAEhE,gEAAgE;IAChE,8CAA8C;IAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,8BAA8B;YACrC,MAAM,EACJ,oEAAoE;gBACpE,kEAAkE;YACpE,UAAU,EAAE,mDAAmD;YAC/D,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IAED,+DAA+D;IAC/D,mEAAmE;IACnE,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,yBAAyB;YAChC,MAAM,EACJ,qEAAqE;gBACrE,sEAAsE;gBACtE,oCAAoC;YACtC,UAAU,EAAE,oDAAoD;YAChE,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,uCAAuC;IACvC,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,uBAAuB,MAAM,CAAC,MAAM,CAAC,iBAAiB,IAAI,SAAS,EAAE;YAClF,KAAK,EAAE,+CAA+C;YACtD,MAAM,EACJ,2DAA2D;gBAC3D,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,gBAAgB;gBACtE,wCAAwC;YAC1C,UAAU,EACR,2DAA2D;gBAC3D,6DAA6D;YAC/D,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,0DAA0D;IAC1D,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,sBAAsB,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,SAAS,EAAE;YAChF,KAAK,EAAE,iCAAiC;YACxC,MAAM,EACJ,iEAAiE;gBACjE,UAAU,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI;gBAChE,oDAAoD;YACtD,UAAU,EAAE,kDAAkD;YAC9D,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,kDAAkD;IAClD,IACE,MAAM,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC;QAC9B,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,EAC1D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,sCAAsC;YAC7C,MAAM,EACJ,qEAAqE;gBACrE,wDAAwD;YAC1D,UAAU,EAAE,8CAA8C;YAC1D,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,sEAAsE;IACtE,gEAAgE;IAChE,IACE,MAAM,CAAC,KAAK;QACZ,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,EAC1D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,oCAAoC;YAC3C,MAAM,EACJ,mEAAmE;gBACnE,YAAY,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,gBAAgB,KAAK;gBACnE,oEAAoE;YACtE,UAAU,EAAE,sDAAsD;YAClE,wDAAwD;YACxD,6DAA6D;YAC7D,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,6BAA6B;IAC7B,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU;SACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvD,MAAM,EACJ,qEAAqE;gBACrE,qCAAqC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC5D,UAAU,EAAE,0CAA0C,OAAO,CAAC,CAAC,CAAC,EAAE;YAClE,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,yCAAyC;IACzC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,8BAA8B;YACtE,MAAM,EACJ,iEAAiE;gBACjE,mEAAmE;gBACnE,aAAa;YACf,UAAU,EACR,+DAA+D;gBAC/D,4BAA4B;YAC9B,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,8BAA8B,MAAM,CAAC,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG;YAC9F,MAAM,EAAE,kCAAkC;YAC1C,UAAU,EAAE,yBAAyB;YACrC,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC7D,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACnE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC"}

package/dist/src/diagnostics/notify.d.ts

@@ -0,0 +1,90 @@
+import type { DoctorIssue, DoctorIssueKind } from "./doctor.js";
+/** Re-notify cadence for an issue that stays unresolved. */
+export declare const RENOTIFY_INTERVAL_MS: number;
+export interface NotificationPayload {
+    /** macOS notification title — always the same friend-facing banner. */
+    title: string;
+    /** One-line subtitle naming the failing subsystem. */
+    subtitle: string;
+    /** Body: the issue's next action, so the notification is actionable. */
+    message: string;
+}
+/** Per-subsystem dedup record. */
+export interface NotifyRecord {
+    last_notified_at: string;
+    /**
+     * The cause fingerprint last notified for this kind (e.g.
+     * `voyage_embed_errors:provider_400`). When the live issue's
+     * fingerprint differs, the cause changed and the friend should be
+     * re-notified immediately — the repair action/risk is now different —
+     * rather than staying silent for the rest of the 24h window. Optional
+     * for backward compatibility with state written before fingerprinting.
+     */
+    fingerprint?: string;
+}
+/**
+ * Persisted dedup state. Presence of a kind means it is currently in a
+ * failing state and was last notified at `last_notified_at`. Absence
+ * means resolved-or-never — so the next occurrence notifies fresh.
+ */
+export interface NotifyState {
+    active: Partial<Record<DoctorIssueKind, NotifyRecord>>;
+}
+export interface PlanNotificationsInput {
+    /** All diagnosed issues (the full report list, any severity). */
+    issues: DoctorIssue[];
+    /** Previously persisted dedup state. */
+    state: NotifyState;
+    now: number;
+}
+export interface PlanNotificationsResult {
+    /** Payloads to actually send this tick (already rate-limited). */
+    notifications: NotificationPayload[];
+    /** State to persist after sending. */
+    nextState: NotifyState;
+}
+/**
+ * Build the friend-facing notification for an issue. Pure. The title is
+ * intentionally constant ("Rift needs attention") so the friend learns
+ * to recognise it; the subtitle and body carry the specifics.
+ */
+export declare function buildNotificationPayload(issue: DoctorIssue): NotificationPayload;
+/**
+ * Decide which notifications to send this tick and what state to persist.
+ * Pure: no IO, no clock except the injected `now`.
+ *
+ * Only `daemonObservable` issues are eligible — the daemon must not
+ * notify about things it cannot itself observe (e.g. a dead daemon, or
+ * user-side rejected imports).
+ */
+export declare function planNotifications(input: PlanNotificationsInput): PlanNotificationsResult;
+/** Absolute path to the dedup-state file under the data dir. */
+export declare function notifyStatePath(dataDir: string): string;
+/** Read dedup state; returns empty state on any read/parse failure. */
+export declare function readNotifyState(dataDir: string): NotifyState;
+/** Persist dedup state best-effort; swallows IO errors. */
+export declare function writeNotifyState(dataDir: string, state: NotifyState): void;
+/**
+ * Send a single notification via macOS `osascript`. Best-effort and
+ * fire-and-forget — any failure (non-macOS, osascript missing, user has
+ * notifications disabled) is swallowed so capture is never affected.
+ *
+ * Strings are passed as argv to `execFile` (not interpolated into a
+ * shell), and AppleScript string literals are escaped, so notification
+ * text cannot inject shell or AppleScript.
+ */
+export declare function sendNotification(payload: NotificationPayload, opts?: {
+    platform?: NodeJS.Platform;
+}): void;
+/** Escape a string into an AppleScript double-quoted literal. */
+export declare function asAppleScriptString(value: string): string;
+/**
+ * End-to-end daemon helper: given the diagnosed issues, send any due
+ * notifications and persist updated dedup state. Best-effort throughout
+ * — wired into the capture loop, so it must never throw.
+ */
+export declare function notifyDaemonFailures(dataDir: string, issues: DoctorIssue[], opts?: {
+    now?: number;
+    platform?: NodeJS.Platform;
+}): void;
+//# sourceMappingURL=notify.d.ts.map

package/dist/src/diagnostics/notify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.d.ts","sourceRoot":"","sources":["../../../src/diagnostics/notify.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEhE,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,QAAsB,CAAC;AAExD,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,kCAAkC;AAClC,MAAM,WAAW,YAAY;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;CACxD;AAOD,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,wCAAwC;IACxC,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,aAAa,EAAE,mBAAmB,EAAE,CAAC;IACrC,sCAAsC;IACtC,SAAS,EAAE,WAAW,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,WAAW,GACjB,mBAAmB,CAMrB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,GAC5B,uBAAuB,CA+CzB;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAW5D;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAQ1E;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,mBAAmB,EAC5B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;CAAO,GACxC,IAAI,CAcN;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,EAAE,EACrB,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;CAAO,GACtD,IAAI,CAmBN"}

package/dist/src/diagnostics/notify.js

@@ -0,0 +1,177 @@
+/**
+ * Native failure notifications for daemon-observed problems.
+ *
+ * A running daemon can see capture failures, expired Codex login, an
+ * invalid/failing Voyage key, and index-write failures. When one of
+ * those crosses into a failing state, the friend should get one calm
+ * macOS notification that points at the repair surface — not a wall of
+ * logs, and not a notification on every poll.
+ *
+ * What this module does NOT cover: a fully dead daemon cannot notify
+ * about itself. That needs a separate watchdog and is explicitly Slice D
+ * (see docs/feedback/2026-05-20-friend-onboarding-status-surface.md).
+ *
+ * Rate-limiting rules (from the status-surface plan):
+ *   - Notify on state transition, not every poll.
+ *   - Do not repeat the same unresolved issue more than once per day.
+ *   - Notify again after the issue resolves and later recurs.
+ *
+ * The planning logic (`planNotifications`) is pure and fully tested; the
+ * IO (reading/writing dedup state, sending via osascript) is thin and
+ * best-effort so a notification failure can never break capture.
+ */
+import { execFile } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+/** Re-notify cadence for an issue that stays unresolved. */
+export const RENOTIFY_INTERVAL_MS = 24 * 60 * 60 * 1000;
+/** Cause identity for an issue: explicit fingerprint, else its kind. */
+function issueFingerprint(issue) {
+    return issue.fingerprint ?? issue.kind;
+}
+/**
+ * Build the friend-facing notification for an issue. Pure. The title is
+ * intentionally constant ("Rift needs attention") so the friend learns
+ * to recognise it; the subtitle and body carry the specifics.
+ */
+export function buildNotificationPayload(issue) {
+    return {
+        title: "Rift needs attention",
+        subtitle: issue.title,
+        message: issue.nextAction,
+    };
+}
+/**
+ * Decide which notifications to send this tick and what state to persist.
+ * Pure: no IO, no clock except the injected `now`.
+ *
+ * Only `daemonObservable` issues are eligible — the daemon must not
+ * notify about things it cannot itself observe (e.g. a dead daemon, or
+ * user-side rejected imports).
+ */
+export function planNotifications(input) {
+    const { issues, state, now } = input;
+    const eligible = issues.filter((i) => i.daemonObservable);
+    const eligibleKinds = new Set(eligible.map((i) => i.kind));
+    const nextActive = {};
+    const notifications = [];
+    for (const issue of eligible) {
+        const prior = state.active[issue.kind];
+        const fingerprint = issueFingerprint(issue);
+        const notify = () => {
+            notifications.push(buildNotificationPayload(issue));
+            nextActive[issue.kind] = {
+                last_notified_at: new Date(now).toISOString(),
+                fingerprint,
+            };
+        };
+        if (!prior) {
+            // New transition into failure → notify.
+            notify();
+            continue;
+        }
+        // The cause changed under the same subsystem (e.g. a Voyage network
+        // blip became a provider rejection). The action and risk differ, so
+        // treat it as a fresh failure rather than a still-unresolved repeat.
+        if ((prior.fingerprint ?? issue.kind) !== fingerprint) {
+            notify();
+            continue;
+        }
+        const priorMs = Date.parse(prior.last_notified_at);
+        const stale = Number.isNaN(priorMs) || now - priorMs >= RENOTIFY_INTERVAL_MS;
+        if (stale) {
+            // Still failing, same cause, a day later → re-notify once.
+            notify();
+        }
+        else {
+            // Already notified within the window → stay quiet, keep record.
+            nextActive[issue.kind] = prior;
+        }
+    }
+    // Anything previously active but no longer present has resolved; it is
+    // simply absent from `nextActive`, so a later recurrence notifies fresh.
+    void eligibleKinds;
+    return { notifications, nextState: { active: nextActive } };
+}
+/** Absolute path to the dedup-state file under the data dir. */
+export function notifyStatePath(dataDir) {
+    return path.join(dataDir, "observability", "notifications.json");
+}
+/** Read dedup state; returns empty state on any read/parse failure. */
+export function readNotifyState(dataDir) {
+    try {
+        const raw = fs.readFileSync(notifyStatePath(dataDir), "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === "object" && parsed.active) {
+            return { active: parsed.active };
+        }
+    }
+    catch {
+        // fall through
+    }
+    return { active: {} };
+}
+/** Persist dedup state best-effort; swallows IO errors. */
+export function writeNotifyState(dataDir, state) {
+    try {
+        const file = notifyStatePath(dataDir);
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, JSON.stringify(state, null, 2) + "\n", "utf8");
+    }
+    catch {
+        // best-effort: a failed write just means we may re-notify next tick.
+    }
+}
+/**
+ * Send a single notification via macOS `osascript`. Best-effort and
+ * fire-and-forget — any failure (non-macOS, osascript missing, user has
+ * notifications disabled) is swallowed so capture is never affected.
+ *
+ * Strings are passed as argv to `execFile` (not interpolated into a
+ * shell), and AppleScript string literals are escaped, so notification
+ * text cannot inject shell or AppleScript.
+ */
+export function sendNotification(payload, opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    if (platform !== "darwin")
+        return;
+    const script = `display notification ${asAppleScriptString(payload.message)} ` +
+        `with title ${asAppleScriptString(payload.title)} ` +
+        `subtitle ${asAppleScriptString(payload.subtitle)}`;
+    try {
+        execFile("osascript", ["-e", script], () => {
+            // ignore stdout/stderr/exit — best-effort.
+        });
+    }
+    catch {
+        // ignore spawn errors entirely.
+    }
+}
+/** Escape a string into an AppleScript double-quoted literal. */
+export function asAppleScriptString(value) {
+    return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+/**
+ * End-to-end daemon helper: given the diagnosed issues, send any due
+ * notifications and persist updated dedup state. Best-effort throughout
+ * — wired into the capture loop, so it must never throw.
+ */
+export function notifyDaemonFailures(dataDir, issues, opts = {}) {
+    try {
+        const now = opts.now ?? Date.now();
+        const state = readNotifyState(dataDir);
+        const { notifications, nextState } = planNotifications({
+            issues,
+            state,
+            now,
+        });
+        for (const payload of notifications) {
+            sendNotification(payload, opts.platform ? { platform: opts.platform } : {});
+        }
+        writeNotifyState(dataDir, nextState);
+    }
+    catch {
+        // best-effort: never let notification logic break the daemon.
+    }
+}
+//# sourceMappingURL=notify.js.map

package/dist/src/diagnostics/notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../../src/diagnostics/notify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAkCxD,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,OAAO,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC;AACzC,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAkB;IAElB,OAAO;QACL,KAAK,EAAE,sBAAsB;QAC7B,QAAQ,EAAE,KAAK,CAAC,KAAK;QACrB,OAAO,EAAE,KAAK,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA6B;IAE7B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3D,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,MAAM,aAAa,GAA0B,EAAE,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;gBACvB,gBAAgB,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;gBAC7C,WAAW;aACZ,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,wCAAwC;YACxC,MAAM,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QACD,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YACtD,MAAM,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACnD,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,OAAO,IAAI,oBAAoB,CAAC;QACjE,IAAI,KAAK,EAAE,CAAC;YACV,2DAA2D;YAC3D,MAAM,EAAE,CAAC;QACX,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACjC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,KAAK,aAAa,CAAC;IAEnB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;AACnE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAkB;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA4B,EAC5B,OAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO;IAClC,MAAM,MAAM,GACV,wBAAwB,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;QAC/D,cAAc,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG;QACnD,YAAY,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE;YACzC,2CAA2C;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,MAAqB,EACrB,OAAqD,EAAE;IAEvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC;YACrD,MAAM;YACN,KAAK;YACL,GAAG;SACJ,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,gBAAgB,CACd,OAAO,EACP,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC"}