onadit 0.0.1 → 1.0.0

package/dist/src/cli/commands/doctor.js

@@ -0,0 +1,259 @@
+/**
+ * `onadit doctor` — plain-language health diagnosis and repair.
+ *
+ * Reuses exactly the inputs `onadit status` uses (the `/status/friend`
+ * payload + local signals) and runs them through the shared `diagnose()`
+ * layer, so the two commands never disagree. `onadit status` stays the
+ * source of truth; `onadit doctor` is the "explain what's broken and give
+ * me one next action" surface on top of it.
+ *
+ *   onadit doctor                         → plain-language diagnosis
+ *   onadit doctor --json                  → structured report
+ *   onadit doctor --copy-prompt           → redacted repair prompt (Claude)
+ *   onadit doctor --copy-prompt --target=codex
+ *
+ * With --copy-prompt the prompt is copied to the clipboard (best-effort
+ * pbcopy) AND printed to stdout, so it is usable even when the clipboard
+ * is unavailable.
+ */
+import { execFileSync } from "node:child_process";
+import { Command } from "commander";
+import { createHttpClient, readToken, resolveBaseUrl, CliError, } from "../http-client.js";
+import { printError, printJson, printText } from "../output.js";
+import { recoverOversizedSessions, parseChunkBytes, formatReportText, formatResultsText, } from "./capture-recover.js";
+import { readLocalSignals } from "../status/local-signals.js";
+import { diagnose, } from "../../diagnostics/doctor.js";
+import { buildRepairPrompt, } from "../../diagnostics/repair-prompt.js";
+import { resolveLiveVoyageKeySource, voyageKeySourceLines, } from "../../runtime/voyage-key-source.js";
+/** Known repair targets for `onadit doctor repair <target>`. */
+const REPAIR_TARGETS = ["capture-large-sessions"];
+/**
+ * `onadit doctor repair <target>` — the friend-facing entry point for guided
+ * repairs that doctor advises. Keeps the obscure engine command
+ * (`onadit capture recover-quarantine`) out of the menu/advisory copy: doctor
+ * is where a non-developer goes when something is off, so the repair lives
+ * there too. Currently supports one target; new ones are added to
+ * `REPAIR_TARGETS` as doctor learns to repair more.
+ */
+function makeDoctorRepairCommand() {
+    return new Command("repair")
+        .description("Run a guided repair for an issue onadit doctor found")
+        .argument("[target]", `What to repair (${REPAIR_TARGETS.join(", ")})`)
+        .option("--dry-run", "Show what would be recovered without saving anything")
+        .option("--chunk-bytes <bytes>", "Per-chunk byte budget for summarization")
+        .action(async (target, opts, cmd) => {
+        const globalOpts = cmd.optsWithGlobals();
+        try {
+            if (!isRepairTarget(target)) {
+                throw new CliError(`Unknown repair target ${target ? `"${target}"` : "(none given)"}. ` +
+                    `Available: ${REPAIR_TARGETS.join(", ")}.`, "invalid");
+            }
+            // Only one target today; the switch makes adding the next explicit.
+            const dryRun = Boolean(opts.dryRun);
+            const chunkBytes = parseChunkBytes(opts.chunkBytes);
+            const report = await recoverOversizedSessions({
+                config: globalOpts.config,
+                dryRun,
+                ...(chunkBytes !== undefined ? { chunkBytes } : {}),
+            });
+            if (globalOpts.json) {
+                printJson(report);
+            }
+            else {
+                // Friend register: doctor is the non-developer surface, so it
+                // never echoes "quarantine"/"records"/"missing source".
+                process.stderr.write(formatReportText(report, dryRun, "friend"));
+                process.stdout.write(formatResultsText(report, "friend", dryRun));
+            }
+            // The friend report folds missing_source into "Could not recover",
+            // so the exit code must too: anything the user is told could not be
+            // recovered (a vanished source as well as a hard failure) is a
+            // non-success outcome for this guided path.
+            if (report.failed > 0 || report.missing_source > 0)
+                process.exitCode = 1;
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+        }
+    });
+}
+function isRepairTarget(value) {
+    return value !== undefined && REPAIR_TARGETS.includes(value);
+}
+export function makeDoctorCommand() {
+    const doctor = new Command("doctor")
+        .description("Diagnose Onadit in plain language and show one next action")
+        .option("--copy-prompt", "Generate a redacted repair prompt to paste into an AI assistant")
+        .option("--target <assistant>", "Assistant the repair prompt addresses: claude | codex", "claude")
+        .action(async (opts, cmd) => {
+        const globalOpts = cmd.optsWithGlobals();
+        try {
+            const target = normalizeTarget(opts.target);
+            const { status, unreachableReason } = await fetchFriendStatus(globalOpts.config);
+            const localSignals = readLocalSignals();
+            const report = diagnose({
+                status,
+                ...(unreachableReason ? { unreachableReason } : {}),
+                localSignals,
+                now: Date.now(),
+            });
+            if (opts.copyPrompt) {
+                const prompt = buildRepairPrompt({ report, status, localSignals }, target);
+                const copied = copyToClipboard(prompt);
+                if (globalOpts.json) {
+                    printJson({ target, copied_to_clipboard: copied, prompt });
+                    return;
+                }
+                printText(copied
+                    ? `Repair prompt for ${target} copied to clipboard. Paste it into ${target}:`
+                    : `Repair prompt for ${target} (clipboard unavailable — copy it manually):`);
+                printText("");
+                printText(prompt);
+                return;
+            }
+            // Broken state → non-zero exit so scripts/menus can branch on
+            // it. Set this BEFORE any early return so --json and the human
+            // path agree on the exit code (a script reading --json must not
+            // see "healthy": false alongside a success status).
+            if (!report.healthy)
+                process.exitCode = 1;
+            // Which Voyage key did this check see, and is the shell shadowing the
+            // saved one? Surfacing it stops the "doctor says fine but onboard says
+            // rejected" confusion when a stale shell $VOYAGE_API_KEY overrides
+            // ~/.rift.env (which the daemon/search actually use). Advisory only —
+            // it never changes the healthy/exit verdict.
+            const keySrc = resolveLiveVoyageKeySource();
+            if (globalOpts.json) {
+                printJson({
+                    ...report,
+                    voyage_key_source: {
+                        source: keySrc.source,
+                        last4: keySrc.last4,
+                        shell_shadows_file: keySrc.shellShadowsFile,
+                    },
+                });
+                return;
+            }
+            for (const line of renderReport(report))
+                printText(line);
+            printText("");
+            for (const line of voyageKeySourceLines(keySrc))
+                printText(line);
+        }
+        catch (err) {
+            if (err instanceof CliError) {
+                printError(err.message);
+            }
+            else {
+                printError(err instanceof Error ? err.message : String(err));
+            }
+            process.exitCode = 1;
+        }
+    });
+    doctor.addCommand(makeDoctorRepairCommand());
+    return doctor;
+}
+function normalizeTarget(raw) {
+    const value = (raw ?? "claude").toLowerCase();
+    if (value === "claude" || value === "codex")
+        return value;
+    throw new CliError(`Unknown --target "${raw}". Use --target=claude or --target=codex.`, "invalid");
+}
+/**
+ * Fetch `/status/friend`, classifying *why* it failed when it does. A
+ * null payload is a valid diagnosis input, but the reason matters: a
+ * down daemon, a missing config, and a rejected token each need a
+ * different next action, so we never collapse them all into "daemon
+ * unreachable" (that would tell a friend to restart a daemon when the
+ * real fix is `onadit token issue` or `onadit onboard`).
+ */
+async function fetchFriendStatus(configPath) {
+    let baseUrl;
+    try {
+        baseUrl = resolveBaseUrl(configPath);
+    }
+    catch {
+        // resolveBaseUrl only throws when the config is absent or invalid.
+        return { status: null, unreachableReason: "config_missing" };
+    }
+    let token;
+    try {
+        token = await readToken();
+    }
+    catch {
+        // A locked Keychain etc. — an auth-side failure, not a dead daemon.
+        return { status: null, unreachableReason: "auth_failed" };
+    }
+    if (!token)
+        return { status: null, unreachableReason: "not_authenticated" };
+    try {
+        const client = createHttpClient({ baseUrl, token });
+        const data = await client.get("/status/friend");
+        return { status: data };
+    }
+    catch (err) {
+        return { status: null, unreachableReason: classifyFetchError(err) };
+    }
+}
+/** Map a request failure to the diagnosis reason it implies. */
+function classifyFetchError(err) {
+    if (err instanceof CliError) {
+        if (err.code === "connection_refused")
+            return "connection_refused";
+        if (err.code === "unauthorized")
+            return "auth_failed";
+    }
+    return "unknown";
+}
+/** Render the human-readable diagnosis. */
+export function renderReport(report) {
+    const lines = [];
+    if (report.issues.length === 0) {
+        lines.push("Onadit is working. Nothing needs attention.");
+        return lines;
+    }
+    const broken = report.issues.filter((i) => i.severity === "broken");
+    const warnings = report.issues.filter((i) => i.severity === "warning");
+    if (broken.length > 0) {
+        lines.push("Onadit needs attention.");
+    }
+    else {
+        lines.push("Onadit is working, with a few advisories.");
+    }
+    lines.push("");
+    for (const issue of broken) {
+        lines.push(`✗ ${issue.title}`);
+        lines.push(`  ${issue.detail}`);
+        lines.push(`  → ${issue.nextAction}`);
+        lines.push("");
+    }
+    for (const issue of warnings) {
+        lines.push(`• ${issue.title}`);
+        lines.push(`  → ${issue.nextAction}`);
+        lines.push("");
+    }
+    if (report.primary) {
+        lines.push(`Do this first: ${report.primary.nextAction}`);
+        lines.push("");
+        lines.push("Want an AI to fix it? Run: onadit doctor --copy-prompt --target=claude");
+    }
+    return lines;
+}
+/**
+ * Copy text to the macOS clipboard via pbcopy. Returns true on success,
+ * false on any failure (non-macOS, pbcopy missing) — the caller still
+ * prints the prompt, so a clipboard miss is never fatal.
+ */
+function copyToClipboard(text) {
+    if (process.platform !== "darwin")
+        return false;
+    try {
+        execFileSync("pbcopy", [], { input: text });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=doctor.js.map

package/dist/src/cli/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,QAAQ,GACT,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EACL,QAAQ,GAGT,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,iBAAiB,GAElB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAE5C,gEAAgE;AAChE,MAAM,cAAc,GAAG,CAAC,wBAAwB,CAAU,CAAC;AAG3D;;;;;;;GAOG;AACH,SAAS,uBAAuB;IAC9B,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;SACzB,WAAW,CAAC,sDAAsD,CAAC;SACnE,QAAQ,CACP,UAAU,EACV,mBAAmB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChD;SACA,MAAM,CAAC,WAAW,EAAE,sDAAsD,CAAC;SAC3E,MAAM,CAAC,uBAAuB,EAAE,yCAAyC,CAAC;SAC1E,MAAM,CACL,KAAK,EACH,MAA0B,EAC1B,IAA+C,EAC/C,GAAG,EACH,EAAE;QACF,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAGrC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,QAAQ,CAChB,yBAAyB,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI;oBAClE,cAAc,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC5C,SAAS,CACV,CAAC;YACJ,CAAC;YACD,oEAAoE;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;gBAC5C,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,MAAM;gBACN,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,CAAC,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,SAAS,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,8DAA8D;gBAC9D,wDAAwD;gBACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACpE,CAAC;YACD,mEAAmE;YACnE,oEAAoE;YACpE,+DAA+D;YAC/D,4CAA4C;YAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CACF,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,OAAO,KAAK,KAAK,SAAS,IAAK,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;SACjC,WAAW,CAAC,4DAA4D,CAAC;SACzE,MAAM,CACL,eAAe,EACf,iEAAiE,CAClE;SACA,MAAM,CACL,sBAAsB,EACtB,uDAAuD,EACvD,QAAQ,CACT;SACA,MAAM,CACL,KAAK,EACH,IAA+C,EAC/C,GAAG,EACH,EAAE;QACF,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAGrC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,iBAAiB,CAC3D,UAAU,CAAC,MAAM,CAClB,CAAC;YACF,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,QAAQ,CAAC;gBACtB,MAAM;gBACN,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,YAAY;gBACZ,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;aAChB,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,iBAAiB,CAC9B,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,EAChC,MAAM,CACP,CAAC;gBACF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBACvC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;oBACpB,SAAS,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC3D,OAAO;gBACT,CAAC;gBACD,SAAS,CACP,MAAM;oBACJ,CAAC,CAAC,qBAAqB,MAAM,uCAAuC,MAAM,GAAG;oBAC7E,CAAC,CAAC,qBAAqB,MAAM,8CAA8C,CAC9E,CAAC;gBACF,SAAS,CAAC,EAAE,CAAC,CAAC;gBACd,SAAS,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YAED,8DAA8D;YAC9D,+DAA+D;YAC/D,gEAAgE;YAChE,oDAAoD;YACpD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAE1C,sEAAsE;YACtE,uEAAuE;YACvE,mEAAmE;YACnE,sEAAsE;YACtE,6CAA6C;YAC7C,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAE5C,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,SAAS,CAAC;oBACR,GAAG,MAAM;oBACT,iBAAiB,EAAE;wBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;qBAC5C;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACzD,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,KAAK,MAAM,IAAI,IAAI,oBAAoB,CAAC,MAAM,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;gBAC5B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CACF,CAAC;IACJ,MAAM,CAAC,UAAU,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAuB;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,IAAI,QAAQ,CAChB,qBAAqB,GAAG,2CAA2C,EACnE,SAAS,CACV,CAAC;AACJ,CAAC;AAQD;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAC9B,UAAkB;IAElB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,KAAoB,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,IAA2B,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO,oBAAoB,CAAC;QACnE,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,aAAa,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAEvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC;QACH,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/src/cli/commands/feedback.d.ts

@@ -0,0 +1,34 @@
+import { Command } from "commander";
+import { type RelaySecretStore } from "../feedback/relay-secret-store.js";
+interface FeedbackOpts {
+    kind?: string;
+    withStatus?: boolean;
+    history?: boolean;
+}
+export interface FeedbackDeps {
+    /** Resolved data dir — controls JSONL + sidecar lookup. */
+    dataDir: string;
+    /** Resolved daemon base URL, or null when unreachable. */
+    baseUrl: string | null;
+    /** Fixed clock for tests. */
+    now?: () => Date;
+    /** Where stdout writes go. */
+    emit?: (line: string) => void;
+    /** Test injection for the relay POST + /health + /version fetches. */
+    fetchFn?: typeof fetch;
+    /** Relay-secret backend; defaults to the macOS Keychain in production. */
+    store?: RelaySecretStore;
+}
+export declare function makeFeedbackCommand(): Command;
+interface FeedbackSetupOpts {
+    invite?: string;
+}
+export declare function runFeedbackSetup(opts: FeedbackSetupOpts, deps: {
+    dataDir: string;
+    store?: RelaySecretStore;
+    emit?: (line: string) => void;
+    promptInvite?: () => Promise<string | undefined>;
+}): Promise<void>;
+export declare function runFeedback(note: string, opts: FeedbackOpts, deps: FeedbackDeps): Promise<void>;
+export {};
+//# sourceMappingURL=feedback.d.ts.map

package/dist/src/cli/commands/feedback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/feedback.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAe5C,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,mCAAmC,CAAC;AAW3C,UAAU,YAAY;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAOD,MAAM,WAAW,YAAY;IAC3B,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6BAA6B;IAC7B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,8BAA8B;IAC9B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAqB7C;AAED,UAAU,iBAAiB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA8CD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD,GACA,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CA6Cf"}

package/dist/src/cli/commands/feedback.js

@@ -0,0 +1,214 @@
+/**
+ * `onadit feedback "<note>" [--kind worked|broke|surprised|idea] [--with-status]`
+ * `onadit feedback --history`
+ *
+ * Local JSONL row at `<data_dir>/observability/feedback.jsonl` is canonical.
+ * Relay POST is best-effort and only fires when `feedback-config.json`
+ * marks the install opted-in. The friend sees one line of confirmation
+ * naming whether the row was relayed or stored locally.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import readline from "node:readline";
+import { Command, Option } from "commander";
+import { CliError, requireExistingConfigPath, resolveBaseUrl, } from "../http-client.js";
+import { loadConfig } from "../../config/loader.js";
+import { LockedKeychainError } from "../../auth/keychain.js";
+import { getBuildInfo } from "../../server/build-info.js";
+import { applyRelayUrl, loadFeedbackConfig, resolveRelaySecret, } from "../feedback/feedback-config.js";
+import { parseInvite } from "../feedback/invite.js";
+import { macRelaySecretStore, } from "../feedback/relay-secret-store.js";
+import { FEEDBACK_KINDS, isFeedbackKind, } from "../feedback/feedback-payload.js";
+import { postFeedback } from "../feedback/feedback-relay.js";
+import { buildStatusSnapshot } from "../feedback/feedback-status.js";
+import { renderHistory } from "../feedback/feedback-history.js";
+export function makeFeedbackCommand() {
+    const cmd = new Command("feedback")
+        .description("Send a quick note to Clem (or store it locally).")
+        .argument("[note...]", "Free-text note (omit with --history)")
+        .addOption(new Option("--kind <kind>", "Tag the note").choices([...FEEDBACK_KINDS]))
+        .option("--with-status", "Attach a sanitized status snapshot (no paths, no content)", false)
+        .option("--history", "Print local feedback rows", false)
+        .action(async function (noteParts) {
+        const opts = this.opts();
+        const globalOpts = this.parent?.opts() ?? {};
+        const deps = resolveDefaultDeps(globalOpts);
+        await runFeedback(noteParts.join(" ").trim(), opts, deps);
+    });
+    cmd.addCommand(makeFeedbackSetupCommand());
+    return cmd;
+}
+/**
+ * `onadit feedback setup --invite <code>` — enable the feedback relay on an
+ * existing install from an invite code. The friend never sees or types a raw
+ * secret: the invite carries the relay URL + HMAC secret; the URL goes to
+ * `feedback-config.json`, the secret goes to the Keychain.
+ */
+function makeFeedbackSetupCommand() {
+    return new Command("setup")
+        .description("Enable feedback from an invite (paste it when asked — nothing to copy by hand).")
+        .option("--invite <code>", "Invite code from Clem (onadit-invite_…); omit to paste it interactively")
+        .action(async function () {
+        const opts = this.opts();
+        // Global --config lives on the root program (feedback's grandparent).
+        const root = this.parent?.parent ?? this.parent;
+        const globalOpts = root?.opts() ?? {};
+        const { dataDir } = resolveDefaultDeps(globalOpts);
+        await runFeedbackSetup(opts, { dataDir });
+    });
+}
+/**
+ * Prompt for an invite code on a TTY so the bearer invite is pasted rather
+ * than left in shell history. Returns undefined off a TTY — automation must
+ * pass --invite explicitly.
+ */
+async function promptInviteFromTty() {
+    if (!process.stdin.isTTY)
+        return undefined;
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    try {
+        const answer = await new Promise((resolve) => rl.question("Paste the invite code from Clem (onadit-invite_…): ", resolve));
+        return answer.trim() || undefined;
+    }
+    finally {
+        rl.close();
+    }
+}
+export async function runFeedbackSetup(opts, deps) {
+    const emit = deps.emit ?? ((line) => process.stdout.write(`${line}\n`));
+    // Prefer an interactive paste over a CLI arg so the bearer invite never
+    // lands in shell history; --invite stays for automation/operator use.
+    const code = opts.invite ?? (await (deps.promptInvite ?? promptInviteFromTty)());
+    if (!code) {
+        throw new CliError("No invite provided. Paste it when asked, or pass: onadit feedback setup --invite <code>", "validation");
+    }
+    const invite = parseInvite(code); // throws a friendly CliError if bad
+    const store = deps.store ?? macRelaySecretStore;
+    // Store the secret FIRST. If the Keychain write fails we must NOT enable the
+    // relay — a configured URL with no secret is a "looks on, silently dead"
+    // state (the receiver rejects unsigned POSTs). Surface the unlock hint.
+    try {
+        await store.write(invite.secret);
+    }
+    catch (err) {
+        if (err instanceof LockedKeychainError) {
+            throw new CliError("Your macOS Keychain is locked. Unlock it and retry: " +
+                "security unlock-keychain ~/Library/Keychains/login.keychain-db", "validation");
+        }
+        throw err;
+    }
+    applyRelayUrl(deps.dataDir, invite.url);
+    emit("Feedback enabled.");
+}
+export async function runFeedback(note, opts, deps) {
+    const emit = deps.emit ?? ((line) => process.stdout.write(`${line}\n`));
+    if (opts.history) {
+        renderHistory(deps.dataDir, emit);
+        return;
+    }
+    if (!note) {
+        throw new CliError('Pass a note: onadit feedback "this worked" --kind=worked', "validation");
+    }
+    const kind = resolveKind(opts.kind);
+    const config = loadFeedbackConfig(deps.dataDir);
+    const build = getBuildInfo();
+    const ts = (deps.now ? deps.now() : new Date()).toISOString();
+    const payload = {
+        ts,
+        ...(config.installation_id ? { installation_id: config.installation_id } : {}),
+        kind,
+        note,
+        // Attribution: when the user opted in and shared an email at onboarding,
+        // carry it so feedback is tied to a person instead of an opaque UUID.
+        ...(config.email ? { email: config.email } : {}),
+        version: build.version,
+        commit: build.commit,
+        node: build.node,
+    };
+    if (opts.withStatus) {
+        payload.status_snapshot = await buildStatusSnapshot({
+            dataDir: deps.dataDir,
+            baseUrl: deps.baseUrl,
+            ...(deps.fetchFn ? { fetchFn: deps.fetchFn } : {}),
+        });
+    }
+    appendLocalRow(deps.dataDir, payload);
+    const relay = await maybeRelay(payload, config, deps);
+    emit(formatConfirmation(relay, config.enabled));
+}
+function resolveKind(raw) {
+    if (!raw)
+        return "idea";
+    if (!isFeedbackKind(raw)) {
+        throw new CliError(`Unknown --kind "${raw}". Use one of: ${FEEDBACK_KINDS.join(", ")}.`, "validation");
+    }
+    return raw;
+}
+function appendLocalRow(dataDir, payload) {
+    const dir = path.join(dataDir, "observability");
+    fs.mkdirSync(dir, { recursive: true });
+    const file = path.join(dir, "feedback.jsonl");
+    fs.appendFileSync(file, `${JSON.stringify(payload)}\n`, {
+        encoding: "utf8",
+        mode: 0o600,
+    });
+    try {
+        fs.chmodSync(file, 0o600);
+    }
+    catch {
+        // best-effort permission fix
+    }
+}
+async function maybeRelay(payload, config, deps) {
+    if (!config.enabled || !config.url) {
+        return { attempted: false, ok: false };
+    }
+    // Secret lives in the Keychain, not the sidecar; resolve it at POST time
+    // (this also migrates any legacy plaintext `hmac_secret` on first use).
+    // resolveRelaySecret never throws and returns null when no secret can be
+    // SECURELY resolved (none configured, or Keychain unreadable/un-writable).
+    const store = deps.store ?? macRelaySecretStore;
+    const secret = await resolveRelaySecret({ dataDir: deps.dataDir, store });
+    if (!secret && !config.unsigned) {
+        // No securely-resolved secret, and this is not an explicit unsigned dev
+        // relay → never downgrade to an unsigned production POST. The canonical
+        // local row is already written; report it as stored-locally.
+        return { attempted: false, ok: false };
+    }
+    return postFeedback(payload, {
+        url: config.url,
+        ...(secret ? { hmacSecret: secret } : {}),
+        ...(deps.fetchFn ? { fetchFn: deps.fetchFn } : {}),
+    });
+}
+function formatConfirmation(relay, optedIn) {
+    if (!relay.attempted) {
+        return optedIn
+            ? "Thanks. (Stored locally — relay opt-in incomplete.)"
+            : "Thanks. (Stored locally — opt in to relay via `onadit onboard`.)";
+    }
+    return relay.ok
+        ? "Thanks. (Sent to Clem.)"
+        : "Thanks. (Stored locally — relay POST failed.)";
+}
+function resolveDefaultDeps(globalOpts) {
+    // Per A-2.2: route through the central config-path resolver. feedback
+    // genuinely needs config (data_dir for the local JSONL path), so we
+    // require an existing valid one — the caller surfaces the resulting
+    // CliError if missing/invalid.
+    const configPath = requireExistingConfigPath(globalOpts);
+    const config = loadConfig(configPath);
+    const dataDir = path.resolve(config.data_paths.data_dir);
+    let baseUrl;
+    try {
+        baseUrl = resolveBaseUrl(configPath);
+    }
+    catch {
+        baseUrl = null;
+    }
+    return { dataDir, baseUrl };
+}
+//# sourceMappingURL=feedback.js.map

package/dist/src/cli/commands/feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.js","sourceRoot":"","sources":["../../../../src/cli/commands/feedback.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,QAAQ,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,QAAQ,EACR,yBAAyB,EACzB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,mBAAmB,GAEpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,cAAc,EACd,cAAc,GAGf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAoB,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AA4BhE,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;SAChC,WAAW,CAAC,kDAAkD,CAAC;SAC/D,QAAQ,CAAC,WAAW,EAAE,sCAAsC,CAAC;SAC7D,SAAS,CACR,IAAI,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CACzE;SACA,MAAM,CACL,eAAe,EACf,2DAA2D,EAC3D,KAAK,CACN;SACA,MAAM,CAAC,WAAW,EAAE,2BAA2B,EAAE,KAAK,CAAC;SACvD,MAAM,CAAC,KAAK,WAA0B,SAAmB;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAgB,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAc,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACL,GAAG,CAAC,UAAU,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAMD;;;;;GAKG;AACH,SAAS,wBAAwB;IAC/B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;SACxB,WAAW,CAAC,iFAAiF,CAAC;SAC9F,MAAM,CACL,iBAAiB,EACjB,yEAAyE,CAC1E;SACA,MAAM,CAAC,KAAK;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAqB,CAAC;QAC5C,sEAAsE;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,EAAE,IAAI,EAAc,IAAI,EAAE,CAAC;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CACnD,EAAE,CAAC,QAAQ,CAAC,qDAAqD,EAAE,OAAO,CAAC,CAC5E,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAuB,EACvB,IAKC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAChB,yFAAyF,EACzF,YAAY,CACb,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,oCAAoC;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC;IAChD,6EAA6E;IAC7E,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;YACvC,MAAM,IAAI,QAAQ,CAChB,sDAAsD;gBACpD,gEAAgE,EAClE,YAAY,CACb,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,IAAkB,EAClB,IAAkB;IAElB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAExE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAChB,0DAA0D,EAC1D,YAAY,CACb,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAE9D,MAAM,OAAO,GAAoB;QAC/B,EAAE;QACF,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,IAAI;QACJ,IAAI;QACJ,yEAAyE;QACzE,sEAAsE;QACtE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC;IAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,CAAC,eAAe,GAAG,MAAM,mBAAmB,CAAC;YAClD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC;IACxB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAChB,mBAAmB,GAAG,kBAAkB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACpE,YAAY,CACb,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,OAAwB;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC9C,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE;QACtD,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAAwB,EACxB,MAA6C,EAC7C,IAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,wEAAwE;QACxE,wEAAwE;QACxE,6DAA6D;QAC7D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,YAAY,CAAC,OAAO,EAAE;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAkB,EAAE,OAAgB;IAC9D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,OAAO;YACZ,CAAC,CAAC,qDAAqD;YACvD,CAAC,CAAC,kEAAkE,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC,EAAE;QACb,CAAC,CAAC,yBAAyB;QAC3B,CAAC,CAAC,+CAA+C,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAsB;IAChD,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,+BAA+B;IAC/B,MAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/src/cli/commands/hooks-install.d.ts

@@ -0,0 +1,66 @@
+import { Command } from "commander";
+import type { HookClientId, HookWriteOutcome } from "../hooks-writers/index.js";
+interface RunOptions {
+    client?: HookClientId;
+    dryRun?: boolean;
+    sessionBrief?: boolean;
+}
+export interface HooksInstallDeps {
+    /** Override `$HOME` (test injection). */
+    homeDir?: string;
+    /** Override the environment read for CLAUDE_CONFIG_DIR (test injection). */
+    env?: NodeJS.ProcessEnv;
+    /** Test injection: stable timestamp for backup IDs. */
+    now?: () => Date;
+    /** Test injection: where stdout writes go. */
+    emit?: (line: string) => void;
+    /** SessionStart brief command; resolved from the running CLI when absent. */
+    sessionStartCommand?: string;
+}
+/** `"<node>" "<cli>" --config "<cfg>" brief --hook`, using the running install. */
+export declare function defaultSessionStartCommand(configPath: string): string | undefined;
+export declare function makeHooksInstallCommand(): Command;
+/** `onadit hooks remove --client <id>`: take the Onadit entries and script back out. */
+export declare function makeHooksRemoveCommand(): Command;
+export declare function makeHooksCommand(): Command;
+export declare function runHooksInstall(opts: RunOptions, deps: HooksInstallDeps): Promise<HookWriteOutcome>;
+/**
+ * Rewrite the hook entries that are installed, so they run this build (policy
+ * script, CLI path), and add none. The session-start entry keeps the config
+ * path it already carries.
+ *
+ * After an upgrade the matcher is kept: the connection has not changed names,
+ * and on a packaged Mac nothing Codex approved changes, so Codex goes on
+ * running the hooks. `matcher: "current"` writes the matcher that holds under
+ * both names, for a connection the person has just moved to the new ones.
+ */
+export declare function refreshSessionHooks(client: HookClientId, deps?: Pick<HooksInstallDeps, "homeDir" | "env" | "now"> & {
+    /** Builds the session-start command for a config path (test injection). */
+    commandFor?: (configPath: string) => string | undefined;
+    matcher?: "keep" | "current";
+}): HookWriteOutcome;
+export declare const CODEX_REVIEW_STEP = "open Codex and run /hooks once to review the Onadit entries. Codex skips them until you do.";
+/** After a removal that moved one of the person's own Codex hooks. */
+export declare const CODEX_REVIEW_AGAIN = "Your other Codex hooks changed position, so Codex will ask you to review them again: run /hooks in Codex.";
+export interface SessionHooksOffer {
+    /** Config the session-start brief reads; the hook command carries it. */
+    configPath: string;
+    /** yes/no come from a flag. ask needs `ask`, and without it only names the command. */
+    choice: "yes" | "no" | "ask";
+    ask?: (question: string) => Promise<string>;
+    emit: (line: string) => void;
+    homeDir?: string;
+    env?: NodeJS.ProcessEnv;
+    now?: () => Date;
+    /** SessionStart brief command; resolved from the running CLI when absent. */
+    sessionStartCommand?: string;
+}
+/**
+ * The last step of connecting Claude Code or Codex: offer the session-start
+ * hooks. Connecting alone never installs them, because they put a project
+ * note in every session; the person says yes here, with a flag, or by running
+ * `onadit hooks install` themselves.
+ */
+export declare function offerSessionHooks(client: HookClientId, offer: SessionHooksOffer): Promise<void>;
+export {};
+//# sourceMappingURL=hooks-install.d.ts.map

package/dist/src/cli/commands/hooks-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-install.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/hooks-install.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAY5C,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,UAAU,UAAU;IAClB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKjF;AAED,wBAAgB,uBAAuB,IAAI,OAAO,CAgCjD;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,IAAI,OAAO,CAuBhD;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAO1C;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAuC3B;AAiCD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG;IACxD,2EAA2E;IAC3E,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB,GACL,gBAAgB,CAalB;AAED,eAAO,MAAM,iBAAiB,gGACiE,CAAC;AAEhG,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,8GAC8E,CAAC;AAI9G,MAAM,WAAW,iBAAiB;IAChC,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,MAAM,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCrG"}