@getrift/rift 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/diagnostics/notify.js

@@ -0,0 +1,177 @@
+/**
+ * Native failure notifications for daemon-observed problems.
+ *
+ * A running daemon can see capture failures, expired Codex login, an
+ * invalid/failing Voyage key, and index-write failures. When one of
+ * those crosses into a failing state, the friend should get one calm
+ * macOS notification that points at the repair surface — not a wall of
+ * logs, and not a notification on every poll.
+ *
+ * What this module does NOT cover: a fully dead daemon cannot notify
+ * about itself. That needs a separate watchdog and is explicitly Slice D
+ * (see docs/feedback/2026-05-20-friend-onboarding-status-surface.md).
+ *
+ * Rate-limiting rules (from the status-surface plan):
+ *   - Notify on state transition, not every poll.
+ *   - Do not repeat the same unresolved issue more than once per day.
+ *   - Notify again after the issue resolves and later recurs.
+ *
+ * The planning logic (`planNotifications`) is pure and fully tested; the
+ * IO (reading/writing dedup state, sending via osascript) is thin and
+ * best-effort so a notification failure can never break capture.
+ */
+import { execFile } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+/** Re-notify cadence for an issue that stays unresolved. */
+export const RENOTIFY_INTERVAL_MS = 24 * 60 * 60 * 1000;
+/** Cause identity for an issue: explicit fingerprint, else its kind. */
+function issueFingerprint(issue) {
+    return issue.fingerprint ?? issue.kind;
+}
+/**
+ * Build the friend-facing notification for an issue. Pure. The title is
+ * intentionally constant ("Rift needs attention") so the friend learns
+ * to recognise it; the subtitle and body carry the specifics.
+ */
+export function buildNotificationPayload(issue) {
+    return {
+        title: "Rift needs attention",
+        subtitle: issue.title,
+        message: issue.nextAction,
+    };
+}
+/**
+ * Decide which notifications to send this tick and what state to persist.
+ * Pure: no IO, no clock except the injected `now`.
+ *
+ * Only `daemonObservable` issues are eligible — the daemon must not
+ * notify about things it cannot itself observe (e.g. a dead daemon, or
+ * user-side rejected imports).
+ */
+export function planNotifications(input) {
+    const { issues, state, now } = input;
+    const eligible = issues.filter((i) => i.daemonObservable);
+    const eligibleKinds = new Set(eligible.map((i) => i.kind));
+    const nextActive = {};
+    const notifications = [];
+    for (const issue of eligible) {
+        const prior = state.active[issue.kind];
+        const fingerprint = issueFingerprint(issue);
+        const notify = () => {
+            notifications.push(buildNotificationPayload(issue));
+            nextActive[issue.kind] = {
+                last_notified_at: new Date(now).toISOString(),
+                fingerprint,
+            };
+        };
+        if (!prior) {
+            // New transition into failure → notify.
+            notify();
+            continue;
+        }
+        // The cause changed under the same subsystem (e.g. a Voyage network
+        // blip became a provider rejection). The action and risk differ, so
+        // treat it as a fresh failure rather than a still-unresolved repeat.
+        if ((prior.fingerprint ?? issue.kind) !== fingerprint) {
+            notify();
+            continue;
+        }
+        const priorMs = Date.parse(prior.last_notified_at);
+        const stale = Number.isNaN(priorMs) || now - priorMs >= RENOTIFY_INTERVAL_MS;
+        if (stale) {
+            // Still failing, same cause, a day later → re-notify once.
+            notify();
+        }
+        else {
+            // Already notified within the window → stay quiet, keep record.
+            nextActive[issue.kind] = prior;
+        }
+    }
+    // Anything previously active but no longer present has resolved; it is
+    // simply absent from `nextActive`, so a later recurrence notifies fresh.
+    void eligibleKinds;
+    return { notifications, nextState: { active: nextActive } };
+}
+/** Absolute path to the dedup-state file under the data dir. */
+export function notifyStatePath(dataDir) {
+    return path.join(dataDir, "observability", "notifications.json");
+}
+/** Read dedup state; returns empty state on any read/parse failure. */
+export function readNotifyState(dataDir) {
+    try {
+        const raw = fs.readFileSync(notifyStatePath(dataDir), "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === "object" && parsed.active) {
+            return { active: parsed.active };
+        }
+    }
+    catch {
+        // fall through
+    }
+    return { active: {} };
+}
+/** Persist dedup state best-effort; swallows IO errors. */
+export function writeNotifyState(dataDir, state) {
+    try {
+        const file = notifyStatePath(dataDir);
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, JSON.stringify(state, null, 2) + "\n", "utf8");
+    }
+    catch {
+        // best-effort: a failed write just means we may re-notify next tick.
+    }
+}
+/**
+ * Send a single notification via macOS `osascript`. Best-effort and
+ * fire-and-forget — any failure (non-macOS, osascript missing, user has
+ * notifications disabled) is swallowed so capture is never affected.
+ *
+ * Strings are passed as argv to `execFile` (not interpolated into a
+ * shell), and AppleScript string literals are escaped, so notification
+ * text cannot inject shell or AppleScript.
+ */
+export function sendNotification(payload, opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    if (platform !== "darwin")
+        return;
+    const script = `display notification ${asAppleScriptString(payload.message)} ` +
+        `with title ${asAppleScriptString(payload.title)} ` +
+        `subtitle ${asAppleScriptString(payload.subtitle)}`;
+    try {
+        execFile("osascript", ["-e", script], () => {
+            // ignore stdout/stderr/exit — best-effort.
+        });
+    }
+    catch {
+        // ignore spawn errors entirely.
+    }
+}
+/** Escape a string into an AppleScript double-quoted literal. */
+export function asAppleScriptString(value) {
+    return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+/**
+ * End-to-end daemon helper: given the diagnosed issues, send any due
+ * notifications and persist updated dedup state. Best-effort throughout
+ * — wired into the capture loop, so it must never throw.
+ */
+export function notifyDaemonFailures(dataDir, issues, opts = {}) {
+    try {
+        const now = opts.now ?? Date.now();
+        const state = readNotifyState(dataDir);
+        const { notifications, nextState } = planNotifications({
+            issues,
+            state,
+            now,
+        });
+        for (const payload of notifications) {
+            sendNotification(payload, opts.platform ? { platform: opts.platform } : {});
+        }
+        writeNotifyState(dataDir, nextState);
+    }
+    catch {
+        // best-effort: never let notification logic break the daemon.
+    }
+}
+//# sourceMappingURL=notify.js.map

package/dist/src/diagnostics/notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../../src/diagnostics/notify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAkCxD,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,OAAO,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC;AACzC,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAkB;IAElB,OAAO;QACL,KAAK,EAAE,sBAAsB;QAC7B,QAAQ,EAAE,KAAK,CAAC,KAAK;QACrB,OAAO,EAAE,KAAK,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA6B;IAE7B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3D,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,MAAM,aAAa,GAA0B,EAAE,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;gBACvB,gBAAgB,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;gBAC7C,WAAW;aACZ,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,wCAAwC;YACxC,MAAM,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QACD,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YACtD,MAAM,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACnD,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,OAAO,IAAI,oBAAoB,CAAC;QACjE,IAAI,KAAK,EAAE,CAAC;YACV,2DAA2D;YAC3D,MAAM,EAAE,CAAC;QACX,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACjC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,KAAK,aAAa,CAAC;IAEnB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;AACnE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAkB;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA4B,EAC5B,OAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO;IAClC,MAAM,MAAM,GACV,wBAAwB,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;QAC/D,cAAc,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG;QACnD,YAAY,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE;YACzC,2CAA2C;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,MAAqB,EACrB,OAAqD,EAAE;IAEvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC;YACrD,MAAM;YACN,KAAK;YACL,GAAG;SACJ,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,gBAAgB,CACd,OAAO,EACP,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC"}

package/dist/src/diagnostics/repair-prompt.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Redacted repair-prompt generator for `rift doctor --copy-prompt`.
+ *
+ * The output is designed to be pasted straight into Claude or Codex and
+ * be safe to do so. It carries enough state to debug Rift but never
+ * leaks a secret, and it forbids destructive repair so an over-eager
+ * assistant cannot wipe the user's memory.
+ *
+ * Redaction contract (see the friend-onboarding status-surface plan):
+ *   - Never include full Voyage keys, auth tokens, bearer tokens, or raw
+ *     private conversation content.
+ *   - Voyage keys appear only as a last-4 fingerprint, and only when one
+ *     is known locally.
+ *   - Local paths are allowed only when they help repair (data + log
+ *     locations), because they are not secrets and the assistant needs
+ *     them to inspect the right folder.
+ *
+ * Safety contract:
+ *   - Tell the assistant to inspect before changing anything.
+ *   - Prefer commands that inspect/repair over commands that reset.
+ *   - Explicitly forbid destructive resets and
+ *     `rift uninstall --purge-data`.
+ *
+ * This module is pure (no IO). Centralizing prompt generation here —
+ * rather than in the SwiftBar script or the CLI command — keeps
+ * redaction, status interpretation, and future issue classes in one
+ * place (Slice C's menu bar will call this same generator).
+ */
+import type { FriendStatusPayload } from "../server/routes/friend-status.js";
+import type { DoctorLocalSignals, DoctorReport } from "./doctor.js";
+export type RepairTarget = "claude" | "codex";
+export interface RepairPromptInput {
+    report: DoctorReport;
+    status: FriendStatusPayload | null;
+    localSignals: DoctorLocalSignals;
+}
+/**
+ * Commands the assistant must never run from this prompt. Kept as data
+ * so the test suite can assert every one is named in the rendered
+ * "Constraints" block.
+ */
+export declare const FORBIDDEN_COMMANDS: readonly string[];
+/**
+ * Build the repair prompt. `target` only changes which assistant the
+ * prompt addresses; the state and safety rules are identical so neither
+ * tool can be talked into something the other forbids.
+ */
+export declare function buildRepairPrompt(input: RepairPromptInput, target: RepairTarget): string;
+//# sourceMappingURL=repair-prompt.d.ts.map

package/dist/src/diagnostics/repair-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-prompt.d.ts","sourceRoot":"","sources":["../../../src/diagnostics/repair-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEpE,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE9C,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,kBAAkB,CAAC;CAClC;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAI/C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,YAAY,GACnB,MAAM,CAsER"}

package/dist/src/diagnostics/repair-prompt.js

@@ -0,0 +1,223 @@
+/**
+ * Commands the assistant must never run from this prompt. Kept as data
+ * so the test suite can assert every one is named in the rendered
+ * "Constraints" block.
+ */
+export const FORBIDDEN_COMMANDS = [
+    "rift uninstall --purge-data",
+    "rift rebuild --reset",
+    "rm -rf",
+];
+/**
+ * Build the repair prompt. `target` only changes which assistant the
+ * prompt addresses; the state and safety rules are identical so neither
+ * tool can be talked into something the other forbids.
+ */
+export function buildRepairPrompt(input, target) {
+    const { report, status, localSignals } = input;
+    const assistant = target === "claude" ? "Claude" : "Codex";
+    // Open with the right severity. "Rift is not healthy" is correct only
+    // when something is actually broken; a warning-only state (e.g. large
+    // sessions parked, an available update) must not tell the user their
+    // Rift is broken — that copy erodes trust on a working install.
+    const hasBroken = report.issues.some((i) => i.severity === "broken");
+    const onlyParked = !hasBroken &&
+        report.issues.some((i) => i.kind === "capture_quarantined" || i.kind === "capture_repairing");
+    const opener = hasBroken
+        ? `Rift is not healthy on this Mac. Please help me fix it, ${assistant}.`
+        : onlyParked
+            ? `Rift is working, but some large Codex sessions are not searchable yet. ` +
+                `Please help me recover them, ${assistant}.`
+            : `Rift is working, but a few things could use attention. ` +
+                `Please help me sort them out, ${assistant}.`;
+    const lines = [];
+    lines.push(opener);
+    lines.push("");
+    // --- Symptoms: the diagnosed issues, plain-language, no secrets. ---
+    lines.push("Symptoms:");
+    if (report.issues.length === 0) {
+        lines.push("- rift doctor found no specific broken signal, but I think something " +
+            "is off. Please investigate.");
+    }
+    else {
+        for (const issue of report.issues) {
+            lines.push(`- ${issue.title}. ${issue.detail}`);
+        }
+    }
+    lines.push("");
+    // --- State: redacted, debug-useful facts. ---
+    lines.push("Current state:");
+    for (const line of renderStateLines(report, status, localSignals)) {
+        lines.push(`- ${line}`);
+    }
+    lines.push("");
+    // --- Inspect-first checklist, ordered by the primary issue. ---
+    lines.push("Start by inspecting, in this order:");
+    let step = 1;
+    lines.push(`${step++}. \`rift status\` — confirm the current state for yourself.`);
+    lines.push(`${step++}. \`rift doctor\` — read the plain-language diagnosis.`);
+    for (const cmd of inspectionCommandsFor(report)) {
+        lines.push(`${step++}. ${cmd}`);
+    }
+    lines.push(`${step++}. Rift logs only if the above is not enough.`);
+    lines.push("");
+    // --- Hard constraints. ---
+    lines.push("Constraints:");
+    lines.push("- Explain the failure to me in plain English BEFORE changing anything.");
+    lines.push("- Inspect first; prefer commands that inspect and repair over commands that reset.");
+    lines.push("- Do not print or echo secrets (Voyage key, tokens).");
+    lines.push("- Do not delete or reset my Rift data.");
+    for (const forbidden of FORBIDDEN_COMMANDS) {
+        lines.push(`- Do not run \`${forbidden}\`.`);
+    }
+    lines.push("- If a fix is risky or irreversible, stop and ask me first.");
+    return lines.join("\n");
+}
+/**
+ * Render the redacted "Current state" facts. Every value here is either
+ * non-sensitive (versions, ports, booleans, ages) or already reduced to
+ * a safe fingerprint (Voyage last-4). Raw keys, tokens, and conversation
+ * content never reach this function.
+ */
+function renderStateLines(report, status, localSignals) {
+    const out = [];
+    if (!status) {
+        // The reason /status/friend could not be read drives the state copy:
+        // "not responding" is only true for a genuinely down daemon, not for
+        // an auth/config failure where the daemon may be perfectly alive.
+        switch (report.primary?.kind) {
+            case "config_missing":
+                out.push("Rift config: missing (could not resolve the daemon URL).");
+                out.push("This Mac looks like onboarding never completed.");
+                break;
+            case "daemon_auth_failed":
+                out.push("Rift daemon: reachable, but this command could not authenticate " +
+                    "to it (missing or rejected token). The daemon itself may be fine.");
+                break;
+            default:
+                out.push("Rift daemon: not responding (could not reach /status/friend).");
+                break;
+        }
+        out.push("Expected daemon label: com.getrift.daemon (managed by launchd on port 3577).");
+        out.push(voyageFingerprintLine(localSignals));
+        out.push(mcpLine(localSignals));
+        return out;
+    }
+    out.push(`Rift version: ${status.build.version} (node ${status.build.node}).`);
+    out.push(`Daemon: running on port ${status.daemon.port}, up ${formatSeconds(status.daemon.uptime_seconds)}.`);
+    // data_dir is a local path, not a secret, and the assistant needs it
+    // to inspect the right data root (a stale Application Support copy is
+    // a real false-alarm source).
+    out.push(`Data directory: ${status.daemon.data_dir}`);
+    out.push(`Voyage key present in daemon env: ${status.daemon.voyage_key_present ? "yes" : "no"}.`);
+    out.push(voyageFingerprintLine(localSignals));
+    if (status.voyage.last_embed_at) {
+        out.push(`Last successful embed: ${status.voyage.last_embed_at}.`);
+    }
+    if (status.voyage.last_error_at) {
+        out.push(`Last Voyage error: ${status.voyage.last_error_at} (${status.voyage.last_error_reason ?? "unknown"}).`);
+    }
+    if (status.index.last_update_at) {
+        out.push(`Last index write: ${status.index.last_update_at}.`);
+    }
+    if (status.index.last_error_at) {
+        out.push(`Last index error: ${status.index.last_error_at} (${status.index.last_error_reason ?? "unknown"}).`);
+    }
+    out.push(`Codex CLI auth: ${codexAuthLabel(status.codex.last_preflight_ok)}${status.codex.last_preflight_at
+        ? ` (last checked ${status.codex.last_preflight_at})`
+        : ""}.`);
+    if (status.capture.last_run_at) {
+        out.push(`Last capture run: ${status.capture.last_run_at} — ${status.capture.last_saved} saved, ` +
+            `${status.capture.last_review} for review, ${status.capture.last_errors} errors.`);
+    }
+    else {
+        out.push("Last capture run: none yet.");
+    }
+    out.push(mcpLine(localSignals));
+    return out;
+}
+function voyageFingerprintLine(localSignals) {
+    return localSignals.voyageLast4
+        ? `Voyage key fingerprint (last 4 only): …${localSignals.voyageLast4}.`
+        : "Voyage key fingerprint: not found locally.";
+}
+function mcpLine(localSignals) {
+    if (localSignals.mcpClients.length === 0) {
+        return "MCP clients: none detected.";
+    }
+    const parts = localSignals.mcpClients.map((c) => `${c.client}=${c.installed ? "connected" : "not connected"}`);
+    return `MCP clients: ${parts.join(", ")}.`;
+}
+function codexAuthLabel(ok) {
+    if (ok === null)
+        return "unknown (not checked yet)";
+    return ok ? "looks authenticated" : "appears expired";
+}
+/**
+ * Issue-specific inspection commands, deduped and ordered by the issues
+ * present. Inspection/repair only — nothing here resets state.
+ */
+function inspectionCommandsFor(report) {
+    const cmds = [];
+    const seen = new Set();
+    const add = (cmd) => {
+        if (!seen.has(cmd)) {
+            seen.add(cmd);
+            cmds.push(cmd);
+        }
+    };
+    for (const issue of report.issues) {
+        switch (issue.kind) {
+            case "daemon_unreachable":
+                add("`launchctl print gui/$UID/com.getrift.daemon` — check the daemon is loaded and not crash-looping.");
+                break;
+            case "daemon_auth_failed":
+                add("`rift token issue` — re-issue an access token (the existing one is missing or rejected); do not restart the daemon for this.");
+                break;
+            case "config_missing":
+                add("`rift onboard` — finish setup; there is no config for this command to read yet.");
+                break;
+            case "codex_auth_expired":
+                add("`codex login` — re-authenticate the codex CLI, then `rift capture`.");
+                break;
+            case "codex_preflight_failed":
+                add("Codex capture probe failed (NOT an auth problem — do not re-run `codex login`). If it mentions a rejected model, set `codex_cli.model` in the Rift config to a supported model; otherwise it is usually a transient backend/timeout — re-run `rift capture`.");
+                break;
+            case "voyage_key_missing":
+            case "voyage_embed_errors":
+                add("`rift onboard --reconfigure-voyage` — re-check the Voyage key (it will not be printed).");
+                break;
+            case "index_write_errors":
+                add("`rift reindex` — only after confirming the cause; this rebuilds the index, it does not delete data.");
+                break;
+            case "capture_failed":
+                add("`rift capture` — re-run capture and read the per-session output.");
+                break;
+            case "capture_quarantined":
+            case "capture_repairing":
+                // Rift self-repairs these in the background, but a user who is
+                // explicitly assembling a repair prompt wants the manual escape hatch
+                // named — it is idempotent and non-destructive, so it is safe to run
+                // even while a background pass is in flight.
+                add("`rift doctor repair capture-large-sessions` — summarize and save the oversized sessions Rift had to skip; it reads them in safe chunks and does not delete or modify the originals.");
+                break;
+            default:
+                break;
+        }
+    }
+    return cmds;
+}
+function formatSeconds(seconds) {
+    if (seconds < 60)
+        return `${seconds}s`;
+    const minutes = Math.floor(seconds / 60);
+    if (minutes < 60)
+        return `${minutes}m`;
+    const hours = Math.floor(minutes / 60);
+    const remMin = minutes % 60;
+    if (hours < 24)
+        return remMin > 0 ? `${hours}h ${remMin}m` : `${hours}h`;
+    const days = Math.floor(hours / 24);
+    return `${days}d`;
+}
+//# sourceMappingURL=repair-prompt.js.map

package/dist/src/diagnostics/repair-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-prompt.js","sourceRoot":"","sources":["../../../src/diagnostics/repair-prompt.ts"],"names":[],"mappings":"AAuCA;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,6BAA6B;IAC7B,sBAAsB;IACtB,QAAQ;CACT,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAwB,EACxB,MAAoB;IAEpB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAE3D,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACrE,MAAM,UAAU,GACd,CAAC,SAAS;QACV,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAC1E,CAAC;IACJ,MAAM,MAAM,GAAG,SAAS;QACtB,CAAC,CAAC,2DAA2D,SAAS,GAAG;QACzE,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,yEAAyE;gBACzE,gCAAgC,SAAS,GAAG;YAC9C,CAAC,CAAC,yDAAyD;gBACzD,iCAAiC,SAAS,GAAG,CAAC;IAEpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,sEAAsE;IACtE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,uEAAuE;YACrE,6BAA6B,CAChC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,+CAA+C;IAC/C,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,iEAAiE;IACjE,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAClD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,6DAA6D,CAAC,CAAC;IACnF,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,wDAAwD,CAAC,CAAC;IAC9E,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,8CAA8C,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,4BAA4B;IAC5B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,kBAAkB,SAAS,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAE1E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,MAAoB,EACpB,MAAkC,EAClC,YAAgC;IAEhC,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,qEAAqE;QACrE,qEAAqE;QACrE,kEAAkE;QAClE,QAAQ,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;YAC7B,KAAK,gBAAgB;gBACnB,GAAG,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;gBACrE,GAAG,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;gBAC5D,MAAM;YACR,KAAK,oBAAoB;gBACvB,GAAG,CAAC,IAAI,CACN,kEAAkE;oBAChE,mEAAmE,CACtE,CAAC;gBACF,MAAM;YACR;gBACE,GAAG,CAAC,IAAI,CACN,+DAA+D,CAChE,CAAC;gBACF,MAAM;QACV,CAAC;QACD,GAAG,CAAC,IAAI,CACN,8EAA8E,CAC/E,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAChC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/E,GAAG,CAAC,IAAI,CACN,2BAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,aAAa,CAChE,MAAM,CAAC,MAAM,CAAC,cAAc,CAC7B,GAAG,CACL,CAAC;IACF,qEAAqE;IACrE,sEAAsE;IACtE,8BAA8B;IAC9B,GAAG,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtD,GAAG,CAAC,IAAI,CACN,qCAAqC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CACxF,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CACN,sBAAsB,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,IAAI,SAAS,IAAI,CACvG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CACN,qBAAqB,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,SAAS,IAAI,CACpG,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CACN,mBAAmB,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAC/D,MAAM,CAAC,KAAK,CAAC,iBAAiB;QAC5B,CAAC,CAAC,kBAAkB,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG;QACrD,CAAC,CAAC,EACN,GAAG,CACJ,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CACN,qBAAqB,MAAM,CAAC,OAAO,CAAC,WAAW,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,UAAU;YACtF,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,gBAAgB,MAAM,CAAC,OAAO,CAAC,WAAW,UAAU,CACpF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAAC,YAAgC;IAC7D,OAAO,YAAY,CAAC,WAAW;QAC7B,CAAC,CAAC,0CAA0C,YAAY,CAAC,WAAW,GAAG;QACvE,CAAC,CAAC,4CAA4C,CAAC;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,YAAgC;IAC/C,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,EAAE,CACpE,CAAC;IACF,OAAO,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,EAAkB;IACxC,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,2BAA2B,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,MAAoB;IACjD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAQ,EAAE;QAChC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,oBAAoB;gBACvB,GAAG,CAAC,mGAAmG,CAAC,CAAC;gBACzG,MAAM;YACR,KAAK,oBAAoB;gBACvB,GAAG,CAAC,8HAA8H,CAAC,CAAC;gBACpI,MAAM;YACR,KAAK,gBAAgB;gBACnB,GAAG,CAAC,iFAAiF,CAAC,CAAC;gBACvF,MAAM;YACR,KAAK,oBAAoB;gBACvB,GAAG,CAAC,qEAAqE,CAAC,CAAC;gBAC3E,MAAM;YACR,KAAK,wBAAwB;gBAC3B,GAAG,CAAC,8PAA8P,CAAC,CAAC;gBACpQ,MAAM;YACR,KAAK,oBAAoB,CAAC;YAC1B,KAAK,qBAAqB;gBACxB,GAAG,CAAC,yFAAyF,CAAC,CAAC;gBAC/F,MAAM;YACR,KAAK,oBAAoB;gBACvB,GAAG,CAAC,qGAAqG,CAAC,CAAC;gBAC3G,MAAM;YACR,KAAK,gBAAgB;gBACnB,GAAG,CAAC,kEAAkE,CAAC,CAAC;gBACxE,MAAM;YACR,KAAK,qBAAqB,CAAC;YAC3B,KAAK,mBAAmB;gBACtB,+DAA+D;gBAC/D,sEAAsE;gBACtE,qEAAqE;gBACrE,6CAA6C;gBAC7C,GAAG,CAAC,qLAAqL,CAAC,CAAC;gBAC3L,MAAM;YACR;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,IAAI,GAAG,CAAC;AACpB,CAAC"}

package/dist/src/ingestion/inbox-core/conversation-fingerprint.d.ts

@@ -0,0 +1,2 @@
+export declare function conversationContentFingerprint(content: string): string;
+//# sourceMappingURL=conversation-fingerprint.d.ts.map

package/dist/src/ingestion/inbox-core/conversation-fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-fingerprint.d.ts","sourceRoot":"","sources":["../../../../src/ingestion/inbox-core/conversation-fingerprint.ts"],"names":[],"mappings":"AAwBA,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtE"}

package/dist/src/ingestion/inbox-core/conversation-fingerprint.js

@@ -0,0 +1,27 @@
+/**
+ * Canonical content fingerprint for a parsed conversation.
+ *
+ * Pure: takes the parser-emitted role-prefixed conversation text and
+ * returns a stable hex sha256. No filesystem, no clock, no random input.
+ *
+ * Why content-only:
+ *   The fingerprint must change iff the conversation's substance changes.
+ *   Title / createdAt are stable across re-exports of the same provider
+ *   conversation, so they are not part of the input. Including them would
+ *   produce false "grew" signals on metadata-only refreshes.
+ *
+ * Why role-prefixed text:
+ *   Every parser already normalises its source format into the same
+ *   `content` shape (`User: ...\n\nAssistant: ...`). That makes the
+ *   fingerprint source-agnostic — two parsers producing identical
+ *   content for the same conversation hash to the same value.
+ *
+ * Used by the ingest handler's refresh-on-grow logic: if a re-imported
+ * conversation has the same content as the version we already stored,
+ * skip it; if it has new messages appended, refresh the row.
+ */
+import crypto from "node:crypto";
+export function conversationContentFingerprint(content) {
+    return crypto.createHash("sha256").update(content, "utf8").digest("hex");
+}
+//# sourceMappingURL=conversation-fingerprint.js.map

package/dist/src/ingestion/inbox-core/conversation-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-fingerprint.js","sourceRoot":"","sources":["../../../../src/ingestion/inbox-core/conversation-fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,UAAU,8BAA8B,CAAC,OAAe;IAC5D,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC"}

package/dist/src/ingestion/inbox-core/conversation-key.d.ts

@@ -0,0 +1,2 @@
+export declare function stableConversationRowId(source: string, conversationId: string): string;
+//# sourceMappingURL=conversation-key.d.ts.map

package/dist/src/ingestion/inbox-core/conversation-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-key.d.ts","sourceRoot":"","sources":["../../../../src/ingestion/inbox-core/conversation-key.ts"],"names":[],"mappings":"AAwBA,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,MAAM,CAMR"}

package/dist/src/ingestion/inbox-core/conversation-key.js

@@ -0,0 +1,31 @@
+/**
+ * Stable row id for an indexed conversation.
+ *
+ * Pure: takes the source provider name and the provider's own
+ * conversation id, returns a deterministic row id. No filesystem,
+ * no clock, no random input.
+ *
+ * The key is `sha256("${source}:${conversationId}").slice(0, 32)` so:
+ * - re-imports of the same conversation (e.g. monthly full-export
+ *   from ChatGPT/Claude/Grok/Gemini that re-includes everything
+ *   the user has) collapse to the same row id and short-circuit
+ *   on the existing "skip if already indexed" replay guard;
+ * - the same conversation id from two providers (Grok and Gemini
+ *   both expose plain UUID-shaped ids) cannot collide because
+ *   `source` is part of the hash input.
+ *
+ * Note: this dedupe is skip-if-exists. A conversation that has
+ * grown new messages between two exports keeps its older
+ * snapshot until a future refresh-on-grow slice lands. The
+ * duplicate-rows correctness gap is what this helper closes;
+ * stale-content is tracked separately.
+ */
+import crypto from "node:crypto";
+export function stableConversationRowId(source, conversationId) {
+    return crypto
+        .createHash("sha256")
+        .update(`${source}:${conversationId}`)
+        .digest("hex")
+        .slice(0, 32);
+}
+//# sourceMappingURL=conversation-key.js.map

package/dist/src/ingestion/inbox-core/conversation-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-key.js","sourceRoot":"","sources":["../../../../src/ingestion/inbox-core/conversation-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,cAAsB;IAEtB,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,MAAM,IAAI,cAAc,EAAE,CAAC;SACrC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/src/ingestion/inbox-core/extensions.d.ts

@@ -0,0 +1,3 @@
+export declare const SUPPORTED_INBOX_EXTENSIONS: ReadonlySet<string>;
+export declare function isSupportedInboxExtension(filePath: string): boolean;
+//# sourceMappingURL=extensions.d.ts.map

package/dist/src/ingestion/inbox-core/extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../../../../src/ingestion/inbox-core/extensions.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAGzD,CAAC;AAEH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnE"}

package/dist/src/ingestion/inbox-core/extensions.js

@@ -0,0 +1,16 @@
+/**
+ * Inbox file extension policy.
+ *
+ * Web conversation exports are always JSON or an archive of JSON.
+ * Markdown / images / arbitrary text are rejected at the watcher
+ * boundary so they never reach the parser layer.
+ */
+import path from "node:path";
+export const SUPPORTED_INBOX_EXTENSIONS = new Set([
+    ".json",
+    ".zip",
+]);
+export function isSupportedInboxExtension(filePath) {
+    return SUPPORTED_INBOX_EXTENSIONS.has(path.extname(filePath).toLowerCase());
+}
+//# sourceMappingURL=extensions.js.map

package/dist/src/ingestion/inbox-core/extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../../../../src/ingestion/inbox-core/extensions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IACrE,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,OAAO,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/src/ingestion/inbox-core/idempotency.d.ts

@@ -0,0 +1,2 @@
+export declare function inboxIdempotencyKey(filePath: string, mtimeMs: number): string;
+//# sourceMappingURL=idempotency.d.ts.map

package/dist/src/ingestion/inbox-core/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../../../src/ingestion/inbox-core/idempotency.ts"],"names":[],"mappings":"AAcA,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAO7E"}

package/dist/src/ingestion/inbox-core/idempotency.js

@@ -0,0 +1,22 @@
+/**
+ * Stable idempotency key for a file dropped into an inbox folder.
+ *
+ * Pure: takes path + mtime as input, does no filesystem access. The
+ * caller (Rift adapter or a future standalone shell) is responsible
+ * for stat'ing the file.
+ *
+ * The key combines path and mtimeMs so re-dropping the same filename
+ * with new content gets a fresh key, while a watcher restart on
+ * unchanged files produces the same key and short-circuits as a
+ * duplicate at the queue layer.
+ */
+import crypto from "node:crypto";
+export function inboxIdempotencyKey(filePath, mtimeMs) {
+    const hash = crypto
+        .createHash("sha256")
+        .update(`${filePath}:${mtimeMs}`)
+        .digest("hex")
+        .slice(0, 16);
+    return `inbox:${hash}`;
+}
+//# sourceMappingURL=idempotency.js.map

package/dist/src/ingestion/inbox-core/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../../../src/ingestion/inbox-core/idempotency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,OAAe;IACnE,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;SAChC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,SAAS,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/src/ingestion/inbox-core/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * inbox-core — pure file-detection primitives for an inbox watcher.
+ *
+ * Carved as a seam so the same logic can power both Rift's
+ * inbox-watcher.ts (which hands off to the job queue + ingest route)
+ * and a future standalone "AI Chat Backup Inbox" shell (which hands
+ * off to a local archive folder, with optional Rift indexing).
+ *
+ * Invariant: this module has zero Rift internals — no Fastify, no
+ * LanceDB, no Voyage, no JobQueue, no config loader, no parser
+ * registry. Only `node:` stdlib. The adapter wires it up.
+ */
+export { inboxIdempotencyKey } from "./idempotency.js";
+export { stableConversationRowId } from "./conversation-key.js";
+export { conversationContentFingerprint } from "./conversation-fingerprint.js";
+export { detectSourceFromSubdir } from "./source-detection.js";
+export { SUPPORTED_INBOX_EXTENSIONS, isSupportedInboxExtension, } from "./extensions.js";
+export { sniffInboxSource, type SniffedProvider } from "./source-sniffer.js";
+export { readZipCentralDirectoryFilenames, sniffProviderFromZipEntries, sniffZipBuffer, } from "./zip-sniffer.js";
+//# sourceMappingURL=index.d.ts.map